ndmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca"], 0x3}}, 0x0) 21:20:44 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = semget$private(0x0, 0x7, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x6}, {0x0, 0x3f}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x68}, {0x0, 0xfffffffffffffffc}, {0x1, 0xfffffffffffffff8}], 0x7) semop(r0, &(0x7f0000000240), 0x6) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000e80)=""/65) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f0000000d00)='./file0\x00', r3, r4, 0xc00) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000240)="24d6164bc461085f88bd04e1e972b6c81486c2c713b46ecaaa260642c7d2258b3b414f48c509fa1475247607d3a624f7c453f6c6cfcd1e74bdd94e9c2ec4726affa0fc84efea551d3b612426f6bd939fd0db121dd84dc10ebfc44fc579387c684eba1d09efc8c9052fb940251257e58c2bae7b5223318dd709c09f7da92cad977e935b2a9e6a099985b62d242b0339caca3ffeaaee82c8c50bca39e65fb396b626bafebda505d5c2604d08fd2814866bdd0adaa8063dde522f1e0f9ab307951be23d2e9d734d9e8572d667c9246794324c32", 0xd2}, {&(0x7f0000000340)="ab7bd44329be2eb89ffb4f50a74053598d0b571745752a67ddd24ca776b16dcb6d", 0x21}, {&(0x7f00000003c0)="42fcd589013aff30", 0x8}, {&(0x7f0000000400)="9056e244ca04f53c846dc16de996cf310b1044b89bef123fb9ec5b88b694a50948bfbac7e2d0e4106afab85c138d18fd48655dddcb1b68a9310c4517cd7e62334f2bcaa80cb0fbc737618b61e1569e61072ac638651e706ad2331bdbb15741b1a26af0458a70fdce", 0x68}], 0x4, 0x6) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x0, 0x4, 0x100003, 0x0, 0x0, 0xfffffffd}, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r5, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000140)='truste\xb7\xf7\xc1pz\xc1\x8d\xe8\xd9\x98(On\x00', &(0x7f0000000b80)='y\x00', 0x2, 0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) sendmmsg$nfc_llcp(r6, &(0x7f0000000c40)=[{&(0x7f00000004c0)={0x27, 0x1, 0x1, 0x0, 0x18, 0x1, "1aadaf77434a5bd315df44f77fad863405ea8ff171ecd7a14e5d350c075ca39abcf9c8a567a1b0bc6d13f36a03f5c0177d4f2e8c73aa8d9ed4316cdf78ec56", 0x28}, 0x60, &(0x7f0000000640)=[{&(0x7f0000000540)="7911f745387916ec829461beb886886875f6429ee350a9d38d588a973a5dc142a7604fe3f26671d704d351c6669e4e9ec3fef0f95629f6e22ac3727d55195a5ade14d13ac09c9628148976b1ef6df250947ace261b5e1acc08fd7c41cfaad045b5ce636d15efa586b9950834b038f8a163c20f894ef66aff5adc89fc3061731f546611359b6c90b2c5a0938848b3085ec90a4b72443989149d12bd9d7588e736ff0727a7ecdb8645703d8985d75ae33bd3d9c6bb00d7d24dca74963d3176910fb29ad9b3e11066e027e8f4ac9915f11ece0cc184dd3f752bfde6d6fe18851da080669adf6564393aa2f452ff20431797b1", 0xf1}], 0x1, &(0x7f0000000680)={0x88, 0x0, 0x2, "cd9c7f1fefa83df7219a3b02b26788e531d1f5967fe7b9a686811314971bcd9bc260316eb3d494ce025f448695eda679788c5fb6f5fed455c8cd3afb6b688412991f83bf6e7ac43c7fe7259bcabfc1cefc59adb36b2028510512c090f15bc359661e5f1c015e522f5d5bef5609377b716b2338d60c"}, 0x88, 0x9e8f1ae5267eaf0f}, {&(0x7f0000000740)={0x27, 0x1, 0x0, 0x0, 0xe3, 0x4, "c059ef9bd5cb06a72f68293d60a13246a957d56af3eb1b862ad1d0b39cd64d7dd2c8eb662ef94543fd9fff201e483c20fe8f71ee88b743b21c8a1e3e510e34", 0x3c}, 0x60, &(0x7f00000008c0)=[{&(0x7f00000007c0)="d697e909e1c4a3970cee88b557a9b4959c170ea6b151becd0ce6d82707094f22e94aa24cfaa4199260bd66a7ea97c511f45312ce4ab346fdc25cfb1116ec152d6eeeab7011058583f26fe920963e7610772e8bfb27e9ed369d62e68b80c9b9eabfebd317fcc76e15f623e7ca8b63385bd1259122e7f66d89369506edd3bfabb059a268f29555f1b0144ae2ce94555ea042a2d830e847e1a072d933aeca9825f0a20da9f0e9b65dedbe146be5cb299d6c5df11b20326c2bc48d2b0d1ee591394ee175ad95652a9372485c8e265f8075558388572ca930c2eb267f3a39", 0xdc}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="e0000020000000001c895141ff0300005d085386eef58a1eebddc66d772c92a219a9fabfd361a80baac352268bcf04d4d5e1ac3e1a6e0ee3fdbc9f210f20fea7f381400c95d5beb45fd05c81779d5317eedb43a566c913fae1d00b23c01cf0176e3a56c3d64f7559847079f204baf2f633a7f297d84d19e023ad9a0aad63d66ef8db849b788d8aa1fcd85575db67c59e1c3bec57e17a7e3cdd3d5565373075922e8dac8ac3bf66ea7b0b7552f3c0cc24995ef66e6867fb8452a76556df247c072c70be4cd6ab133c4829f26f44021cb77d35871aea669264bf97fa456bdbe3ec"], 0xe0, 0x80}, {&(0x7f0000000a00)={0x27, 0x0, 0x1, 0x3, 0x40, 0x7f, "e0e34783b3683e5d92a37310ae9a91d001a43b2eb73afc23c02a8a7cd10f1bab2bfe33d7ea51bcae84dade101fcb9b6992dc7021942ed04814e574b61265e5", 0x17}, 0x60, &(0x7f0000000b40)=[{&(0x7f0000000a80)="df31a1101e4eebd0e9b7c6aad3600f57f881cf2b4209591016feab454c8e9327760f8fb74313ee401a290e5847f1408a0dff8432f4b7449a118fe872242de5335592746c", 0x44}, {&(0x7f0000000b00)="175cea48d32f0882878c00279f07842a19abc1ed6af16aaafe", 0x19}], 0x2, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x90, 0x40}], 0x3, 0x0) 21:20:44 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) 21:20:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000001c0)={{0x2e, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lc\x00', 0x1, 0xffff, 0x63}, {@broadcast, 0x4e21, 0x1, 0x4, 0xfffffffc, 0x2}}, 0x44) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x5, 0x7, 0x4, 0x10, {r3, r4/1000+10000}, {0x5, 0xc, 0x90, 0x1, 0x3, 0x5, "4b459db0"}, 0x3, 0x3, @userptr=0x1ff, 0x4}) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) [ 988.523517] audit: type=1400 audit(1576790444.270:118): avc: denied { map } for pid=20862 comm="syz-executor.0" path="/dev/btrfs-control" dev="devtmpfs" ino=17418 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1 21:20:44 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) [ 988.710113] protocol 88fb is buggy, dev hsr_slave_0 [ 988.715258] protocol 88fb is buggy, dev hsr_slave_1 [ 988.720454] protocol 88fb is buggy, dev hsr_slave_0 [ 988.725560] protocol 88fb is buggy, dev hsr_slave_1 21:20:44 executing program 2 (fault-call:9 fault-nth:4): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca"], 0x3}}, 0x0) 21:20:44 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:44 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000000)=""/90, &(0x7f0000000080)=0x5a) dup2(r0, r1) [ 988.864704] IPVS: length: 90 != 8 [ 988.877698] IPVS: length: 90 != 8 [ 988.922804] FAULT_INJECTION: forcing a failure. [ 988.922804] name failslab, interval 1, probability 0, space 0, times 0 [ 988.934365] CPU: 1 PID: 20901 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 988.942458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.952066] Call Trace: [ 988.952086] dump_stack+0x142/0x197 [ 988.952106] should_fail.cold+0x10f/0x159 [ 988.962529] should_failslab+0xdb/0x130 [ 988.962544] kmem_cache_alloc_trace+0x2e9/0x790 [ 988.962556] ? lock_downgrade+0x740/0x740 [ 988.962571] ? do_raw_spin_unlock+0x16b/0x260 [ 988.962587] sget_userns+0xfe/0xc30 [ 988.976000] ? set_anon_super+0x20/0x20 [ 988.976014] ? get_empty_filp.cold+0x3b/0x3b [ 988.976023] mount_ns+0x6d/0x190 [ 988.976031] ? rpc_pipe_release+0x830/0x830 [ 988.976042] rpc_mount+0xa4/0xd0 [ 988.996274] mount_fs+0x97/0x2a1 [ 988.996290] vfs_kern_mount.part.0+0x5e/0x3d0 [ 989.012702] do_mount+0x417/0x27d0 [ 989.016249] ? copy_mount_string+0x40/0x40 [ 989.016265] ? memdup_user+0x58/0xa0 [ 989.024583] ? copy_mount_options+0x1fe/0x2f0 [ 989.029219] SyS_mount+0xab/0x120 [ 989.033118] ? copy_mnt_ns+0x8c0/0x8c0 [ 989.037002] do_syscall_64+0x1e8/0x640 [ 989.037011] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 989.037026] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 989.051209] RIP: 0033:0x45a919 [ 989.054502] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 989.063099] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 989.063105] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 989.063110] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 989.063115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 989.063119] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 21:20:45 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:45 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:45 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) dup2(r0, 0xffffffffffffffff) 21:20:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca"], 0x3}}, 0x0) 21:20:45 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000200)) fcntl$getown(r0, 0x9) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:45 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x101ff, 0x1, 0x4000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000100)={0x30b, 0x0, 0x69, &(0x7f0000000080)="e175e9622cb0105f05205407248d4cbbfb3bda49e06c6ba0712c169cd853d0dbef555e528061af0d1a7f557e29a26c72372e4f73ca877c2a8e7881397bd2b00c2820f41237d5878c10a3fac3393cf5ff59ef694d819286a39503ae491a5120382d01771f7a582a2fea"}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) 21:20:45 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562"], 0x3}}, 0x0) [ 989.510156] protocol 88fb is buggy, dev hsr_slave_0 [ 989.515381] protocol 88fb is buggy, dev hsr_slave_1 [ 989.520558] protocol 88fb is buggy, dev hsr_slave_0 [ 989.525651] protocol 88fb is buggy, dev hsr_slave_1 21:20:45 executing program 2 (fault-call:9 fault-nth:5): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:45 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfff}, 0x0) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x29, 0x37, 0x1, {0x6, 0x1, 0x9, r1, 0xb, 'rpc_pipefs\x00'}}, 0x29) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 21:20:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562"], 0x3}}, 0x0) [ 989.852857] FAULT_INJECTION: forcing a failure. [ 989.852857] name failslab, interval 1, probability 0, space 0, times 0 [ 989.864495] CPU: 0 PID: 20954 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 989.873442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.882811] Call Trace: [ 989.885421] dump_stack+0x142/0x197 [ 989.889074] should_fail.cold+0x10f/0x159 [ 989.893243] should_failslab+0xdb/0x130 [ 989.897484] kmem_cache_alloc_trace+0x2e9/0x790 [ 989.902147] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 989.907590] ? sget_userns+0xfe/0xc30 [ 989.911384] ? rcu_read_lock_sched_held+0x110/0x130 [ 989.916451] selinux_sb_alloc_security+0x46/0x220 [ 989.921288] security_sb_alloc+0x6d/0xa0 [ 989.925339] sget_userns+0x196/0xc30 [ 989.929045] ? set_anon_super+0x20/0x20 [ 989.933009] ? get_empty_filp.cold+0x3b/0x3b [ 989.937408] mount_ns+0x6d/0x190 [ 989.940761] ? rpc_pipe_release+0x830/0x830 [ 989.945084] rpc_mount+0xa4/0xd0 [ 989.948441] mount_fs+0x97/0x2a1 [ 989.951898] vfs_kern_mount.part.0+0x5e/0x3d0 [ 989.956381] do_mount+0x417/0x27d0 [ 989.959928] ? copy_mount_string+0x40/0x40 [ 989.964154] ? memdup_user+0x58/0xa0 [ 989.967875] ? copy_mount_options+0x1fe/0x2f0 [ 989.972984] SyS_mount+0xab/0x120 [ 989.976543] ? copy_mnt_ns+0x8c0/0x8c0 [ 989.980458] do_syscall_64+0x1e8/0x640 [ 989.984611] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 989.989447] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 989.994844] RIP: 0033:0x45a919 [ 989.998020] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 990.005723] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 990.012985] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 990.020247] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 990.027521] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 990.034888] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 21:20:46 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, 0x0, &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:46 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd86, 0x0, 0x0, 0x3debbf01777b0a51) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="f1c9c2"], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone(0x200000, &(0x7f0000000100)="b48b289c8a9d6954e704dc8d6c582e713b4aefb69cd3bba6e0dca1d1ee0b02c241dd496ec12eb3fde7fbc28151297c4792885c8cbdc75c505de8d5c34c4172089f52ebd5904e3c50de2269d929817ffb1954846e167dcee983", &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000440)="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") dup2(r0, r1) 21:20:46 executing program 3 (fault-call:4 fault-nth:0): r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:46 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendto(r0, &(0x7f0000000240)="b16c0548b8857cbbac3113a966d90d672449431ddc44148dbce74453bf498d0bc42c9f5fd7ea9e92be84cdde861121f33d1740d9d1dde473208dace7779fc9220de88d4c024702b56868800c8c02a86145513d3b5e2203570481860ec8f611599ada1df76c9175e76a6f526029cbea5d69396abae62003dec3fd45449caebce874e63d6f48f26e90024280f60f8e0ebe3efaf0321f9cb0988c87f32108d0228692f024f4c4d047c37797b830630e6f93f4c9bbc642f58564fee90e7b088b3d029c7060dd861c4396d233ff9c64563b17e11c55cde5b4f4ccf0c3f4020ce1ab0b", 0xe0, 0x8000000, &(0x7f0000000140)=@x25={0x9, @null=' \x00'}, 0x80) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562"], 0x3}}, 0x0) 21:20:46 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') 21:20:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff10"], 0x3}}, 0x0) [ 990.405192] FAULT_INJECTION: forcing a failure. [ 990.405192] name failslab, interval 1, probability 0, space 0, times 0 [ 990.433593] CPU: 0 PID: 20973 Comm: syz-executor.3 Not tainted 4.14.159-syzkaller #0 [ 990.441717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.451081] Call Trace: [ 990.451102] dump_stack+0x142/0x197 [ 990.451120] should_fail.cold+0x10f/0x159 [ 990.451138] should_failslab+0xdb/0x130 [ 990.451149] __kmalloc_track_caller+0x2ec/0x790 [ 990.451163] ? __snd_timer_user_ioctl.isra.0+0xe7/0x1d90 [ 990.451176] memdup_user+0x26/0xa0 [ 990.451187] __snd_timer_user_ioctl.isra.0+0xe7/0x1d90 [ 990.451202] ? snd_timer_user_open+0x170/0x170 [ 990.457415] ? snd_timer_user_ioctl+0x51/0xa7 [ 990.457435] ? snd_timer_user_ioctl+0x51/0xa7 [ 990.457448] ? __mutex_lock+0x36a/0x1470 [ 990.457460] ? lock_downgrade+0x740/0x740 [ 990.457472] ? snd_timer_user_ioctl+0x51/0xa7 [ 990.457485] ? mutex_trylock+0x1c0/0x1c0 [ 990.465631] ? __might_sleep+0x93/0xb0 [ 990.465650] snd_timer_user_ioctl+0x7a/0xa7 [ 990.465662] ? snd_timer_user_ioctl_compat+0x720/0x720 [ 990.465675] do_vfs_ioctl+0x7ae/0x1060 [ 990.465686] ? selinux_file_mprotect+0x5d0/0x5d0 [ 990.465695] ? lock_downgrade+0x740/0x740 [ 990.465707] ? ioctl_preallocate+0x1c0/0x1c0 [ 990.475915] ? __fget+0x237/0x370 [ 990.475933] ? security_file_ioctl+0x89/0xb0 [ 990.475947] SyS_ioctl+0x8f/0xc0 [ 990.475957] ? do_vfs_ioctl+0x1060/0x1060 [ 990.475970] do_syscall_64+0x1e8/0x640 [ 990.475980] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 990.475997] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 990.476008] RIP: 0033:0x45a919 [ 990.585433] RSP: 002b:00007f14b1690c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 990.593157] RAX: ffffffffffffffda RBX: 00007f14b1690c90 RCX: 000000000045a919 21:20:46 executing program 2 (fault-call:9 fault-nth:6): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 990.600456] RDX: 0000000020000240 RSI: 00000000c0f85403 RDI: 0000000000000003 [ 990.607721] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 990.614977] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14b16916d4 [ 990.622273] R13: 00000000004c5825 R14: 00000000004db988 R15: 0000000000000006 21:20:46 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) r1 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="040000008781699a975febe845d4207f232989", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={r2, 0x9}, &(0x7f0000000240)=0x8) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff10"], 0x3}}, 0x0) 21:20:46 executing program 3 (fault-call:4 fault-nth:1): r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:46 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd1c}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000140)={0x7fffffff, 0x86d, 0xfffffffe, 0x100}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f00000000c0)=@null) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 990.791450] FAULT_INJECTION: forcing a failure. [ 990.791450] name failslab, interval 1, probability 0, space 0, times 0 [ 990.803407] CPU: 1 PID: 21001 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 990.811336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.820700] Call Trace: [ 990.823303] dump_stack+0x142/0x197 [ 990.826949] should_fail.cold+0x10f/0x159 [ 990.831130] should_failslab+0xdb/0x130 [ 990.835115] kmem_cache_alloc_trace+0x2e9/0x790 [ 990.839797] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 990.845954] ? sget_userns+0xfe/0xc30 [ 990.849786] ? rcu_read_lock_sched_held+0x110/0x130 [ 990.854819] selinux_sb_alloc_security+0x46/0x220 [ 990.859683] security_sb_alloc+0x6d/0xa0 [ 990.863840] sget_userns+0x196/0xc30 [ 990.867571] ? set_anon_super+0x20/0x20 [ 990.871563] ? get_empty_filp.cold+0x3b/0x3b [ 990.875988] mount_ns+0x6d/0x190 [ 990.879366] ? rpc_pipe_release+0x830/0x830 [ 990.883706] rpc_mount+0xa4/0xd0 [ 990.888126] mount_fs+0x97/0x2a1 [ 990.891509] vfs_kern_mount.part.0+0x5e/0x3d0 [ 990.896031] do_mount+0x417/0x27d0 [ 990.899585] ? copy_mount_string+0x40/0x40 [ 990.899606] ? memdup_user+0x58/0xa0 [ 990.899615] ? copy_mount_options+0x1fe/0x2f0 [ 990.899628] SyS_mount+0xab/0x120 [ 990.899638] ? copy_mnt_ns+0x8c0/0x8c0 [ 990.915523] do_syscall_64+0x1e8/0x640 [ 990.915536] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 990.915553] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 990.915562] RIP: 0033:0x45a919 [ 990.915567] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 990.944289] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 990.951578] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 990.958857] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 990.966164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 990.973448] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 21:20:46 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, 0x0, &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:47 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x18, 0x4, 0x2, 0x9, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d5, 0xff, 0x0, 0x54, 0x3, 0x1}, @sadb_address={0x3, 0x6, 0x6c, 0x60, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd27, 0x3506}]}, 0x48}}, 0x4040000) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r6}, 0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={r6, 0x7, 0xa, [0x58b5, 0x1, 0x0, 0x1, 0x200, 0x8, 0x1, 0x2, 0x6, 0x101]}, &(0x7f0000000080)=0x1c) 21:20:47 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)) r2 = accept4$ax25(r1, 0x0, &(0x7f0000000040), 0x80000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r2}) r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x6}, 0x1c) 21:20:47 executing program 5: fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfff}, 0x0) prlimit64(r0, 0xa, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) r2 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vsock\x00', 0x3cf6ea4b5a3d2a21, 0x0) vmsplice(r3, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280)=0x40b1, 0x4) open(&(0x7f0000000380)='./file0\x00', 0x4100, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r5 = accept4$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x10, 0xa6adfd38af93b02f) fcntl$getown(r5, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x2, 0xe7d109c628d6ccf4) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x0, 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x0, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r8, 0xa04, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x9, @ipv4={[], [], @local}, 0x3}, @in6={0xa, 0x4e20, 0xfffffffa, @remote, 0x9}}}, 0x118) r9 = gettid() r10 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x0, 0x2) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x180, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) kcmp$KCMP_EPOLL_TFD(r9, 0x0, 0x7, r10, &(0x7f0000000240)={r11, r12, 0x7fff}) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xffffff25, 0xfa00, {r8}}, 0xc) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff10"], 0x3}}, 0x0) 21:20:47 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x55c689bb567ccd98) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)) accept4$unix(r1, &(0x7f0000000280), &(0x7f0000000300)=0x6e, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r2) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000340)={'filter\x00'}, &(0x7f00000003c0)=0x44) prctl$PR_SET_UNALIGN(0x6, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f00000000c0)="40f807c0003b9361bb4f88e66040dc46f8a04870b15c49811a5469468a050f364fb310d5bda796627a28540a1c5d3f7238babcefb90fd89cd333a4d670ee2f3dedd8419131e83dd23efe57aefc0a45a6cf912ea0ec273425ce5cf21e5a965a0702dabff618e609829beb7bd74dc1be9519fa7659e449506f7adbc924634ce82d6ea8a47a35f27d86e63fd38efe675f63918bf1f3f18c59e481abbf5befe7a4e456cc28167f6c5eef", &(0x7f00000001c0)=""/48}, 0x20) 21:20:47 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x4, 0x0, 0x6, 0x6a, 0x3, 0x5, 0xfffffffa}, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000280)=""/205) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r4, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r4, &(0x7f0000000180)="ce0410008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b2b34e9ff000099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f70f9ea0eed861c0359719771aaf54cf132c4a684a669b62000000003cb4f10e6fb6e931412876551a46b4a0bd9d70738b72dbc7dbaebff1e0bbfd5fd159c549b5d3298404b06ab599d948fa871bde4138ddfc4256dfa36743b3c508632bef4531346d82a28ba3612a9e26095a149bdbc9a8136bc141ec1eb7938d6db2e81ee8d65c2ce525bdf39633faca0a5f5a1ecc6e8623014fe4c5be6bd7dcbb", 0x4e60, 0x810, 0x0, 0xfffffffffffffe5d) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:47 executing program 2 (fault-call:9 fault-nth:7): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:47 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r3, &(0x7f0000000080), 0x4512, 0x0, &(0x7f0000000400), 0xf) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000200)=0x400, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r5, 0x0) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) r6 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x3, "c401a9"}, &(0x7f00000001c0)=0x27) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='\x00\x80ezero\x00', 0x4840, 0x0) r7 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r8 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r9) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01402300", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r11, 0x4, 0x2008}, 0x9) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r11}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000340)={r11, 0x1f, 0xa565}, &(0x7f0000000380)=0x8) r12 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r12, 0x4010aeab, &(0x7f00000000c0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x1, 0x8, 0xfe, 0x7f, 0x0, 0x6, 0x4000, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x400, 0x540, 0x0, 0x9, 0x8, 0x1, 0x8}, r4, 0x10, r12, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c1219"], 0x3}}, 0x0) 21:20:47 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) listen(r0, 0x1) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x1}, @mss={0x2, 0x1f}, @timestamp], 0x3) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) dup2(r0, r1) 21:20:47 executing program 5: r0 = gettid() prlimit64(r0, 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x1b2010, 0x0) [ 991.696248] FAULT_INJECTION: forcing a failure. [ 991.696248] name failslab, interval 1, probability 0, space 0, times 0 [ 991.707687] CPU: 1 PID: 21069 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 991.715602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.715607] Call Trace: [ 991.715627] dump_stack+0x142/0x197 [ 991.715644] should_fail.cold+0x10f/0x159 [ 991.715660] should_failslab+0xdb/0x130 [ 991.715671] __kmalloc+0x2f0/0x7a0 [ 991.715689] ? __list_lru_init+0x6b/0x660 [ 991.715701] __list_lru_init+0x6b/0x660 [ 991.715716] sget_userns+0x4e0/0xc30 [ 991.715725] ? set_anon_super+0x20/0x20 [ 991.715739] ? get_empty_filp.cold+0x3b/0x3b [ 991.715756] mount_ns+0x6d/0x190 [ 991.715766] ? rpc_pipe_release+0x830/0x830 [ 991.715777] rpc_mount+0xa4/0xd0 [ 991.715789] mount_fs+0x97/0x2a1 [ 991.764240] vfs_kern_mount.part.0+0x5e/0x3d0 [ 991.764252] do_mount+0x417/0x27d0 [ 991.764265] ? copy_mount_string+0x40/0x40 [ 991.764278] ? memdup_user+0x58/0xa0 [ 991.764286] ? copy_mount_options+0x1fe/0x2f0 [ 991.764298] SyS_mount+0xab/0x120 [ 991.764306] ? copy_mnt_ns+0x8c0/0x8c0 [ 991.764320] do_syscall_64+0x1e8/0x640 [ 991.764329] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 991.764346] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 991.764353] RIP: 0033:0x45a919 [ 991.764358] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 991.764368] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 991.764373] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 991.764379] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 991.764384] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 991.764390] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 21:20:47 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, 0x0, &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:47 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x67e340) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:47 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f00000000c0)='security.ima\x00', 0x1) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000200)={0x2, 0x0, @pic={0x7f, 0x7f, 0x5, 0x1, 0x81, 0x9, 0xd2, 0x8, 0x3f, 0x0, 0x65, 0x7, 0x5, 0x2, 0x4, 0xfb}}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000001c0)=0x6) fsetxattr$security_ima(r1, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v1={0x2, "30e17609136ed22759a02e115753b437b7"}, 0xd, 0x3b21056139fa7612) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f00000000c0)) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r8, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r8}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r8, 0x5, 0x2, 0x9, 0x9cb, 0xffff}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={r9, 0xdd87}, 0x8) 21:20:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c1219"], 0x3}}, 0x0) 21:20:47 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000000c0)={0x7fffffff, 0x0, 0x962b, 0x5, 0x9, 0x6}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x13, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c1219"], 0x3}}, 0x0) 21:20:47 executing program 3: syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0xcbc3a917aa02c916, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="f33be158828f3ee9c4ab4a6777a7", 0xe}, {&(0x7f00000000c0)="071111ee5cecc48166f5ef1aae821748cbf3c47d9f6c10bdf42b241cd18d6c3da32c84f46399f93522c9f918015ffb05ff67df2cc0e91cc758fc68ffb10e87720f8c7d2e993f515a98854bc2905a05e1f0aabad7ba2e68b8533abe49007652dfa40103ee37fc64e647a4bfe8d3b7f32a49ac4ef44aa834ec4bc009d9e9b24a1a1b455c6f7686a094b7216277e7350e039bd86ff9b0988d0a8901c9823d5ab33d35cf86fe4c44043cee1fdcf6b53fe77ed81013ec09ee13c27fe8c38ac627b54c56c1af5d419c7968ca5a7c8b1a68100627250e82d468f732b8a3ee4c31c3ad947536384030b6d3444e2f37e6803f671d25f741bff0", 0xf5}], 0x2, &(0x7f0000000440)=[{0x1010, 0x1, 0x7, "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"}, {0x110, 0x107, 0xff, "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"}, {0x48, 0x0, 0x9, "327091a9e1f688d323188d3a12173b0fe067d1f0226c3ac1b9c308893fa582477019ad2b7da19fc62a7a84f542e3ad788495"}, {0xd0, 0x10f, 0x4, "ab11e2042517e2d0ad093402665cda15cbf2080689766b2cddfdcf96b603025ad6acc03c3b388581dcfbdb87c762aa8eac7b38f4edb7708a29ba36cae286fcff03288affd21f03c4aafcd2e592fa7211259def8217b83bc1244a281722b8dd8ccf75d4758c10d25f45966b93a67396defd6812697fa9a1013304189db6ae14b956705b09ebe8382950949ff638ac9a8ef71c6cdef12e1afd0c596ffcd5e61a1cad86afa1097b3d4727c0d70c49fa529a9d0b70a9a89717d475"}], 0x1238}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000340)={{0x1}, 0x0, 0x0, 'id1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 'timer0\x00', 0x0, 0x0, 0x5, 0x0, 0xfffffffc}) 21:20:48 executing program 2 (fault-call:9 fault-nth:8): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vkdeo2\x00', 0x2, 0x0) dup2(r0, r1) 21:20:48 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x1ff) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{}, [@default, @remote, @rose, @bcast, @netrom, @remote, @null, @null]}, &(0x7f0000000240)=0x48) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000280)) r1 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="d73c015e595fa9", 0x7}], 0x1}}], 0x1, 0x4008014) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r3, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000000c0)={0x4, r1, 0x1}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:48 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x61) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00', 'timer1\x00'}) 21:20:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec700"], 0x3}}, 0x0) [ 992.591867] FAULT_INJECTION: forcing a failure. [ 992.591867] name failslab, interval 1, probability 0, space 0, times 0 [ 992.603603] CPU: 1 PID: 21118 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 992.611662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.621420] Call Trace: [ 992.624204] dump_stack+0x142/0x197 [ 992.627861] should_fail.cold+0x10f/0x159 [ 992.632066] should_failslab+0xdb/0x130 [ 992.636076] __kmalloc+0x2f0/0x7a0 [ 992.639641] ? lock_downgrade+0x740/0x740 [ 992.643810] ? register_shrinker+0xbd/0x220 [ 992.648154] register_shrinker+0xbd/0x220 [ 992.652316] sget_userns+0x9bf/0xc30 [ 992.656052] ? set_anon_super+0x20/0x20 [ 992.660050] ? get_empty_filp.cold+0x3b/0x3b [ 992.664471] mount_ns+0x6d/0x190 [ 992.667860] ? rpc_pipe_release+0x830/0x830 [ 992.672257] rpc_mount+0xa4/0xd0 [ 992.675668] mount_fs+0x97/0x2a1 [ 992.679047] vfs_kern_mount.part.0+0x5e/0x3d0 [ 992.683558] do_mount+0x417/0x27d0 [ 992.687123] ? copy_mount_string+0x40/0x40 [ 992.691382] ? memdup_user+0x58/0xa0 [ 992.695109] ? copy_mount_options+0x1fe/0x2f0 [ 992.699620] SyS_mount+0xab/0x120 [ 992.703088] ? copy_mnt_ns+0x8c0/0x8c0 [ 992.707088] do_syscall_64+0x1e8/0x640 [ 992.711009] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 992.715980] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 992.721377] RIP: 0033:0x45a919 [ 992.724579] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 992.732322] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 992.739602] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 992.746883] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 992.754160] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 992.761451] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 992.870121] net_ratelimit: 12 callbacks suppressed [ 992.870126] protocol 88fb is buggy, dev hsr_slave_0 [ 992.880426] protocol 88fb is buggy, dev hsr_slave_1 [ 992.885499] protocol 88fb is buggy, dev hsr_slave_0 [ 992.890621] protocol 88fb is buggy, dev hsr_slave_1 21:20:48 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 21:20:48 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x2, 0x0, 0xffffffff, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0xffffffbffffffff8, 0x0, 0xffffffffffffffff}) 21:20:48 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) dup2(0xffffffffffffffff, r0) 21:20:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec700"], 0x3}}, 0x0) 21:20:48 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x10000, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x8) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x7fffffff, 0x800) r2 = request_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\"3#.@bdev\x00', 0xfffffffffffffff9) keyctl$setperm(0x5, r2, 0x2) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xfffffffffffffff9) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) r3 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'teql0\x00', 0x2000}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r8, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r8}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300)={r8, 0x3}, &(0x7f0000000340)=0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:48 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x3, 0x7, 0x100, 0x8}) r3 = dup(r1) mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x400, 0x1ff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec700"], 0x3}}, 0x0) 21:20:49 executing program 2 (fault-call:9 fault-nth:9): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:49 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r1) 21:20:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000000c0)={{0x1, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x9, 0x0, 0x400}) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$dupfd(r3, 0x406, r4) 21:20:49 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x1, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000"], 0x3}}, 0x0) [ 993.482748] FAULT_INJECTION: forcing a failure. [ 993.482748] name failslab, interval 1, probability 0, space 0, times 0 [ 993.494169] CPU: 1 PID: 21172 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 993.502167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.511529] Call Trace: [ 993.514134] dump_stack+0x142/0x197 [ 993.517966] should_fail.cold+0x10f/0x159 [ 993.522135] should_failslab+0xdb/0x130 [ 993.526134] __kmalloc+0x2f0/0x7a0 [ 993.529701] ? lock_downgrade+0x740/0x740 [ 993.533868] ? register_shrinker+0xbd/0x220 [ 993.538212] register_shrinker+0xbd/0x220 [ 993.542379] sget_userns+0x9bf/0xc30 [ 993.546109] ? set_anon_super+0x20/0x20 [ 993.550185] ? get_empty_filp.cold+0x3b/0x3b [ 993.554601] mount_ns+0x6d/0x190 [ 993.557975] ? rpc_pipe_release+0x830/0x830 [ 993.562307] rpc_mount+0xa4/0xd0 [ 993.565701] mount_fs+0x97/0x2a1 [ 993.569089] vfs_kern_mount.part.0+0x5e/0x3d0 [ 993.573623] do_mount+0x417/0x27d0 [ 993.577298] ? copy_mount_string+0x40/0x40 [ 993.581549] ? memdup_user+0x58/0xa0 [ 993.581557] ? copy_mount_options+0x1fe/0x2f0 [ 993.581568] SyS_mount+0xab/0x120 [ 993.581575] ? copy_mnt_ns+0x8c0/0x8c0 [ 993.581586] do_syscall_64+0x1e8/0x640 [ 993.581594] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 993.581609] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 993.581616] RIP: 0033:0x45a919 [ 993.581621] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 993.581632] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 993.581638] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 993.581643] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 993.581649] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 993.581654] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 993.670188] protocol 88fb is buggy, dev hsr_slave_0 [ 993.675388] protocol 88fb is buggy, dev hsr_slave_1 [ 993.680565] protocol 88fb is buggy, dev hsr_slave_0 [ 993.686375] protocol 88fb is buggy, dev hsr_slave_1 21:20:49 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 21:20:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) accept4(r2, &(0x7f0000000140)=@caif=@util, &(0x7f00000001c0)=0x80, 0x101c00) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r4 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x2, 0x181502) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}, 0x12b) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:49 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000000)) dup2(r0, r1) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f0000000100)) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r6, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) chown(&(0x7f0000000380)='./control\x00', r5, r7) getresgid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)=0x0) setgroups(0x5, &(0x7f0000000240)=[r3, r7, r8, 0xffffffffffffffff, 0xffffffffffffffff]) 21:20:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000"], 0x3}}, 0x0) 21:20:49 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000003c0)={0x0, 0x4000}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000400)) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc000020}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400d000}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x49e, 0x20, 0x905, 0x7}, 0x10) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 993.910136] protocol 88fb is buggy, dev hsr_slave_0 [ 993.915418] protocol 88fb is buggy, dev hsr_slave_1 21:20:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000"], 0x3}}, 0x0) 21:20:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00\x00\x00\x00\x00\x00\x00\x00\xb1_\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) 21:20:49 executing program 2 (fault-call:9 fault-nth:10): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:49 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/\x05ideo2\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffeffff) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)=0x0) getpgrp(r3) r4 = dup2(r0, r1) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x53, 0x1, 0x7}) 21:20:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec700000000000000"], 0x3}}, 0x0) 21:20:49 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000280)={0x10001, "7bd7b1c23aa9bc0b6f693442f5b22cf6c734aa723b83263b5d36ce1801710d34", 0x0, 0x20, 0x4, 0x8, 0x3}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x12201, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = dup(r1) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r4, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000180)=0x4) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000003c0)={r6, 0x9}, 0x8) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 994.369547] FAULT_INJECTION: forcing a failure. [ 994.369547] name failslab, interval 1, probability 0, space 0, times 0 [ 994.381686] CPU: 0 PID: 21219 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 994.389690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.399318] Call Trace: [ 994.401940] dump_stack+0x142/0x197 [ 994.405612] should_fail.cold+0x10f/0x159 [ 994.409784] should_failslab+0xdb/0x130 [ 994.413810] kmem_cache_alloc+0x2d7/0x780 [ 994.417991] ? rpc_fill_super+0x187/0x900 [ 994.422155] ? find_held_lock+0x35/0x130 [ 994.426373] ? rpc_i_callback+0x30/0x30 [ 994.430395] rpc_alloc_inode+0x1a/0x20 [ 994.434307] alloc_inode+0x64/0x180 [ 994.437962] new_inode_pseudo+0x19/0xf0 [ 994.441977] new_inode+0x1f/0x40 [ 994.445355] rpc_get_inode+0x1d/0x1f0 [ 994.449203] rpc_fill_super+0x2cc/0x900 [ 994.453354] ? sget_userns+0x76b/0xc30 [ 994.457260] ? rpc_pipe_release+0x830/0x830 [ 994.461718] ? get_empty_filp.cold+0x3b/0x3b [ 994.466140] mount_ns+0xec/0x190 [ 994.469517] ? rpc_pipe_release+0x830/0x830 [ 994.474466] rpc_mount+0xa4/0xd0 [ 994.477857] mount_fs+0x97/0x2a1 [ 994.481249] vfs_kern_mount.part.0+0x5e/0x3d0 [ 994.485764] do_mount+0x417/0x27d0 [ 994.489322] ? copy_mount_string+0x40/0x40 [ 994.493568] ? memdup_user+0x58/0xa0 [ 994.497727] ? copy_mount_options+0x1fe/0x2f0 [ 994.502252] SyS_mount+0xab/0x120 [ 994.505715] ? copy_mnt_ns+0x8c0/0x8c0 [ 994.509611] do_syscall_64+0x1e8/0x640 [ 994.513506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 994.518363] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 994.523567] RIP: 0033:0x45a919 [ 994.526759] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 994.534487] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 994.542231] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 994.549518] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 994.556899] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 994.556905] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 21:20:50 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 21:20:50 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r6}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={r6, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r7, 0xebc}, &(0x7f0000000100)=0x8) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) fcntl$getown(r0, 0x9) 21:20:50 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) fcntl$setpipe(r1, 0x407, 0x4000000400000) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec700000000000000"], 0x3}}, 0x0) 21:20:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x42000, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000080)=0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x1, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x100000}]}, 0x10) dup2(r3, r0) 21:20:50 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dFvr\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000000)={0x2, "1ea32834b429355a7111ed11c4078a998a05d7c9a250dab9b5d33c3606331d60", 0x3, 0x9f28, 0x3, 0x0, 0x100, 0x8}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x611101) open(&(0x7f00000001c0)='./file0\x00', 0x202, 0x4a) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000340)={0x0, 0x0, @ioapic}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000180)={0x40, 0x101, 0xfffffffffffffffb, 0x8, 0x9, 0xfff8}) 21:20:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec700000000000000"], 0x3}}, 0x0) 21:20:50 executing program 2 (fault-call:9 fault-nth:11): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:50 executing program 0: socket$packet(0x11, 0x2, 0x300) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) recvmmsg(r3, &(0x7f0000003640)=[{{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000500)=""/195, 0xc3}], 0x2, &(0x7f0000003800)=""/210, 0xd2}}, {{&(0x7f0000000780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/16, 0x10}, {&(0x7f0000000b00)=""/238, 0xee}, {&(0x7f0000000c00)=""/101, 0x65}, {0x0}, {0x0}], 0x7}, 0x1}, {{&(0x7f0000001f00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000003580)=""/138, 0x8a}, 0x2}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) setitimer(0x0, &(0x7f00000001c0)={{0x0, 0x2710}, {0x77359400}}, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r6, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x445) recvmmsg(r6, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) 21:20:50 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140)) write(r0, &(0x7f0000000340), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x4}, 0x1) 21:20:50 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000)=0x2, 0x4) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x2}}, 0x0) [ 995.265279] FAULT_INJECTION: forcing a failure. [ 995.265279] name failslab, interval 1, probability 0, space 0, times 0 [ 995.276868] CPU: 0 PID: 21264 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 995.284779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.294244] Call Trace: [ 995.296849] dump_stack+0x142/0x197 [ 995.300601] should_fail.cold+0x10f/0x159 [ 995.304863] should_failslab+0xdb/0x130 [ 995.308876] kmem_cache_alloc+0x2d7/0x780 [ 995.313231] ? rpc_alloc_inode+0x1a/0x20 [ 995.317332] selinux_inode_alloc_security+0xb6/0x2a0 [ 995.322453] security_inode_alloc+0x94/0xd0 [ 995.326818] inode_init_always+0x552/0xaf0 [ 995.331080] alloc_inode+0x81/0x180 [ 995.334734] new_inode_pseudo+0x19/0xf0 [ 995.339068] new_inode+0x1f/0x40 [ 995.342443] rpc_get_inode+0x1d/0x1f0 [ 995.346253] rpc_fill_super+0x2cc/0x900 [ 995.350239] ? sget_userns+0x76b/0xc30 [ 995.354136] ? rpc_pipe_release+0x830/0x830 [ 995.358464] ? get_empty_filp.cold+0x3b/0x3b [ 995.362991] mount_ns+0xec/0x190 [ 995.366363] ? rpc_pipe_release+0x830/0x830 [ 995.370696] rpc_mount+0xa4/0xd0 [ 995.374084] mount_fs+0x97/0x2a1 [ 995.377564] vfs_kern_mount.part.0+0x5e/0x3d0 [ 995.382594] do_mount+0x417/0x27d0 [ 995.386146] ? copy_mount_string+0x40/0x40 [ 995.390410] ? memdup_user+0x58/0xa0 [ 995.394129] ? copy_mount_options+0x1fe/0x2f0 [ 995.398641] SyS_mount+0xab/0x120 [ 995.402233] ? copy_mnt_ns+0x8c0/0x8c0 [ 995.406152] do_syscall_64+0x1e8/0x640 [ 995.410081] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 995.415151] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 995.420356] RIP: 0033:0x45a919 [ 995.423550] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 995.431274] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 995.438555] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 995.445835] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 995.453128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 995.460432] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 21:20:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x2}}, 0x0) 21:20:51 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r3, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2004c0, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000180)=0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000000)={0x9, &(0x7f00000000c0)="766d870072ff9566178d05cc4e5d8e20d6c55f1bd6991189d1f5b1e8633708ca6f1234d7769a4bb781354e2a035af1f4a7efd0c0e30de7fea7ee6836e90c96a219295f406ad6e92cd4fc4b680fa224c5eb12072149fcd86171992dabbde0f9e78fe7c9bff2dc109720f5d924949452c79b2782a305baa4b6ceb1a5a061affb0496c2011dcbd9a9728a771d965062ca7f61365b4228b0d8242c40c199"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x2, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x81}) 21:20:51 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r4, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r4}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x1, 0xb76c23e387be3284, 0x0, 0xfffffffc, r4}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x9c}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x4047, @local, 0xd4b8}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x4c) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="a40df16cc0d5ae388c6ead64b004c208", 0x10, 0x4800, &(0x7f0000000140)={0xa, 0x4e23, 0x55, @mcast1, 0x1}, 0x1c) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:51 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) dup2(r1, r2) 21:20:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000"], 0x3}}, 0x0) 21:20:51 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r6}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000000c0)={r6, 0x7a, "267df4cc777963574643db8cde1e411bb6833f67e9ea5fa9472f030fdfd9e4bfb1a7ded6fa7d707c0671a9bc20d07277667265c974eb4ec22e216b1b18f1e25b635303fcef90aad6abbc45f23b42f6cc345eeb82f1bc4641bf4e719356d09d9a60849e9b6889ac9595279868637c08ecba14e06a129d16fb474b"}, &(0x7f0000000000)=0x82) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:51 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)=0x60) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x0, 0x2, 0x0, 0xd9c4}, {0x6da4, 0x84, 0x22, 0x1000}]}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x0, 0x7fff}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000300)={0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x9f, 0x80000) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:51 executing program 2 (fault-call:9 fault-nth:12): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x2}}, 0x0) 21:20:51 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev\xc1\v\x00\x00/t)mer\x00', 0x0, 0x40000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x2fae88b0f26a8b27) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x1b, 0x5, 0x5b8, 0x2b8, 0x3a8, 0x2b8, 0x0, 0x2b8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @remote, [0x0, 0xff, 0xff, 0xffffffff], [0x1fe0000ff, 0xff, 0xff, 0xff000000], 'gre0\x00', 'bridge0\x00', {}, {}, 0x2f, 0x0, 0x1, 0x57}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x5, 0x18}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', 0x6}}}, {{@ipv6={@rand_addr="7f60a05d407bf546fc1dc196be84ffb2", @empty, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xff, 0x0, 0x0, 0xffffffff], 'tunl0\x00', 'ip6gre0\x00', {0xff}, {0x34c30d9021b4329}, 0x2c, 0x5, 0x0, 0x2}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x9, 0xc, 0x0, [0x797, 0x6, 0x2a68, 0x5884, 0x9, 0x6, 0x40, 0xc7a9, 0x0, 0x7, 0x8, 0x56, 0x7fff, 0x9, 0x1ff], 0xa}}, @common=@unspec=@physdev={0x68, 'physdev\x00', 0x0, {'team_slave_0\x00', {0x101}, 'nr0\x00', {}, 0x6, 0x4}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv6=@remote, @icmp_id=0x66, @icmp_id=0x67}}}, {{@ipv6={@loopback, @loopback, [0x100fffeff, 0xff, 0xff], [0x0, 0x1fffffe00, 0x0, 0xff], 'hwsim0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2e, 0x7, 0x4, 0xfe59e4b0ef16c6e6}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x18, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x68, @gre_key=0x401}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x3, 0xd723bee9106bb4b2, 0x1, [0x2, 0x1, 0x1, 0xcd, 0x9, 0x8, 0x7ff, 0x5, 0x7f, 0x8, 0x8, 0x1, 0x80, 0x20, 0x8, 0xfff9], 0xf}}, @common=@eui64={0x28, 'eui64\x00'}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r2) 21:20:51 executing program 1: fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfff}, 0x0) prlimit64(r0, 0xa, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) r2 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vsock\x00', 0x3cf6ea4b5a3d2a21, 0x0) vmsplice(r3, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280)=0x40b1, 0x4) open(&(0x7f0000000380)='./file0\x00', 0x4100, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r5 = accept4$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x10, 0xa6adfd38af93b02f) fcntl$getown(r5, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x2, 0xe7d109c628d6ccf4) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x0, 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x0, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r8, 0xa04, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x9, @ipv4={[], [], @local}, 0x3}, @in6={0xa, 0x4e20, 0xfffffffa, @remote, 0x9}}}, 0x118) r9 = gettid() r10 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x0, 0x2) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x180, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) kcmp$KCMP_EPOLL_TFD(r9, 0x0, 0x7, r10, &(0x7f0000000240)={r11, r12, 0x7fff}) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xffffff25, 0xfa00, {r8}}, 0xc) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:51 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000140)) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) 21:20:51 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='@\f\xf3\xff\xff\xff\x00', 0x0, 0x606882) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) 21:20:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/de\b\x00v\x00\x00\x99\xff\x00', 0x2, 0x0) dup2(r0, r2) [ 996.128686] FAULT_INJECTION: forcing a failure. [ 996.128686] name failslab, interval 1, probability 0, space 0, times 0 [ 996.140126] CPU: 1 PID: 21320 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 996.148025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.157391] Call Trace: [ 996.160020] dump_stack+0x142/0x197 [ 996.163669] should_fail.cold+0x10f/0x159 [ 996.167820] should_failslab+0xdb/0x130 [ 996.171797] kmem_cache_alloc+0x2d7/0x780 [ 996.175936] ? d_drop+0x51/0x60 [ 996.179206] ? rpc_i_callback+0x30/0x30 [ 996.183251] rpc_alloc_inode+0x1a/0x20 [ 996.187135] alloc_inode+0x64/0x180 [ 996.190749] new_inode_pseudo+0x19/0xf0 [ 996.194709] new_inode+0x1f/0x40 [ 996.198062] rpc_get_inode+0x1d/0x1f0 [ 996.201846] ? d_drop+0x51/0x60 [ 996.205117] __rpc_create_common+0x5a/0x1a0 [ 996.209428] rpc_populate.constprop.0+0x122/0x360 [ 996.214259] rpc_fill_super+0x320/0x900 [ 996.218243] ? sget_userns+0x76b/0xc30 [ 996.222169] ? rpc_pipe_release+0x830/0x830 [ 996.226495] ? get_empty_filp.cold+0x3b/0x3b [ 996.230893] mount_ns+0xec/0x190 [ 996.234261] ? rpc_pipe_release+0x830/0x830 [ 996.238587] rpc_mount+0xa4/0xd0 [ 996.241951] mount_fs+0x97/0x2a1 [ 996.245327] vfs_kern_mount.part.0+0x5e/0x3d0 [ 996.249813] do_mount+0x417/0x27d0 [ 996.253364] ? copy_mount_string+0x40/0x40 [ 996.257597] ? memdup_user+0x58/0xa0 [ 996.261306] ? copy_mount_options+0x1fe/0x2f0 [ 996.265789] SyS_mount+0xab/0x120 [ 996.269244] ? copy_mnt_ns+0x8c0/0x8c0 [ 996.273120] do_syscall_64+0x1e8/0x640 [ 996.276990] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 996.281838] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 996.287042] RIP: 0033:0x45a919 [ 996.290228] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 996.297949] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 996.305223] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 996.312480] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 996.320004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 21:20:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x34}}, 0x0) [ 996.327558] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 996.335022] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry lockd [ 996.344193] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / 21:20:52 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0xffffffffffffffff, 0x3, 0x0, 0x0, 0x4}, 0x0, 0x100, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}) 21:20:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/\x9f\x93\xf6\xee\xaa\xc6\xc9\t\xef2\x00', 0x2, 0x0) dup2(r0, r1) 21:20:52 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x7, 0x3}]}, 0xc, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:52 executing program 2 (fault-call:9 fault-nth:13): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:52 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140)=0x6, 0x4) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f00000000c0)) ioctl$KVM_DEASSIGN_DEV_IRQ(r4, 0x4040ae75, &(0x7f0000000180)={0x7ff, 0x0, 0x2b9, 0x400}) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f00000001c0)={'ip6erspan0\x00', 0x1}) r5 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xff, 0x200000) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f00000000c0)) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/2\x00', 0x2, 0x0) dup2(r0, r1) 21:20:52 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) prctl$PR_SVE_GET_VL(0x33, 0x17b0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:52 executing program 1 (fault-call:11 fault-nth:0): prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x34}}, 0x0) 21:20:52 executing program 3: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1, 0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:52 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0x1, 0x5}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000140)={'team_slave_1\x00\x00\x00\x10', {0x2, 0x4e22, @multicast2}}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x8040) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) socket$packet(0x11, 0x2, 0x300) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0xaa6b, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x1, 0x5, 0x7, 0x9, 0x1}, &(0x7f0000000300)=0x98) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r6 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) dup2(r3, r6) 21:20:52 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) socket$bt_hidp(0x1f, 0x3, 0x6) 21:20:52 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000240)=@srh={0x0, 0x10, 0x4, 0x8, 0x53, 0xc0, 0x4, [@local, @rand_addr="995e7503b2af05bf272409897d920571", @loopback, @dev={0xfe, 0x80, [], 0x14}, @remote, @mcast1, @mcast1, @rand_addr="fa174481b96efd70960b696ac96dadf6"]}, 0x88) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x10, 0xbd45f4ffa23ad99e) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000003c0)="347b70108308a5b727ab88553b8d12b4f59c0e809e86f8db2e7a498339db99836681ffa373a50dd6111537f5facdfebb6fcefeed3568282a762610dff5c09499a998716406977a7d512e0b7d273daaf2a6ea0bbc9f6cd4dfae9dda66b230356a80ea3ca65923816306db6de77271fc6c6f8d0e0169139dc0d5bbcb50f2d75cb86ff5d03093c539bc03750042acb517", 0x8f) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x34}}, 0x0) [ 997.063412] FAULT_INJECTION: forcing a failure. [ 997.063412] name failslab, interval 1, probability 0, space 0, times 0 [ 997.074939] CPU: 0 PID: 21382 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 997.082856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.092243] Call Trace: [ 997.094860] dump_stack+0x142/0x197 [ 997.098525] should_fail.cold+0x10f/0x159 [ 997.102698] should_failslab+0xdb/0x130 [ 997.106693] kmem_cache_alloc+0x2d7/0x780 [ 997.110861] ? rpc_alloc_inode+0x1a/0x20 [ 997.115048] selinux_inode_alloc_security+0xb6/0x2a0 [ 997.120303] security_inode_alloc+0x94/0xd0 [ 997.124645] inode_init_always+0x552/0xaf0 [ 997.128904] alloc_inode+0x81/0x180 [ 997.132559] new_inode_pseudo+0x19/0xf0 [ 997.136598] new_inode+0x1f/0x40 [ 997.136610] rpc_get_inode+0x1d/0x1f0 [ 997.136616] ? d_drop+0x51/0x60 [ 997.136626] __rpc_create_common+0x5a/0x1a0 [ 997.151520] rpc_populate.constprop.0+0x122/0x360 [ 997.151539] rpc_fill_super+0x320/0x900 [ 997.151550] ? sget_userns+0x76b/0xc30 [ 997.151558] ? rpc_pipe_release+0x830/0x830 [ 997.151567] ? get_empty_filp.cold+0x3b/0x3b [ 997.151578] mount_ns+0xec/0x190 [ 997.151585] ? rpc_pipe_release+0x830/0x830 [ 997.151598] rpc_mount+0xa4/0xd0 [ 997.180799] mount_fs+0x97/0x2a1 [ 997.180816] vfs_kern_mount.part.0+0x5e/0x3d0 [ 997.180829] do_mount+0x417/0x27d0 [ 997.180844] ? copy_mount_string+0x40/0x40 [ 997.180858] ? memdup_user+0x58/0xa0 [ 997.180865] ? copy_mount_options+0x1fe/0x2f0 [ 997.180875] SyS_mount+0xab/0x120 21:20:52 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x2b, 0x0, 0x1fd8180355aa0681, 0x0, 0x0, 0x40000000, 0x3d, 0x4, 0x4, 0x3}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/72, 0x48}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x4, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000024c0)=""/153) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000023c0)='/dev/snd/seq\x00', 0x0, 0x280080) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000002400)={{0xfd, 0x20}, 'port1\x00', 0x2, 0x10060, 0x2, 0x1, 0x2, 0x1, 0x5, 0x0, 0x0, 0x6}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:52 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r6}, 0x10) getegid() getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r6, 0x384e}, &(0x7f00000000c0)=0x8) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r7 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) close(r7) [ 997.180885] ? copy_mnt_ns+0x8c0/0x8c0 [ 997.187617] do_syscall_64+0x1e8/0x640 [ 997.187627] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 997.187645] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 997.187652] RIP: 0033:0x45a919 [ 997.187659] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 [ 997.195803] ORIG_RAX: 00000000000000a5 [ 997.195810] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 997.195815] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 997.195820] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 997.195825] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 997.195829] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 997.196089] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry lockd [ 997.242814] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 997.260378] FAULT_INJECTION: forcing a failure. [ 997.260378] name failslab, interval 1, probability 0, space 0, times 0 [ 997.345233] CPU: 0 PID: 21394 Comm: syz-executor.1 Not tainted 4.14.159-syzkaller #0 [ 997.353177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.362636] Call Trace: [ 997.365244] dump_stack+0x142/0x197 [ 997.368867] should_fail.cold+0x10f/0x159 [ 997.373019] should_failslab+0xdb/0x130 [ 997.377006] __kmalloc_track_caller+0x2ec/0x790 [ 997.381691] ? __sb_end_write+0xc1/0x100 [ 997.385768] ? strndup_user+0x62/0xf0 [ 997.389581] memdup_user+0x26/0xa0 [ 997.393130] strndup_user+0x62/0xf0 [ 997.396772] SyS_mount+0x3c/0x120 [ 997.400217] ? copy_mnt_ns+0x8c0/0x8c0 [ 997.404096] do_syscall_64+0x1e8/0x640 [ 997.408094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 997.412972] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 997.418170] RIP: 0033:0x45a919 [ 997.421357] RSP: 002b:00007f1f22ad6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 997.429069] RAX: ffffffffffffffda RBX: 00007f1f22ad6c90 RCX: 000000000045a919 [ 997.436451] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 997.443723] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 997.450992] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1f22ad76d4 [ 997.458393] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000007 21:20:53 executing program 2 (fault-call:9 fault-nth:14): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) kexec_load(0x5, 0x3, &(0x7f0000000100)=[{&(0x7f0000000000)="572c6cda3f1f3b4dc7a671fff5e7befd1e1c040b3046b1b58454635cf12c0f0efc623d846fdec051838df9cf9e", 0x2d, 0x0, 0x7}, {&(0x7f0000000040)="e4df93c25b1674d7697b0d107a56599f3fd5126eae307f032b4e333cbabcb277255d0e0b01ba9b14418dfbbe9995e1edc933f47e2b0d52ff3b497b9c035bac0ea8c245831e2347c5e0ee1ab8371c9560422c63b93364fa80a5d01864912e0fd6a36614078ff52282a8e22ad28b3ee986d08c5ba933a2669971535bfb92b70ca077d2", 0x82, 0x1, 0x4}, {&(0x7f00000002c0)="eab8a14a7b51e3893abff0d90cd18f28e5f36a3a4fd61b6cce0ef6179a50642e00877d69a87b372ce84071442d29497e0a03ea8df68581f7b8a9f782f5d3c0ac23646918ec67f15fa70fb56cd3bb108e0152b8d7a062b8f8bc38ffe4990bed0d23ad408dcd8700b0d2111b01f33f05eef36317fc3c0288be389cde1ae736c6b7194c9b0741bb807325f37280a8141e19642b2e7a8c2d1c68b5367059fdd126e0c866f0429837ba27993d98fd7e8e433ed57e4efe28023b74ca8faf1d84ecb02d13e9ca28315437bebba1169aa20199462b8dba14f90dabfc979e94fedae97a04080371677ac9096cde0c4d1dc7936998c7071f3065af444d65c987db3b1212f96d71ac0e22bd12a2fa2e633f1f4cc1c960aa186d391337662adebb1345240b9ae23d5a0ad8d572d8176ead07b9c69f", 0x12f, 0x400, 0x9}], 0x160000) r1 = getpid() ptrace$pokeuser(0x6, r1, 0x3, 0x3) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r2) 21:20:53 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x840) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x16ee3cf0e9653edf, 0x2010, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:53 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f00000000c0)) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000100)={0x8, 0x38414261, 0x0, @stepwise={0x5, 0x1, 0x7, 0x10000, 0xc2a, 0x1}}) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f00000000c0)={0x2}) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x2}}, 0x0) 21:20:53 executing program 1 (fault-call:11 fault-nth:1): prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0x6, "f867e9cfccd75aba0e503d5e14f559"}, 0x11, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) 21:20:53 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000000c0)={0x1, 0x20, 0x101, 0x8, 0x80, 0x8}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x2}}, 0x0) 21:20:53 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f00000000c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 997.949270] FAULT_INJECTION: forcing a failure. [ 997.949270] name failslab, interval 1, probability 0, space 0, times 0 [ 997.961213] CPU: 1 PID: 21435 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 997.969123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.978486] Call Trace: [ 997.981093] dump_stack+0x142/0x197 [ 997.984742] should_fail.cold+0x10f/0x159 [ 997.988910] should_failslab+0xdb/0x130 [ 997.992901] kmem_cache_alloc+0x2d7/0x780 [ 997.997057] ? d_drop+0x51/0x60 [ 998.000359] ? rpc_i_callback+0x30/0x30 [ 998.000369] rpc_alloc_inode+0x1a/0x20 [ 998.000378] alloc_inode+0x64/0x180 [ 998.000387] new_inode_pseudo+0x19/0xf0 [ 998.000396] new_inode+0x1f/0x40 [ 998.000404] rpc_get_inode+0x1d/0x1f0 [ 998.000410] ? d_drop+0x51/0x60 [ 998.000419] __rpc_create_common+0x5a/0x1a0 [ 998.000433] rpc_populate.constprop.0+0x122/0x360 [ 998.000447] rpc_fill_super+0x320/0x900 [ 998.000456] ? sget_userns+0x76b/0xc30 [ 998.000467] ? rpc_pipe_release+0x830/0x830 [ 998.019398] ? get_empty_filp.cold+0x3b/0x3b [ 998.019411] mount_ns+0xec/0x190 [ 998.019421] ? rpc_pipe_release+0x830/0x830 [ 998.019432] rpc_mount+0xa4/0xd0 [ 998.035982] FAULT_INJECTION: forcing a failure. [ 998.035982] name failslab, interval 1, probability 0, space 0, times 0 [ 998.039946] mount_fs+0x97/0x2a1 [ 998.039963] vfs_kern_mount.part.0+0x5e/0x3d0 [ 998.039976] do_mount+0x417/0x27d0 [ 998.063665] ? copy_mount_string+0x40/0x40 [ 998.063682] ? memdup_user+0x58/0xa0 [ 998.063691] ? copy_mount_options+0x1fe/0x2f0 [ 998.063705] SyS_mount+0xab/0x120 [ 998.075238] net_ratelimit: 18 callbacks suppressed [ 998.075243] protocol 88fb is buggy, dev hsr_slave_0 [ 998.078404] ? copy_mnt_ns+0x8c0/0x8c0 [ 998.078418] do_syscall_64+0x1e8/0x640 [ 998.078430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 998.083015] protocol 88fb is buggy, dev hsr_slave_1 [ 998.086448] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 998.135301] RIP: 0033:0x45a919 [ 998.138493] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 998.146324] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 998.153605] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 998.160875] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 998.160881] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 998.160885] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 998.161183] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry lockd [ 998.170348] CPU: 0 PID: 21442 Comm: syz-executor.1 Not tainted 4.14.159-syzkaller #0 [ 998.175812] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 998.183010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.183016] Call Trace: [ 998.183037] dump_stack+0x142/0x197 [ 998.183052] should_fail.cold+0x10f/0x159 [ 998.183067] should_failslab+0xdb/0x130 [ 998.183076] kmem_cache_alloc+0x2d7/0x780 [ 998.183086] ? find_held_lock+0x35/0x130 [ 998.183098] ? __might_fault+0x110/0x1d0 [ 998.248109] getname_flags+0xcb/0x580 [ 998.251925] ? __might_fault+0x110/0x1d0 [ 998.256008] user_path_at_empty+0x2f/0x50 [ 998.260178] do_mount+0x12b/0x27d0 [ 998.263859] ? copy_mount_string+0x40/0x40 [ 998.268133] ? _copy_from_user+0x99/0x110 [ 998.272322] ? memdup_user+0x58/0xa0 [ 998.276158] ? copy_mount_options+0x1fe/0x2f0 [ 998.280846] SyS_mount+0xab/0x120 [ 998.284319] ? copy_mnt_ns+0x8c0/0x8c0 [ 998.288576] do_syscall_64+0x1e8/0x640 [ 998.292484] ? trace_hardirqs_off_thunk+0x1a/0x1c 21:20:54 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x400000, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) renameat2(r1, &(0x7f0000000440)='./file0\x00', r2, &(0x7f0000000480)='./file0\x00', 0x4) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f00000003c0)={0x8, 0x4, "0a02d69a266e18418a85eb09d919d8464f47b9c2d5a02ca983436e9c2016b801", 0xb8, 0x4e87, 0x871b, 0x8, 0x380}) syz_open_pts(r3, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0xecdcc590009f7815, @pix={0x7, 0x8, 0x41323151, 0x4, 0x3, 0x2, 0x6, 0x8, 0x1, 0x8, 0x3, 0x1}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 998.297360] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 998.302575] RIP: 0033:0x45a919 [ 998.305780] RSP: 002b:00007f1f22ad6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 998.313522] RAX: ffffffffffffffda RBX: 00007f1f22ad6c90 RCX: 000000000045a919 [ 998.321786] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 998.321793] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 998.321798] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1f22ad76d4 21:20:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='\'%e\x1f\x00\x00\x7f\xff?\xb7h\x00', 0x2, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x180000) fchmodat(r2, &(0x7f0000000000)='./file0\x00', 0x4) dup2(r0, r1) [ 998.321802] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000007 21:20:54 executing program 2 (fault-call:9 fault-nth:15): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:54 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000040)={{0x7, 0x4, 0x5, 0x4, 0xff, 0x3}, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:54 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) r0 = semget$private(0x0, 0x3, 0x40) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f00000003c0)=""/4096) syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) write$UHID_CREATE(r1, &(0x7f0000001700)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001640)=""/147, 0x93, 0xff, 0x40, 0x1f, 0x7fffffff, 0xaf2b}, 0x120) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)) renameat(0xffffffffffffffff, &(0x7f00000015c0)='./file0\x00', r3, &(0x7f0000001600)='./file0\x00') sendto$unix(r2, &(0x7f00000014c0)="f39471eab79538fea19acc4a76c172ccd2665595e83ca71bf48ffc0f92ff8f395f70981d187715419c3843ef99d8a41d482337e0ae03367daf475a41a02568300d9235b7dac22847b05b3d0770ce1fbb0c4dac0f", 0x54, 0x20000009, &(0x7f0000001540)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r4, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8001, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x3, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0)={r5, 0x9f, 0xd7}, &(0x7f0000000240)={'enc=', 'raw', ' hash=', {'blake2s-224-generic\x00'}}, &(0x7f00000002c0)="b8996725cc070dd9924aef00928eb642a754949aed5e9d8cf424ca398d575d4289472fc30e69067b9e12dacf6798f1a5fd465931fc1ebada400af22d2c72840b3d6f8bf540450fca97f511e5fa1c051d8481eeded6a58df4ee5e9149a007138b0e40f43c002f6c7d7223690989e1aa116d6792d80d8ee096612fbc5a4fc3c27bdb5cb40155a4113f9734dac8152a53bd160ed3faf713e22aa5b8e7e5e0f761", &(0x7f00000013c0)=""/215) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x2}}, 0x0) 21:20:54 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r1, r2) 21:20:54 executing program 1 (fault-call:11 fault-nth:2): prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r5}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x2, 0x81, 0x1, 0x4, 0x1, 0x6, 0x6, {r5, @in={{0x2, 0x4e20, @remote}}, 0x20, 0x5, 0x8, 0x10000, 0x28}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r6, 0x7fff}, &(0x7f0000000240)=0x8) dup2(r0, r1) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getpeername$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) 21:20:54 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x101b) socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r3, 0x4b, 0x100000001, 0x400) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000000)) [ 998.820399] FAULT_INJECTION: forcing a failure. [ 998.820399] name failslab, interval 1, probability 0, space 0, times 0 [ 998.832237] CPU: 1 PID: 21489 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 998.840162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.849538] Call Trace: [ 998.852146] dump_stack+0x142/0x197 [ 998.855882] should_fail.cold+0x10f/0x159 [ 998.860069] should_failslab+0xdb/0x130 [ 998.864065] kmem_cache_alloc+0x2d7/0x780 21:20:54 executing program 0: lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000240)=0x8) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/f\x02\x00\x00\x00ideo2\x00', 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xc4, r4, 0x580, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xaf}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x20020800) ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f0000000140)="9e0a2f1c19340f3366cc2f667d3ef43f144be414fd8ae226c4284d52ca", &(0x7f0000000640)=""/4096}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5867, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="9000000010003b2400e623010b1ef1fff03f0000", @ANYRES32=0x0, @ANYBLOB="b5289e570500000608000a00", @ANYRES32=0x6, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) dup2(r0, r2) [ 998.868234] ? rpc_alloc_inode+0x1a/0x20 [ 998.872321] selinux_inode_alloc_security+0xb6/0x2a0 [ 998.877446] security_inode_alloc+0x94/0xd0 [ 998.877460] inode_init_always+0x552/0xaf0 [ 998.877472] alloc_inode+0x81/0x180 [ 998.877483] new_inode_pseudo+0x19/0xf0 [ 998.877494] new_inode+0x1f/0x40 [ 998.877504] rpc_get_inode+0x1d/0x1f0 [ 998.877510] ? d_drop+0x51/0x60 [ 998.877517] __rpc_create_common+0x5a/0x1a0 [ 998.877530] rpc_populate.constprop.0+0x122/0x360 [ 998.886280] rpc_fill_super+0x320/0x900 21:20:54 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000003c0)=""/231) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 998.886293] ? sget_userns+0x76b/0xc30 [ 998.886304] ? rpc_pipe_release+0x830/0x830 [ 998.886314] ? get_empty_filp.cold+0x3b/0x3b [ 998.886325] mount_ns+0xec/0x190 [ 998.894011] ? rpc_pipe_release+0x830/0x830 [ 998.894024] rpc_mount+0xa4/0xd0 [ 998.894038] mount_fs+0x97/0x2a1 [ 998.894053] vfs_kern_mount.part.0+0x5e/0x3d0 [ 998.894065] do_mount+0x417/0x27d0 [ 998.894081] ? copy_mount_string+0x40/0x40 [ 998.901340] ? memdup_user+0x58/0xa0 [ 998.901350] ? copy_mount_options+0x1fe/0x2f0 [ 998.901364] SyS_mount+0xab/0x120 [ 998.901371] ? copy_mnt_ns+0x8c0/0x8c0 [ 998.901385] do_syscall_64+0x1e8/0x640 [ 998.901393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 998.901408] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 998.901416] RIP: 0033:0x45a919 [ 998.901421] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 998.901431] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 998.901436] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 998.901441] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 998.901446] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 998.901451] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 998.901573] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry lockd [ 998.909110] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 998.961008] FAULT_INJECTION: forcing a failure. [ 998.961008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 999.065970] CPU: 0 PID: 21494 Comm: syz-executor.1 Not tainted 4.14.159-syzkaller #0 [ 999.073852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.083206] Call Trace: [ 999.085821] dump_stack+0x142/0x197 [ 999.089452] should_fail.cold+0x10f/0x159 [ 999.093818] __alloc_pages_nodemask+0x1d6/0x7a0 [ 999.098485] ? fs_reclaim_acquire+0x20/0x20 [ 999.102813] ? __alloc_pages_slowpath+0x2930/0x2930 [ 999.107854] cache_grow_begin+0x80/0x400 [ 999.111932] kmem_cache_alloc+0x6a6/0x780 [ 999.116083] ? find_held_lock+0x35/0x130 [ 999.120155] getname_flags+0xcb/0x580 [ 999.123942] ? __might_fault+0x110/0x1d0 [ 999.127990] user_path_at_empty+0x2f/0x50 [ 999.132297] do_mount+0x12b/0x27d0 [ 999.135825] ? copy_mount_string+0x40/0x40 [ 999.140046] ? _copy_from_user+0x99/0x110 [ 999.144200] ? memdup_user+0x58/0xa0 [ 999.148686] ? copy_mount_options+0x1fe/0x2f0 [ 999.153177] SyS_mount+0xab/0x120 [ 999.156621] ? copy_mnt_ns+0x8c0/0x8c0 [ 999.160508] do_syscall_64+0x1e8/0x640 [ 999.164388] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 999.169234] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 999.174407] RIP: 0033:0x45a919 [ 999.177599] RSP: 002b:00007f1f22ad6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 999.185381] RAX: ffffffffffffffda RBX: 00007f1f22ad6c90 RCX: 000000000045a919 [ 999.192636] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 999.200065] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 999.207323] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1f22ad76d4 [ 999.214580] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000007 21:20:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) [ 999.230197] protocol 88fb is buggy, dev hsr_slave_0 [ 999.235388] protocol 88fb is buggy, dev hsr_slave_1 [ 999.240563] protocol 88fb is buggy, dev hsr_slave_0 [ 999.245672] protocol 88fb is buggy, dev hsr_slave_1 21:20:55 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x30, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x3}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f00000000c0)=0x2) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:55 executing program 2 (fault-call:9 fault-nth:16): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:55 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) ioctl(r3, 0x1, &(0x7f0000000140)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x0, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000340)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r4, 0x25, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040810}, 0x24001040) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20430}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x8000) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r8, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r8}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000000)={r8, 0xe, "c52e86f73b1a34b9ee8998eafac3"}, &(0x7f0000000040)=0x16) 21:20:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) 21:20:55 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:55 executing program 1 (fault-call:11 fault-nth:3): prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) 21:20:55 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x10000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x189000, 0x100) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:55 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', r2}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in=@multicast1, 0x4e24, 0x1000, 0x4e22, 0x7, 0xa, 0x20, 0x90, 0x87, r3, r4}, {0xffffffffffff8000, 0xcc3, 0x9, 0xd0, 0x3, 0x1, 0x0, 0x800}, {0x4, 0x4, 0x4, 0x7ff}, 0x4, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@loopback, 0x4d3, 0x10f}, 0x8, @in=@local, 0x3503, 0x2, 0x0, 0x26, 0x20, 0x6, 0x5}}, 0xe8) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000340)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000}) msgctl$MSG_INFO(r5, 0xc, &(0x7f00000003c0)=""/236) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 999.711346] FAULT_INJECTION: forcing a failure. [ 999.711346] name failslab, interval 1, probability 0, space 0, times 0 [ 999.722894] CPU: 0 PID: 21535 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 999.730801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.740164] Call Trace: [ 999.740185] dump_stack+0x142/0x197 [ 999.740204] should_fail.cold+0x10f/0x159 [ 999.740219] should_failslab+0xdb/0x130 [ 999.740230] kmem_cache_alloc+0x2d7/0x780 [ 999.740242] ? rpc_alloc_inode+0x1a/0x20 [ 999.740257] selinux_inode_alloc_security+0xb6/0x2a0 [ 999.768514] security_inode_alloc+0x94/0xd0 [ 999.768529] inode_init_always+0x552/0xaf0 [ 999.768544] alloc_inode+0x81/0x180 [ 999.780724] new_inode_pseudo+0x19/0xf0 [ 999.784715] new_inode+0x1f/0x40 [ 999.788091] rpc_get_inode+0x1d/0x1f0 [ 999.791891] ? d_drop+0x51/0x60 [ 999.791903] __rpc_create_common+0x5a/0x1a0 [ 999.791915] rpc_populate.constprop.0+0x122/0x360 [ 999.791931] rpc_fill_super+0x320/0x900 [ 999.791940] ? sget_userns+0x76b/0xc30 [ 999.791950] ? rpc_pipe_release+0x830/0x830 [ 999.804377] ? get_empty_filp.cold+0x3b/0x3b [ 999.804391] mount_ns+0xec/0x190 [ 999.804399] ? rpc_pipe_release+0x830/0x830 [ 999.804408] rpc_mount+0xa4/0xd0 [ 999.816583] mount_fs+0x97/0x2a1 [ 999.816597] vfs_kern_mount.part.0+0x5e/0x3d0 [ 999.832083] do_mount+0x417/0x27d0 [ 999.843510] ? copy_mount_string+0x40/0x40 [ 999.843525] ? memdup_user+0x58/0xa0 [ 999.851469] ? copy_mount_options+0x1fe/0x2f0 [ 999.855979] SyS_mount+0xab/0x120 [ 999.859434] ? copy_mnt_ns+0x8c0/0x8c0 [ 999.859449] do_syscall_64+0x1e8/0x640 [ 999.859459] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 999.859488] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 999.859500] RIP: 0033:0x45a919 [ 999.877357] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 999.877370] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 999.877375] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 999.877381] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 999.877387] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 999.877393] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 999.877665] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry mount [ 999.917906] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 999.925312] protocol 88fb is buggy, dev hsr_slave_0 [ 999.946822] protocol 88fb is buggy, dev hsr_slave_1 [ 999.952006] protocol 88fb is buggy, dev hsr_slave_0 [ 999.957108] protocol 88fb is buggy, dev hsr_slave_1 21:20:55 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='Ko2\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff030}, {0x80000006}]}, 0xfffffd32) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) [ 999.957280] FAULT_INJECTION: forcing a failure. [ 999.957280] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 999.973986] CPU: 0 PID: 21548 Comm: syz-executor.1 Not tainted 4.14.159-syzkaller #0 [ 999.981879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.991233] Call Trace: [ 999.993846] dump_stack+0x142/0x197 [ 999.997605] should_fail.cold+0x10f/0x159 [ 1000.001757] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1000.006435] ? ____cache_alloc_node+0x162/0x1d0 [ 1000.011094] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1000.016099] ? ____cache_alloc_node+0x162/0x1d0 [ 1000.020758] cache_grow_begin+0x80/0x400 [ 1000.024804] ____cache_alloc_node+0x17c/0x1d0 [ 1000.029295] kmem_cache_alloc+0x1f3/0x780 [ 1000.033428] ? find_held_lock+0x35/0x130 [ 1000.037477] getname_flags+0xcb/0x580 [ 1000.041275] ? __might_fault+0x110/0x1d0 [ 1000.045323] user_path_at_empty+0x2f/0x50 [ 1000.049476] do_mount+0x12b/0x27d0 [ 1000.053004] ? copy_mount_string+0x40/0x40 [ 1000.057224] ? _copy_from_user+0x99/0x110 [ 1000.061361] ? memdup_user+0x58/0xa0 [ 1000.065086] ? copy_mount_options+0x1fe/0x2f0 [ 1000.069602] SyS_mount+0xab/0x120 [ 1000.073047] ? copy_mnt_ns+0x8c0/0x8c0 [ 1000.076927] do_syscall_64+0x1e8/0x640 [ 1000.080802] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1000.085648] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1000.090822] RIP: 0033:0x45a919 [ 1000.093993] RSP: 002b:00007f1f22ad6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1000.101685] RAX: ffffffffffffffda RBX: 00007f1f22ad6c90 RCX: 000000000045a919 [ 1000.108948] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1000.116668] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 1000.123930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1f22ad76d4 [ 1000.131196] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000007 21:20:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x6480, 0x0) dup2(r0, r1) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'veth0_to_bond\x00', 0x8}) 21:20:55 executing program 3: syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000000c0)={{0x1, 0x0, 0xfffffffd, 0x1, 0x821}, 0x0, 0x0, 'id1\x00\x00\x00\x00\x00\xe5\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00@\x00\x01\x00\x01\x00', 'timer1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/!\x00', 0x0, 0x0, 0x80000001, 0x2000, 0xffff}) 21:20:55 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000000c0)=0x5, 0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(r1, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:56 executing program 2 (fault-call:9 fault-nth:17): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a0007050000", @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) 21:20:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x89002, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x4e23, @remote}}) dup2(r0, r1) 21:20:56 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r4) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000180), &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) r6 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r6) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = eventfd2(0x0, 0x0) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ptrace$setopts(0x4206, r7, 0x0, 0x0) r11 = getpid() rt_tgsigqueueinfo(r11, r11, 0x14, &(0x7f00000004c0)) ptrace(0x4206, r11) ptrace(0x8, r11) ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f00000000c0)) syz_open_pts(r3, 0x2a300) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r12, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r12, 0x40087705, &(0x7f0000000140)={0x5, 0x9}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="01950407", @ANYRES32=0x0], &(0x7f000095dffc)=0x1000000a8) 21:20:56 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:56 executing program 1 (fault-call:11 fault-nth:4): prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10400, 0x0) dup2(r0, r1) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)={0x0, 0x7fffffff, 0x7ff, &(0x7f0000000040)=0x81}) 21:20:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a0007050000", @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) 21:20:56 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x8, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0xff}, 0x4) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)) syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0xef, 0x20000) fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video0\x00', 0x2, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) write$UHID_INPUT(r2, &(0x7f00000003c0)={0x8, "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", 0x1000}, 0x1006) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1000.550443] FAULT_INJECTION: forcing a failure. [ 1000.550443] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.563289] CPU: 0 PID: 21594 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1000.571198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.580568] Call Trace: [ 1000.583190] dump_stack+0x142/0x197 [ 1000.586845] should_fail.cold+0x10f/0x159 [ 1000.591155] should_failslab+0xdb/0x130 [ 1000.595148] kmem_cache_alloc+0x2d7/0x780 [ 1000.599317] ? __d_lookup+0x3a2/0x670 [ 1000.603134] ? mark_held_locks+0xb1/0x100 [ 1000.607326] ? d_lookup+0xe5/0x240 [ 1000.610884] __d_alloc+0x2d/0x9f0 [ 1000.614360] ? d_lookup+0x166/0x240 [ 1000.617999] d_alloc+0x4d/0x270 [ 1000.621290] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1000.621298] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1000.621306] ? __rpc_mkdir.part.0+0xe7/0x130 [ 1000.621318] rpc_populate.constprop.0+0xbf/0x360 [ 1000.621335] rpc_fill_super+0x320/0x900 [ 1000.621345] ? sget_userns+0x76b/0xc30 [ 1000.621356] ? rpc_pipe_release+0x830/0x830 [ 1000.639080] FAULT_INJECTION: forcing a failure. [ 1000.639080] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1000.639781] ? get_empty_filp.cold+0x3b/0x3b [ 1000.639796] mount_ns+0xec/0x190 [ 1000.639806] ? rpc_pipe_release+0x830/0x830 [ 1000.639817] rpc_mount+0xa4/0xd0 [ 1000.663793] mount_fs+0x97/0x2a1 [ 1000.663811] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1000.663825] do_mount+0x417/0x27d0 [ 1000.663838] ? copy_mount_string+0x40/0x40 [ 1000.663851] ? memdup_user+0x58/0xa0 [ 1000.663859] ? copy_mount_options+0x1fe/0x2f0 [ 1000.663870] SyS_mount+0xab/0x120 [ 1000.703711] ? copy_mnt_ns+0x8c0/0x8c0 [ 1000.703728] do_syscall_64+0x1e8/0x640 [ 1000.703738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1000.703755] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1000.703764] RIP: 0033:0x45a919 [ 1000.703769] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1000.715076] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1000.715082] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1000.715088] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1000.715094] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1000.715100] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1000.715336] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / 21:20:56 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) fcntl$notify(r2, 0x402, 0xf9c20b6b33f20df8) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) dup2(r1, r0) [ 1000.722246] audit: type=1326 audit(1576790456.310:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=21597 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d75a code=0x0 [ 1000.812877] CPU: 1 PID: 21603 Comm: syz-executor.1 Not tainted 4.14.159-syzkaller #0 [ 1000.820910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.830295] Call Trace: [ 1000.832930] dump_stack+0x142/0x197 [ 1000.836610] should_fail.cold+0x10f/0x159 [ 1000.840762] ? __might_sleep+0x93/0xb0 [ 1000.840779] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1000.840792] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1000.840803] ? ____cache_alloc_node+0x1be/0x1d0 [ 1000.840814] ? cache_grow_begin+0x335/0x400 [ 1000.840827] cache_grow_begin+0x80/0x400 [ 1000.840837] ? __cpuset_node_allowed+0xff/0x450 [ 1000.840846] fallback_alloc+0x1fd/0x2c0 [ 1000.840858] ____cache_alloc_node+0x1be/0x1d0 [ 1000.840869] kmem_cache_alloc+0x1f3/0x780 [ 1000.840878] ? find_held_lock+0x35/0x130 [ 1000.840892] getname_flags+0xcb/0x580 [ 1000.840900] ? __might_fault+0x110/0x1d0 [ 1000.840913] user_path_at_empty+0x2f/0x50 [ 1000.840925] do_mount+0x12b/0x27d0 [ 1000.840938] ? copy_mount_string+0x40/0x40 [ 1000.840946] ? _copy_from_user+0x99/0x110 [ 1000.840959] ? memdup_user+0x58/0xa0 [ 1000.917055] ? copy_mount_options+0x1fe/0x2f0 [ 1000.921635] SyS_mount+0xab/0x120 [ 1000.925082] ? copy_mnt_ns+0x8c0/0x8c0 [ 1000.928957] do_syscall_64+0x1e8/0x640 [ 1000.932834] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1000.937754] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1000.942958] RIP: 0033:0x45a919 [ 1000.946134] RSP: 002b:00007f1f22ad6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1000.953836] RAX: ffffffffffffffda RBX: 00007f1f22ad6c90 RCX: 000000000045a919 [ 1000.961358] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1000.968631] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 1000.975888] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1f22ad76d4 [ 1000.983364] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000007 21:20:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a0007050000", @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) 21:20:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r1) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x3}) 21:20:57 executing program 2 (fault-call:9 fault-nth:18): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500000000000000", @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) 21:20:57 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x7, 0x9, 0x1, 0xf5ff, 0x17, 0x80, 0x6, 0x81, 0x101, 0x8c4a, 0x400, 0x89f5}) r2 = socket$inet(0x2, 0x800, 0x0) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f73656c696e75782f73746174757300202d6367726f7570202f73656c696e75782f73746174757300202f73656c696e75782f73746174757300202f73656c696e75782f73746174757300202f6465762f766964656f32003c2f6465762f766964656f32000acf8d1fafdcc183b424bb3b5196e4960080f225e5ed433b2cf5fcde7bcf208a9cad39ae5af4388f9af7f3785ec9cb"], 0x9f) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = getpid() tkill(r5, 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fchdir(r6) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0x11}], 0x1, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f00000000c0)) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000240)={0x5, 0x1fd4040be70c9d0f, "12e4b0211eedf3c97318cbd452febd6be31c08007bcda3ef9e10f94130ab37cb", 0x333bfc74, 0x0, 0x200, 0x63f, 0x200}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r9, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000380)={{0x0, 0x0, 0x80}}) [ 1001.394828] audit: type=1326 audit(1576790457.140:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=21597 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d75a code=0x0 [ 1001.439948] FAULT_INJECTION: forcing a failure. [ 1001.439948] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.452664] CPU: 1 PID: 21642 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1001.460586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.469960] Call Trace: [ 1001.469985] dump_stack+0x142/0x197 [ 1001.470003] should_fail.cold+0x10f/0x159 [ 1001.470019] should_failslab+0xdb/0x130 [ 1001.470028] kmem_cache_alloc+0x2d7/0x780 [ 1001.470039] ? rpc_alloc_inode+0x1a/0x20 [ 1001.470053] selinux_inode_alloc_security+0xb6/0x2a0 [ 1001.470082] security_inode_alloc+0x94/0xd0 [ 1001.470096] inode_init_always+0x552/0xaf0 [ 1001.470108] alloc_inode+0x81/0x180 [ 1001.470120] new_inode_pseudo+0x19/0xf0 [ 1001.470129] new_inode+0x1f/0x40 [ 1001.470137] rpc_get_inode+0x1d/0x1f0 [ 1001.470143] ? d_drop+0x51/0x60 [ 1001.470156] __rpc_create_common+0x5a/0x1a0 [ 1001.481322] rpc_populate.constprop.0+0x122/0x360 [ 1001.481337] rpc_fill_super+0x320/0x900 [ 1001.481347] ? sget_userns+0x76b/0xc30 [ 1001.481356] ? rpc_pipe_release+0x830/0x830 [ 1001.481366] ? get_empty_filp.cold+0x3b/0x3b [ 1001.481376] mount_ns+0xec/0x190 [ 1001.481383] ? rpc_pipe_release+0x830/0x830 [ 1001.481391] rpc_mount+0xa4/0xd0 [ 1001.481402] mount_fs+0x97/0x2a1 [ 1001.566256] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1001.570851] do_mount+0x417/0x27d0 [ 1001.574408] ? copy_mount_string+0x40/0x40 [ 1001.578739] ? memdup_user+0x58/0xa0 [ 1001.582446] ? copy_mount_options+0x1fe/0x2f0 [ 1001.586996] SyS_mount+0xab/0x120 [ 1001.590482] ? copy_mnt_ns+0x8c0/0x8c0 [ 1001.594407] do_syscall_64+0x1e8/0x640 [ 1001.598293] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1001.603317] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1001.608511] RIP: 0033:0x45a919 [ 1001.611704] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1001.619421] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1001.626932] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1001.634196] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1001.641473] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1001.648863] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1001.656210] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry mount [ 1001.665321] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1003.350135] net_ratelimit: 12 callbacks suppressed [ 1003.350139] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.360331] protocol 88fb is buggy, dev hsr_slave_1 [ 1003.365452] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.370555] protocol 88fb is buggy, dev hsr_slave_1 21:20:59 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000740)={'bcsh0\x00', &(0x7f0000000700)=@ethtool_gstrings={0x1b, 0x8, 0x20, "30829a441edf459c7799c85ed127c0159b2d0c70a38385fb5a7c324eab9c1a14"}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x400, 0x30, 0x80000000, 0x3}, &(0x7f0000000040)=0x18) 21:20:59 executing program 1 (fault-call:11 fault-nth:5): prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500000000000000", @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) 21:20:59 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000340), &(0x7f0000000440)=0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="86209368e51420a81c243afa160149a02c08e53947c51141935c00ea0c8d4338b3b15059b74f7646bf1be2d261176767d0279724f846ce7e1012ca32ccff6ef6d3c4abc49167504d82cb0851b369b54bc26634054935c39a13a1c1d77f1197a58c54b68525a16a0c98cfb0ed004d806119af08d87e19dd19cc80afde548ff8c4ade2eb0adcda88097a4764fced374d87049dab12ccce7cbae7814b9bb39532101602a9eb23241121ae28701b0821ee94baef38c19e5dd4d83a000000760d98d35fcdcd29e79383", 0xc7) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x200000, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x84080, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000003c0)={0x8, 0xa, 0x4, 0x4981140, {}, {0x0, 0x1, 0xda, 0x74, 0x1, 0xf7, "e4cf09bc"}, 0x1, 0x3, @planes=&(0x7f0000000180)={0x5, 0x8, @fd, 0x6}, 0x4}) 21:20:59 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r1) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) socketpair(0x18, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x6, 0xd4eb, 0x4}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={r4, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x2, 0x5, 0xfffff001, 0xff, 0x28, 0x0, 0x5}, &(0x7f0000000340)=0x9c) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000080)=0x3f) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r6, 0x0) ioctl$KDGETKEYCODE(r6, 0x4b4c, &(0x7f0000000100)={0x1000, 0xd34}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000040)={0x7, 0x6, 0x0, 0x9, 0xc, 0x6, 0x1, 0x7f, 0x8000, 0x6, 0xff, 0x2f}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r7, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x80000001, @loopback, 0x3}, 0x1c) ioctl$VT_RELDISP(r7, 0x5605) 21:20:59 executing program 2 (fault-call:9 fault-nth:19): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:20:59 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r2, 0x0, 0x38, &(0x7f0000000000)=',!-(:[vboxnet0*wlan1+mime_type\xc4vboxnet0.{\\keyringcpuset\x00', 0x0}, 0x30) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f00000000c0)) read$FUSE(r4, &(0x7f0000000340), 0x1000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0xc) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 1003.566954] FAULT_INJECTION: forcing a failure. [ 1003.566954] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.578295] CPU: 1 PID: 21666 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1003.586191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.595550] Call Trace: [ 1003.595573] dump_stack+0x142/0x197 [ 1003.595593] should_fail.cold+0x10f/0x159 [ 1003.595610] should_failslab+0xdb/0x130 [ 1003.595623] kmem_cache_alloc+0x2d7/0x780 [ 1003.614157] ? d_drop+0x51/0x60 [ 1003.617458] ? rpc_i_callback+0x30/0x30 [ 1003.621450] rpc_alloc_inode+0x1a/0x20 [ 1003.625348] alloc_inode+0x64/0x180 [ 1003.629026] new_inode_pseudo+0x19/0xf0 [ 1003.633025] new_inode+0x1f/0x40 [ 1003.636415] rpc_get_inode+0x1d/0x1f0 [ 1003.640310] ? d_drop+0x51/0x60 [ 1003.643603] __rpc_create_common+0x5a/0x1a0 [ 1003.647960] rpc_populate.constprop.0+0x122/0x360 [ 1003.648312] FAULT_INJECTION: forcing a failure. [ 1003.648312] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.652832] rpc_fill_super+0x320/0x900 [ 1003.652850] ? sget_userns+0x76b/0xc30 [ 1003.652861] ? rpc_pipe_release+0x830/0x830 [ 1003.652871] ? get_empty_filp.cold+0x3b/0x3b [ 1003.652880] mount_ns+0xec/0x190 [ 1003.652886] ? rpc_pipe_release+0x830/0x830 [ 1003.652895] rpc_mount+0xa4/0xd0 [ 1003.652905] mount_fs+0x97/0x2a1 [ 1003.652917] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1003.652929] do_mount+0x417/0x27d0 [ 1003.652943] ? copy_mount_string+0x40/0x40 [ 1003.652961] ? memdup_user+0x58/0xa0 [ 1003.713506] ? copy_mount_options+0x1fe/0x2f0 21:20:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500000000000000", @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) [ 1003.718029] SyS_mount+0xab/0x120 [ 1003.721494] ? copy_mnt_ns+0x8c0/0x8c0 [ 1003.725394] do_syscall_64+0x1e8/0x640 [ 1003.725406] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1003.725424] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1003.725433] RIP: 0033:0x45a919 [ 1003.725438] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1003.725452] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1003.750367] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1003.750373] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1003.750379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1003.750385] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1003.750616] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry nfs [ 1003.772528] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1003.781192] CPU: 0 PID: 21669 Comm: syz-executor.1 Not tainted 4.14.159-syzkaller #0 [ 1003.811162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.811168] Call Trace: [ 1003.811190] dump_stack+0x142/0x197 [ 1003.811207] should_fail.cold+0x10f/0x159 [ 1003.811222] should_failslab+0xdb/0x130 [ 1003.823144] kmem_cache_alloc+0x2d7/0x780 [ 1003.823156] ? lock_downgrade+0x740/0x740 [ 1003.823175] alloc_vfsmnt+0x28/0x7d0 [ 1003.830911] vfs_kern_mount.part.0+0x2a/0x3d0 [ 1003.830923] do_mount+0x417/0x27d0 [ 1003.830938] ? copy_mount_string+0x40/0x40 [ 1003.830951] ? memdup_user+0x58/0xa0 [ 1003.830961] ? copy_mount_options+0x1fe/0x2f0 21:20:59 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1003.839097] SyS_mount+0xab/0x120 [ 1003.839107] ? copy_mnt_ns+0x8c0/0x8c0 [ 1003.839119] do_syscall_64+0x1e8/0x640 [ 1003.839130] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1003.847021] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1003.847030] RIP: 0033:0x45a919 [ 1003.847035] RSP: 002b:00007f1f22ad6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1003.847048] RAX: ffffffffffffffda RBX: 00007f1f22ad6c90 RCX: 000000000045a919 [ 1003.855932] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1003.855939] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 1003.855945] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1f22ad76d4 [ 1003.855951] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000007 21:20:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/18, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) 21:20:59 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) flock(r3, 0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:20:59 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000000), 0x4) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x400000, 0x0) syz_open_pts(r3, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) dup2(r0, r1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001d40)={@dev, 0x0}, &(0x7f0000001d80)=0x14) r9 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r9, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000002d80)={'vcan0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000002dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002e00)=0x14, 0x180000) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r15 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r15, 0x0) ioctl$VIDIOC_EXPBUF(r15, 0xc0405610, &(0x7f0000000800)={0xa, 0x3ea, 0x3, 0x0, r3}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x20}}, 0x0) sendmmsg$inet(r4, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000200)="364203001144ce2d3f042671fc192604e7c387973aac92cdc57fc1065bed2bec9b3bf0a176a4a518794601ef6378d09daa13f27d96258c24115b8acb04141f7388632e545ac9d088fa3ae6db7d62a39db7ffaf486be3e0ee90889814687208dda1eb5edfa45c1e967bf6164233a7f19be17a42238bd8a837bcd4d470daa6bd7fe59c9b19c519fd1db6b8cae25b56e59bc91a54942b9bd85a28d9470e4606", 0x9e}, {&(0x7f0000000100)="51c3ed882283321d4dcf63cfd4ae2b6ba7cb2dd44632097f016e4b7d0f7d8ce7ed65ba56584ce03de12fb6c41d67dc9644363e2afc6e6b32528ba2d94c94e2537ea4bac17a91988b", 0x48}, {&(0x7f00000002c0)="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", 0xfb}, {&(0x7f00000003c0)="00b6f8796f665185cdb8e7c1794114474d9d15cc22631d2f516620d12d8393b453648f5b2945d3699f8a0b694ca02b6eb1cdf028c98a65ff970dd90023cd78d45663e75ac6c7dade8e2b73963671ba79e1cf0ce35ac6c854fe92bfeab9331c3e07ce9a3de8b2f0942358d59f04cb1e8982abc931f8fafc569e7d20fc558b049705b6e8bf34e076ca70864cd767f36955620f27efef0fe03c0477", 0x9a}, {&(0x7f0000000480)="6981ecefe8dfd2", 0x7}, {&(0x7f00000004c0)="c7aca2811af4c85abe2e55f1cd7690f87c6ebb3d932af6800bc7f5dc595efcbf1de6972a0f3dcf4df0e82c263a860db8e48db600678881bbe3596e17b69cdfdae7c5a8942ee24be5c523e50a917fd16e3f58bdd14653092606140768ec85556364b55097d1d73236f8a846bcf337b7b8147356db6bf3978ee3aa1c72c3f78d0ae85d25ac", 0x84}], 0x6, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x4c6}, @timestamp={0x44, 0x2c, 0x37, 0x0, 0x1, [{[@local], 0x20}, {[@multicast2], 0x7}, {[], 0x7fff}, {[@initdev={0xac, 0x1e, 0x0, 0x0}], 0x7fe}, {[], 0xffff}, {[], 0xb4c}, {}]}, @lsrr={0x83, 0x1f, 0xd3, [@remote, @remote, @local, @loopback, @multicast2, @rand_addr=0x4, @remote]}, @ssrr={0x89, 0x1f, 0x3f, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @broadcast]}, @cipso={0x86, 0x41, 0x58, [{0x2, 0x5, "a1d50c"}, {0x7, 0x11, "022aab2f9aded26fb95fa8a6f1a273"}, {0x2, 0x11, "710ee64253784b2d16ad36a2d1e812"}, {0x1, 0x7, "cd8c78f59e"}, {0xb, 0xd, "c9546f1e70249b2f27a4e3"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbefc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x158}}, {{&(0x7f0000000780)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001a40)=[{&(0x7f00000007c0)="ba6fa91fe28ea0133880112046420984bb892fa28c68b28758bc7cbbf9c50c", 0x1f}, {&(0x7f0000000800)}, {&(0x7f0000000840)="a0a5c8d318fdb4552c49d1a17d08e28cf943faf19705f642e5d415e520cde3e1ca4f4c9f5b06dadccedd166e911c450b4226203ff1328278748db1ece5964fb87eb43c839dbeb70efa0b6efb79f3a7ae8520cbe1789a3a13983191f0c3205ab4836c45920903984d63268e12529b1eaabf0f73318069ae5b245f7028282e192bac39bb89c46e6d1387d5db8b939f5fa21f49598bf0b089c40c84bc935d2425a96d10db27d5f3dba5e421ed26d21576367aa3f281ba24d062eba308386b26ba", 0xbf}, {&(0x7f0000000900)="f4cf3812b2864a918475716651304dcca9e7c3b47f40ea8dd133d419e4cc057836432f081744da1597667763e0d79aa2136913ec04b7d526b4a12d4d263097510fac050f57687dc70ca7abb4ce25f2d9c9beb770473ed6876e478cd50d425a9681bcfadf704c61e94b44959c0bfd2749e89c4561349d14eb517aefba67c84135c2ca", 0x82}, {&(0x7f00000009c0)="dbfa47a63ad860638be0c7c2d0eb52c0912fce974f137b87eb1169dfd0b5ed073ad21b6b040dde10cb72f655b6367417fc8202abc6fd9615f1cb6b41bbf9c4c0fd0541aac9902ebd3943d802db3c074bef00d7859d3a482729cf83a1f6707844244f475f1d", 0x65}, {&(0x7f0000000a40)="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", 0x1000}], 0x6, &(0x7f0000001ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @rand_addr=0x8}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x98}}, {{&(0x7f0000001b80)={0x2, 0x4e24, @rand_addr=0x3}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="12750c486c246a380cf59dd2dc", 0xd}, {&(0x7f0000001c00)="9fad270b4413dab9c9d904e326a884c01afe9ea72b9a1f0a", 0x18}], 0x2, &(0x7f0000001dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x20, 0x0, 0x7, {[@end, @generic={0xcc, 0xc, "66ea9051ee603cf184a9"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @dev={0xac, 0x14, 0x14, 0xa}}}}], 0x88}}, {{&(0x7f0000001e80)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002340)=[{&(0x7f0000001ec0)="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", 0xfb}, {&(0x7f0000001fc0)="f8a8f486397b0fff1876454319c10030c67d1aa8ff329015faa79d1cbf54f18c8e290188d62e50b476e8d209185a882338fced16fa088d80ad5ef769454013af3407ad774edfff885d4654d4", 0x4c}, {&(0x7f0000002040)}, {&(0x7f0000002080)="f7ddd8927754a2db0f14150a3784358232a70f56168397f05e3766d60ec1633891eb8bda132624a0535a85e56c8ce6d30c8109499f0e82dd65431f71a5aa39e1815a6f9a03792526e9fcb7b4b24f9262b51a65530c3c8e8a6b0b3040cec86a18b3fd6d8c781ec0b11940e8440279e92a0578a237a4f5e5d27e23c3f86310a2013fba5c1e055fe8878b06b7f8e167d439e50829c8d488a4eee43be9", 0x9b}, {&(0x7f0000002140)="45ebe7ad4427c452ef1086a0ab853f8eb811e15ab0016e42126239c021ecef32fd394d18ad94de6f22a8e291600f3cba71a3dab3f4812e811d45d48ab2d10c4a59cb026851f1a714d8ebe65ce80447e5cbb60afbcf65c20740104746a7dd1f277de99ad34b748f3e36292abc374d95fa4c74656ccf58071e5ea4126c2174d6d656ef793ed58a33b775bc71a5186a48f61d316d9e2e3d6826c54ba5af51e5bfa8d1ed331911f54e5c00958e037953e0ff07b49089c1160415d6300152cb03caa8af6f813d4d7bb228fc0a9729220fb92c1d19938ff0d7b3f34215de593510e88ece83", 0xe2}, {&(0x7f0000002240)="6bacc3608b1d994b2c80ee5ad9573042a5947d3eacbf9b5d6631636f855488edda1245d07df4346d9b148e7c56909f303b73a2336dbaf985c529f3b804c503734ac910cf4430024a23f465567d1a50cf07d9bc57a2ea43a0d8e207a1002f35e488399dfd3f8f244f8ae2cf638382efa2d1b2c8fc7ae4d21fb37209452f4a715ffbb0ade4becc10d29d2918cf7170d44f5a74a8b57c6d447d387e5b77671c659e5f6d02c6fcc1d1c01201640057774f6c253fa99f47c589ffa08d81f20a4868a7bcbe1684bcb4eaef6595f4b07e6481f8117eaba2546a", 0xd6}], 0x6}}, {{&(0x7f00000023c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002400)="45165d0288ff2ae217919363ff4a185a42fdff31d11c64ae041f6a04fdd893956f633ea29cce61db04b098767a2fa0c5cf3d0af0d6b9cfdc34c7ca461eb9a328a876500fb5c4c524a0badcfa16a1cf3c8824753b647ea63053fd2ca85a34534daea23e883e131dbe7d673a1840aee34d68f4fbae3397669538766fd567c144e3a8a23b813fb640860958feb910de8ce27a780d9a6d28bb4a30c6166723a2d8831a90585e412a1a268afa72ce3dc3101e7eeefdc2cf27511d8a1e692dc99651970dcd54b9f2efff521b10e6cde18b489a8773a3cd5d5a3003bfc940143a179586a4ae8d4786", 0xe5}, {&(0x7f0000002500)="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", 0xfd}], 0x2, &(0x7f0000002640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xce}}, @ip_ttl={{0x14, 0x0, 0x2, 0x86}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x90}}, {{&(0x7f0000002700)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002980)=[{&(0x7f0000002740)="650ac22e261dc60cd512798c98d93567f28d115a70babccc13fffbf5c81af9963af4f01be9af7fd8243426def2faec2016ed27249276cf2fc61fc235528bdd01c8822f49764dda2fbbd8760219e2474ad8f55135d83a6dee6564dc054acd2f9c592a48d2b72f33b995e5864ff478e89b76a5ca4e167c660a3ef1a4f7356c6aa58590c13bbdf6cd167ace16bd31aad3dd4feaf14ab3ce1de4a48b2379a0ce1ad24916095dbf5da5be35ba28939570b8ab47641685eac25a70341c77458a8ebbdde3dd2e8c042e04e1de162fe5ec011afa8787b8a9fef8c24550cc716bae590a0e7909c9bf95b5baac09b022a32a6bf1137de033504127c7", 0xf7}, {&(0x7f0000002840)="98c91978790e6d89ced400839d3e106647cd53453e74084cd7a4ba6fb84e8078e0d7e7c8dcf53033a14c720641617ba147824e0017fead085eb41a0f7b8335ec43b2f0d0453fd00c7577d96743e0d1aa0a35272d8b486389a78714c2512c96470c50e109856836f3bc6caadec46d49cdac04f4989f7dd0b6fd7395db68787adee4d0bdb00ddcb11c8b9dc8dbab2f53cedb95d5a4ccd09b635f1d2fa79b488af5e9cd2265f234cb8579145d5f358290d9ba8cfa3808da161ef5a4fa098f4ca1e7e13ea02c35c5ff1a4bf22625c34124559814d3fb4c8058ffe081", 0xda}, {&(0x7f0000002940)="83e7e6841494299629f1ba98b7895a78d92d65ee99552ca5f56f7b93d316a548364c5e33749d584a1b12c21c125d4968e704", 0x32}], 0x3, &(0x7f0000002e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x771c}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @loopback, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_retopts={{0x40, 0x0, 0x7, {[@noop, @generic={0xf, 0xb, "f63c574417732db829"}, @ra={0x94, 0x6, 0xfffffffa}, @timestamp={0x44, 0x1c, 0x9, 0x3, 0x0, [{[], 0x80000000}, {[@remote], 0x2}, {[@loopback], 0x5}, {[], 0xfffffff7}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x14}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x130}}], 0x6, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) 21:20:59 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000001480)='./file0\x00', 0x8280, 0x108) r1 = syz_open_pts(0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) socketpair$tipc(0x1e, 0x4f4cb7668e27857, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r2, 0x3, &(0x7f0000001440)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000000240)="d2a6a72e9cb26ea62872f180509c49c908c52be013ef7ddbb1cc3ed477d1798c9489707251e5d3b651759364355b5fd99b020d473aa85cb5fe1f7ba0cc013fb7031b029d5ad46a62fae9fe5eef3320dd7ee33270a2b5f779479d92c12d2f29857ac5ad89fb1d7c45f8e7d6c263658c42bb96c666d2ac2b4045ca74ce32695f88810350dad666ac48b880d95750ea754bb02687ce71a3454c33dff01e9b9afcb3cbd284e9daf3805461b1a5ba8baa1213d2e9d0f56f0585ec26e4aa260d84a84079ee57e796033dd004c7de0f6505", 0xce, 0x7, 0x0, 0x2, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000000180)="099972b5c0fc3bc5d2934cae458757e80d71f98a807ff79aefb8515bd6fbc3f151d1f4c9", 0x24, 0x80000001}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x5, r4, &(0x7f0000000400)="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", 0x1000, 0x7, 0x0, 0x1}]) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) stat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000014c0)='9p\x00', 0x800400, &(0x7f00000015c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_none='cache=none'}, {@access_any='access=any'}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@loose='loose'}, {@loose='loose'}, {@nodevmap='nodevmap'}, {@posixacl='posixacl'}], [{@fsname={'fsname', 0x3d, 'GPL+#eth1/Y'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1004.070126] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.075331] protocol 88fb is buggy, dev hsr_slave_1 [ 1004.080493] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.085566] protocol 88fb is buggy, dev hsr_slave_1 [ 1004.255200] 9pnet: Insufficient options for proto=fd 21:21:00 executing program 1 (fault-call:11 fault-nth:6): prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:00 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x4, 0x8, 0x0, 0x6}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/18, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) [ 1004.288853] 9pnet: Insufficient options for proto=fd 21:21:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r1) 21:21:00 executing program 2 (fault-call:9 fault-nth:20): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1004.310170] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.315362] protocol 88fb is buggy, dev hsr_slave_1 21:21:00 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x4, 0x200, 0x3, 0x8, 0x6, 0x85ea, 0x5, 0x6, 0x9, 0x81, 0x4, 0x3f, 0x3f, 0x6, 0x6f2], 0x0, 0x7fef109175b2edd7}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1, 0x0, 0x0, 0x0, 0x2000101}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x2}) 21:21:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r1) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040), 0x4) read$char_usb(r2, &(0x7f0000000080)=""/115, 0x73) 21:21:00 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfff}, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400008, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1004.473680] FAULT_INJECTION: forcing a failure. [ 1004.473680] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.485033] CPU: 1 PID: 21715 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1004.492946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.502313] Call Trace: [ 1004.504917] dump_stack+0x142/0x197 [ 1004.508683] should_fail.cold+0x10f/0x159 [ 1004.512857] should_failslab+0xdb/0x130 [ 1004.516989] kmem_cache_alloc+0x2d7/0x780 [ 1004.521192] ? __d_lookup+0x3a2/0x670 [ 1004.525008] ? mark_held_locks+0xb1/0x100 [ 1004.529178] ? d_lookup+0xe5/0x240 [ 1004.532734] __d_alloc+0x2d/0x9f0 [ 1004.536199] ? d_lookup+0x166/0x240 [ 1004.539838] d_alloc+0x4d/0x270 [ 1004.543137] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1004.548343] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1004.552493] ? __rpc_mkdir.part.0+0xe7/0x130 [ 1004.552506] rpc_populate.constprop.0+0xbf/0x360 [ 1004.552523] rpc_fill_super+0x320/0x900 [ 1004.552533] ? sget_userns+0x76b/0xc30 [ 1004.552544] ? rpc_pipe_release+0x830/0x830 21:21:00 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f0000000000)={{0x2, @name="0229a227dce56ab6b6423e55b1de346e4607958e3b1baf7e2711f175b215d3d5"}, 0x8, 0x3, 0x400}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = open(&(0x7f0000000000)='./file0\x00', 0x440c2, 0x0) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x4) write$9p(r4, &(0x7f0000000800)="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", 0x600) sendfile(r4, r5, 0x0, 0x10000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 1004.561708] ? get_empty_filp.cold+0x3b/0x3b [ 1004.561722] mount_ns+0xec/0x190 [ 1004.561732] ? rpc_pipe_release+0x830/0x830 [ 1004.561743] rpc_mount+0xa4/0xd0 [ 1004.561753] mount_fs+0x97/0x2a1 [ 1004.561765] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1004.561777] do_mount+0x417/0x27d0 [ 1004.561790] ? copy_mount_string+0x40/0x40 [ 1004.561803] ? memdup_user+0x58/0xa0 [ 1004.561811] ? copy_mount_options+0x1fe/0x2f0 [ 1004.561823] SyS_mount+0xab/0x120 [ 1004.561831] ? copy_mnt_ns+0x8c0/0x8c0 [ 1004.561844] do_syscall_64+0x1e8/0x640 [ 1004.561852] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1004.561870] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1004.600423] FAULT_INJECTION: forcing a failure. [ 1004.600423] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.601069] RIP: 0033:0x45a919 [ 1004.601076] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1004.601087] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1004.601094] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1004.601100] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1004.601106] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1004.601111] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1004.601464] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1004.612118] CPU: 0 PID: 21724 Comm: syz-executor.1 Not tainted 4.14.159-syzkaller #0 [ 1004.709991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.719357] Call Trace: [ 1004.721968] dump_stack+0x142/0x197 [ 1004.725612] should_fail.cold+0x10f/0x159 [ 1004.729784] should_failslab+0xdb/0x130 [ 1004.733779] kmem_cache_alloc_trace+0x2e9/0x790 [ 1004.738553] ? lock_downgrade+0x740/0x740 [ 1004.742719] ? do_raw_spin_unlock+0x16b/0x260 [ 1004.747229] sget_userns+0xfe/0xc30 [ 1004.750886] ? set_anon_super+0x20/0x20 [ 1004.754874] ? get_empty_filp.cold+0x3b/0x3b [ 1004.759307] mount_ns+0x6d/0x190 [ 1004.762706] ? rpc_pipe_release+0x830/0x830 [ 1004.767050] rpc_mount+0xa4/0xd0 [ 1004.770433] mount_fs+0x97/0x2a1 [ 1004.773812] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1004.778328] do_mount+0x417/0x27d0 [ 1004.781883] ? copy_mount_string+0x40/0x40 [ 1004.786129] ? memdup_user+0x58/0xa0 [ 1004.789853] ? copy_mount_options+0x1fe/0x2f0 [ 1004.794362] SyS_mount+0xab/0x120 [ 1004.797821] ? copy_mnt_ns+0x8c0/0x8c0 [ 1004.801736] do_syscall_64+0x1e8/0x640 [ 1004.805666] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1004.810524] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1004.815727] RIP: 0033:0x45a919 21:21:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/18, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) [ 1004.819876] RSP: 002b:00007f1f22ad6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1004.827597] RAX: ffffffffffffffda RBX: 00007f1f22ad6c90 RCX: 000000000045a919 [ 1004.834915] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1004.842225] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 1004.849524] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1f22ad76d4 [ 1004.856806] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000007 21:21:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x7, 0x7}, 0xc) r3 = dup2(r0, r1) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f00000000c0)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000080)={0x0, 0x80, 0x7f7d94a3, 0x10000}) [ 1004.921316] audit: type=1800 audit(1576790460.670:121): pid=21731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=18365 res=0 21:21:00 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0x84, @rand_addr=0x5, 0x4e21, 0x3, 'sed\x00', 0x20, 0x10000, 0x52}, 0x2c) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) [ 1005.039541] audit: type=1804 audit(1576790460.700:122): pid=21735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir300273342/syzkaller.Zjx60z/1498/file0" dev="sda1" ino=18365 res=1 [ 1005.161169] audit: type=1800 audit(1576790460.700:123): pid=21735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=18365 res=0 21:21:01 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}, 0x20}], 0x2c3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/19, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) 21:21:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x800) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) fchdir(r1) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r3) 21:21:01 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r5, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) chown(&(0x7f0000000380)='./control\x00', r4, r7) write$FUSE_ATTR(r1, &(0x7f00000001c0)={0x78, 0x0, 0x4, {0x1, 0xffffff01, 0x0, {0x3, 0xfffffffffffffffe, 0x80, 0x0, 0xfff, 0x100000001, 0x81, 0x9d, 0x3, 0x8000, 0xc0, r2, r7, 0x2f, 0x34}}}, 0x78) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) mount$9p_tcp(&(0x7f0000000340)='127.0.0.1\x00', &(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='9p\x00', 0x120400, &(0x7f0000000440)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r6}}, {@posixacl='posixacl'}, {@debug={'debug', 0x3d, 0x54a6}}, {@aname={'aname', 0x3d, '/dev/snd/timer\x00'}}], [{@smackfsroot={'smackfsroot', 0x3d, '\':,\a'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'id1\x00'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) 21:21:01 executing program 2 (fault-call:9 fault-nth:21): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:01 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x135, 0x0, 0x0, 0x5, 0x0, 0x8, 0x100000001, 0x6857d165, 0x0, 0x10000000}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1005.493999] FAULT_INJECTION: forcing a failure. [ 1005.493999] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.506347] CPU: 0 PID: 21768 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1005.514350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.514356] Call Trace: [ 1005.514375] dump_stack+0x142/0x197 [ 1005.514390] should_fail.cold+0x10f/0x159 [ 1005.526349] should_failslab+0xdb/0x130 [ 1005.526361] kmem_cache_alloc+0x2d7/0x780 [ 1005.526373] ? rpc_alloc_inode+0x1a/0x20 [ 1005.526387] selinux_inode_alloc_security+0xb6/0x2a0 [ 1005.526399] security_inode_alloc+0x94/0xd0 [ 1005.534271] inode_init_always+0x552/0xaf0 [ 1005.534284] alloc_inode+0x81/0x180 [ 1005.534295] new_inode_pseudo+0x19/0xf0 [ 1005.534306] new_inode+0x1f/0x40 [ 1005.534315] rpc_get_inode+0x1d/0x1f0 [ 1005.534321] ? d_drop+0x51/0x60 [ 1005.534331] __rpc_create_common+0x5a/0x1a0 [ 1005.582824] rpc_populate.constprop.0+0x122/0x360 [ 1005.587738] rpc_fill_super+0x320/0x900 [ 1005.591738] ? sget_userns+0x76b/0xc30 [ 1005.595649] ? rpc_pipe_release+0x830/0x830 [ 1005.599990] ? get_empty_filp.cold+0x3b/0x3b [ 1005.604410] mount_ns+0xec/0x190 [ 1005.604420] ? rpc_pipe_release+0x830/0x830 [ 1005.604431] rpc_mount+0xa4/0xd0 [ 1005.604442] mount_fs+0x97/0x2a1 [ 1005.604458] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1005.612170] do_mount+0x417/0x27d0 [ 1005.612184] ? copy_mount_string+0x40/0x40 [ 1005.612199] ? memdup_user+0x58/0xa0 [ 1005.612208] ? copy_mount_options+0x1fe/0x2f0 [ 1005.612221] SyS_mount+0xab/0x120 [ 1005.612235] ? copy_mnt_ns+0x8c0/0x8c0 [ 1005.612248] do_syscall_64+0x1e8/0x640 [ 1005.650904] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1005.655773] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1005.660955] RIP: 0033:0x45a919 [ 1005.660960] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1005.660970] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1005.660974] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1005.660979] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 21:21:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/19, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) 21:21:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = dup3(0xffffffffffffffff, r0, 0x7d05f8e50fb8ae16) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000140)=0xfffffffffffffffb) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) syncfs(r4) syz_open_pts(r3, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f00000000c0)) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) write$selinux_validatetrans(r5, &(0x7f0000000040)={'system_u:object_r:dhcpd_initrc_exec_t:s0', 0x20, 'system_u:object_r:kmsg_device_t:s0', 0x20, 0x5, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x7f) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x5, 0x400800) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r6, 0x4010aeab, &(0x7f00000000c0)) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f0000000200)={0x101, "ad5cbc6a31cf22e2a744f6431a492d113022d228edbfc4c457b6a3df065d55ee", 0x2, 0x100, 0x8, 0x6, 0x1, 0x0, 0x9, 0x4}) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r7, 0x4010aeab, &(0x7f00000000c0)) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000280)=0x7) 21:21:01 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8f) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:01 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c, 0xc00) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) write(r1, &(0x7f0000000480)="f5ecc2cdd2abfc881bec29569bfa038a1f91eaf7303de7445c989593ad5fbdbdfe835a92db1c824f1919d35df5841a6944af717831f7491b00130c752b517b41b263bbf63a5c71f6e5e32e7b8577f331afd768a8133c62facab2ba2c45942bdc6c32d40d58419a5ae2e3e21bf515325e0beb18761f940bf770efb6036cbba4e1a7ec62950084743c12af10dd597557d3920d1e2de4062699175b0ada779c7484a61bbae9e8d9b8bdd63815", 0xab) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9dcd}, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0xc040, 0x21) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1005.660984] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1005.660988] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1005.661237] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry nfs [ 1005.717714] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1005.816528] audit: type=1800 audit(1576790461.560:124): pid=21786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16602 res=0 21:21:01 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfff}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x2f, 0x0, 0x10000000}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.opaque\x00', &(0x7f0000000240)=""/134, 0x86) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000003c0)={{0xc4}, 'port1\x00', 0x18, 0x802, 0x6, 0x4, 0x8, 0x8, 0x5, 0x0, 0x533a385934d4bde3, 0x5}) r3 = accept4$tipc(r2, 0x0, &(0x7f00000000c0), 0x800) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1005.873113] audit: type=1800 audit(1576790461.600:125): pid=21786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16602 res=0 21:21:01 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r5 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000025c0)={@mcast1, 0x0}, &(0x7f0000002600)=0x14) sendmmsg(r4, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000740)="315221e0cf3f5e2537bc582e58250546531292b02993497c432763e5f5615942459c7085e13a9a6af240bb9c12773f72edca275423ffdcb7da462bdce787549d2216e4eb58d2766893ebd008e08272eece3d2b56390d9ca5538689d28c027615d602f53a4d898cef734db14a7d3615ee135b84", 0x73}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="7ffd5dd0e569af14f87e1f7d050f9be9d99481edfec7ae262c0b627d4ecf52cf789ebb1a9462bf4c63ce1aec1c38a62edbf419017df2d307495737dec39ec98df9f245de8c88241235a0c13add310605ceaf8f5c6804ad4d61f1abed91b115ec6336a8", 0x63}, {&(0x7f0000001840)="d5ccf76b72595432e9d5c80d776cee88aa9e2ab85e75999362db06291ddb02fcbf17cccc70008c956ed0cebe9e8c1c9eb091dd9e2c92313a44de8a4392e3790cf37649a7c1917fac0083d9ce3c8fbb2122fc422461c4ba5103fb560f0c1c9d29374acc2d9e56f445acc9b93a9527080ec0c66fd24c897d", 0x77}], 0x4, &(0x7f0000001900)=[{0x28, 0x88, 0xffffffff, "54a6e5aa42118585caf6576bb0fb3fecb147b28cb606"}], 0x28}}, {{&(0x7f0000001940)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f0000001e80)=[{&(0x7f00000019c0)="4e0a92d55ba7d62671b3d2ff43cfa9ff58c50ed1b91e9821528d4c04fbfd1ada7c557422e34d54fdccf0011bddb14525b9abf39aa9bd2d94c13de5ef86e7f6a7747c57454a8234ffd48f839b8ffec4c0219ec30022c879dc581f653b0a2463", 0x5f}, {&(0x7f0000001a40)="7cfc1a054156d043f486b7b201073e786c9e4a3b687f3566569873067f3486337530ab2dfb91a0e36ad3eea575a03816a42577996208745022aa4a3cfd076be8188f9f712ba528c369f0ece81ab0f3abbd2844545afe982734f2d35044e186129ad59f89a76b04b0ea44be32a3cafa64200666249fba74a9e9e0f1359cd7998152105b01da3594583dd60a0264e665d8a1eb091bee1a29270771340ab66787bd926704923c8e5974b6a3bb44e69c8fd7a6b0f05b112deffdc998a328dabf5ad07467b88c8d648cb8d6c0410a5408905dd2c334d797b92bb85e9eed2439c3", 0xde}, {&(0x7f0000001b40)="d825ff5c18a4e7af565206", 0xb}, {&(0x7f0000001b80)="5ae506594301537dda9f1f85689346ae206672274fd3dc5aa7efb80a82c31f167b403c497dd45c42ed7c9ab493a61a09bc6b3fa593929f5ef9051f266cf8c51312bb9a42e0cdbccb7e1571d9bd5505fca11a5273d98a0ef506013796ae72a5e8b85fed5b96dd9efe7cf552c5b4f5921de13468c66e0db8", 0x77}, {&(0x7f0000001c00)="96ced97961bc880f59ed6b55176c914658158cf042571703d09743c3cc4da5e42dbe7b792eba138d4687a4a99bc713043d59e4d0a17520f9c3e84b3f4fdfe4780b6c8a1ac28325e6c9b2d0bfdbe54db9636c747e7bc398e667775f2d5db76db2847c09668da42dbc337a1cb1a3b8329e80035390d9d287b53d733017836b726beb55f4e5be7449242f1e84fc66158fc5f4c68665345e093041ad306973074fd9e2ef2e67eb0bbcf22091c0712669a7abeab6255d3f748b9e24899d", 0xbb}, {&(0x7f0000001cc0)="4408594cf9b95fc5fd5614fcd22854dc43e88c071c136d416b57061c77e0a24c4f19a4709d7e77a4c0a23d1aecb6e32e5b410b5cfaa95a8364b579f39decade1f302ad04c7bc340b897f7ea3", 0x4c}, {&(0x7f0000001d40)="1fc9ca2f9d4e0eff9532b9ba86e9fdf6fbd76434fe8b2c2958fb3d7b6afa4b381c6f4f2f6abc82e417d3a32db7b349d15f3004f0257495c34d33493d184349d87713d6", 0x43}, {&(0x7f0000001dc0)="6ba1d51dfa85525a3cc48cd0927795103f79e0e49e4d8b161aa207a14ea3ba19e0000ef73e1735555145fbf509a982683af5b27473be59624b41ab73e49ff60b5b6c7c06b128c15a1255dacb338138ad22f50b04ba209cbf5e5870d0e87c0bc9eec2bc8024aaac1e24fddf3f67edf50a2eed9d474ed3fb2157a659abe2f57d86bc6ca0d1d67b1459eacc3c8c9a3b92ec708bc82772b0491dcb5d7ceb6e9e0c03e32c970a32c98ceec8108a1d134c8e1f19", 0xb1}], 0x8, &(0x7f0000001f00)=[{0xc0, 0xf0173f9860e1ac9, 0x5, "e1c6f076c9251235ce4d3c24e9f09b9613211250ccfb9b53a5c87410483ef1549029ca734eb054f408413e1da7e6dddd616a9c77c0fec49451484e5482caa51b06b2a5819b10ac25fbbd0a33aaa525d5122829e476e8f1a871a855d228a80485529690e3b535904ee26748eccf0d1e33489b149b3dc5bbdef11859ff32638e5309b016ab375c0999b12a25237e512910cede9162d064f98135f8a3942f9ff5b728e68df26c3180ca1c15c6"}, {0xc8, 0x104, 0x2, "9fc65ec1dc307dc06b4185e401755284c20313a5c319c49637e9634531b6c400f40010c0ff5c018160c2f820cf95f8691fe1b290d2ad55ce5dcd74efefe9892ac489fd1432b73607ca71ec5f8d4b74e82a9c73674673a3b7dbb0fa0ba6c3468ac6f73a8aab9125b0f10daf03558d6a57e9737bf5f2188eb5b8db6fcc34e96cb0699d0ad7379d7f2904e08737e5cf51f1b39bb142323b510187916250123c25003e3f9b691a86d46247f334d5a75be29ffcd1ef"}], 0x188}}, {{&(0x7f00000020c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @loopback}, 0x1, 0x3, 0x3, 0x1}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002140)="9b88616922d0027a", 0x8}, {&(0x7f0000002180)="0085d1d5858dd1b9afead528fded40068a613c25c7d098ec2e58bedeccd2d7e74674a33dc5e6adab324deea9ad53fcf13a", 0x31}], 0x2, &(0x7f0000002200)=[{0xf0, 0x1, 0x8, "dcfea04389fb13e88dd76c15fbf280a97452d3a7084b6d0d20164a329c8bfc4b9880354019aa7102c35add327984de3f6353a77bb42554fe2032e8d8a54f011c3d0559d8e3f1048f84b0b14b829c6b66abf0da95c9024ded3d347018c0fd8274579d67b108e2e5db446b6b2d5835b171364f2702bc2fbd12b287f07638a321b8aa5b01ca7ef564c632184f7ebeaa151165fef14a7a424ca59d7271ec836858c7ee985b0458d48227ed3b4856074d1f791d9eb2a5825ea8b686b48013cd7b39488c5c26b053824fcf4348a4ced5ddd4d4bd6df38896822c0765cf7074"}, {0xe0, 0x113, 0x5, "498e999325a9c0f7f2a937aebdd417b8105047f34aae421b073a7db3eb6fe21bd25ff8204010f00b960b2339af55a1ce6c2ae352f3a51b1212a0ff838a2c7efea0e14c3b26842e27d4bd351a907bdf76be0536636a8136079da28b84e9b8742ba06bcfc4c98e30562557563d69af6b4bebf7b74998c64948be81bb9fcf767e4011328afc5b487579048339bc7a7f8c55a672dc91a32874e0d53bff2ea2fd18995b858ad1fc353e582af0f04c00b600fb0b982ee376a559a0cac39ba92de4b19e85fa653ed850d43bad3ee563"}, {0x58, 0xf2470f2c1d434c12, 0x8001, "230206a781a73ca6ebc624b5e6c936c460d0f6125542235f3715fe0693fec9d90e63950f7c67895127cd39f78d44bd05466c6ea3c0735147e571451fe4df0a7ef1fe131d41"}, {0x60, 0x6, 0x8, "dd2de4578aa7eab75ac1614211136bd6513d23bf802a265b3de4933cc9ce180053a789e5c65245ce38cd7b94e463fbfaaba47b8e33b8a45d6cb069b1582ae45a9a94c58c3d505d02c8d45ed1ee2551"}, {0xe8, 0x27e, 0x8, "c2ec4e3248d42ff7d371c59d036efc9329fd586acdb9c41cad5320398ea6a956226c977cb773aaa2843f7568f64a25e4a7058b9049df2ff942c50675b3753ef7e6fe8cc32fd656994d57af04db4d15c96fec9270f917421b9f25621f944b04c3d63ebaee2ddb3c5d590781e120629b7507ba0955788793bcb1a80f2fd800ae1052c90c26c399babc5fe60cab9ea270c777429a3f832dc74d6c0359281da4a3957ce94cf31db0ef74c42867db3a5394aa0df7bafaa3663018efe74093be30ac5603572ec10d55089e6ff31fe58b9c29f1939cd467ccf32454"}], 0x370}}, {{&(0x7f0000002640)=@can={0x1d, r6}, 0x80, &(0x7f0000002900)=[{&(0x7f00000026c0)="a917cbc2c97aa6ca6bf1b65ebbc5d662cd9b6d6f595d1fa8", 0x18}, {&(0x7f0000002700)="94eadc0ae8028ece373bfa234bf5abbd775f1d82c2d767408101daf8a997cba55ff9902f93fc43d9e1a578410046c21483ecbd38f83116c08a1fcc1351dae9c156cca11f155f6f019d40b7fb7560614e37481d5c31c345c02a107ab584f8712e20189b7012533739ee2dec5d7b6cabd806e45fafd7c372649ce98ef80d24f10f5f2e777fa3d0465345973b3d55497c2a234b253db89037b94266d63efbecc8ac3066eaed3057f20fa26cc316b9c14ef7544029bd8ca856", 0xb7}, {&(0x7f00000027c0)="95e32cf96651fa40e964e5e3bad911120933e6d3962f6c7f923c5831258107430713c2104cbba40adc590f7e7f5c2b26812ed00d9a7afa8676491d568dab088b9892a61d127b9c250e0ba59b", 0x4c}, {&(0x7f0000002840)='S', 0x1}, {&(0x7f0000002880)="53d37645c8a2816854b3f77f8f66df7ee58a7049b4af7a848b", 0x19}, {&(0x7f00000028c0)="6f272c2aabedc22753a50f630cca6738765d", 0x12}], 0x6}}, {{&(0x7f0000002980)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002a00)="3dd8efde57bde9f69e777f2c29c6b9ed0a1baeee08f78e6a8af4ae7bb86acd95ba2beceebb5305c0a1fca29c1668e76fb163f1202017fdcb5e3b9bf248bb3537e6a812003f24289d641114ca5d966036609f75dec82fe72164f8a6be13f69fbfdebfdc0d2a47a66da4f786d079a25e1d6c26e89a4fa56492f2cab36bef4904ac7befd89808c1c2b72cff2466e7a05e7e0c8c0ff13ad302fb7c894c4fd5717c072f7a9d4a9f504f18d4140921e58d4315696e63cccb265089cd77df64e3b3a6fa8cb18ca9afa48eb9aae00d678e3b552f11fe4bad35c6ecb46b770db4ae0f730398fd563309a5b80cd2387f74c133d469e389", 0xf2}, {&(0x7f0000002b00)="0e4915bdb97ad78d30b21c28ae24ea790c213211762298ea444ca19b6cd3a672419af4dea1054d6464c0dd3800c66c666714102c625beefcba45c53e52f7924db5e434539d3f7c7ebce0296ff82606a40dd435c490525b7d67874889c191d3560bc647b3c48116689d4d5babc101c315104d4453273d67e923715543d6310b2e42e31680f82ebfbfa68ebc99d9d1c1a03304136ab63c1708d9d7fcb9a0e1e7f83639415bfd4578ab7fdc9cd356093a1586f83fb40cc006913b48ba031c42497b053a3d492c0618c451515ace2bbd5b200c500d1676ce6eab2f4889278618dda4ef8ef39e8d9ae679a1458916e5957a1ab55829", 0xf3}, {&(0x7f0000002c00)="8fbcf11686c5a84a11d81481121b50b7dc9fe7b5023af123fbe079859232134725e018c944c346c09f879f1a2dd8ad1239993d00a6bbee3f49ec3be41b5c3255fdccf3ca9f5b1d8a37b61b168f95b80e21006ce171f0ea3fb9b9a15af3975f68a6b4f419235ca313776200bc7dbbef0a3c4a005ac521789fe991400165be32f0aadc218b58775ab009baa37bd73901a3f6d2b6b82c8030c4ec5e3302", 0x9c}, {&(0x7f0000002cc0)="944527a616401f8af9f2d89dff634f06a985d33d11bea4cca1200c20d49e536fc8a30f", 0x23}, {&(0x7f0000002d00)="3c4834d16afca75c375acad3fc30fa277ae0296c912173df34cffc7fba236ebd81b7c50c00859f42d7c9e2beb7afdbc479ff1e209f66a6baf2c3f38187", 0x3d}, {&(0x7f0000002d40)="1526d6d04e1cb1d4b259eb710139f9450163f3ea62272c552625729c6ae3fd1f719ebdef223003530a12782ad9861355f64ff06f431558c50de515a175ef6d12a4069c7510d8ef4f926ae7030c40f6639d", 0x51}, {&(0x7f0000002dc0)="dd6f27e9c7152ccf55d5d6c5fa71d032c803b618ac1236f5d7661142d2818e8d838433cef4dd87f58197a2f531f41e122b2b34df06c480550e9dffc3583ec61670cfb4a73995f0a0b1187bf77e77c212a242675521529f120108d0863946919e00acd2c3f3a16127ed5b869a7f35a0f82bd2688762d48630405d6861fe3d0c4ae1b741fa8475c2b3f76e853efeabeb58af7438f3", 0x94}, {&(0x7f0000002e80)="bb2649df08965278664005980af914e1ea978fac95655ae61657d9a702b8373b9f006374f3a81f60ec56475c66e1735f7dad4af4fc6244ac6ef09c6475812d3d36eebb3ecc4a2ff9defb723d19c9d980235922103adc0e2d945fd108f752a8cc8e42ba7883f83a81b62b6901fcec2efaa3f522c7bc0be8c329a85e81433a7ff2ccb60ad810b71e6cb0ac4d95e92c", 0x8e}], 0x8, &(0x7f0000002fc0)=[{0x20, 0x104, 0x0, "7b06172032813d5de4713e"}], 0x20}}], 0x5, 0x20048041) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x5, @mcast2, 0x5}}}, &(0x7f0000000040)=0x84) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r7, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, &(0x7f0000000200)=0x2, 0x4) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x206000, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r9, 0x4010aeab, &(0x7f00000000c0)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000540)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f00000005c0)={{0x6, 0x4, 0x8000, 0x7, '\x00', 0x4}, 0x4, 0x8, 0x1, r10, 0x2, 0x8, 'syz0\x00', &(0x7f0000000580)=[']\x00', '/dev/full\x00'], 0xc, [], [0xfff7, 0x2bb3, 0x80, 0x81]}) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r11, 0x4010aeab, &(0x7f00000000c0)={0x17}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r11, 0xc1105511, &(0x7f0000000400)={{0x4, 0x2, 0x5ee9, 0x7, 'syz1\x00', 0xffffffff}, 0x2, 0x400, 0xfff, r12, 0x8, 0x2, 'syz0\x00', &(0x7f0000000380)=['/dev/snd/timer\x00', '\x00', '@r\x00', '/dev/full\x00', '#-vboxnet0)\xb4}}]vboxnet0!\x00', 'selinux\x00', 'trustedmd5sum\x00', 'vmnet1^em1[lomd5sumvmnet0GPL-\\(\x00'], 0x6c, [], [0x0, 0xfffc, 0xdc96, 0x1]}) setsockopt$inet_buf(r8, 0x0, 0x26, &(0x7f00000001c0)="1ad3660972718bdf5fe77e9b61b63baf125ecbdd67b00909cec831a2980a23208b", 0x21) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000700)={0x40, {0x1ff, 0x4, 0xff, 0x7f000000, 0x4, 0x10001}}) r13 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r13, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fallocate(r13, 0xdfd70015b8c48239, 0x10000, 0x4) 21:21:02 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0xfffffcb3, [@volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x40}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x9}}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x47, 0x0, 0x32, 0x2}, @struct={0x6, 0x9, 0x0, 0x4, 0x1, 0xcc, [{0xc, 0x0, 0x80}, {0x9, 0x2, 0x7}, {0xd, 0x1, 0x9}, {0x5, 0x4, 0x80000001}, {0xb, 0x2, 0x2}, {0x3, 0x3, 0xc7dc}, {0x5, 0x4, 0x4080000}, {0x2, 0x4, 0x5}, {0x0, 0x2, 0x1000}]}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0xf, 0x1}, {0x3, 0x3}, {0xf, 0x7fffffff}]}]}, {0x0, [0x61, 0x30, 0x2e]}}, &(0x7f0000000340)=""/4096, 0xed, 0x1000}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:02 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000280)={0x0, 0xfffffffffffffff7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x2, 0x0, 0x9, 0x0, 0x4da09226}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/177, 0xb1}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x413955de) lookup_dcookie(0x7, &(0x7f0000000100)=""/109, 0x6d) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x404002, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/19, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) 21:21:02 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r1 = accept4(r0, &(0x7f0000000140)=@pppoe, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @isdn={0x22, 0xff, 0x5, 0xea, 0x40}, @can={0x1d, r6}, @rc={0x1f, {0x4, 0x1, 0x9, 0x81, 0x3f, 0x20}, 0x81}, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='netpci0\x00', 0x80000000, 0x4, 0x8}) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r8, 0x4010aeab, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/226, 0xe2}, {&(0x7f00000007c0)=""/104, 0x68}, {&(0x7f0000000840)=""/57, 0x39}], 0x3}, 0x2) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x20}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000011c0)={@multicast1, @initdev, 0x0}, &(0x7f0000001200)=0xc) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r18}}, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, 0x0}, &(0x7f0000001280)=0x14) r20 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r20, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) getsockopt$inet_IP_XFRM_POLICY(r20, 0x0, 0x11, &(0x7f0000001780)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000001880)=0xe8) r22 = socket$netlink(0x10, 0x3, 0x0) r23 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r22, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r24}}, 0x20}}, 0x0) accept4(r0, &(0x7f00000018c0)=@hci={0x1f, 0x0}, &(0x7f0000001940)=0x80, 0x0) r26 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r26, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) getsockopt$inet_pktinfo(r26, 0x0, 0x8, &(0x7f0000001ac0)={0x0, @rand_addr, @multicast1}, &(0x7f0000001b00)=0xc) r28 = socket$netlink(0x10, 0x3, 0x0) r29 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r29, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r29, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r28, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r30}}, 0x20}}, 0x0) r31 = socket$netlink(0x10, 0x3, 0x0) r32 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r32, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r31, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r33}}, 0x20}}, 0x0) r34 = socket$netlink(0x10, 0x3, 0x0) r35 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r35, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r35, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r34, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r36}}, 0x20}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001b80)=0x14) r38 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r38, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) accept(r38, &(0x7f0000001bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001c40)=0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000043c0)={@multicast2, @broadcast, 0x0}, &(0x7f0000004400)=0xc) getsockname$packet(r0, &(0x7f0000004440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004480)=0x14) r42 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r42, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) getsockopt$inet_IP_IPSEC_POLICY(r42, 0x0, 0x10, &(0x7f00000044c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000045c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004e00)={&(0x7f0000004600)={0x7fc, r2, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x1ac, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r10}, {0x4}}, {{0x8, 0x1, r11}, {0x134, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3da}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r19}}}]}}, {{0x8, 0x1, r21}, {0x78, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r25}}}]}}, {{0x8, 0x1, r27}, {0x134, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x8000, 0x0, 0x76, 0x81}, {0x8000, 0x6, 0x7, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r30}, {0xf4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x92}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6c8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r33}}, {0x8}}}]}}, {{0x8, 0x1, r36}, {0x22c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x60000000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r37}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r39}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r40}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r41}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r43}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x4004001}, 0x4050) r44 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r44) 21:21:02 executing program 2 (fault-call:9 fault-nth:22): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:02 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) signalfd4(r2, &(0x7f0000000000)={0xe2}, 0x8, 0x800) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 1006.491516] FAULT_INJECTION: forcing a failure. [ 1006.491516] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.503905] CPU: 0 PID: 21824 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1006.511822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.521280] Call Trace: [ 1006.523887] dump_stack+0x142/0x197 [ 1006.527539] should_fail.cold+0x10f/0x159 [ 1006.531710] should_failslab+0xdb/0x130 [ 1006.535707] kmem_cache_alloc+0x2d7/0x780 [ 1006.539871] ? __d_lookup+0x3a2/0x670 [ 1006.543809] ? mark_held_locks+0xb1/0x100 [ 1006.548061] ? d_lookup+0xe5/0x240 [ 1006.551627] __d_alloc+0x2d/0x9f0 [ 1006.555097] ? d_lookup+0x166/0x240 [ 1006.558758] d_alloc+0x4d/0x270 [ 1006.562056] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1006.567263] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1006.571342] ? __rpc_mkdir.part.0+0xe7/0x130 [ 1006.575801] rpc_populate.constprop.0+0xbf/0x360 [ 1006.580592] rpc_fill_super+0x320/0x900 [ 1006.584605] ? sget_userns+0x76b/0xc30 [ 1006.588508] ? rpc_pipe_release+0x830/0x830 [ 1006.592848] ? get_empty_filp.cold+0x3b/0x3b [ 1006.597281] mount_ns+0xec/0x190 [ 1006.600663] ? rpc_pipe_release+0x830/0x830 [ 1006.605001] rpc_mount+0xa4/0xd0 [ 1006.608386] mount_fs+0x97/0x2a1 [ 1006.611772] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1006.616283] do_mount+0x417/0x27d0 [ 1006.619838] ? copy_mount_string+0x40/0x40 [ 1006.624137] ? memdup_user+0x58/0xa0 [ 1006.628223] ? copy_mount_options+0x1fe/0x2f0 [ 1006.632744] SyS_mount+0xab/0x120 [ 1006.636209] ? copy_mnt_ns+0x8c0/0x8c0 [ 1006.640110] do_syscall_64+0x1e8/0x640 [ 1006.644015] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1006.648875] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1006.654075] RIP: 0033:0x45a919 [ 1006.657281] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1006.665001] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1006.672287] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1006.679570] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 21:21:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x5, 0x1d}, 0x0, 0x0, 0x0, 0xa, 0x5, 0x8000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') accept$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60) syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3}}, 0x10) getdents64(r0, &(0x7f0000000df0)=""/528, 0xfe06) 21:21:02 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x413955de) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x501001) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xfbd) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:02 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @ib={0x1b, 0x5, 0x6, {"845644f27c9f01024732a0da25982613"}, 0x3f, 0x6, 0x4}}}, 0x90) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) 21:21:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x5, 0x1d}, 0x0, 0x0, 0x0, 0xa, 0x5, 0x8000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') accept$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60) syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3}}, 0x10) getdents64(r0, &(0x7f0000000df0)=""/528, 0xfe06) [ 1006.686939] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1006.694222] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1006.702297] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / 21:21:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x5b6f74032c0759e0, r4, 0x1, 0xa9, 0x6, @broadcast}, 0x14) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r5) 21:21:02 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x80) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x66, 0x4, 0x1a, "79a85309001ec969797bc77733ae5ad3", "0d6136337cb666bc1fea4688238c1ce53712b9e53a4c07f69e54f154fb48c2d15c1fb26d9caba65258ce159ef210a349629c46155441d749038c7266ece791cfce07df29dd0624835a25e0802722c2db3b"}, 0x66, 0x6) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, {0x0, 0x1, 0x3f, 0x0, 0xb3, 0x40}, 0x4}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x5, 0x1d}, 0x0, 0x0, 0x0, 0xa, 0x5, 0x8000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') accept$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60) syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3}}, 0x10) getdents64(r0, &(0x7f0000000df0)=""/528, 0xfe06) 21:21:02 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000000c0)=0x4) 21:21:02 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:02 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @dev}, 'bond_slave_0\x00'}) 21:21:02 executing program 2 (fault-call:9 fault-nth:23): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = dup2(r0, r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x0, r4}) 21:21:02 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0xc000) setsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f00000000c0)="26b40af0f7999024a8f27b43591d1b4795f7aef466160557c2af08823fe8a185b1d8434ce6b54fe5f45aa0ad690810609433fa8c42e8ce97cc0f6ac574638ba3a92b1fbdb97cfb19f97c1431a217baa468e7ec50b01e4df128d0a3", 0x5b) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r4, 0x0) ioctl$VT_ACTIVATE(r4, 0x5606, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) [ 1007.323659] FAULT_INJECTION: forcing a failure. [ 1007.323659] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.335684] CPU: 1 PID: 21888 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1007.343583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1007.353060] Call Trace: [ 1007.355647] dump_stack+0x142/0x197 [ 1007.359287] should_fail.cold+0x10f/0x159 [ 1007.363733] should_failslab+0xdb/0x130 [ 1007.367984] kmem_cache_alloc+0x2d7/0x780 [ 1007.372154] ? rpc_alloc_inode+0x1a/0x20 [ 1007.376237] selinux_inode_alloc_security+0xb6/0x2a0 [ 1007.381375] security_inode_alloc+0x94/0xd0 [ 1007.385796] inode_init_always+0x552/0xaf0 [ 1007.390218] alloc_inode+0x81/0x180 [ 1007.393887] new_inode_pseudo+0x19/0xf0 [ 1007.398284] new_inode+0x1f/0x40 [ 1007.401682] rpc_get_inode+0x1d/0x1f0 [ 1007.405505] ? d_drop+0x51/0x60 [ 1007.408988] __rpc_create_common+0x5a/0x1a0 [ 1007.413495] rpc_populate.constprop.0+0x122/0x360 [ 1007.418498] rpc_fill_super+0x320/0x900 [ 1007.422489] ? sget_userns+0x76b/0xc30 [ 1007.426406] ? rpc_pipe_release+0x830/0x830 [ 1007.430760] ? get_empty_filp.cold+0x3b/0x3b [ 1007.435369] mount_ns+0xec/0x190 [ 1007.438768] ? rpc_pipe_release+0x830/0x830 [ 1007.443571] rpc_mount+0xa4/0xd0 [ 1007.447148] mount_fs+0x97/0x2a1 [ 1007.450644] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1007.456173] do_mount+0x417/0x27d0 [ 1007.459842] ? copy_mount_string+0x40/0x40 [ 1007.464210] ? memdup_user+0x58/0xa0 [ 1007.468135] ? copy_mount_options+0x1fe/0x2f0 [ 1007.472984] SyS_mount+0xab/0x120 [ 1007.476542] ? copy_mnt_ns+0x8c0/0x8c0 [ 1007.480540] do_syscall_64+0x1e8/0x640 [ 1007.484536] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1007.489592] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1007.495672] RIP: 0033:0x45a919 [ 1007.499749] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1007.508812] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1007.516184] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 21:21:03 executing program 4: syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@statfs_percent={'statfs_percent'}}]}) 21:21:03 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00\x13\xfaZ\'\x01\xa0\xd1\xf2\xd3\xf5\x1cur}\xf9\x88\x97_!o#%\xe0\xf3\xe0\x98\xa0>,pi\xfb\xf1\xc1\xb2.\x83', 0x800000, 0x0) 21:21:03 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80000, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "723d01aa149b9cba", "c272723240ea4b2ffc6e2ab807379449", "50837fcf", "abad761121a97054"}, 0x28) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='bond_slave_1\x00'}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:03 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r5 = accept4(r4, &(0x7f0000000200)=@isdn, &(0x7f00000002c0)=0x80, 0x0) setsockopt$packet_buf(r5, 0x107, 0xd, &(0x7f00000003c0)="0724339c3e0b221cdf55f2a59963c5f2710261c970a4ef32b90ee2d88f8660cff3fa3cd9a06d3dee1d4b578919b90805d30f1557428d669157df87f3b5a271bb8ad3d855c40ebe04c149d7bf8b62443a19f53e403f36a15b6eca5d016be9210e41a81c1b", 0x64) fcntl$setpipe(r3, 0x407, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r6, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r6, 0x4008af13, &(0x7f00000000c0)={0x3, 0x6}) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r7, 0x4010aeab, &(0x7f00000000c0)) recvfrom$unix(r7, &(0x7f0000000100)=""/52, 0x34, 0x40000000, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 21:21:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup2(r0, r1) [ 1007.523559] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1007.531040] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1007.539191] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1007.547110] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry portmap [ 1007.556412] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1007.603629] gfs2: not a GFS2 filesystem 21:21:03 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mmap$usbmon(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0x7f) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xfffffe81, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x5b}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0x20}, 0x4}], 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x12a) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x4, 0x1, 0xf3, 0x3f, 0x6}, 0x14) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x840c}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xf17) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)=ANY=[@ANYBLOB='\n\x00'/37]) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x7) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r3, 0x0) linkat(r0, &(0x7f0000000240)='./file1\x00', r3, &(0x7f0000000280)='./file0\x00', 0x400) [ 1007.663644] gfs2: not a GFS2 filesystem 21:21:03 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x80000) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000140)={@bcast, @null, 0x2, 0x20}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r3 = dup2(r1, r2) socket$inet6_dccp(0xa, 0x6, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe0) 21:21:03 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = inotify_init1(0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) 21:21:03 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) ioctl$int_in(r3, 0xa8a4, &(0x7f0000000040)=0x2f9) 21:21:03 executing program 2 (fault-call:9 fault-nth:24): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:03 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x0, 0x691, 0x7}) r3 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "6fb88f8e41ce7d2a", "3d28f01986d0ac97155a20cc88cffab2", "c05ea3b1", "31f95c1064f97c8d"}, 0x28) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='-v\x01\xa9\x03\x00', 0x2, 0x0) dup2(r0, r1) 21:21:03 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x24050004, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x8ee, @rand_addr="0f81035c90731405b7f9e133d929be10", 0x115}}, 0x20, 0x400, 0x54, 0x1, 0x2, 0xbb0, 0x9}, &(0x7f00000000c0)=0x9c) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000140)=0x7fffffff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 21:21:03 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000240)=""/111) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000200)={0x9, 0x9, 0x800001, 0x9, 0x10, 0xfffffffffffffffe}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0xd4, 0x0, 0x10001}) socket$can_raw(0x1d, 0x3, 0x1) [ 1008.275764] FAULT_INJECTION: forcing a failure. [ 1008.275764] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.287382] CPU: 1 PID: 21963 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1008.295284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.304670] Call Trace: [ 1008.307280] dump_stack+0x142/0x197 [ 1008.310935] should_fail.cold+0x10f/0x159 [ 1008.315127] should_failslab+0xdb/0x130 [ 1008.319125] kmem_cache_alloc+0x2d7/0x780 [ 1008.323294] ? __d_lookup+0x3a2/0x670 [ 1008.327123] ? mark_held_locks+0xb1/0x100 [ 1008.331299] ? d_lookup+0xe5/0x240 [ 1008.334865] __d_alloc+0x2d/0x9f0 [ 1008.338334] ? d_lookup+0x166/0x240 [ 1008.341976] d_alloc+0x4d/0x270 [ 1008.345275] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1008.350479] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1008.354549] ? __rpc_mkdir.part.0+0xe7/0x130 [ 1008.358967] rpc_populate.constprop.0+0xbf/0x360 [ 1008.363751] rpc_fill_super+0x320/0x900 [ 1008.367744] ? sget_userns+0x76b/0xc30 [ 1008.371640] ? rpc_pipe_release+0x830/0x830 [ 1008.375970] ? get_empty_filp.cold+0x3b/0x3b [ 1008.380479] mount_ns+0xec/0x190 [ 1008.383858] ? rpc_pipe_release+0x830/0x830 [ 1008.388187] rpc_mount+0xa4/0xd0 [ 1008.391654] mount_fs+0x97/0x2a1 [ 1008.395036] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1008.399539] do_mount+0x417/0x27d0 [ 1008.403091] ? copy_mount_string+0x40/0x40 [ 1008.408382] ? memdup_user+0x58/0xa0 [ 1008.412233] ? copy_mount_options+0x1fe/0x2f0 [ 1008.416751] SyS_mount+0xab/0x120 [ 1008.420307] ? copy_mnt_ns+0x8c0/0x8c0 [ 1008.424208] do_syscall_64+0x1e8/0x640 [ 1008.428108] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1008.432970] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1008.438167] RIP: 0033:0x45a919 [ 1008.441361] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1008.449078] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1008.456357] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1008.463717] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1008.470259] net_ratelimit: 18 callbacks suppressed [ 1008.470265] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.471126] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1008.476306] protocol 88fb is buggy, dev hsr_slave_1 [ 1008.481244] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1008.481571] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / 21:21:04 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r2) 21:21:04 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x80300, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r4, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r4}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r4}, 0xc) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1eb}, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r5, 0x0) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r9, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r9}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r9, 0x1, 0x0, 0x5, 0x1, 0x8}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={r10, 0x401}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r11, 0x0) ioctl$VIDIOC_S_FREQUENCY(r11, 0x402c5639, &(0x7f00000000c0)={0x9, 0x5, 0x3}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:04 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1, 0x0, 0xfffffffc}, 0xfffffffd, 0x7fff, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x4, 0x0, 0x1}) 21:21:04 executing program 1: prlimit64(0x0, 0xc, &(0x7f0000000240)={0x400003, 0x100000001}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0x1bc}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x210000, 0x0) syz_open_pts(r4, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000340)={0x9}) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x0, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r7, 0xa04, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x9, @ipv4={[], [], @local}, 0x3}, @in6={0xa, 0x4e20, 0xfffffffa, @remote, 0x9}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1, @loopback}, {0xa, 0x4e23, 0xf2, @remote, 0xfff}, r7, 0xff}}, 0x48) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000280)={0x7ff, 0x1, 0x8, {0x77359400}, 0xff, 0x8}) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) read$eventfd(r8, &(0x7f0000000180), 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:04 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0x40, 0x7}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r1, r2) [ 1008.827646] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 21:21:04 executing program 2 (fault-call:9 fault-nth:25): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000200)={'rose0\x00', {0x2, 0x4e22, @loopback}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) fcntl$setflags(r3, 0x2, 0x96cc47e27b05469) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f0000000040)) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000000)={0x80, 0x6, 0x400}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000000c0)=""/149) syz_open_pts(r5, 0x0) write$P9_RWSTAT(r5, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) getsockname$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r9 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r9, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x3}, 0x3a9) setsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f00000005c0)={@multicast1, @multicast2, r8}, 0xc) prctl$PR_SVE_GET_VL(0x33, 0x1d799) r10 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r10, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$addseals(r10, 0x409, 0x9) 21:21:04 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) connect$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x0, 0x1, 0x7, 0x34, 0x8, "e00bba7f5fc9d27590be3b02eb66c88dec4b9255a53f8427adfa89ad7d6ac783b8edc9db3641e88b5137cb5dbb3d043ad6110d2385a048c17587100f217125", 0x1f}, 0x60) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000240)={0xff}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="7c7863b63a987abb8c33e7a6126c2453375e9971fb294ccd349f9057317a73ff70df0fccb37b2db1b073650736a817bcc2c73ccd14e4089cb2af5616e2420c642e302d362b8e07df6d35f900d71c2ff5b71f", 0x52, 0xfffffffffffffffb) keyctl$get_security(0x11, r1, &(0x7f00000001c0)=""/209, 0xd1) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r2) 21:21:04 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r2, 0x7bc159b4e7f517e9) openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) dup2(r0, r1) 21:21:04 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0xffffffffffffff6d) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x400, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) accept4(r0, 0x0, &(0x7f0000000140), 0x180000) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000000c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)={0xffffffff, 0x100}, 0xc) [ 1009.150476] FAULT_INJECTION: forcing a failure. [ 1009.150476] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.150489] CPU: 0 PID: 22016 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1009.169710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.179280] Call Trace: [ 1009.181900] dump_stack+0x142/0x197 [ 1009.185539] should_fail.cold+0x10f/0x159 [ 1009.189678] should_failslab+0xdb/0x130 [ 1009.193649] kmem_cache_alloc+0x2d7/0x780 [ 1009.197802] ? __d_lookup+0x3a2/0x670 [ 1009.201599] ? mark_held_locks+0xb1/0x100 [ 1009.205734] ? d_lookup+0xe5/0x240 [ 1009.209261] __d_alloc+0x2d/0x9f0 [ 1009.212697] ? d_lookup+0x166/0x240 [ 1009.216570] d_alloc+0x4d/0x270 [ 1009.219836] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1009.225026] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1009.229089] ? __rpc_mkdir.part.0+0xe7/0x130 [ 1009.234255] rpc_populate.constprop.0+0xbf/0x360 [ 1009.239313] rpc_fill_super+0x320/0x900 [ 1009.243284] ? sget_userns+0x76b/0xc30 [ 1009.247173] ? rpc_pipe_release+0x830/0x830 [ 1009.251480] ? get_empty_filp.cold+0x3b/0x3b [ 1009.255875] mount_ns+0xec/0x190 [ 1009.259224] ? rpc_pipe_release+0x830/0x830 [ 1009.263543] rpc_mount+0xa4/0xd0 [ 1009.266919] mount_fs+0x97/0x2a1 [ 1009.270278] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1009.274761] do_mount+0x417/0x27d0 [ 1009.278293] ? copy_mount_string+0x40/0x40 [ 1009.282519] ? memdup_user+0x58/0xa0 [ 1009.286220] ? copy_mount_options+0x1fe/0x2f0 [ 1009.290703] SyS_mount+0xab/0x120 [ 1009.294142] ? copy_mnt_ns+0x8c0/0x8c0 [ 1009.298038] do_syscall_64+0x1e8/0x640 [ 1009.301913] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1009.306749] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1009.312530] RIP: 0033:0x45a919 [ 1009.315705] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1009.323413] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1009.330679] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1009.337989] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 21:21:05 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 1009.345775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1009.353032] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1009.361021] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / 21:21:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r1) 21:21:05 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x7, 0xf000}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xac, "109d347a179c9b31e598634c8f783d2c412424d7926a3ce3fbf5717627b45971879163464d716df4e46d6c04278b0cabe45fc431fc55cff22b3b6d4bc94f7043a256ff92a4ed73118c6fae7e63d275d7de6fa9a8f4eb51c024ef4cc907268e5c4092467c354f43b935485a2382d0c949fc0b75cb368bba14a5b39ee5d1d63df6e72b02ee7d53e0b2a86d9e55d838909265bd2fcae16f5f5c28bab19719ed464566e841335f74b6ddb8d2b34a"}, &(0x7f0000000300)=0xb4) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1009.590114] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.595720] protocol 88fb is buggy, dev hsr_slave_1 [ 1009.600899] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.606202] protocol 88fb is buggy, dev hsr_slave_1 21:21:05 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x413955de) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) close(r3) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:05 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r0) 21:21:05 executing program 2 (fault-call:9 fault-nth:26): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:05 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:05 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) dup2(r0, 0xffffffffffffffff) 21:21:05 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f00000000c0)) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:05 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000000c0)="6597746d4f18d4329afa59cfa99d9f6935a0124dfd197c252c428c657c0df1a2b1e12b270eac18f6f403542ee932b79db85195674b0847ea0ee42f7d41353cf3dcdb12a81d60333bcbb4d2b12d18205dd405c9da2dcbe7ff948947aae1c1b7682457a1a1f9fd92e9163a9e40ea85db47f0d8701f15844f775dbb36526e52b8bb5c4d9025f3e11c97489e982927a3b45ef7bc1158018b18c7f53badd1aaccb8499cb703fe3702d62652aa4d978fafcd52bd503b60fcb9859068c3394d67f2cc78a66c87254847b3a0f81f1234b725cb340c4b173a9b82004100b0f6836fb4648b7337136e24dcc02e3866331a") ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x7}) [ 1009.999913] FAULT_INJECTION: forcing a failure. [ 1009.999913] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.012098] CPU: 0 PID: 22068 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1010.020006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.029506] Call Trace: [ 1010.032121] dump_stack+0x142/0x197 [ 1010.035785] should_fail.cold+0x10f/0x159 [ 1010.039961] should_failslab+0xdb/0x130 [ 1010.043967] kmem_cache_alloc+0x2d7/0x780 [ 1010.048132] ? rpc_alloc_inode+0x1a/0x20 [ 1010.052217] selinux_inode_alloc_security+0xb6/0x2a0 [ 1010.057344] security_inode_alloc+0x94/0xd0 [ 1010.061692] inode_init_always+0x552/0xaf0 [ 1010.066060] alloc_inode+0x81/0x180 [ 1010.071187] new_inode_pseudo+0x19/0xf0 [ 1010.075176] new_inode+0x1f/0x40 [ 1010.078556] rpc_get_inode+0x1d/0x1f0 [ 1010.082385] ? d_drop+0x51/0x60 [ 1010.085678] __rpc_create_common+0x5a/0x1a0 [ 1010.090016] rpc_populate.constprop.0+0x122/0x360 [ 1010.095054] rpc_fill_super+0x320/0x900 [ 1010.099039] ? sget_userns+0x76b/0xc30 [ 1010.102950] ? rpc_pipe_release+0x830/0x830 [ 1010.107286] ? get_empty_filp.cold+0x3b/0x3b [ 1010.111710] mount_ns+0xec/0x190 [ 1010.115094] ? rpc_pipe_release+0x830/0x830 [ 1010.119521] rpc_mount+0xa4/0xd0 [ 1010.122907] mount_fs+0x97/0x2a1 [ 1010.126291] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1010.130804] do_mount+0x417/0x27d0 [ 1010.134466] ? copy_mount_string+0x40/0x40 [ 1010.138739] ? memdup_user+0x58/0xa0 [ 1010.142473] ? copy_mount_options+0x1fe/0x2f0 [ 1010.146991] SyS_mount+0xab/0x120 [ 1010.150457] ? copy_mnt_ns+0x8c0/0x8c0 [ 1010.154370] do_syscall_64+0x1e8/0x640 [ 1010.158273] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1010.163138] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1010.168340] RIP: 0033:0x45a919 [ 1010.171540] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1010.179350] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1010.186640] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 21:21:05 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x226, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff031}, {0x5, 0x0, 0x2, 0x4}]}, 0x10) dup2(r1, r0) [ 1010.193923] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1010.201205] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1010.208500] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1010.216006] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry statd [ 1010.225130] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1010.301978] device bridge_slave_1 left promiscuous mode [ 1010.309131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.320146] protocol 88fb is buggy, dev hsr_slave_0 [ 1010.325311] protocol 88fb is buggy, dev hsr_slave_1 [ 1010.330624] protocol 88fb is buggy, dev hsr_slave_0 [ 1010.335668] protocol 88fb is buggy, dev hsr_slave_1 21:21:06 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x100, 0x0) connect$rxrpc(r2, &(0x7f0000000440)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @empty, 0x3}}, 0x24) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000)=0x10, 0x4) dup2(r0, r1) [ 1010.358376] device bridge_slave_0 left promiscuous mode [ 1010.370648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.406963] device hsr_slave_1 left promiscuous mode [ 1011.419748] device hsr_slave_0 left promiscuous mode [ 1011.436412] team0 (unregistering): Port device team_slave_1 removed [ 1011.449640] team0 (unregistering): Port device team_slave_0 removed [ 1011.465665] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1011.479730] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1011.534844] bond0 (unregistering): Released all slaves [ 1012.686153] IPVS: ftp: loaded support on port[0] = 21 [ 1012.766052] chnl_net:caif_netlink_parms(): no params data found [ 1012.799622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.806286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.813556] device bridge_slave_0 entered promiscuous mode [ 1012.822241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.828744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.835842] device bridge_slave_1 entered promiscuous mode [ 1012.852651] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1012.861690] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1012.880155] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1012.887312] team0: Port device team_slave_0 added [ 1012.895776] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1012.903151] team0: Port device team_slave_1 added [ 1012.908572] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1012.916236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1012.937199] device hsr_slave_0 entered promiscuous mode [ 1012.943045] device hsr_slave_1 entered promiscuous mode [ 1012.949098] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1012.957040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1012.970315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.976733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.983496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.989878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.019411] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1013.026419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.036993] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1013.046439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1013.053854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.074209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.086223] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1013.092467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.101763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1013.109526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.116246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.125927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1013.134037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.140564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.157685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1013.165676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1013.175297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1013.187355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1013.197610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1013.208546] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1013.236673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1013.250873] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1013.258355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1013.265885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1013.276470] 8021q: adding VLAN 0 to HW filter on device batadv0 21:21:09 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:09 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:09 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000000)=0x7) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000340)="667855e8650dea47304c07ed053ec349c253770dd21b25111d71e77c5c2a96971a3a2efdf48bb4d4677707bb052979a8aca6ff08bbe4a220dfded48a9c590803a40dae5a22999a994cecceb26fd3337ee9c64046ed95d8215f42e6732068b233f19a9d83c010c6b85e8f6b1028212e1e65c7ddb17f7eae51e6affbd09a85d37e6852b4452fb5645143649d9d127be8c0b378d2a11762cbcf8261f369940a1b", 0x9f, r3) keyctl$revoke(0x3, r4) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r5, 0x0) write$FUSE_STATFS(r5, &(0x7f0000000440)={0x60, 0xfffffffffffffffe, 0x3, {{0x4, 0x410, 0x1, 0x8c4, 0x4, 0x2907, 0x5, 0x67ab}}}, 0x60) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x100, 0x0) connect$bt_sco(r7, &(0x7f0000000400)={0x1f, {0x1f, 0xff, 0x7f, 0x1f, 0x80, 0x8}}, 0x8) syz_open_pts(r6, 0x0) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000180)=0x5, 0x4) dup(r1) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x20, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "1d4258ea0bab8209f20133ab84a06fba"}, 0x11, 0x1) dup2(r0, r1) 21:21:09 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:09 executing program 2 (fault-call:9 fault-nth:27): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1013.402587] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 21:21:09 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:09 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x54) r1 = socket$packet(0x11, 0x92c3c506c63b4303, 0x300) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x854a2, 0x0) accept4$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000240)=0x1c, 0x80800) syz_open_pts(r3, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d06, &(0x7f0000000100)=0x3a) dup2(r1, r2) 21:21:09 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) fsetxattr$smack_xattr_label(r2, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='tkmer1\x00\x00'], 0x8, 0x0) 21:21:09 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) getuid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1013.570181] net_ratelimit: 14 callbacks suppressed [ 1013.570186] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.580247] protocol 88fb is buggy, dev hsr_slave_1 [ 1013.594395] FAULT_INJECTION: forcing a failure. [ 1013.594395] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.606202] CPU: 0 PID: 22117 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1013.614277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.623646] Call Trace: [ 1013.626351] dump_stack+0x142/0x197 [ 1013.630016] should_fail.cold+0x10f/0x159 [ 1013.634193] should_failslab+0xdb/0x130 [ 1013.638184] kmem_cache_alloc+0x2d7/0x780 [ 1013.642434] ? __d_lookup+0x3a2/0x670 [ 1013.646251] ? mark_held_locks+0xb1/0x100 [ 1013.650410] ? d_lookup+0xe5/0x240 [ 1013.653958] __d_alloc+0x2d/0x9f0 [ 1013.657419] ? d_lookup+0x166/0x240 [ 1013.661059] d_alloc+0x4d/0x270 [ 1013.664350] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1013.669549] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1013.673709] ? __rpc_mkdir.part.0+0xe7/0x130 [ 1013.678217] rpc_populate.constprop.0+0xbf/0x360 [ 1013.683125] rpc_fill_super+0x320/0x900 [ 1013.687129] ? sget_userns+0x76b/0xc30 [ 1013.691018] ? rpc_pipe_release+0x830/0x830 [ 1013.691029] ? get_empty_filp.cold+0x3b/0x3b [ 1013.691038] mount_ns+0xec/0x190 [ 1013.691050] ? rpc_pipe_release+0x830/0x830 [ 1013.691060] rpc_mount+0xa4/0xd0 [ 1013.691069] mount_fs+0x97/0x2a1 [ 1013.691082] vfs_kern_mount.part.0+0x5e/0x3d0 21:21:09 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 1013.691093] do_mount+0x417/0x27d0 [ 1013.691106] ? copy_mount_string+0x40/0x40 [ 1013.691121] ? memdup_user+0x58/0xa0 [ 1013.691129] ? copy_mount_options+0x1fe/0x2f0 [ 1013.691140] SyS_mount+0xab/0x120 [ 1013.691147] ? copy_mnt_ns+0x8c0/0x8c0 [ 1013.691159] do_syscall_64+0x1e8/0x640 [ 1013.691168] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1013.691183] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1013.691191] RIP: 0033:0x45a919 [ 1013.691196] RSP: 002b:00007f82d57c2c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1013.691206] RAX: ffffffffffffffda RBX: 00007f82d57c2c90 RCX: 000000000045a919 [ 1013.691212] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1013.691217] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1013.691222] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57c36d4 [ 1013.691225] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.691229] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1013.691287] protocol 88fb is buggy, dev hsr_slave_1 [ 1013.691975] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1013.750125] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.827560] protocol 88fb is buggy, dev hsr_slave_1 21:21:09 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01a837cf", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r3}, 0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r3, &(0x7f00000002c0)=0x4) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYBLOB="07002900c602ca5e12a2c47ae95bd0fff19406004eb72531c942dda62571d4da1c9792839c246a4c59be0af5c91ef7d3ec5ed6a411c9f8c003ea4787675eb0eb798801bda75b362cf51aa46962be60548ed55e39a1866ca907da43bf7abbb4d4fb1627c386392451113f6761d2af22460000000000000000d5217ff9d0ebb8fe7cc6a16cb85fdddf42eae845d0fbc32ae223f520e45b5ed7cb3375e584b122d24ba32d4507add652024965534e8ca86c54532912c521de19d8115f5fe21d98178cef8024da1d57c58520c340d3fd4b543ba4"], 0x31) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) write$FUSE_OPEN(r5, &(0x7f0000000240)={0x20, 0x0, 0x7, {0x0, 0x12}}, 0x20) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) accept$ax25(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @default}, [@rose, @bcast, @bcast, @rose, @default, @bcast, @remote, @null]}, &(0x7f0000000340)=0x1b0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000), 0x10) r7 = dup3(r2, 0xffffffffffffffff, 0x40000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r7, 0x4010aeab, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x5385, &(0x7f0000000140)={0x68, ""/104}) [ 1013.878388] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 21:21:09 executing program 3: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000200)={0x2, 0x2}) r2 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f00000000c0)) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@del={0xe8, 0x11, 0x1, 0x70bd25, 0x25dfdbfd, {{'essiv(ccm-aes-ce,sha512-ce)\x00'}, [], [], 0x200, 0x2000}, [{0x8, 0x1, 0x9}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20880}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x81, 0x200000) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000100)) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f00000000c0)) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000200)={0x3, 0x0, [{}, {}, {}]}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r6, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f00000001c0)={r7}) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$UI_SET_RELBIT(r8, 0x40045566, 0x7) keyctl$instantiate(0xc, r2, 0x0, 0x0, r4) dup2(r0, r1) 21:21:09 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r4, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:09 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80800, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) migrate_pages(r1, 0x800, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x1, 0x1, 0x1}, {0x1}}, {{0x4, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x40) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x81, 0x4) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r2, r4) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000080)={0x8001, 0x8, @name="5603e7106816180c5eccc1ba5d35d97410623bdee4f484c94b6ca0168bdb947d"}) [ 1014.232132] device bridge_slave_1 left promiscuous mode [ 1014.239309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.302679] device bridge_slave_0 left promiscuous mode [ 1014.329443] bridge0: port 1(bridge_slave_0) entered disabled state 21:21:10 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff73}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/4096}, {&(0x7f00000000c0)=""/200}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:10 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20002, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x3, 0x0, 0x200}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000}) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000000)={0x2cf1, 0x2}) 21:21:10 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000180)={0x4, 0x0, 0x5001, 0x9, 0x6, {0x7, 0xc7f}, 0x1}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x200000, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @rand_addr=0x3}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000300)={0xa, 0x1, 0x3, 0x9, 'syz0\x00', 0xf747}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80810240}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x1e8, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6a0030bd}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf4c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe0c}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcc96}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x34, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa78f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:10 executing program 2 (fault-call:9 fault-nth:28): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:10 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r2 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) dup2(r2, r0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x7, 0x4) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000040)={0x9, &(0x7f0000000100)=[{0x5, 0xa2, 0x81, 0x944}, {0x9, 0x1, 0xf8, 0x6}, {0x8, 0x80, 0x2, 0xffff84b9}, {0x5, 0xff, 0x4, 0x1a3}, {0xb2, 0x3, 0x3f, 0xfffffffe}, {0xd0, 0x3f, 0x20, 0x8}, {0x101, 0x3, 0x9, 0xcf6da4de}, {0x5, 0x7, 0x0, 0x6}, {0x7fff, 0x9, 0x0, 0xffffffff}]}) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000080)={0xae304c5002d755ab}) [ 1014.470251] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.475385] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.480583] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.486314] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.520473] FAULT_INJECTION: forcing a failure. [ 1014.520473] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.531753] CPU: 0 PID: 22179 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1014.539643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.549723] Call Trace: [ 1014.552333] dump_stack+0x142/0x197 [ 1014.556004] should_fail.cold+0x10f/0x159 [ 1014.560969] should_failslab+0xdb/0x130 [ 1014.564965] kmem_cache_alloc+0x2d7/0x780 [ 1014.569154] ? __d_lookup+0x3a2/0x670 [ 1014.572996] ? mark_held_locks+0xb1/0x100 [ 1014.577197] ? d_lookup+0xe5/0x240 [ 1014.580775] __d_alloc+0x2d/0x9f0 [ 1014.584239] ? d_lookup+0x166/0x240 [ 1014.587882] d_alloc+0x4d/0x270 [ 1014.591173] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1014.596374] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1014.600459] ? __rpc_mkdir.part.0+0xe7/0x130 [ 1014.604882] rpc_populate.constprop.0+0xbf/0x360 [ 1014.609840] rpc_fill_super+0x320/0x900 [ 1014.613932] ? sget_userns+0x76b/0xc30 [ 1014.617863] ? rpc_pipe_release+0x830/0x830 [ 1014.622204] ? get_empty_filp.cold+0x3b/0x3b [ 1014.626628] mount_ns+0xec/0x190 [ 1014.630011] ? rpc_pipe_release+0x830/0x830 [ 1014.634350] rpc_mount+0xa4/0xd0 [ 1014.637751] mount_fs+0x97/0x2a1 [ 1014.641134] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1014.646252] do_mount+0x417/0x27d0 [ 1014.649812] ? copy_mount_string+0x40/0x40 [ 1014.654065] ? memdup_user+0x58/0xa0 [ 1014.657792] ? copy_mount_options+0x1fe/0x2f0 [ 1014.662305] SyS_mount+0xab/0x120 [ 1014.665782] ? copy_mnt_ns+0x8c0/0x8c0 [ 1014.669881] do_syscall_64+0x1e8/0x640 [ 1014.673777] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1014.678644] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1014.683841] RIP: 0033:0x45a919 [ 1014.687129] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1014.696339] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1014.703707] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1014.710988] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 21:21:10 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) sendmsg$rds(r0, &(0x7f0000002a40)={&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/140, 0x8c}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000180)=""/2, 0x2}], 0x5, &(0x7f0000002900)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xffff8001}, @mask_fadd={0x58, 0x114, 0x8, {{0x1c1, 0xffff5603}, &(0x7f0000000340), &(0x7f0000001500)=0x5, 0x0, 0x100, 0x1ff, 0x0, 0x0, 0x40}}, @rdma_args={0x48, 0x114, 0x1, {{0x6fd7, 0x8}, {&(0x7f0000001540)=""/221, 0xdd}, &(0x7f0000002780)=[{&(0x7f0000001640)=""/13, 0xd}, {&(0x7f0000001680)=""/142, 0x8e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/15, 0xf}], 0x4, 0x8, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000027c0)=""/226, 0xe2}, &(0x7f00000028c0), 0x2a}}, @rdma_dest={0x18, 0x114, 0x2, {0x3}}, @rdma_dest={0x18, 0x114, 0x2, {0x7}}], 0x118, 0x2}, 0x4000000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1014.718269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1014.725555] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1014.726209] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1014.754218] device hsr_slave_1 left promiscuous mode [ 1014.790716] device hsr_slave_0 left promiscuous mode [ 1014.830136] team0 (unregistering): Port device team_slave_1 removed [ 1014.893979] team0 (unregistering): Port device team_slave_0 removed [ 1014.934025] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1014.968557] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1015.115380] bond0 (unregistering): Released all slaves [ 1016.674498] IPVS: ftp: loaded support on port[0] = 21 [ 1016.765361] chnl_net:caif_netlink_parms(): no params data found [ 1016.802677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.809146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.816292] device bridge_slave_0 entered promiscuous mode [ 1016.823690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.830400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.837638] device bridge_slave_1 entered promiscuous mode [ 1016.854322] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1016.863963] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1016.880717] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1016.887825] team0: Port device team_slave_0 added [ 1016.893899] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1016.901342] team0: Port device team_slave_1 added [ 1016.906735] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1016.914453] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1016.934009] device hsr_slave_0 entered promiscuous mode [ 1016.939748] device hsr_slave_1 entered promiscuous mode [ 1016.946098] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1016.953303] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1016.968404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.974855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.981560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.987946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.017622] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1017.024067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.034093] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1017.043218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1017.051364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.057971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.067609] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1017.073886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.082855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1017.091171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.097544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.110438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1017.118074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.124573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.136213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1017.152653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1017.162966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1017.173728] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1017.183186] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1017.190503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1017.198084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1017.205731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1017.213478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1017.226713] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1017.235413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1017.242678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1017.256672] 8021q: adding VLAN 0 to HW filter on device batadv0 21:21:13 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 21:21:13 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000000, 0x4000010, r0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:13 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000100)={0x80000000, 0x0, 0x4, 0x1000, {r4, r5/1000+30000}, {0x3, 0xc, 0x40, 0x20, 0xff, 0x9d, "6ca85e2c"}, 0xbc51, 0x1, @fd=r6, 0x4}) 21:21:13 executing program 2 (fault-call:9 fault-nth:29): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/video1\x00', 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pwritev(r4, &(0x7f0000001940)=[{&(0x7f00000003c0)="15bcf59ce73cdc8706864136d55d41", 0xf}, {&(0x7f0000000400)="511cf46a88be7e9470c5a6bd09a82d859f702320fc13121baaa28b6a112a33e1deb44905a096bf671dbf70129d46d93c2321e1b52e2032d76771b73c4fdd8048b567c16fd791d914116759a2c508f098dbb7be6b1b91d28a403d03a5027d92aec69a09d9f4cf67941732e49f2d1d3d33be441d6ca1073c3d67fba1898f3a2b5d8d211ddf0a9f93d64c26a19e5f85bb050c31f768c885c5b9e35458e4f2b42be57e223dc45f479c5e2d7f9a7af29e747404d381c7ff740b8ddc373246579df1e15d77599331c6e8c7ef1bce6ed4c4f544bdd21e512cd7", 0xd6}, {&(0x7f0000000500)="7cdac00abb935f10d928a809031b43129b220e217927885f91d459905b7e7dac8e379b2eaca9b5b82b529da94d8da38ecde97e87337c16bb8730a067916d2cfce6dcb44de5e1e50d290d22376e3e5374891c16dff31a9e9f4055d4a18db1c568ddf3a4aa234ad3614e2118a5bf1935284d1e4917d5aa99bd0f2b1c9f04582ba8418413215e89bda72190caf48fd773c25593cb5b4ebb3492bcacf8ea5c2bca21dad2", 0xa2}, {&(0x7f00000005c0)="1bcd4ab576e273da94db82b501a98b9e27e9300a672dcacc4367d60d9eb7736b27897ae7e2260d4602f65a4f268412f697ab44acd1d92b03f33c1fc719754be56fabcecc9630e1e09d12a168bf4496f84bbbaf3d37f40c40ee15f41cbed23887a02bd96de2be8820f1768b4aa044b57bc62b76baf306091a476b3579c2346920dee7b3d504d3f87393945603a405269479588faff06989c862ad276494b6fc072c85f4899ab14d71831341b3191532ee77248604d4c99b4d8c829b490861c7f66b3c39ef6e81361fc4cc93b5ce70b3c0e04070488bfd9f", 0xd7}, {&(0x7f00000006c0)="6cfdaa6091fdacfbb5b27ab4db1d98c8f04fff8ebc4ee4282eca428cdd07ab82154ec0a4f58f2f9ae9dbc14d8faac4498991ec6ff1ed143eef2b6aa502a5b2fb4c3af251860ce6dc50f17a3fbea4e055ce30b064bf6304024138", 0x5a}, {&(0x7f0000000740)="dfd043335df42802a5a45d454d86c6a992970b6e0466479389192df0ec3938371e1e050e42f24e7ec156d8ddcd1d4293a0173a3b96ba1e58f48dad5cd1d6aa444ddad5cae32e92f9e060444db37f534da57874ebcff4b4d3de95e2ba359d0347040170cb894afca31875d6cfe8432130719051c8f6d2697af14bea5813dbc689c4df258f1b7323d0c54d88fdaeacdeccb6909e1ebe572adaee7ecacd0d48ffdcb59c715bca50fc1d5c75986cc3e5344b2c4ed428567b3194", 0xb8}, {&(0x7f0000000800)="83e652e245494a94afcd034d739d34f1513ced7afb1c5b1f0b3264a0970f2dceda3eaf63da40702d277c3696933cc1768d104310641cdbda496b830a2631a5a4ec7b0e1a4316d088965243d1c34821ab24d102478d8f529399c6285077bed93619f2467123d55cb9", 0x68}, {&(0x7f0000000880)="7a1fae5663e367ceac13cbf9a1bb10eb7eeda5aa86e345fae70ed707ed48da4d2e89807d07943ef8e3f147443424f1684089908ca5f11f8daa5641e1983c05453f9a428964af51657ee4e517a2d98acde1f5eed3251406dc50621e87846e86c80bf01b1d25573bd264e77b3b6a6f3060289f96f1c342f0b4b5f91422c618e0f2c14bb9d532a0d2e141727049f374ffd0779196b504485c2c6ffdaed97638bc0c7839c09309f11d98a053c85c8b48c8", 0xaf}, {&(0x7f0000000940)="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", 0x1000}], 0x9, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x2) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000040)={0x1, 0x0, [], {0x0, @reserved}}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r5, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfff}, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r7, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r6, r7, 0x0, 0x37, &(0x7f0000000140)='+securityuser\xf8system-\'self}ppp1$losystemnodevnodevbdev\x00', 0xffffffffffffffff}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000280)={{0x1, 0x999febd22fa419e6, 0x1, 0x40, 'syz1\x00', 0x3}, 0x3, 0x1, 0x8000, r8, 0x1, 0x2e88, 'syz1\x00', &(0x7f0000000240)=['/dev/video2\x00'], 0xc, [], [0x0, 0x8000, 0x5, 0x9]}) dup2(r0, r1) 21:21:13 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f00000000c0)) bind$vsock_dgram(r4, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1017.399679] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 21:21:13 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x101001, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) write$apparmor_current(r2, &(0x7f0000000000)=@profile={'changeprofile ', 'id1\x00'}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x502, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000100)=0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:13 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 21:21:13 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xc0, 0x4, 0x47, "8cd6c531c46041419e3c79121d14a664", "3a6f0e021b98bca99182ce3b9a307d4765f838dbb3066bc315e66f29829fb4ca228ab4e9d1b4146d377e3bab7bf5a724b0b061bc678238c966d1f3384a469b83576a64a373b791497186ca7e6f12181ae841c827ccbd42c7fd7e4c9cceac732d1368aa32a4898e14f65828938b425b01f590f9a8da794981d31cf1e716cfb32f3f8e75ec4dbd3c439b7a6d0c112337e74bc0e416ddf76ba18ff5fa7d94f37151c2af8ab61280206c4fbf6b"}, 0xc0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:13 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0xa4020, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x561000, 0x100) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r4, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'eql\x00', @local}) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000000)={0x3, 0x4735, 0x1c20, 0x84000, r1}) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000140)) r5 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r5, &(0x7f0000000080), 0xfffffffffffffeb2, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x4}, 0x10) dup2(r5, 0xffffffffffffffff) [ 1017.568019] FAULT_INJECTION: forcing a failure. [ 1017.568019] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.579521] CPU: 0 PID: 22235 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1017.587428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.596969] Call Trace: [ 1017.599596] dump_stack+0x142/0x197 [ 1017.603254] should_fail.cold+0x10f/0x159 [ 1017.607443] should_failslab+0xdb/0x130 [ 1017.611441] kmem_cache_alloc+0x2d7/0x780 21:21:13 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd?timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x5, 0x0, 0x1006, 0x2, 0x9, 0x3, 0x0, 0x1}) [ 1017.615605] ? rpc_alloc_inode+0x1a/0x20 [ 1017.619688] selinux_inode_alloc_security+0xb6/0x2a0 [ 1017.624808] security_inode_alloc+0x94/0xd0 [ 1017.629148] inode_init_always+0x552/0xaf0 [ 1017.633418] alloc_inode+0x81/0x180 [ 1017.637076] new_inode_pseudo+0x19/0xf0 [ 1017.641062] new_inode+0x1f/0x40 [ 1017.644440] rpc_get_inode+0x1d/0x1f0 [ 1017.648264] ? d_drop+0x51/0x60 [ 1017.651559] __rpc_create_common+0x5a/0x1a0 [ 1017.655900] rpc_populate.constprop.0+0x122/0x360 [ 1017.660871] rpc_fill_super+0x320/0x900 [ 1017.664873] ? sget_userns+0x76b/0xc30 [ 1017.668867] ? rpc_pipe_release+0x830/0x830 [ 1017.673222] ? get_empty_filp.cold+0x3b/0x3b [ 1017.677672] mount_ns+0xec/0x190 [ 1017.681059] ? rpc_pipe_release+0x830/0x830 [ 1017.685397] rpc_mount+0xa4/0xd0 [ 1017.688802] mount_fs+0x97/0x2a1 [ 1017.692300] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1017.696814] do_mount+0x417/0x27d0 [ 1017.700372] ? copy_mount_string+0x40/0x40 [ 1017.704620] ? memdup_user+0x58/0xa0 [ 1017.708347] ? copy_mount_options+0x1fe/0x2f0 [ 1017.712859] SyS_mount+0xab/0x120 [ 1017.716326] ? copy_mnt_ns+0x8c0/0x8c0 [ 1017.720226] do_syscall_64+0x1e8/0x640 [ 1017.724475] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1017.729339] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1017.734564] RIP: 0033:0x45a919 [ 1017.737764] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1017.745661] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1017.752947] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1017.760234] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1017.767517] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1017.774799] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1017.783468] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry nfsd4_cb [ 1017.793189] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1017.801562] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 21:21:13 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./control\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:13 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x480000) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f00000000c0)=0xd485) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r6 = signalfd4(r5, &(0x7f0000000000), 0x8, 0x800) r7 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r6, 0x26, &(0x7f0000000040)={0x2, 0x2, 0x180, 0x8001, r7}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:13 executing program 0: socket$packet(0x11, 0x3, 0x300) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x10002, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) r2 = accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) dup2(r2, r0) [ 1017.932168] hfs: invalid gid -1 [ 1017.935521] hfs: unable to parse mount options 21:21:13 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 'timer1\x00'}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000000)=0x8000) 21:21:14 executing program 2 (fault-call:9 fault-nth:30): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:14 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000280)={0x2, &(0x7f0000000240), 0x4}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', r5}) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r6) [ 1018.281235] device bridge_slave_1 left promiscuous mode [ 1018.293987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.345016] device bridge_slave_0 left promiscuous mode [ 1018.377726] bridge0: port 1(bridge_slave_0) entered disabled state 21:21:14 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file1\x00', 0x2c2, 0xb) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f00000003c0)=""/102382, 0xfffffffffffffe19) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:14 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x8000, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f00000003c0)=""/254, 0xa7}], 0x1, &(0x7f00000000c0)=""/201, 0xb9}}], 0x2e3, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x413955de) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x82, 0x0) bind$x25(r5, &(0x7f00000002c0)={0x9, @null=' \x00'}, 0x12) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r5, 0x80044dfc, &(0x7f0000000300)) [ 1018.456873] FAULT_INJECTION: forcing a failure. [ 1018.456873] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.470216] CPU: 1 PID: 22286 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1018.478117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.487484] Call Trace: [ 1018.490095] dump_stack+0x142/0x197 [ 1018.493768] should_fail.cold+0x10f/0x159 [ 1018.497951] should_failslab+0xdb/0x130 [ 1018.501956] kmem_cache_alloc+0x2d7/0x780 [ 1018.506122] ? rpc_alloc_inode+0x1a/0x20 [ 1018.510204] selinux_inode_alloc_security+0xb6/0x2a0 [ 1018.515326] security_inode_alloc+0x94/0xd0 [ 1018.519667] inode_init_always+0x552/0xaf0 [ 1018.523923] alloc_inode+0x81/0x180 [ 1018.527601] new_inode_pseudo+0x19/0xf0 [ 1018.531589] new_inode+0x1f/0x40 [ 1018.534960] rpc_get_inode+0x1d/0x1f0 [ 1018.538766] ? d_drop+0x51/0x60 [ 1018.542054] __rpc_create_common+0x5a/0x1a0 [ 1018.546386] rpc_populate.constprop.0+0x122/0x360 [ 1018.551240] rpc_fill_super+0x320/0x900 [ 1018.555224] ? sget_userns+0x76b/0xc30 [ 1018.559120] ? rpc_pipe_release+0x830/0x830 [ 1018.563448] ? get_empty_filp.cold+0x3b/0x3b [ 1018.567869] mount_ns+0xec/0x190 [ 1018.571248] ? rpc_pipe_release+0x830/0x830 [ 1018.575588] rpc_mount+0xa4/0xd0 [ 1018.578969] mount_fs+0x97/0x2a1 [ 1018.582351] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1018.586858] do_mount+0x417/0x27d0 [ 1018.590410] ? copy_mount_string+0x40/0x40 [ 1018.594684] ? memdup_user+0x58/0xa0 [ 1018.598409] ? copy_mount_options+0x1fe/0x2f0 [ 1018.602918] SyS_mount+0xab/0x120 [ 1018.606399] ? copy_mnt_ns+0x8c0/0x8c0 [ 1018.610329] do_syscall_64+0x1e8/0x640 [ 1018.614232] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1018.619228] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1018.624447] RIP: 0033:0x45a919 [ 1018.627664] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1018.635801] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1018.635811] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1018.650373] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1018.657650] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1018.664975] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1018.672596] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry nfsd4_cb [ 1018.682021] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1018.689903] net_ratelimit: 20 callbacks suppressed [ 1018.689909] protocol 88fb is buggy, dev hsr_slave_0 [ 1018.700955] protocol 88fb is buggy, dev hsr_slave_1 [ 1018.706078] protocol 88fb is buggy, dev hsr_slave_0 [ 1018.711216] protocol 88fb is buggy, dev hsr_slave_1 [ 1018.737835] device hsr_slave_1 left promiscuous mode [ 1018.753603] device hsr_slave_0 left promiscuous mode [ 1018.773699] team0 (unregistering): Port device team_slave_1 removed [ 1018.789056] team0 (unregistering): Port device team_slave_0 removed [ 1018.807803] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1018.851908] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1018.870136] protocol 88fb is buggy, dev hsr_slave_0 [ 1018.875370] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.006727] bond0 (unregistering): Released all slaves [ 1020.070218] protocol 88fb is buggy, dev hsr_slave_0 [ 1020.075365] protocol 88fb is buggy, dev hsr_slave_1 [ 1020.618160] IPVS: ftp: loaded support on port[0] = 21 [ 1020.701184] chnl_net:caif_netlink_parms(): no params data found [ 1020.710164] protocol 88fb is buggy, dev hsr_slave_0 [ 1020.715357] protocol 88fb is buggy, dev hsr_slave_1 [ 1020.747811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.754450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.761480] device bridge_slave_0 entered promiscuous mode [ 1020.768236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.774778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.781878] device bridge_slave_1 entered promiscuous mode [ 1020.799577] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1020.809385] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1020.827177] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1020.834739] team0: Port device team_slave_0 added [ 1020.840797] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1020.848017] team0: Port device team_slave_1 added [ 1020.853789] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1020.861481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1020.882863] device hsr_slave_0 entered promiscuous mode [ 1020.888504] device hsr_slave_1 entered promiscuous mode [ 1020.894852] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1020.902001] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1020.916436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.922882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.929596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.936331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.968066] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1020.974857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.984206] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1020.993522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1021.002432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.009174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.018697] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1021.025146] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.033916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1021.041546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.047876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.060948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1021.068550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.075213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.092537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1021.100933] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1021.110853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1021.121140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1021.132281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1021.142720] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1021.148935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1021.165060] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1021.176185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.186785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1021.207814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:21:17 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 21:21:17 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) 21:21:17 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000300)="ae09dd7c343bd2a5c0c1f8675b8a354fc6757d9a00d7a3c90c24799ede0f30206a2a35f2227efa0148fc266788424a33fa1ad660b5f9c44d39633cc49c7f7145e94384fb477da18f53ac9ad0c7d86637ab") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) accept$alg(r2, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='dax\x00'}, 0x10) fcntl$setpipe(r3, 0x407, 0x4) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'rose0\x00', {0x4}, 0x8}) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x80000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000003c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r5, 0x0) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x3a) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000280)=0x200, 0x4) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='dax\x00', 0x2000a00, 0x0) 21:21:17 executing program 2 (fault-call:9 fault-nth:31): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) getpid() dup2(r0, r1) 21:21:17 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @bt={0x9, 0x1, 0x1, 0x10001, 0x400080000, 0x37a, 0x8}}) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8110}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, 0x0, 0x312, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0xfffffffffffffd72, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0xfffffffffffffef8, 0x5, 0x5a80}, @IPVS_DEST_ATTR_ADDR={0xe, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x5, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000004c0)={0x7a, 0x8000000000000006, 0xb, 0x8, @buffer={0x0, 0xca, &(0x7f00000003c0)=""/202}, &(0x7f0000000240)="5dee7f150052ab01f0d030", &(0x7f00000002c0)=""/59, 0x7, 0x2, 0x3, &(0x7f0000000340)}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r6, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$unix(r5, &(0x7f00000009c0)="5c8e1ad92913ab72849a570775b1deb01141b421d7d4975fdf654825948f42e8206443b98f", 0x25, 0x20004011, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e21}, 0x6e) fstat(r8, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r9) chown(&(0x7f0000000380)='./control\x00', r7, r9) setfsgid(r9) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000180)={'ip6tnl0\x00', 0x20}) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000200)=""/27) [ 1021.318931] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 21:21:17 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000180)) syz_open_pts(r3, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000040)={0x9, 0x7f}) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000340)=""/4096) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'eql\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xf, 0x7, 0x5, 0x3, 0x0, 0x4, 0xffffff80, 0x2, 0x8, 0xfffffffa, 0xffff, 0x8, 0x1, 0xffffff07, 0xffffffff, 0x0, 0x800, 0xfe, 0x7, 0x0, 0x7f, 0x9fe, 0x6da900a7}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 1021.444396] FAULT_INJECTION: forcing a failure. [ 1021.444396] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.456267] CPU: 1 PID: 22334 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1021.464378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.473754] Call Trace: [ 1021.476363] dump_stack+0x142/0x197 [ 1021.480059] should_fail.cold+0x10f/0x159 [ 1021.484251] should_failslab+0xdb/0x130 [ 1021.488269] kmem_cache_alloc+0x2d7/0x780 [ 1021.492437] ? d_drop+0x51/0x60 [ 1021.495739] ? rpc_i_callback+0x30/0x30 [ 1021.499738] rpc_alloc_inode+0x1a/0x20 [ 1021.503650] alloc_inode+0x64/0x180 [ 1021.507312] new_inode_pseudo+0x19/0xf0 [ 1021.511293] new_inode+0x1f/0x40 [ 1021.514654] rpc_get_inode+0x1d/0x1f0 [ 1021.518466] ? d_drop+0x51/0x60 [ 1021.521750] __rpc_create_common+0x5a/0x1a0 [ 1021.526069] rpc_populate.constprop.0+0x122/0x360 [ 1021.531770] rpc_fill_super+0x320/0x900 [ 1021.535843] ? sget_userns+0x76b/0xc30 [ 1021.539806] ? rpc_pipe_release+0x830/0x830 [ 1021.544136] ? get_empty_filp.cold+0x3b/0x3b [ 1021.549582] mount_ns+0xec/0x190 [ 1021.552933] ? rpc_pipe_release+0x830/0x830 [ 1021.557249] rpc_mount+0xa4/0xd0 [ 1021.561047] mount_fs+0x97/0x2a1 [ 1021.564944] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1021.569602] do_mount+0x417/0x27d0 [ 1021.573129] ? copy_mount_string+0x40/0x40 [ 1021.577360] ? memdup_user+0x58/0xa0 [ 1021.581423] ? copy_mount_options+0x1fe/0x2f0 [ 1021.585921] SyS_mount+0xab/0x120 [ 1021.589368] ? copy_mnt_ns+0x8c0/0x8c0 [ 1021.593259] do_syscall_64+0x1e8/0x640 [ 1021.597324] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1021.602184] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1021.607476] RIP: 0033:0x45a919 [ 1021.611273] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1021.619070] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1021.626414] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1021.633676] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1021.640948] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1021.648202] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1021.656586] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry cache [ 1021.665825] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / 21:21:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) fcntl$setsig(r1, 0xa, 0x13) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000240)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:17 executing program 0: r0 = socket$packet(0x11, 0x1, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = dup2(r0, r1) r3 = getpid() r4 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) read(r4, &(0x7f0000000100)=""/60, 0x3c) sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfff}, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000002c0)={@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x17}}}, {&(0x7f0000000480)=""/228, 0xe3}, &(0x7f0000000080), 0x8}, 0xffffffffffffffa1) ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f00000000c0)={0x0, 0x100000}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xe0, 0x2, 0x81, 0x8, 0x0, 0x9, 0x40200, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x6, @perf_bp={&(0x7f0000000140), 0x18}, 0x730, 0x1d79, 0xab8f, 0x4, 0xfff, 0x7, 0xffc1}, r3, 0x7, r5, 0x2) [ 1021.690396] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 21:21:17 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:17 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:17 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x1f}, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000180)={0x0, &(0x7f0000000240)="499ff16eefad7f32d09e4f6309fe54b84edddb9d7f21e20f8fee1c65467d30263bfe41d9da04ef65f9b461e07e50b3c008eaa9dc9ea837546ff9724b50f7d3a01d92f15ce1d2e61147e1ddb125cedd74288fbcb11417a6c43ffd19310d12f8f2acd368868d980073e3fe228fcd9f45a2eb580300d27484fca9eb366a251e61d7c47d17b6cc80bbb1cc46d48077786561191e15030d7348d1435d15a33bfaddd1a97b0be8de92759a5efe4c7c174036afecb9ae5c888d415076ea354d82a000cee0dfab0ace7b1b331e0fe4a2aec189", 0xcf}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x8d81731b968e1a89, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r2 = gettid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = dup2(r0, r1) r3 = socket$inet(0x2, 0x6000000000000003, 0x6) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r4 = dup2(r3, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)=0x8001, 0x4) 21:21:17 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r6, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) chown(&(0x7f0000000380)='./control\x00', r5, r7) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r10, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r10, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r12, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r13) chown(&(0x7f0000000380)='./control\x00', r11, r13) r14 = getegid() r15 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [{0x2, 0x2, r5}, {0x2, 0x2, r8}], {}, [{0x8, 0x0, r9}, {0x8, 0xb, r13}, {0x8, 0x5, r14}, {0x8, 0x7, r15}], {0x10, 0x3}, {0x20, 0x8}}, 0x54, 0x3) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001ff) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x3, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r16 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x369004, 0x0) r17 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r16, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r17, 0x2, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x342bf5faba1fb695) 21:21:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000000)) dup2(r0, r1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200, 0x0) 21:21:17 executing program 2 (fault-call:9 fault-nth:32): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:17 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1022.195554] atomic_op ffff888080472ac0 conn xmit_atomic (null) [ 1022.216105] atomic_op ffff8880a09013c0 conn xmit_atomic (null) [ 1022.268060] FAULT_INJECTION: forcing a failure. [ 1022.268060] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.280444] CPU: 1 PID: 22398 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1022.288471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.297927] Call Trace: [ 1022.300528] dump_stack+0x142/0x197 [ 1022.300547] should_fail.cold+0x10f/0x159 [ 1022.300560] should_failslab+0xdb/0x130 [ 1022.300569] kmem_cache_alloc+0x2d7/0x780 [ 1022.300579] ? d_drop+0x51/0x60 [ 1022.300592] ? rpc_i_callback+0x30/0x30 [ 1022.323932] rpc_alloc_inode+0x1a/0x20 [ 1022.327846] alloc_inode+0x64/0x180 [ 1022.331498] new_inode_pseudo+0x19/0xf0 [ 1022.335490] new_inode+0x1f/0x40 [ 1022.338874] rpc_get_inode+0x1d/0x1f0 [ 1022.342690] ? d_drop+0x51/0x60 [ 1022.346077] __rpc_create_common+0x5a/0x1a0 [ 1022.350936] rpc_populate.constprop.0+0x122/0x360 [ 1022.355810] rpc_fill_super+0x320/0x900 [ 1022.360314] ? sget_userns+0x76b/0xc30 [ 1022.360324] ? rpc_pipe_release+0x830/0x830 [ 1022.360334] ? get_empty_filp.cold+0x3b/0x3b [ 1022.360348] mount_ns+0xec/0x190 [ 1022.360357] ? rpc_pipe_release+0x830/0x830 [ 1022.380775] rpc_mount+0xa4/0xd0 [ 1022.384158] mount_fs+0x97/0x2a1 [ 1022.387535] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1022.392048] do_mount+0x417/0x27d0 [ 1022.395614] ? copy_mount_string+0x40/0x40 [ 1022.399864] ? memdup_user+0x58/0xa0 [ 1022.403591] ? copy_mount_options+0x1fe/0x2f0 [ 1022.408100] SyS_mount+0xab/0x120 [ 1022.411567] ? copy_mnt_ns+0x8c0/0x8c0 [ 1022.415471] do_syscall_64+0x1e8/0x640 [ 1022.419374] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1022.424239] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1022.429440] RIP: 0033:0x45a919 [ 1022.432665] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1022.440384] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1022.447863] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1022.455152] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 21:21:18 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) recvfrom$ax25(r1, &(0x7f0000000480)=""/117, 0x75, 0x2, &(0x7f0000000500)={{0x3, @default, 0x2}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000340)=0xff, 0x8) r2 = getpid() r3 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r4 = accept4(r3, &(0x7f0000000200), &(0x7f0000000180)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000002c0)=0x84) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002700)=[{{0x0, 0xfffffffffffffea1, 0x0, 0x0, 0x0, 0x17c}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x62, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f00000000c0)) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x413955de) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000100)='rpc_pipefs\x00'}, 0x30) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r8, 0x4010aeab, &(0x7f00000000c0)) ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f00000006c0)={&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000005c0)=""/215, 0xd7}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x4) dup2(r0, r1) 21:21:18 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:18 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x82080) 21:21:18 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0x1015, 0x0, 0x40, "3815c16b65f93d1516a8d3ab1c611e28", "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"}, 0x1015, 0x2) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x1404, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:18 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r3, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000000)={0xf6, 0x1a, &(0x7f0000000340)}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:18 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x5, &(0x7f0000000040)=[{0x1, 0x20, 0x7f, 0x100}, {0x4, 0x4, 0x14, 0x2}, {0x0, 0x7, 0x1f, 0x2}, {0x80, 0x2, 0x40, 0x3f}, {0x40, 0x6, 0x5, 0xff}]}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, '\x00', {0x3}, 0x4e2}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:18 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)=':dev/srd\x01\x00\x00\x00er\x00', 0x0, 0x400000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 1022.462440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1022.469723] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1022.477214] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry cache [ 1022.486632] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / 21:21:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x4, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\xfb\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x81, 0x1, 'queue1\x00'}) socket$inet(0x2, 0x0, 0x0) 21:21:18 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:18 executing program 2 (fault-call:9 fault-nth:33): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:18 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000140)={0x1, 0x1}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:18 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x8f}, 0x9}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xfffffffffffffd80}}], 0x2, 0x30002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:18 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x4, 0xf9, 0xb1, 0x7}]}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000040)={0x1, 0xfff, [0x1734, 0x4, 0x100, 0x3, 0x5], 0xfffd}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:18 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc494) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') clone(0x8000000000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180)='./file1/file0\x00') quotactl(0x0, &(0x7f0000000000)='./file2\x00', 0xee00, 0x0) rename(&(0x7f0000000380)='./file1/file0\x00', &(0x7f0000000040)='./file0\x00') 21:21:18 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:18 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x2, 0xe, 0x6, 0x5, "a8743ba6a8962c192689e2943c05012aea2378f2b79e5c9467c063d72b54e960"}) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1023.103792] FAULT_INJECTION: forcing a failure. [ 1023.103792] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.115200] CPU: 0 PID: 22447 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1023.123094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.132447] Call Trace: [ 1023.135056] dump_stack+0x142/0x197 [ 1023.138703] should_fail.cold+0x10f/0x159 [ 1023.142875] should_failslab+0xdb/0x130 [ 1023.146869] kmem_cache_alloc+0x2d7/0x780 [ 1023.151041] ? rpc_alloc_inode+0x1a/0x20 [ 1023.155122] selinux_inode_alloc_security+0xb6/0x2a0 [ 1023.160253] security_inode_alloc+0x94/0xd0 [ 1023.164594] inode_init_always+0x552/0xaf0 [ 1023.168844] alloc_inode+0x81/0x180 [ 1023.172487] new_inode_pseudo+0x19/0xf0 [ 1023.176474] new_inode+0x1f/0x40 [ 1023.179853] rpc_get_inode+0x1d/0x1f0 [ 1023.183663] ? d_drop+0x51/0x60 [ 1023.186958] __rpc_create_common+0x5a/0x1a0 [ 1023.191293] rpc_populate.constprop.0+0x122/0x360 [ 1023.196156] rpc_fill_super+0x320/0x900 [ 1023.200182] ? sget_userns+0x76b/0xc30 [ 1023.204079] ? rpc_pipe_release+0x830/0x830 [ 1023.208416] ? get_empty_filp.cold+0x3b/0x3b [ 1023.212845] mount_ns+0xec/0x190 [ 1023.216228] ? rpc_pipe_release+0x830/0x830 [ 1023.220565] rpc_mount+0xa4/0xd0 [ 1023.223981] mount_fs+0x97/0x2a1 [ 1023.227361] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1023.231872] do_mount+0x417/0x27d0 [ 1023.235427] ? copy_mount_string+0x40/0x40 [ 1023.240116] ? memdup_user+0x58/0xa0 [ 1023.240127] ? copy_mount_options+0x1fe/0x2f0 [ 1023.240137] SyS_mount+0xab/0x120 21:21:19 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x9, 0xa, 0xc0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x313a, 0x0, 0x4, 0x0, 0x5, 0x0, 0x2}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$rds(r1, &(0x7f0000000180)={0x2, 0x4e22, @rand_addr=0x9}, 0x10) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfff}, 0x0) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x6, 0x11, 0xfff, 0x3f, 0x1b242cbc, 0x9, 0x1, 0xff, 0x3}, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x7ca03b220ec806e1, 0x2, 0x6, 0x3ff, 0x0, 0x0, 0xfff, 0x7f, 0x20000000}, 0x0) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f0000000140)={0x0, 0x8, 0x0, [], &(0x7f00000000c0)=0x7}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1023.240144] ? copy_mnt_ns+0x8c0/0x8c0 [ 1023.240156] do_syscall_64+0x1e8/0x640 [ 1023.240164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1023.240181] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1023.240190] RIP: 0033:0x45a919 [ 1023.240195] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1023.240209] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1023.255862] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1023.255869] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1023.255875] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1023.255881] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1023.256363] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry cache [ 1023.326480] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / 21:21:19 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x7fffffff, 0x0, 'id1\x00', 'timer1\x00'}) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x200280) write$UHID_CREATE2(r3, &(0x7f00000000c0)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x46, 0x1, 0x9, 0x9, 0x3f, 0x3, "cede28b8174928eabadb3a655a1413a3e66cbe82161fdc0ecf3f2833e9a2f06e41e0e703b4ec5a57a766de9bff4e2f4d2e9a79e9386f0a7c20772fd4280881e901c55b95960a"}, 0x15e) 21:21:19 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0/file0', [{0x20, '%posix_acl_access:'}, {0x20, '+vboxnet0'}, {0x20, 'rpc_pipefs\x00'}, {}], 0xa, "8108fe5a66746959d9cf69fdaffd99f420e1ff4da2bde5cfa140ff387e4bd83805fa2c102dc426130366806d94dd1e89558fb2403dcce02a28bb5978d3dbf3a089c0a955"}, 0x7f) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:19 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:19 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) r3 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$FIBMAP(r3, 0x1, &(0x7f0000005680)=0xffff) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)) sendmmsg$alg(r2, &(0x7f0000005540)=[{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000380)="7b7d0c5d02ccdb19aa47649b2003cfe6587171895a0056f59f86d2dc7096da8237325ad49638c14877ba027d3d9b4f224dc2b9686bf85735c545418467ebf3c4c358ce9fa80d933c95647fe06b50f77398f674a2537466614b9c052184540fcd439666f1d8ce375cac1f9e13b83bb951ccb85831b2e5e82f20fb5c965f8fe61da008ec1587986a21bf91a70851fdd79935714bb764acefed82f0ff9d7ee1972472ba0a2f49f8d1a344d28a9b88", 0xad}, {&(0x7f0000000240)="7bbaf2af18de10e7a92058e1ec809218cc311f319036a8c5bcb1d8f311bfe3e9194b9bea71c83cab9f9b1930ff61d240065f4c9042a210eb6f1fce6030bcc6175173f95c2f", 0x45}, {&(0x7f0000000440)="59c9c31997784883c844ed792fd5b02f03c1942722e470531df126925c82d459eacc0a2818ad0fe7ebed5ffc125c34a4af5abacb25698aa1aad68846a8ede1307a3c6fee9b62f86b1ce842df5fe6aeb5affa491d1b1cfd5efa2390537cc9ad14c5b8eb0d14d8919fec3c4037f8ccea0ac3eef96e97d16b60e12c84e6e5a2255088f1ff0f3328ca23154f280545d0ba4c5f15c4a01c87941d086433231c8879015551628c7f84a419dbbc", 0xaa}, {&(0x7f0000000500)="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", 0x1000}], 0x4, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="eae51e801949f39b6c0fa3862f51a9173bac3bc8176ee1c97318ced75b9a49d10f32197108998f6d54fb6ebda9af7d03b4adcc41893aea1598885f18ff35ee2a856d2235bc13081cabe097a4de322508d378bc0f61d29c62bfa7b40b781df1f10ef8c7765fe14ae8a297b28f13112d78d2e81b7d3a577fd0221f7a4cada3721bf910a6bcc2c07a4f750d9976c52660ee07d9a5760c4803f899cd85cf304184e71ef9b2ebdd63dcc74f6c492daa7e665f9bb47d5bbea53a53c83f13adb4a3ec2a", 0xc0}, {&(0x7f0000002600)="a060ef4527b71ff1736800eae90412f681f52755440dc4e20f33ac1ad6e3a71966a1960d042c132f439f32c8fecb0ec7423991a537d9549453ed1f5660bb15b027452aadb3dbcb75fb9ed69b10d3d0007986638444a1be7d1b2d5df2800890bf74b2445a4cf200190d0bea8bd0ce6df968725d01aa8e6253068af4cd1463717d2898331879bf74aaeb30ee0e191bace7ebb736c5bfed243899374e599b2c4eb3cec88bdb24f882b88e22a1b1df3448da2469bb6452d525631c6942e8d42737f5ee025ec44b", 0xc5}, {&(0x7f0000002700)="ef0285e8611307c1839407fe4e6f5234a7e65d513223548ba24ca8abc162fc7279682469c05cbb41512a8725dd480f6861f2af9e33ff840a056ab6326a0d48cec3650271d97e8ed199f7600129d47f5137fda07285e02ab332ae81c9c2b39dc0478535f2e1fcd6c390ee96011d7a9a16e9a60580d4e6ef60450a44983f5b95a6d2948deaa99772767569b5304f161d2a308ce04d57d34a80265385f9d70828c8f48db7a70a57ea266c887f31270d8f37634b28f0b5dcbae192d735e1a46da0c5495b", 0xc2}, {&(0x7f0000002800)="25446376ca4457e60bc6c8d4f6e0aff8fe3a2c0034aad232cf90aa68eae06595476717cb3caa554f3cc75a14286c72c0124dbae2bef828b94e44e30dcce7469d82f3797f29ec735cd44641c124f1b06ecf363c7e969c24aa2f06f713da0b6625aadf63ec75e90a6a681708ea975a1678b82432a033746fc774fa9f7c731f27", 0x7f}], 0x5, &(0x7f0000002900)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1018, 0x24004000}, {0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000003940)="5f768c2628c128764160d035a7b2ba555bc4e72f28758d866fabc3d5588e13dba46b44bc13004b0c9353f9254d1daa4982531b64d43bb092a6b615e20810a499bfb08f336a9678ae98c01a4e987bc90051942c32ae5ec01ca94fcc5e2ed7cf449bb64a0fcea17dcc2807cfbf8b6374dafd9417b490f5d992d206e41b89ef58f22eaa210ed0dcdaecfc6b", 0x8a}, {&(0x7f0000003a00)="46d25e70c59f7a8066bc4cdb2119c6f1e5e2cc80742358fe33eae05d1945d6053585a01d82cd7601105b2a441cada9e5427415af28eb096a56a33b48f0d656c13750ee8792954c76cb20ebbd3caee4ba7359a651bc8fbaa797e863a84053e14665afcb128ae0b0ec76988966d920f225a25871161c250dd5fb1fbee2c7a54b8f46bd8a38f5ecadfddae0a5e6a245a954ec899c154d011a4981132965b9b7fff716c2cb962e4a7230a12c7fbf3e67257b4f43ee4422ff8687d5bd61930d1c97346ed771", 0xc3}, {&(0x7f0000003b00)="0fae81c571fed7ba8c0bc67f627d90adecff60acb5774be0bff30dfd5737e2c16fa18f052811818f2cada31835f460250b924f29ca1d4c3552aebc55055594c23f1dd6b79153754f339f70d90c5f26c5c201ad319f492606ae6258b26d9a9d60d3f20fc44d", 0x65}], 0x3, &(0x7f0000003bc0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xc0, 0x117, 0x2, 0xa9, "886be3cd5b64b98f73349c739e4f90a45d7b1ec8dfdcf2c755f3ac43178ff8b38c30f3e74669b7367c8754b34c631f7e669da87f11e5144bd1b7c90919bdeb36c7b818231ebb684d4d0cbda62d1b740b2ae5030f732033911877b3207f79d974724b8ac17c34ed5754e8c46c3224191d47ea9d264473d89536ebe9d09283b7512cfcfec8d809f636c3a2c1cb077d6cc0183cfc17f837e830868dd1d7f807d2cf0c623fc61cdb2765bf"}, @op={0x18, 0x117, 0x3, 0x2}, @assoc={0x18, 0x117, 0x4, 0xa8a9}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x56, "15b6e4c82dd5968550516ec4e7ae68702ba18b597420c1c9dbef16843585329d4d23e4ad2f746fdced54c4d91475691ddacb428c6ee32ed5a8ba6cc4125b3bc08a0fdb9e441076609bbac16a21c2f1264fa19241d659"}, @iv={0x108, 0x117, 0x2, 0xf2, "b012797d16d6b4c6deda8e7aba3e94a97d64546bd22e1f2f67e1c1d3c725345ed999e0acfb8d38cee45457b86261e1750b4b61ec1d54fdfab2c9de8e42d40b3cb588592dbfe367cdf17c11fb80add0db656cff8d504df156fdb84523618259f95cd843529f5739ee251c44999de089ea44120ca882baa1302cd5dd8368b27cdfa91878614ec9623228297f095775b54bd51739195010d280d00dedcf769c6c5cd8e330222c8d4631be89954cd004a376dd9dcb63ab3ac4f9751bf476af9a0783270cfbcfad2ecbeebb4e7859d4cd774026d0d578428289d430e5534ebe7a98ed6ee4f187b88d9f113bf14d1ebe0df8f3f4f0"}], 0x2b0, 0x40000}, {0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000003e80)="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", 0x1000}], 0x1, &(0x7f0000004ec0)=[@assoc={0x18, 0x117, 0x4, 0x800}, @iv={0xd0, 0x117, 0x2, 0xba, "848928cd4fc667e95c013250cc7c1201dfd62d6512879305627e17eb203a6fb2e80f124735cabfb0e47513f66ede835d0d68003b3710d0f25561be54929ab18ca98a23cc025feb71ec1b5f6aad8df15ac8793ae2ffa57ffa6da04dab56602c36ab22367968dab95e5d93b6c843e9c1c54eca9180135b6ce82a7e041360547ac4477c8b47c13f9f537eead7424fd7f72a3f4893e5324d608777314bba1bbc85248acfa3f59fcebe87a2afd0917a82307b5d68eea87ac577e60557"}, @assoc={0x18, 0x117, 0x4, 0xfff}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x90, 0x117, 0x2, 0x75, "3d5d8ae5d22b95ab31318852de92e09006ee398e170a6ab98775670bf7d8a8d0eddbd66931890de4c54045de1dde7fd84fe55f94f605d5524249f25bc74449ae55a815058cddb999c61054923d26edde5204e4b999e5ae62d51bdee45c0aa25089077b5d670e3940c36492ffa65dd6f34d24cea85e"}, @assoc={0x18, 0x117, 0x4, 0x1f}, @iv={0xf0, 0x117, 0x2, 0xda, "2c0a0ce7b5fc6742c2b23e5a7721df88bdf5bd7b6c0a6c7b5d7d948684c9e1fe6b7c7d26b592db8382a67067d64c331e7e569437a7e3e9279463bddba40371cf38c32d3240d56a026bfc8f46a5ef630ffeb976b513e4adfdbe111f76eec6974b96f3eb0a5f2b9e03c93b3399728a9f5cea1ae748a0a7cefd53560189b5a946c8aacf6dbc25efeb9d6bb258190417a132015b11da8817fd52a59ae3502bc18d2a76fe327aacddcc82e10368a86aaebd306b56e5ef7b83f6ed0c72d82a7eb07540546648b54a1586b409515309fc5f55d69b1d3ba69dc0bf819e78"}, @iv={0x78, 0x117, 0x2, 0x60, "917fe0d93be1d8424c01d85b6b9fe7dd24f67878c6ccd837dbc3367b6e22c6eeb21bc451fa49c3b12fc7fbed05c2c8afae22200d3f29db1994b7eccbea7f8e20de0a3c89f04689f77e0c4c518be3a70d18cf437c82689e612544c49394eda531"}], 0x328, 0x80}, {0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000005200)="f690949ff4ec74f6c631f618c0ccf162138c8fc992a69060502a5e242343053e7577f9f31e1c6dc105ebe49f426b8b614a25ffb59b732be8fcefa1e22a32616d1c", 0x41}], 0x1, &(0x7f00000052c0)=[@iv={0x38, 0x117, 0x2, 0x21, "917147aee3ce11a0b33319f6fa1a59a46b201dd99e61b180413d9b3880159e8c48"}, @iv={0xd8, 0x117, 0x2, 0xc1, "b94e363102575184f90876293560e03ce86071abff5455fa1a52eff6967a9829d0ca79a5b3e43783d0eb2ad5bccb14f8a82179c8556bb3d000f06af37210e6c77470ef4db7ba5fd1d3abdfb6ccc666549d360ac0e8a7fcbbb301e3cd31f4143759ddbab705193d37f71d90f4f8d175b6552f68f64e50b2db3f12cb47cbe98e8ed5ff22dd2d6e216d6ac80318ba1fcd84fdc5056f5e8487f827ec4b8f6cf065b860f6601c98d8fedf9ef9bf114f22d03ddecdbd343424c5cae940b386191e46e8d9"}, @iv={0xc8, 0x117, 0x2, 0xb0, "809cf30c7f78e7fd6c2c81690b54d5460fe4f096678be7a64a675283d88a0e1b89018084c17b1756f1ca3475e023a37ba21f30a93da009bdb36ad9938fb1455f7d004ebaaf6edc35d7dff947cb1979d434cc92841e6c921585207ac784880840a853aa5683cffc36be414a06e6f5ba65431e96909dd503cb08be2625d33138761bfb0596202cb1f71de80f1941204ebccf98bec8793e599ce7381d4c4318ba01aef419d4e532b1590d855b5ceca4f241"}, @iv={0x80, 0x117, 0x2, 0x6b, "9140f47de6ca93efb15df2ef2778edc85067a0a44b27a4257066174b24b689dac15447ecf99132e6995d35a0c8a6d9f2aabe159e6753beebae7b1225281786ddc1a74ea7e1315d62fa18f7617420ff0f4559091fbec2a20e8c72d10f3afcd128d7b38d90b641e8afea076c"}, @iv={0x20, 0x117, 0x2, 0xa, "a379dd3b9821e4beddf8"}], 0x278, 0x20008001}], 0x5, 0x20000010) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000000c0)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x7ff}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x80800) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3a0ce2e4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRES32=r6, @ANYBLOB="0500010000000000"], 0x3}, 0x1, 0x0, 0x0, 0x20000002}, 0x2404c084) 21:21:19 executing program 2 (fault-call:9 fault-nth:34): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:19 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x3, 0x9f713e7432c3eafa, 0x0, 0x0, 0xee1c, 0xffffffffffffffff, 0x0, 0x200, 0x4}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1023.830126] net_ratelimit: 20 callbacks suppressed [ 1023.830132] protocol 88fb is buggy, dev hsr_slave_0 [ 1023.840301] protocol 88fb is buggy, dev hsr_slave_1 21:21:19 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) shmget(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:19 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1, 0x0, 0x0, 0xe9fd9319b7e194c5}, 0x0, 0x0, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x0, 0x0, 0x8}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) close(r3) [ 1024.068567] FAULT_INJECTION: forcing a failure. [ 1024.068567] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.080387] CPU: 0 PID: 22506 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1024.088312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.098050] Call Trace: [ 1024.098074] dump_stack+0x142/0x197 [ 1024.104298] should_fail.cold+0x10f/0x159 [ 1024.108465] should_failslab+0xdb/0x130 [ 1024.112456] kmem_cache_alloc+0x2d7/0x780 [ 1024.116617] ? __d_lookup+0x3a2/0x670 [ 1024.120433] ? mark_held_locks+0xb1/0x100 [ 1024.124597] ? d_lookup+0xe5/0x240 [ 1024.128163] __d_alloc+0x2d/0x9f0 [ 1024.131632] ? d_lookup+0x166/0x240 [ 1024.135264] d_alloc+0x4d/0x270 [ 1024.138538] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1024.143761] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1024.147828] ? __rpc_mkdir.part.0+0xe7/0x130 [ 1024.152272] rpc_populate.constprop.0+0xbf/0x360 [ 1024.157046] rpc_fill_super+0x320/0x900 [ 1024.161241] ? sget_userns+0x76b/0xc30 [ 1024.166450] ? rpc_pipe_release+0x830/0x830 [ 1024.170791] ? get_empty_filp.cold+0x3b/0x3b [ 1024.175195] mount_ns+0xec/0x190 [ 1024.178573] ? rpc_pipe_release+0x830/0x830 [ 1024.182884] rpc_mount+0xa4/0xd0 [ 1024.186238] mount_fs+0x97/0x2a1 [ 1024.189604] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1024.194088] do_mount+0x417/0x27d0 [ 1024.197615] ? copy_mount_string+0x40/0x40 [ 1024.201846] ? memdup_user+0x58/0xa0 [ 1024.205542] ? copy_mount_options+0x1fe/0x2f0 [ 1024.210030] SyS_mount+0xab/0x120 [ 1024.213468] ? copy_mnt_ns+0x8c0/0x8c0 [ 1024.217343] do_syscall_64+0x1e8/0x640 [ 1024.221228] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1024.226066] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1024.230135] protocol 88fb is buggy, dev hsr_slave_0 [ 1024.231250] RIP: 0033:0x45a919 [ 1024.236338] protocol 88fb is buggy, dev hsr_slave_1 [ 1024.239536] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1024.252780] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1024.260043] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1024.267310] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1024.274583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1024.281848] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1024.289891] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / 21:21:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r0, &(0x7f0000000100)='=', 0x1, 0x582774fe0c0db1f1, 0x0, 0x0) 21:21:20 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:20 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:20 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fa) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:20 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x571640, 0x109) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x2c040, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r3, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) chown(&(0x7f0000000380)='./control\x00', r2, r4) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', r2, r5) 21:21:20 executing program 0: getpid() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) write(r0, 0x0, 0xfffffffffffffcfc) creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet(0x10, 0x3, 0x0) 21:21:20 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0xfffffff9}, 0x4) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:20 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:20 executing program 2 (fault-call:9 fault-nth:35): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:20 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 1024.870121] protocol 88fb is buggy, dev hsr_slave_0 [ 1024.875336] protocol 88fb is buggy, dev hsr_slave_1 [ 1024.938494] FAULT_INJECTION: forcing a failure. [ 1024.938494] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.949925] CPU: 1 PID: 22556 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1024.958342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.968063] Call Trace: [ 1024.970668] dump_stack+0x142/0x197 [ 1024.974307] should_fail.cold+0x10f/0x159 [ 1024.974324] should_failslab+0xdb/0x130 [ 1024.974335] kmem_cache_alloc+0x2d7/0x780 [ 1024.986625] ? rpc_alloc_inode+0x1a/0x20 [ 1024.990703] selinux_inode_alloc_security+0xb6/0x2a0 [ 1024.995813] security_inode_alloc+0x94/0xd0 [ 1024.995828] inode_init_always+0x552/0xaf0 [ 1024.995838] alloc_inode+0x81/0x180 [ 1025.008035] new_inode_pseudo+0x19/0xf0 [ 1025.012018] new_inode+0x1f/0x40 [ 1025.015390] rpc_get_inode+0x1d/0x1f0 [ 1025.019195] ? d_drop+0x51/0x60 [ 1025.022482] __rpc_create_common+0x5a/0x1a0 [ 1025.026819] rpc_populate.constprop.0+0x122/0x360 [ 1025.031687] rpc_fill_super+0x320/0x900 [ 1025.035762] ? sget_userns+0x76b/0xc30 [ 1025.039674] ? rpc_pipe_release+0x830/0x830 [ 1025.044140] ? get_empty_filp.cold+0x3b/0x3b [ 1025.048664] mount_ns+0xec/0x190 [ 1025.052074] ? rpc_pipe_release+0x830/0x830 [ 1025.056423] rpc_mount+0xa4/0xd0 [ 1025.059812] mount_fs+0x97/0x2a1 [ 1025.063223] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1025.067921] do_mount+0x417/0x27d0 [ 1025.071487] ? copy_mount_string+0x40/0x40 [ 1025.075767] ? memdup_user+0x58/0xa0 [ 1025.079490] ? copy_mount_options+0x1fe/0x2f0 [ 1025.084025] SyS_mount+0xab/0x120 [ 1025.087487] ? copy_mnt_ns+0x8c0/0x8c0 [ 1025.091465] do_syscall_64+0x1e8/0x640 [ 1025.095394] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1025.100281] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1025.105502] RIP: 0033:0x45a919 [ 1025.108691] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1025.116798] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1025.116803] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1025.116808] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1025.116813] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1025.116818] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1025.116991] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.125129] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.132093] protocol 88fb is buggy, dev hsr_slave_1 [ 1025.139371] protocol 88fb is buggy, dev hsr_slave_1 [ 1025.147556] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry nfsd 21:21:20 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0xc70a, 0x4) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000100)={0x3}, 0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:20 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_smc(0x2b, 0x1, 0x0) close(r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001700)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000340)=0xe8) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000140)='./file0/file0\x00', 0x4, 0x7, &(0x7f0000001640)=[{&(0x7f0000000240)="a6dac15c3ad3c3d4e905575f3977fcd9910c6fc002afadfb677ba4bb37008d3e06a64581fa6f9b5b08c6bacdb122def610632cb5f3cebdd41b75d9d0bbba8774bec7ad570fdd14382e9e08d935d0259476c6f4ac9c1b0a2888f2c39f38c2539ad8cc60f910872a84a451008df772fee1c5c0d296636e88ebf8fc886924e511f5a21ad1569fa3e35fec6174201f53f57390283ab5", 0x94, 0x100000001}, {&(0x7f00000003c0)="fcd3103b7f473420162e4061c2fb591c089d70e401f39c3c790ea6630f684d02ac3ba898583d053834eaf79a0b6aaf34aa02577dbcbca3d8a9401891221b5552c97a5908c46e99e24655f44c289e5145dc38c59a2c808e5e081fee4aeb16a1bb788ae8a7f6885f40fedf0dedba7f1f4f08d4a78be0e4a43c8fa292ab8cc3c67c670b2b70950764d15447ce3527d6696f05650d72582c6caefd6670104dad6ec6104d8bb0c76c223675b39a47e8955f5a8ff19270988df617ba6c27d7cd1110b5536502462d39d8e264991532da5774525073750a341e256c646b5884f1286e0736c0fad3213575e882205e44c9627333df40c5c14f888d23892c33294ef55f61689302486d55b25d74af1b657ffbf0d8848f20f48d5378e98b9a5db09abdcae81b02e545b6bd0ae4f8019841556fa5665883b8d715c4ad7df27ba76e2dff02b351fd97daeb6c9706e4e8c55bfab85f1b9430704bafb0200eb025710e75a13a0beae7d6f8bf1d772c47ae7eb306524665573c16fe3f67815320f6b2c44edf73a72f5d32c954af3bb9e77ce9167ee70649c9137d0d521acc9c0cdbee1518d230c3f48a92de69298ee3e9533461a841067b240a85cd331921d3a6fd4c7636cbf4f2a524976d31f4c8c9db8f552c2f2c4b87b12cf60eb5ee3c88905f0190d7958e75e08e7a1c4fb5199507c0741f3ebeda90e52cd05e00d62944a6573cd31d9a1d2ebb54fe8d6fa6976b38c25ad132282b3086fc0ac93d19f2ce689d380d281e33b22c1f68ec5587640013103eaeb028b53de7fdc8a5174d20786de3f994c9bf938a784e26d2a86b635161526809e24d1e55a8c48dbf15a059efed60de763a34c25beea56bef93e4d1373df0873309cfbe43a95bccd7ec5b59f03bee118e1b5354f3a1ffd46f3c459fb63e1791be2efe131da986daee85f887e4faff0e0c31d43ad0c4231c427bebfc12f2002817b36a170cfbba25bf5ff7879703d79e20774afd7f060cb27b55925a1fb3b3ea07f6551bfdc74caf7851d631576c6e3ae1eff6a9b292dd9c8c161abf90cf5f952967400494dbee01d249bc6416fb78d0c1ccac85eadd70dd98ca220d9ef7419f25697cf4ad1f4dc4971b65bd52d75f9a28e342dd7e958943370315fc56687dcf12659d718325a12a9d0b7bf3c86b6c942fd71e30ebfde1d1e9db8d36a399cc27c3f73df373cb3e0f755b358fed7d947bb6fe42af86e9ab0cfb14c7fecd9f08c55d712a0d47eb0f9af9430ccd5cd19aa022f1d4b7da458ea08394f64052f2d32f67fec0b9ad775ad7e933e9c29232e686bebd30b1641b4161c55b1dfe6ccdbf5b08c490f0ce00346fccf39cf9ad38630f9eb9ee7601f4d2b2e5dcd624cf45818aa472beaf54bb1c0bf1e2d7e67a16657839e669fc4a5af91504278c8f19d35584b9c9f63f73c610eaeea7e2b6cb6cbe74aefb9703f91e6dcc6afcd79f4d6a30d97903d328a9f5623e10b2ecf6b39b44b8d5f15d6f99d1b7bbf58ce32e99e12d8bc9542ec98eaa8c98f9263f9e8db56a0ea7a8f3135211a0be79532410fa88e08cd3eeb1ae1518ce40d1bf04d1ddfbd6a0455d156baec7cacc7f1cf2a1c7b0d766adde29723683f37449140696666bd716ee7ca5dc3a6654fbef81a70ce16d1049514ba6119ed80d34b8d1b56fae36eb68f927914b32fb9d2d7f55973a23e49aef680cdb865a28a9007666b40cecccab36953d87ecdf746c2302b1c4d3369dc096196d78311f5cc0a99e4135c75fbe5710a6f7c7b151548f8b4736828e2592a824a637f987a6d135e89bfcaf718a19e262b68d03c60396e35366daa3f5a9cc94d6281912a4ffb3442c2b61846ea225085050c300522eb6a7de94a30c0ca967864cae2b0c5a37e5802f0ccbbe3a9a071b0e7bbffee15c6c4618ae13e5d06dec4b9376e7ad88ee4012720736b73a0c7359a2587f749b8c86f5670af4cda2c91e9afb0ac251c28bfc8b61e7e4da4478264b004aefbba708bfc72b785f115cffe33aea7c8ced2802db90f1066a7470784e013f20707b920f80a9f70f450758097a5eae60361a0516700b1388b5e485b7b85f50edabbc62700635a4153e6482abf59109a8c04aced7ee0e66660e7f21a5d13ee387ee245277aefd443e958288b933eebe0e66b17429ac2b79bf31f914c00b1867e1d7e95ea2e732fb43b8fb1b3e4a74ea27477dd1c63805af4602d4502e0cdc3290178f1499d1662909028653b424afadc30f73550d4bc299c06b8a87230fdfbf32182857b530fb8556995bd70ef08bd5d771ff71a76d5735bf91cab13c2c61f98e0deba6a75c0c7d6eded505a43d4cd2a52ca81e91efc5061af7ea813e0dd670ec6831ea9342b781eeca137325a5b2145479b94a529457c051b7fd9e1269f2e292709f403aa29a0a442b7b6ff958dad42ed11e91aadec07bb71317e454df1ba30c75a2c8cce13c8a307b56ab358f1f0d2f171df2e6637b7fb91cd4caed830c80854d9d84352beafde70e1b608eb51b902e2effc32b85e2b515f40530bea59ce7e6a0b2e470c7d9abce576b1cf85bfa8173bd5d43864ce8a961f8c5e7e7ea800a27ae335d46335b08600ad60beeefa3f6a00848af705a7a056a3fcae5110b3556a58bc1c5a99dd70acf42faaf19cb3386f62c9fce28eb199681060ae5f0f0524262da3702078ac0bd0f6387737ed1028912a1b2ea5aeb8938dff34d782aad8d9d95a67ed7d439cd59a9270394e8c459859bf9c368d01471c34cac04ad7a41b42dd4535a15b799ad05d337876b8b5dfc68c93ff88e804c15a141fc6587e252fb3354a26dab18a045cb6f84b6e003eedb25655d372dc45842236f0ac0cfd2818f69fdebbf25b1ad8ff3dfca78d4ae286d880c7375a060c61cf1685c7f93af90f53b00aac00e44d57cf1fa1c4d0eab1c54fc1e00a5c9547cdb6260b2dc23d558ace82c3020cd49bcf0fde7c67b70dc79f329cb727d0a4b5499c216e02b7cdc2dd22be4c55bc05d6d9eb99aecc78418ffca44bd56ffea71d516963bc957baba3232155ddf8a42b65be65c4f7c21492f65da7989e0acfe3a0c3a06c0e4b4b5805b0492a1a2b54bbcc015923b6547029dda5a51ac09fb8c2297d28dc533ae26a4c8838c9dc3507899cb99c85ca883139d06168c9fd3c401830ece6c979ee8c497ec578b76b5e69feb8dca848017020ac52f25a15ffdc1ff9adda65fc35a05f4edd95fc88d9748cb6f7cd931ee827ee6758496e4e2b63511b9096ee1aadd698b3da10a00f8acb3b043fad1611ce3cb78ec8a65240d1e3b6bed045034051201a1eec6c06071c1c972aa91060bdeb65e12b3f466db0049220631c53ca919bc9068f4e8f9797668f6b236355281d13241ba31f8bd0159e38886453f23b3ada01d852ab4e7b1e56f3b70b14b80e4eea7e55016b5b4a6d2bb23118e9e05485514630934b06f0228bc3df23196149b1196efa3a52351a49be95126a537c57fd1064a590ed33100dc6dcea529f9a2a2d0bfe3c8f2d84e79b83c927963b2611bce678d7403f0487966d7d6cb8b43cbded01e1167959a766a2c28a0408b74c6a977ce8f2db853ccbb47ded4953868365087c7efeeb9475efac1500018e0e13f26ddf32ff92829b16a373cccecaa670f42183248f5e93909d440f03a33fd589b125e816baecbe8bdbac67aca530b32d0c0b8bbf20490c9eb26bea9ee8ecaedb476169e853093435e63c6bf6fd4b4c1b81b7492913f91617106ecec0957795326bbdd50c6f04a2633bdab1af2cd5cc2311ed0faaec8a27eb106b28b388fec8cade097cacbbba9c29ee0d6f2886dcd7e9cec0ed085408227d93b74a5c78947cb592b7b3d13ccd0774f3569f7aaae9444f0606c988b6358d917ee57dc573f7a3f90dd6b277a9efb24edac59437e48d44a0fb197f0b1bdd9de6ad25a13d511d8c54a8cc284d392c29a2d170ce1745c00a007020ebed02d0813a479c4426af62d0af6fb8435ee93b73cd3fbbd12c899e37aaa9cce6006cd003fb5513efc3e4ffa79d4a6e000f7e0e141c4808a269026c1c7dc1c29618c30ddf0891db787796530b292931bbeb0e0deef9178be07745e0aa41ea3f89484fab429284019fcd129de23a263f8de1ecee09c6269b2a09c4c514ab4429ea9c9b27ab04a40dce685dfd1adf63630d19c9d8f62df22c77bfde320f3988c97f6dc7faf0f9e9e2af9f9ba320a28b6a99f3979297ca150a36b58fdbe9a4c2b5dbcf844c48d79a819f27eefeeb7f79e008a1eb518408afc5d924c098afb247e8551789053afcbbf677d540de7d99264c5fbf9e56d49e0928f980607a8ed605c22b12878b5133ec8015e081a93c620d8085917de00391380e692e794f0cfacc6ba67fee06c06b68c38508b2c4c459579045bd409be49b81c2815c8c993c657a4c5f2688d7a58abf1a82a661c9a877054eab98e4483aaabd0fb8b1db1cd6603195a0aad6a273de953c8be1f553f4acafb96288eac2466945f7de6e87c90ed65ba9541d30708ea70a25aedd499a4ed5c13c40a57949b386a11bba6399112a26daff222d62c667a899ecbb609c8d0d569ae2a1c2670c20d72655e99cdad7bea259c493adecadb9a828e3cacc2d150e4552a7c23ac436bf74b24c20cbfdab21fd5c799af53c133c9473c879621389638dcbb48510c2153f290a2b2f0ea228c84c6a0354a3c7c0d4684553756214dd30218db99367ef8f00449a8c0ab0c9c5e84268d7193bc70b718276a5c3ed162d480ad18ee3405fa0559b210cfb79960765bf72d69b518aee8281b132ffe27a08fdd521a2998842a27a76fb8d31d8767bca1897e12bae6965828236f1266824bbcc361884f489e64a7fb39a765915803cfe9e6985c9cf68eebd9b7d35cbb35e3f5649445bb8d21b549cd6afac9eb13956081098574513b358424552199350b6a44a435896ea302b41bf8f347a54014146cee786143af17db9aea4e8c612fc2abd01e4d1d7b6709bf663d03342ed9f8131b0527f4d345d627f3b638270b48ec9187a9560599354ce22413eb0eb88579422c2ec573b125d0bc30f190ba9babab1c2cb43a703f6ec465f8ae9627c08f54dfe7202e7698927a42866aad629a3e9bfb54552326179048d4b1421585fca9485c5ef8fe336966c559a9d0191a8d24c4813a09c0bc29639a86f7c9baaaab3505d08ef03a75cb5111393e66707016db371b2ddd7a92d72a99e7d06ba90902fafb721b688a1cef4e280a6b5e8771f7f0bea4496463eaf431a6b4d7a4f6e0e82485c8aa4d095937231a9b0df4be13252f07ad1cd1d6f43e0395bfe030f451adb7e7d9d047be90931b0d2af1044bbb05c496535e37ea0f8ad15c3b422e4acc724aac539936d8e35f4e6f11aad7e05e2102739d017719ebfe2bd971605dc8f4ce45d9fe34f55848286f61b35cadb1b7c4c24e491895ddef90d89692caa256ef5468592707525184ab1e399fff7b3cd3d48361a5c43d4aaa9a45d5e63ad18e706f5a184d1a2a1dbcd56a527c9ef87f9d1b1ee2de953ab347847687184b3972cb0b7747500500a9f50765dfa8cd7c1ef201cc83d9d2a7ccd3ab4a49023e870e301c2378959f536aec25949a5100f7d60648d35ccff3c8817951f5482e641e6e5729915135004092cca00cdf8fddf2b726de10c415a6fc6732f2bc4d42437cad9130ac97c34fa650e9af259aede703a006b83003a39c32cf0dd83280b5252aacb14d5ec8653d44cf46ac805f4815fa01a688a82ea2b72d7c93708003b8de14d2a9493598d41f0bfd8e3c3a615e96b67f6229daaf1da3697ec6ec2a247cab4ff456f8d9d6bb38", 0x1000, 0x61}, {&(0x7f0000000180)="2fb71f17132a455570ccebb5dea0dd03b06baccd967cabec31", 0x19, 0xdd}, {&(0x7f00000013c0)="b85beca0f67030b7f2224c768f8907372295610e0d5aae656d5432b80adcf40d77b69474054071e964cbcbd85664a3df8256ac6bf9001d6465268ccf6ceceaa96fb71fccebc27a817d6e694c93157cd3af9030bac7f2fceae0164ff2fe7e38fb7ced128b3ec0fcbb303b93d758989d635ce4e05305e071338404f68ba8b4edc46d68c8c4a1ca382813480d6a59900da200b3a31e0c274fbf5b01", 0x9a}, {&(0x7f0000001480)="0b0311caa02fc378523536ed0cdaeaca0d71d8f0c087b4b68b1c10ad9d27f7d951e2b5a5f5ff3b91d2fa418f8a072c1a11b3806561fa12e1fa551581f70bfa1a8e2d34f222a081f1fce4f65fc7e5a202cb6aac601d39cf1b5ac68878bd62d26e206b98f3c5d73049c9e3cc256567c7df925a20954fb9582753d5a9234041ccf970df79a4ea4a3f3e04e7fd5b60cb4976d0dd9cc656c41d089d6bca5393377862e3fc", 0xa2, 0x9}, {&(0x7f0000000300)="0cc6a1fb5d5903870539f7097f50eccfeb074412b398f1916fc6f57b398060672f9b2c714a4373c33e178ce7b604210fe36053768a9f30dfbdb3", 0x3a, 0x189452be}, {&(0x7f0000001540)="09e8e5fe67180bb75ebcae9a0d612f9756765d8296e78da0a0b5a430a1098105c535f34004515c6dd0d057e11229a532b8fa8f2218d458f3797004cd5f8d5b2f58a47015325bf5deaf612bc0e2452f91c05c1db450b3346fd34462af7a402da85959e3f46b79c1694c025044f9f1606e6d4a306d22dadcb1aa4f1f13a59c4a66ab0706f48ba4f053146aab277982a4c791a28faffd8a1415a5834bd081f918963aa5cf2b170a9b0aeae7f23465168a18ea6089fb22f23623b0d2e63e48ce03ffe446f95fa85dda639a2a1603a93a9a9515b5f028fcaa27c0717339457a914c49d52d52a07c", 0xe5, 0x3}], 0x100000, &(0x7f0000001800)={[{@nodots='nodots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}, {@fat=@debug='debug'}, {@nodots='nodots'}, {@dots='dots'}], [{@uid_eq={'uid', 0x3d, r2}}, {@fowner_gt={'fowner>', 0xee00}}]}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:20 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet6(0xa, 0x80003, 0x6b) connect$bt_l2cap(r0, &(0x7f00000000c0), 0xe) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") close(r0) 21:21:20 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x0, 0x1}) 21:21:20 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 1025.184619] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / 21:21:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x17}}]}, 0x28}, 0x1, 0x0, 0x0, 0x52}, 0x8012) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2c00, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x260000, 0x0) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000200)) 21:21:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100), 0x4) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:21:21 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7, 0x7, 0x9, 0x0], 0x4, 0x40, 0x283, 0x4, 0x7fffffff, 0xfff, 0x7, {0x4, 0x1, 0x2, 0x1, 0x5, 0x0, 0xb63b, 0x4, 0x8, 0xb16d, 0x8001, 0x2b4, 0x7, 0x8, "2a528ac8050f9cbad6b0eff95f38725735c6c5b2bf5c7411d4e17516efccf9a7"}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100), 0x4) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:21:21 executing program 2 (fault-call:9 fault-nth:36): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:21 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000140)=r2, 0x12) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1025.847752] FAULT_INJECTION: forcing a failure. [ 1025.847752] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.859078] CPU: 0 PID: 22622 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1025.867126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.876516] Call Trace: [ 1025.879119] dump_stack+0x142/0x197 [ 1025.882789] should_fail.cold+0x10f/0x159 [ 1025.886986] should_failslab+0xdb/0x130 [ 1025.890983] kmem_cache_alloc+0x2d7/0x780 [ 1025.895151] ? __d_lookup+0x3a2/0x670 [ 1025.898975] ? mark_held_locks+0xb1/0x100 [ 1025.903137] ? d_lookup+0xe5/0x240 [ 1025.906721] __d_alloc+0x2d/0x9f0 [ 1025.910195] ? d_lookup+0x166/0x240 [ 1025.913838] d_alloc+0x4d/0x270 [ 1025.917129] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1025.922353] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1025.926419] ? __rpc_mkdir.part.0+0xe7/0x130 [ 1025.931184] rpc_populate.constprop.0+0xbf/0x360 [ 1025.935938] rpc_fill_super+0x320/0x900 [ 1025.935949] ? sget_userns+0x76b/0xc30 [ 1025.935961] ? rpc_pipe_release+0x830/0x830 [ 1025.935971] ? get_empty_filp.cold+0x3b/0x3b [ 1025.935982] mount_ns+0xec/0x190 [ 1025.955916] ? rpc_pipe_release+0x830/0x830 [ 1025.960249] rpc_mount+0xa4/0xd0 [ 1025.963624] mount_fs+0x97/0x2a1 [ 1025.967005] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1025.971510] do_mount+0x417/0x27d0 [ 1025.975060] ? copy_mount_string+0x40/0x40 [ 1025.979303] ? memdup_user+0x58/0xa0 [ 1025.983024] ? copy_mount_options+0x1fe/0x2f0 [ 1025.987527] SyS_mount+0xab/0x120 [ 1025.990982] ? copy_mnt_ns+0x8c0/0x8c0 [ 1025.994875] do_syscall_64+0x1e8/0x640 [ 1025.998770] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1026.003631] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1026.008826] RIP: 0033:0x45a919 [ 1026.012048] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1026.019790] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1026.027072] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1026.034355] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 21:21:21 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f00000000c0)) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000000)) syz_open_pts(r3, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) 21:21:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100), 0x4) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1026.041666] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1026.048934] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1026.056970] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / 21:21:21 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x8000, 0xffffffff, 0x3}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f00000000c0)) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000100)={0xe7ab, 0x3, [{0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}]}) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:21 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) openat$tun(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) r3 = add_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="331d9701f262c234fd80ab139247b9690e4d87415c", 0x15, r2) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r4, &(0x7f0000000240)="db40951195b65329509626", 0xb) r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xffffffffffffffe1, 0x0) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000240)="db40951195b65329509626", 0xb) r7 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000300)={r3, r4, r6}, &(0x7f0000000340)=""/20, 0x14, &(0x7f0000000400)={&(0x7f00000003c0)={'michael_mic\x00'}}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x4000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) sendto$packet(r1, &(0x7f00000000c0)="d12a0da79ccea8de962dbfc76f184baf4e4d0ae69f942f10fb0189d6304260b60ff32ea0e0517e", 0x27, 0x40001, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:21 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:22 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_FP_MODE(0x2e) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 1026.276058] atomic_op ffff88808568f800 conn xmit_atomic (null) 21:21:22 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:22 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1026.466229] atomic_op ffff8880424cb3c0 conn xmit_atomic (null) 21:21:22 executing program 2 (fault-call:9 fault-nth:37): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:22 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r2}) bind(r1, &(0x7f0000000080)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) 21:21:22 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:22 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:22 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x37) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 1026.753314] atomic_op ffff8880a46d0ac0 conn xmit_atomic (null) [ 1026.790605] FAULT_INJECTION: forcing a failure. [ 1026.790605] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.802298] CPU: 1 PID: 22679 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1026.810204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.819583] Call Trace: [ 1026.822192] dump_stack+0x142/0x197 [ 1026.825840] should_fail.cold+0x10f/0x159 [ 1026.825859] should_failslab+0xdb/0x130 [ 1026.825872] kmem_cache_alloc+0x2d7/0x780 [ 1026.834009] ? __d_lookup+0x3a2/0x670 [ 1026.834022] ? mark_held_locks+0xb1/0x100 [ 1026.834031] ? d_lookup+0xe5/0x240 [ 1026.834043] __d_alloc+0x2d/0x9f0 [ 1026.834052] ? d_lookup+0x166/0x240 [ 1026.834064] d_alloc+0x4d/0x270 [ 1026.834076] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1026.834085] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1026.834093] ? __rpc_mkdir.part.0+0xe7/0x130 [ 1026.834105] rpc_populate.constprop.0+0xbf/0x360 [ 1026.842057] rpc_fill_super+0x320/0x900 [ 1026.842069] ? sget_userns+0x76b/0xc30 [ 1026.842080] ? rpc_pipe_release+0x830/0x830 [ 1026.842091] ? get_empty_filp.cold+0x3b/0x3b [ 1026.842103] mount_ns+0xec/0x190 [ 1026.842110] ? rpc_pipe_release+0x830/0x830 [ 1026.842121] rpc_mount+0xa4/0xd0 [ 1026.842130] mount_fs+0x97/0x2a1 [ 1026.842144] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1026.842155] do_mount+0x417/0x27d0 [ 1026.842167] ? copy_mount_string+0x40/0x40 [ 1026.842180] ? memdup_user+0x58/0xa0 [ 1026.849848] ? copy_mount_options+0x1fe/0x2f0 [ 1026.849860] SyS_mount+0xab/0x120 [ 1026.849868] ? copy_mnt_ns+0x8c0/0x8c0 [ 1026.849882] do_syscall_64+0x1e8/0x640 [ 1026.849892] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1026.849909] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1026.849917] RIP: 0033:0x45a919 [ 1026.849924] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1026.962444] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1026.969736] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1026.977023] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1026.984309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1026.991705] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1026.999703] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / 21:21:22 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000004700)={{0x1, 0x1}, 0x0, 0x0, 'id1\x00', 'timer0\x00', 0x0, 0x2, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x5, &(0x7f0000004680)={0x0, 0x20, 0x4, @thr={&(0x7f0000004540)="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", &(0x7f0000004640)}}, &(0x7f00000046c0)) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r6, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) chown(&(0x7f0000000380)='./control\x00', r5, r7) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)={0x319c, 0x27, 0x400, 0x70bd25, 0x25dfdbfe, "", [@typed={0x14, 0x15, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic="c668c21011709c4cbf0f826f3bef6a3d9e0c477c9732a41213d4a862336996db1f3ba042d9ddb3680090eff61a131e3e40a24741089a448b7a6cf230e55d4e775683a44abce7f278c0e972cfbda6337145d7e270c2aad38ee977fa8e621c4e42bffa", @nested={0x200c, 0x90, [@generic="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", @generic="96fc53b6271bd9de6b7cb6f38b5481f919ccef3e1e2d27e6290f4fdf72a978d96057b39bb415b2508cd120ef3f5a68a69238cc8d778163b029dbd153d93b1a034796b31f97cada8957a3c204e9e6fd387742097f7dc1fa104d82d93beb2487bc0e28acd453f637222fd5b0c42fecbf88fe6e2354bbff833755e65ac38eec57de32ca8ed3dfe40f0fd60fba6837061c8b335715a97c6097a0a7981781e12592a111055d1793f1dedea8441568e1d4bbfd150c9d5a9d013c6faf5c2d0afea34072a0b4a15451a79cdb44e260cfb2e16e1a6d99b9fb8ec61cac55d8b08d01e40d24b744cc9ec73bb12f41bee9557df6ccdf1d986c4f8285f2da76981d19371611fadbb89e563e5ae25f3a69b221223aec8fdb08c267d9fcac763af984fae3302464324419b42cea68e1d61735002a0d69b6ae82117269fcaeaa715b5561590658ff4afaa38c4e6098285be762bb621d05bfa8e77d489d1b2778f9eda1980a676072f5b84b264ba7e9e1e624750cf5c8786e3559b7629b412f401fe5edf747fba21d7cbe4eea93ee9f312f56755bb54154978388ae953064660610bf88c997b752dbe2b245b69c09ea054d558a011fbdf9a951831468e29f2c046a3f13518587f03a1ad7f1c06f77854b763d0a9d16a8a7e061a7c184fc15185e4567a98d3a10e312e1199c28a599ff7233e73a31e6527c3297f214902291f46a0e6ddebcbedcd33cf21a02d1ecb1e1dd7ef5c3a04fdaeb763264294c4f790fe5fd60d35db0b9f27357d86342c73738292f99bfaa94755d867053a70304f55dccee496fa524a18df613fcdfd01f81488542fe6c44cd7edf9b72ef18027db10f757e0c920f7290c49bbbfb9da56377f993f4b0e12ded8b61793fe5f66954728d13f13603e8b56da1d8c5e8f56b784e92bb1240d52d51afa23456494bc56bf69ec80c00a94f96cf459b2e36a745600aedbdaad2c372af94efc91eec31c3779719388827917526a67a07d2fd58675f1ac25cd91a03433d450fefa93d2bacc0f3aeda31d00099896e86daabf07ba0690c25ef6effcfe094579c166af7c319893c3aa70b4b681b5678f48e37f409a882016f9daf24d6bf9079dae8488f74a0d229219139abffc2438f4c8b2bd3b87bf4eb5453c75d2f863f1ed3600c11d4f208e3e38e02e026c18fa19a14cb3df26e3eb5249e8ad89eec9cf080ab8e7f4b6156125bbf1e6018a35bdf79bb541146575d5f1049df302eb44a5e1f9fa47e6277a210ed348c79abc55d12f093bd59992253bc54632b26362df51f23505bd75b5f6826f9031767a12e34aaafec2ef9d59926041ef9b06fbc0b6d9c8fee82ac7f44608883e7aa4b6bced90f07e58169137d6a6178005cfe33863d9e14af618960f4a98e5be142c7124a3fdf628cadf728be9b5f24dd30a72bb5dbde0609625986ab05cf1235aef6c86797e6327fc8b0ad6022734188fc954c87d9502246114c5deb47ae05dadcc2755b4781b4f4c03a50e417577497cf4449156aeb70ae33ec58b4900c4a9abb70eb6a962231b57aa839798b085616753c110d140bd33106dfcd15003320330c68945cc8702c72c59150381337efdab4e200677d4656ab1f7e5d95d06c440ea9b28ede6d3dd2777807c02aaeda3a1dcd4c24403abb9960e7655c9e18b18842ad9acb5ace8315374d3aa77ae0b1ac3c0284ac6fad144521dc47fc524b35799d06427f2f9b31384bea2051e3bb5a1b78988c79595a3a8847ca77d367f0f87469365fe6e9f4df77da9857f5d9423b4a6d2217f463fae114b8d5f8bd94b5392831dedaf7c285217a35400a9fe6b6f38cbd07726877fc87b0516bfa7325f73babcaaf8e0b722e5458f5446ab4bc050a0adef4df06b2a057705d32ebe710d7c532a567cfddd384f0c51b9fae8dc1c0b5fbb89a8b517fc132399cac3dc2c2b6c5af6161dd58688608990b2610874f1670d0cf57e22825d6a25975023a31236134c82985b3a444f7cad2827fd8f9518125c00c6bd938cefd409ede884cf9c90e91693cfdf40db3e1d5cf649dd9d49b543c4f131a4b86684a4f2ea4b7999cfd8d3c70ca9c1b28074f26cf9933229e59b25b7f58cd35f6ca8ebbd1dcc94d98f4f3a98ea8f14451d66c4ace46a0649a2724445c9f906c8cdc081830d2b2f3b65eff3c3f61d5c445290da9ce43b2ab92e398d432d8a09ae6645f150ffce1bf4eff6e39db370873404287046c31bb7e78de86703b08c8e21448114303b97fa45e5d4a60ec4da6072a459203e41e545aaa826ffba2634d9385b8b18af92875255a9390d3ebaaae62f3e866f4b1024c599de436f84dacf7ae6531b8a94fab5783fccffe1b4aad92cc3d6fa78a9619b0521e487bd5cc976dcfc90e2f6779056fd78d8a5ecbbf7b7c5644cff12ff51887c2c685d164a8de780f0221bfb506d6446beed4ce746f5b7bafa84fd877c1f43508d1af357c1625ad9c82a64ea5d2ef1790b86fc6f769290b5b14630760334ae48a7746cf2ec75cf515848c9205abb5abfd03b2d8ad8709395cc75b5f1e4f7d0c596e970fab7842e68233f33d53cbab8aaffedd191271391a20ca82959760f91d33a20a5a8ab274c381cd9a7c0f4c37a98ee569d6fada7167aecb0928881d9b11757da19894ce0e649b6a2526a7bcba1712ee60bb982c803d44550bd92bc03a32140b10871d90f31c17daf07017461cfcbf7f9520e2c2fd3a02219386119e93150b3f01d909fa3f8d987edec718e8c8059762f50dae7b33674ba24efef58318b4fd984e405a845907cdd606012acba15649847c4b81c60abcd177882a59c02de6ccbb04449e44c63ea4d57ff132edc32f662b32e4fea69cd951e17a70202851c811e23a948603d503442a12a3a63fbc96dd5385d8386ac45102c96661626a498f7f9857ef28c0a154c0c412aa8ec20716a857fbd38076145d0e8a82190decffce2908b039986a3e6e10ea583e66742a46b52796b3e832a3b8155839e54b56ec9c43b609ae329a6bdef48ad421585acf8fc8d37dddd7f6a4d2aac478cff5ea6f65a9f58734ee70cd1b23a8b420e928a1f980147a4a625499665c5962f4dd48019b759e05065cea8adf4f4b32d689cb1d3774688a62c556a046b7dd11e2ab363d23b01ad2f1b011c8c6ed0454d9f81df93d0e9129212b0433bcfab63dfbb32c18fbf42eba74982ebdb921033032790418b0e29bb9208e4bd6937c147c0a884b9d154eaea708b096136ba36010e1ea269728559c400654027f2b47131b4199bfc67e5d6225e98117e3d45324891b6838aeb47e5466cb5e843c51fd0f9d896c83f70fe7588d78eaa523b1e0b4d828ecfc048f8699cea8a3c2769a8274f2b871b158b4befcf6c47b4427b93da1eb3e900101e99ff68fb7353bd4c7a550eaf371d56629fd5fe2285619dd26069d02cb9ba0751e64870f99a5278bede5a53d4c80e246d59c8b6e04fdd7181b34f7d6714015f29080de7400e1ce5239ab5873baf425dc92b515011f31d4ba3bb0dc04b89e654d4f1210d56a1d304f0c1cf8de8099324f0e491f1847b21e204a97ea275441d029d87a894e9c369669c0dab58941d00c1a24f0e475c21acdd96e125adb94f25150357843bc5584e4fd5f0ef15e056502da94c1a3dc9b8aae094d024e15450d3b151003d9aea7af8bd3b44bdc4ee2dc951f7b6f8398050f25c2e0267d01cf7730b25e3b1a3c8b1e867f75925a25f9503dc51672c12d55ab78c5bac4941898f72d47360843d52f2f3f952a83a3034da9d9908182f6e5b877d790958cb7fb78b578eb0f81f933629f6b77ebb089b70fb79a6e9f2614c1a804e4969bd73de3a4c0aa29fcfc323f5737a08f2e746ddd21c82db136478a8da79b4cac47c4807acc15c4b5a46633f3d916d5a7650029acfaa30dcaf7459944c4daeb4c73b4d018c7a93a2cd022c46a7b9c4c857da3f9df049d436b9e768090ab87c175b80b0d8c120dee448f8d7b473b19bb14904c233c86ca2f74014f4a356c674cabea6362ca57235f40e925ebc5089fbd6a04044049c9712637093fbd4e47d56d44f5b77c0ec8e7f446021728a32751e6b83ef4a2878a1b1545000ce223ed2132f222d5a33c0f1fe7661ab2b3c782572ba40ccee0d6b157beaca5992d2d56461214e94e0cbf6b85578e0fd5e8c2443cb3288ea4294168fcad87d3670f711d08c31d579f89b1a30cbc29f538f5bc646a7a7f1810caf55555195fe7f8f3f6ba9c5f5acdcf5fac6d22c917512cd641c2e36f145197ae73eba17ceeb203485c49f3f3fbad0302f4479b182b2e7f5432eaeb66d93119f21d98a9ef0fc85b91c86752b467b975796b20198fd3ec7deb817279d9fa21117fc78138e981faa48e9a7810d4f7c56d51dcdbeb187f871125b4539db659c7e241e3638a726d8a083e327826c00701ef2b958b999bfeb2938e5a85dd3f2d1fab40bedfd5011836e68cebbef52a54ca99d0377adb6c4bbd44c938a7d21f91011334a9a112fa7c28be8f4e51306178a75be325e4ed6dceaf7f47d5dde11ac75fc59dee9b00a4d2fd926eeed269ff944e0ba6f9b998ae0cc3eda49a8fa48738b0b1c58201e1d1d39cb6664b68dd2f3544ad2862ed839d50672ace2226fa3289dd70d3ac5547b34b9948128eb9997404a009932729648d8b70ac37abfbb56adeab36ba12ace10ab7524340fd36cf8201b16efd97de43d2ec0cfa9ae90008e2e3db26529a334ecbc51a770b921cbf2520bea18c4bdc46ed8de72d9867b14eb739f8ee194b7fe8b610c42056e98f3ee9290e98fb088c9eb642904e73b9cec4ac3eabfbce2f32ce053a74322439e14652f8392c3753cbcd1a91a5b22ec8057a09bba1edd65602aa506d9a0879359ff47d0af464de8bcc0052e3a2138497ee0f9b657de7a4ad970a24770e6dcd8eaa4a26107edcd465d59047a7e92636953fb8213d89f1933014cedeaf19a51192bcc197a90d53edd4a2e948eb854f7de8a293813c032484dabaab2f42e995572468380e1bd8e92f3e32add5c321820a56cb6dc102a9c94afb23d7ec60f37f1d54b3bed2c17e34e85e1e680bfff04800a567b14f9b127b6452edf7a3b9e5fff155856062afb23bd3c0bdfd661df2f1b9cd758bd377b86d1578ed5934a0913089e25ba44a653cfae260e79714e58f195341d5f5171a4200b593b27cad7f9e2217db0c832c66b42466ef49c2a2f1b85fb396b2ba417309b9f4b98bb44f1435344da7d8d971ce28f3cab1421a29d77ec0bcccd2564d44ed364741163f6edcece146fcbeae179d55a87c30463209d60b9cc7526be97846bbbf9ab33bd7a97e8d7612f48a6a0debd75a280d0b801a9cf4e2deb964dc5398bd41fc8fe69c6670aa149ecf18040c2897e74969c72879dfc2316a340683006ee176d8cb3fd77fd3558f70ddbfca02100d4fc30393d2e3af4e981aacf93bf6827243b7e940ef3ca7b65693698296e693483ade51d58a480be4b321174fb7e9401f86e728087148006505807266e98f73804b943edc7be4a54cc9db8597c583f59bf70c8e41f14f6729d0168a1057f7c8893f9893d78568ba79390b17e3ee66078d06bf993d1487bd69c3f2cf55d8db00159605d1ff79423642ce9cfef58f1369bc423f499af92bedf8d5aa4c0bbb7f5bdce83fd4dfcd82fe2a5f9a15c16aedc29824d8affe4c6c7d082fd5a999bee1b173f312668155684f30bc3f176e9325aed9adb12ab75cedb4a46e177eade1e648fc9bcdc990397f09842eac8cdfb36a89103c94e174eb9f874c8fc0157f2c937e4ab5dcae5b867e69f98b24b095e1088b02a180d7d27182fc", @typed={0x8, 0x12, @str='\x00'}]}, @nested={0x10ec, 0x92, [@typed={0x8, 0x65, @uid=r5}, @typed={0x8, 0x3c, @u32=0x7fffffff}, @generic="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", @generic="21fcbcfb0861e09bc5aa9f0fd029bbaca2c5920cdd75d84a4c7959941995566a8f9d2d0616d8b3883d977411c3ced89fb735e4db0035261c241958f2debed964798f85ba2aba67f059d8533a5eee855eb9a077ed33", @typed={0x14, 0x200, @str='/dev/snd/timer\x00'}, @generic="56704b60d33fc653a728ffed39c00f1456e4942e4c046a68246031a349e94e8dbb8361084f3d19293ad3ddb42e8e51e6ffdb73043724f75b761d", @generic="4708aa4b3b7b79da334913e9f4bfeb018e5ff074cd0df9e10cc7c700d4b1f1eae17d7cff0d83de5a32c6d103d55abb331272696509"]}, @typed={0x8, 0x94, @fd=r8}, @typed={0x14, 0x4d, @ipv6=@mcast2}]}, 0x319c}, {&(0x7f00000000c0)={0xec, 0x11, 0x100, 0x70bd25, 0x25dfdbfe, "", [@nested={0xdc, 0x79, [@generic="1782e597e41bb13ea68072d665b978c3024aa3753d7b59d99dd47fd13e4115df6a31cd8bd7b6bbee7edbed162292602d1a9fc694e196d7145347fb1a1e5cb99c5c92d30d", @generic="db61b94d288d44370a16686f8580da3b631f0a82ff24b7d6f944978f1781f8032fc8f64167a959846f7b8393fddd681d209012ff6d61b678d73569b560673f327bd8922daba1ff6a22169d6a1fbd36761d00682855ccf2735f407314fec7a75dfb6d8134eb55c608897fa49a3b9f7016fa579855c26104828c071d506f47adee2921081d1b48a2d4374148d249faf61b2b"]}]}, 0xec}, {&(0x7f0000003500)={0x1010, 0x11, 0xe0f81d90f50816ff, 0x70bd27, 0x25dfdbfc, "", [@generic="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"]}, 0x1010}], 0x3, 0x0, 0x0, 0x4000000}, 0x40003) 21:21:22 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 21:21:22 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:22 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="1e50fcffc4602fd5887be5766c", 0xd) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) ioctl$TIOCCONS(r0, 0x541d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:22 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 21:21:22 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 1027.133288] atomic_op ffff88808f6b3380 conn xmit_atomic (null) 21:21:22 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfff, 0x0, 0x6}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x86c243, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="34fd", 0x2) r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept$alg(r6, 0x0, 0x0) r8 = dup(r7) write$UHID_DESTROY(r8, &(0x7f0000000080), 0xfff2) recvmmsg(r8, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f00000003c0)=""/177, 0xb1}], 0x2}}], 0x1, 0x0, 0x0) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x3, 0x5}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r10, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x0, "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", 0x6, 0x4, 0x0, 0x4e, 0x0, 0x6, 0x5c}}}, 0x120) r11 = getpid() sched_setattr(r11, &(0x7f0000000040)={0x30}, 0x0) r12 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]}, 0x177) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r13, 0x0, 0x0) r14 = getpgrp(0x0) waitid(0x0, r14, &(0x7f00000002c0), 0x5, 0x0) r15 = getpgid(r14) r16 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r16, 0x8904, &(0x7f0000000000)=0x0) r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r19 = openat$cgroup_ro(r18, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r20 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r21 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x6d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r22}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r22}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r21, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r22}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r22}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r20, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r19, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, r16, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r15, r13, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r22}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r22}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r12, 0x0, 0x5, &(0x7f0000000080)='em0-\x00', r22}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r22}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r22}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r11, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000140)='lotrustedmd5sumem1:\'\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r10, 0x0, 0x1, &(0x7f0000000500)='\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r9, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)='sh\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000100)='/dev/kvm\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r8, 0x0, 0xd, &(0x7f0000000200)='xts(serpent)\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, r5, 0x0, 0x3, &(0x7f0000000540)='{\\\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r3, r4, 0x0, 0x4, &(0x7f0000000140)='^(\'\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r2, 0x0, 0x7, &(0x7f0000000140)='GPL/@.\x00', r22}, 0x30) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) r23 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r23, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r25, &(0x7f0000000340), 0x413955de) vmsplice(r24, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1027.374365] atomic_op ffff888088435c80 conn xmit_atomic (null) 21:21:23 executing program 2 (fault-call:9 fault-nth:38): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:23 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200000, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:23 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:23 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000040)) msgget$private(0x0, 0x80) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r3, 0x0) sendto$x25(r3, &(0x7f00000001c0)="f58f3024733e1202db4b3aef537714f0b0cdb7f8d6c37a636447675e86261dbf5c0694a31ffad6d709855bba664e6a2e7ed3781390f882fd3ffdfb0eb12980a0dd414d93368c50543ada15a735b7d243fc6d52748178f4e70c9f5eea4af1ca99ef6b1d5923e27245097d2c6945", 0x6d, 0x30, &(0x7f0000000000)={0x9, @remote={[], 0x1}}, 0x12) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000000c0)={{0x1}, 0x0, 0xfffffffc, 'id1\x00\x00\x00\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 'timer1\x00', 0x0, 0x2000000000000004}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)="dc14ef28aa3b53f0bb78f7ec432e4875c3c6c843f5a6fe011d52d3e1be6e91eff8175852a5b75d99fdd8cb402f71cfd3895e02049f6635ebf46e00b965082d", 0x3f) 21:21:23 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 21:21:23 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1027.539316] atomic_op ffff888093eedc80 conn xmit_atomic (null) 21:21:23 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7000000, 0x72182) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000100)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x50021) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000040)=0x9) [ 1027.699789] FAULT_INJECTION: forcing a failure. [ 1027.699789] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.711595] CPU: 1 PID: 22743 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1027.719598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.728963] Call Trace: [ 1027.731572] dump_stack+0x142/0x197 [ 1027.735222] should_fail.cold+0x10f/0x159 [ 1027.739423] should_failslab+0xdb/0x130 [ 1027.743423] kmem_cache_alloc+0x2d7/0x780 [ 1027.747580] ? d_drop+0x51/0x60 [ 1027.750887] ? rpc_i_callback+0x30/0x30 [ 1027.750897] rpc_alloc_inode+0x1a/0x20 [ 1027.750908] alloc_inode+0x64/0x180 [ 1027.750917] new_inode_pseudo+0x19/0xf0 [ 1027.750926] new_inode+0x1f/0x40 [ 1027.750933] rpc_get_inode+0x1d/0x1f0 [ 1027.750939] ? d_drop+0x51/0x60 [ 1027.750947] __rpc_create_common+0x5a/0x1a0 [ 1027.750958] rpc_populate.constprop.0+0x122/0x360 [ 1027.750973] rpc_fill_super+0x320/0x900 [ 1027.789961] ? sget_userns+0x76b/0xc30 [ 1027.793874] ? rpc_pipe_release+0x830/0x830 [ 1027.798245] ? get_empty_filp.cold+0x3b/0x3b [ 1027.802671] mount_ns+0xec/0x190 [ 1027.806053] ? rpc_pipe_release+0x830/0x830 [ 1027.810389] rpc_mount+0xa4/0xd0 [ 1027.813770] mount_fs+0x97/0x2a1 [ 1027.817145] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1027.821635] do_mount+0x417/0x27d0 [ 1027.825186] ? copy_mount_string+0x40/0x40 [ 1027.829438] ? memdup_user+0x58/0xa0 [ 1027.833164] ? copy_mount_options+0x1fe/0x2f0 [ 1027.837676] SyS_mount+0xab/0x120 [ 1027.841145] ? copy_mnt_ns+0x8c0/0x8c0 [ 1027.845047] do_syscall_64+0x1e8/0x640 [ 1027.848953] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1027.854007] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1027.859203] RIP: 0033:0x45a919 [ 1027.862396] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1027.870117] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1027.877397] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1027.884673] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1027.892067] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 21:21:23 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = dup(r1) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0x20000000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000000c0)={{0x7f, 0x80}, {0xac, 0x6}, 0x5, 0x0, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x0, 0x400000000000000}) 21:21:23 executing program 3: r0 = socket$inet6(0xa, 0xa, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0) write$P9_ROPEN(r3, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x80, 0x2, 0x7}, 0x424}}, 0x18) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000140)) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:23 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r4, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r4}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={r4, 0xffffffab}, &(0x7f0000000040)=0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0xfffff801, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 21:21:23 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00\x00\x00\x00\x00\x00\x00\xf8\x89\a\xf6\xff(\xbb\xf2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KmT\x00', 'timer1\x00\x00\x00\x00\x00\xff\xff\xff\xe9\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfd\x1b\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0x0, 0x0, 0x2000000, 0x1000}) [ 1027.899347] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1027.906840] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry gssd [ 1027.916163] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1027.985852] atomic_op ffff88808b6953c0 conn xmit_atomic (null) 21:21:23 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="4466e16c87534e1ff657d7f890f15d48", 0x10) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:24 executing program 2 (fault-call:9 fault-nth:39): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:24 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x400, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r4, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r4}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r4, 0xffff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r5, 0x4}, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:24 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:24 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) 21:21:24 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x4000, 0x0) recvmsg(r4, &(0x7f0000001580)={&(0x7f0000000380), 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/31, 0x1f}], 0x3, &(0x7f0000001540)=""/27, 0x1b}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="20436b93689d1a8e370501d60bcb4e29d38f9b6695ab47feaa1bc39e10fb8ddf3ae1980b86f49ed499f19661c400", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) recvfrom$packet(r3, &(0x7f00000000c0)=""/160, 0xa0, 0x100, &(0x7f0000000000)={0x11, 0xee, r7, 0x1, 0x18, 0x6, @random="f5c0f7c0f23d"}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) fsetxattr$security_selinux(r2, &(0x7f00000015c0)='security.selinux\x00', &(0x7f0000001600)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x2) [ 1028.494650] atomic_op ffff88809448dc80 conn xmit_atomic (null) [ 1028.536784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40296 sclass=netlink_route_socket pig=22784 comm=syz-executor.3 21:21:24 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) [ 1028.563070] audit: type=1400 audit(1576790484.310:126): avc: denied { relabelto } for pid=22775 comm="syz-executor.3" name="RAW" dev="sockfs" ino=214865 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_exec_t:s0 tclass=rawip_socket permissive=1 [ 1028.616540] FAULT_INJECTION: forcing a failure. [ 1028.616540] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.629344] CPU: 1 PID: 22789 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1028.637243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1028.646699] Call Trace: [ 1028.646721] dump_stack+0x142/0x197 [ 1028.646738] should_fail.cold+0x10f/0x159 [ 1028.646753] should_failslab+0xdb/0x130 [ 1028.646762] kmem_cache_alloc+0x2d7/0x780 21:21:24 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x2, @rand_addr=0xfffffff7}], 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r3, 0x0) read$midi(r3, &(0x7f00000000c0)=""/169, 0xa9) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1, 0x0, 0x10, 0x1, 0xb404}, 0x8000, 0xfffffffe, 'id0\x00', 'timer1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaf\f\x00\x00\xcf\x00', 0x0, 0x200000, 0x0, 0x200}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r4, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000340)={0x0, @reserved}) r5 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0x5a, "63208364249e4522a7fb3aa1e74e39503bb32e580238a104356d4e44387e2d92e416865ed7e6c586ae2240cffec6ddea49486da3f60b08bcc94ee2adff21a11eed4d781d51a63bd55cdc480d4e7c29462dae517e3bf03db4ce49"}, &(0x7f0000000040)=0x62) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000480)={r6, @in={{0x2, 0x4e21, @multicast1}}, 0x4, 0xfffa}, &(0x7f0000000180)=0x90) [ 1028.646770] ? __d_lookup+0x3a2/0x670 [ 1028.646782] ? mark_held_locks+0xb1/0x100 [ 1028.673596] ? d_lookup+0xe5/0x240 [ 1028.677168] __d_alloc+0x2d/0x9f0 [ 1028.681361] ? d_lookup+0x166/0x240 [ 1028.685007] d_alloc+0x4d/0x270 [ 1028.688328] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1028.693532] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1028.697609] ? down_write+0x38/0x90 [ 1028.701263] rpc_populate.constprop.0+0xbf/0x360 [ 1028.701850] atomic_op ffff8880a66a7840 conn xmit_atomic (null) [ 1028.706050] rpc_fill_super+0x3a9/0x900 21:21:24 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1, 0x1, 0x18}, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000180)={0x0, @reserved}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 21:21:24 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1028.706066] ? rpc_pipe_release+0x830/0x830 [ 1028.706079] ? get_empty_filp.cold+0x3b/0x3b [ 1028.706089] mount_ns+0xec/0x190 [ 1028.706101] ? rpc_pipe_release+0x830/0x830 [ 1028.733333] rpc_mount+0xa4/0xd0 [ 1028.736713] mount_fs+0x97/0x2a1 [ 1028.740093] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1028.744598] do_mount+0x417/0x27d0 [ 1028.748152] ? copy_mount_string+0x40/0x40 [ 1028.752410] ? memdup_user+0x58/0xa0 [ 1028.756136] ? copy_mount_options+0x1fe/0x2f0 [ 1028.760649] SyS_mount+0xab/0x120 [ 1028.764113] ? copy_mnt_ns+0x8c0/0x8c0 [ 1028.768016] do_syscall_64+0x1e8/0x640 [ 1028.771915] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1028.776788] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1028.781992] RIP: 0033:0x45a919 [ 1028.785189] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1028.790984] atomic_op ffff888080b36640 conn xmit_atomic (null) [ 1028.792900] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1028.792907] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 21:21:24 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1, 0x0, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x2e3}) 21:21:24 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 1028.792912] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1028.792918] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1028.792924] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1028.793083] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory gssd [ 1029.030165] net_ratelimit: 14 callbacks suppressed [ 1029.030170] protocol 88fb is buggy, dev hsr_slave_0 [ 1029.040252] protocol 88fb is buggy, dev hsr_slave_1 21:21:24 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x802, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xf, &(0x7f0000000100)=0x7, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x413955de) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1029.270127] protocol 88fb is buggy, dev hsr_slave_0 [ 1029.270183] protocol 88fb is buggy, dev hsr_slave_1 [ 1029.275227] protocol 88fb is buggy, dev hsr_slave_1 21:21:25 executing program 2 (fault-call:9 fault-nth:40): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:25 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 21:21:25 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r1, &(0x7f0000000800)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) fstat(r6, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r8) chown(&(0x7f0000000380)='./control\x00', r5, r8) setresgid(r0, r3, r8) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) 21:21:25 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x6, r4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x1, 0x0, 0x0, 0x0, 0xce15}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x9}) r5 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r9, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r9}, 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r9, 0xfffffe00}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000140)={0x4000, 0x8000, 0x5, 0x7, r10}, &(0x7f0000000180)=0x10) 21:21:25 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 1029.405900] atomic_op ffff88808f6b2600 conn xmit_atomic (null) 21:21:25 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="4466e16c87534e1ff657d7f890f15d48", 0x10) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:25 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x6000000000000003, 0x6) 21:21:25 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 1029.561362] FAULT_INJECTION: forcing a failure. [ 1029.561362] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.572747] CPU: 1 PID: 22837 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1029.580746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.590338] Call Trace: [ 1029.592959] dump_stack+0x142/0x197 [ 1029.596612] should_fail.cold+0x10f/0x159 [ 1029.600782] should_failslab+0xdb/0x130 [ 1029.604801] kmem_cache_alloc+0x2d7/0x780 21:21:25 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) [ 1029.609271] ? __d_lookup+0x3a2/0x670 [ 1029.613089] ? mark_held_locks+0xb1/0x100 [ 1029.617268] ? d_lookup+0xe5/0x240 [ 1029.620825] __d_alloc+0x2d/0x9f0 [ 1029.624297] ? d_lookup+0x166/0x240 [ 1029.627981] d_alloc+0x4d/0x270 [ 1029.631636] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1029.635193] atomic_op ffff8880a1636f00 conn xmit_atomic (null) [ 1029.636843] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1029.636857] ? down_write+0x38/0x90 [ 1029.636869] rpc_populate.constprop.0+0xbf/0x360 [ 1029.636886] rpc_fill_super+0x3a9/0x900 [ 1029.636898] ? rpc_pipe_release+0x830/0x830 [ 1029.656273] ? get_empty_filp.cold+0x3b/0x3b [ 1029.668991] mount_ns+0xec/0x190 [ 1029.672373] ? rpc_pipe_release+0x830/0x830 [ 1029.676724] rpc_mount+0xa4/0xd0 [ 1029.676740] mount_fs+0x97/0x2a1 [ 1029.676755] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1029.676766] do_mount+0x417/0x27d0 [ 1029.676779] ? copy_mount_string+0x40/0x40 [ 1029.696234] ? memdup_user+0x58/0xa0 [ 1029.699963] ? copy_mount_options+0x1fe/0x2f0 [ 1029.704475] SyS_mount+0xab/0x120 [ 1029.707939] ? copy_mnt_ns+0x8c0/0x8c0 21:21:25 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1029.711841] do_syscall_64+0x1e8/0x640 [ 1029.713940] atomic_op ffff88808d3a8600 conn xmit_atomic (null) [ 1029.715759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1029.715778] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1029.715787] RIP: 0033:0x45a919 [ 1029.715793] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1029.715803] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1029.715809] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 21:21:25 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) accept$alg(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1029.715814] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1029.715823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1029.736390] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1029.736650] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory gssd [ 1029.891358] atomic_op ffff88808471b380 conn xmit_atomic (null) [ 1030.070131] protocol 88fb is buggy, dev hsr_slave_0 [ 1030.075344] protocol 88fb is buggy, dev hsr_slave_1 21:21:25 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f00000000c0)={0xd, 0x3ba3}) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000140)={0x101, 0x81, 0x1}, 0x6) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$rose(0xb, 0x5, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x413955de) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:26 executing program 2 (fault-call:9 fault-nth:41): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:26 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:21:26 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:26 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(r1, &(0x7f0000000140), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000000c0)={0x8001003, 0x9, 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x46) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:26 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1030.465598] FAULT_INJECTION: forcing a failure. [ 1030.465598] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.477057] protocol 88fb is buggy, dev hsr_slave_0 [ 1030.477136] protocol 88fb is buggy, dev hsr_slave_1 [ 1030.487693] CPU: 1 PID: 22894 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1030.495580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.504943] Call Trace: [ 1030.507568] dump_stack+0x142/0x197 [ 1030.511249] should_fail.cold+0x10f/0x159 [ 1030.515459] should_failslab+0xdb/0x130 [ 1030.519454] kmem_cache_alloc+0x2d7/0x780 [ 1030.523703] ? d_drop+0x51/0x60 [ 1030.527009] ? rpc_i_callback+0x30/0x30 [ 1030.530992] rpc_alloc_inode+0x1a/0x20 [ 1030.534887] alloc_inode+0x64/0x180 [ 1030.538658] new_inode_pseudo+0x19/0xf0 [ 1030.542736] new_inode+0x1f/0x40 [ 1030.546116] rpc_get_inode+0x1d/0x1f0 [ 1030.550068] ? d_drop+0x51/0x60 [ 1030.553543] __rpc_create_common+0x5a/0x1a0 [ 1030.557898] rpc_populate.constprop.0+0x122/0x360 [ 1030.562851] rpc_fill_super+0x3a9/0x900 [ 1030.566840] ? rpc_pipe_release+0x830/0x830 [ 1030.571175] ? get_empty_filp.cold+0x3b/0x3b [ 1030.575597] mount_ns+0xec/0x190 [ 1030.578995] ? rpc_pipe_release+0x830/0x830 [ 1030.583334] rpc_mount+0xa4/0xd0 [ 1030.586713] mount_fs+0x97/0x2a1 [ 1030.590204] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1030.594857] do_mount+0x417/0x27d0 [ 1030.598418] ? copy_mount_string+0x40/0x40 [ 1030.602675] ? memdup_user+0x58/0xa0 [ 1030.606548] ? copy_mount_options+0x1fe/0x2f0 [ 1030.611152] SyS_mount+0xab/0x120 [ 1030.614617] ? copy_mnt_ns+0x8c0/0x8c0 [ 1030.618523] do_syscall_64+0x1e8/0x640 [ 1030.622423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1030.627281] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1030.632475] RIP: 0033:0x45a919 [ 1030.635670] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1030.643410] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1030.643416] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1030.643421] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1030.643428] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1030.643434] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1030.643735] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry clntXX [ 1030.689039] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory gssd 21:21:26 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:21:26 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:26 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r6}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={r6, 0x3f, 0x10, 0x2, 0x200}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={r7, 0x3, 0x5, [0xfff9, 0xfe, 0x0, 0x1006, 0x5]}, 0x12) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:26 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:21:26 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:26 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1031.110144] protocol 88fb is buggy, dev hsr_slave_0 21:21:26 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x200000, &(0x7f00000003c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r6 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1e) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:26 executing program 2 (fault-call:9 fault-nth:42): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:26 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:21:26 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:26 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:26 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:27 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:27 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) [ 1031.369184] FAULT_INJECTION: forcing a failure. [ 1031.369184] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.380633] CPU: 0 PID: 22957 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1031.388532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1031.398090] Call Trace: [ 1031.400748] dump_stack+0x142/0x197 [ 1031.404405] should_fail.cold+0x10f/0x159 [ 1031.408581] should_failslab+0xdb/0x130 [ 1031.412587] kmem_cache_alloc+0x2d7/0x780 21:21:27 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:21:27 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 1031.416848] ? __d_lookup+0x3a2/0x670 [ 1031.420671] ? mark_held_locks+0xb1/0x100 [ 1031.424933] ? d_lookup+0xe5/0x240 [ 1031.428471] __d_alloc+0x2d/0x9f0 [ 1031.431942] ? d_lookup+0x166/0x240 [ 1031.435598] d_alloc+0x4d/0x270 [ 1031.438903] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1031.444115] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1031.448282] ? down_write+0x38/0x90 [ 1031.452043] rpc_populate.constprop.0+0xbf/0x360 [ 1031.456836] rpc_fill_super+0x4c4/0x900 [ 1031.460835] ? rpc_pipe_release+0x830/0x830 [ 1031.465189] ? get_empty_filp.cold+0x3b/0x3b 21:21:27 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) [ 1031.469807] mount_ns+0xec/0x190 [ 1031.473276] ? rpc_pipe_release+0x830/0x830 [ 1031.477620] rpc_mount+0xa4/0xd0 [ 1031.481009] mount_fs+0x97/0x2a1 [ 1031.481023] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1031.481035] do_mount+0x417/0x27d0 [ 1031.481052] ? copy_mount_string+0x40/0x40 [ 1031.492529] ? memdup_user+0x58/0xa0 [ 1031.492540] ? copy_mount_options+0x1fe/0x2f0 [ 1031.492552] SyS_mount+0xab/0x120 [ 1031.492560] ? copy_mnt_ns+0x8c0/0x8c0 [ 1031.492574] do_syscall_64+0x1e8/0x640 21:21:27 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 1031.492582] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1031.492601] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1031.526395] RIP: 0033:0x45a919 [ 1031.529604] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1031.537332] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1031.544625] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1031.551907] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1031.559197] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1031.566501] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1031.574301] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory clntXX 21:21:27 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000140)={0x2, 0x8000, 0x8, 0x1f, 0xe7}) sendfile(r0, r1, 0x0, 0x20020102000007) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r4, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:27 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:27 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:27 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:27 executing program 2 (fault-call:9 fault-nth:43): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:27 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:27 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:28 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x7, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f00000000c0)) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f00000004c0)=0x10000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x8000, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0xffffffff7fffffff, 0x8) r5 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r5, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xfffffffe}, 0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000340)={r6, 0x9e77}, &(0x7f0000000480)=0x8) r7 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="81001a00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r10, 0x0, 0x8}, 0xc) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r11, 0x0) ioctl$BLKALIGNOFF(r11, 0x127a, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x8, 0x0, 0x833, r10}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYRES32=r10, @ANYBLOB="b4000052000000000000004b00020369795ec01cda1292e640da16e6676173aa8d7d7030192e609769438d22beb6ee7f1a44dd68a0febbc629d318b089327c309eea20beebb5f0c1f1e4e0c51367f57c7e7b29de062247173da446dcec5611ab267eebd5cf0f58802ca6ee624627bae887094e3edba7ef9a64b73b52177a290e01c4a0471977381558257331e24f65aa706d3f905fe795c5490b3a7516fc57685bd00cd8799bd8be3275e92c3e434b4ed89e9f3493b3574b"], &(0x7f0000000140)=0xbc) ioctl$sock_inet_SIOCSIFPFLAGS(r8, 0x8934, &(0x7f0000000200)={'nr0\x00', 0x1000}) gettid() [ 1032.227627] FAULT_INJECTION: forcing a failure. [ 1032.227627] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.239009] CPU: 0 PID: 22999 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1032.246906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1032.256273] Call Trace: [ 1032.258891] dump_stack+0x142/0x197 [ 1032.262542] should_fail.cold+0x10f/0x159 [ 1032.266714] should_failslab+0xdb/0x130 [ 1032.270705] kmem_cache_alloc+0x2d7/0x780 21:21:28 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1032.274865] ? d_drop+0x51/0x60 [ 1032.278157] ? rpc_i_callback+0x30/0x30 [ 1032.282140] rpc_alloc_inode+0x1a/0x20 [ 1032.286040] alloc_inode+0x64/0x180 [ 1032.289679] new_inode_pseudo+0x19/0xf0 [ 1032.293666] new_inode+0x1f/0x40 [ 1032.297057] rpc_get_inode+0x1d/0x1f0 [ 1032.300958] ? d_drop+0x51/0x60 [ 1032.304245] __rpc_create_common+0x5a/0x1a0 [ 1032.308583] rpc_populate.constprop.0+0x1cf/0x360 [ 1032.313456] rpc_fill_super+0x4c4/0x900 [ 1032.317449] ? rpc_pipe_release+0x830/0x830 [ 1032.321890] ? get_empty_filp.cold+0x3b/0x3b 21:21:28 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1032.326315] mount_ns+0xec/0x190 [ 1032.329694] ? rpc_pipe_release+0x830/0x830 [ 1032.334030] rpc_mount+0xa4/0xd0 [ 1032.337418] mount_fs+0x97/0x2a1 [ 1032.340824] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1032.345336] do_mount+0x417/0x27d0 [ 1032.348896] ? copy_mount_string+0x40/0x40 [ 1032.353324] ? memdup_user+0x58/0xa0 [ 1032.357063] ? copy_mount_options+0x1fe/0x2f0 [ 1032.361576] SyS_mount+0xab/0x120 [ 1032.365042] ? copy_mnt_ns+0x8c0/0x8c0 [ 1032.368955] do_syscall_64+0x1e8/0x640 [ 1032.372858] ? trace_hardirqs_off_thunk+0x1a/0x1c 21:21:28 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:28 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1032.377743] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1032.382945] RIP: 0033:0x45a919 [ 1032.386139] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1032.393861] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1032.401163] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1032.408469] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1032.415749] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1032.423035] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1032.431141] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry info [ 1032.433881] rds_sendmsg: 19 callbacks suppressed [ 1032.433888] atomic_op ffff88808115f3c0 conn xmit_atomic (null) [ 1032.440337] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory clntXX 21:21:28 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 21:21:28 executing program 2 (fault-call:9 fault-nth:44): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:28 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:28 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:28 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:28 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:28 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1033.044308] atomic_op ffff888097fc4600 conn xmit_atomic (null) [ 1033.078043] atomic_op ffff888084bd1840 conn xmit_atomic (null) [ 1033.142747] FAULT_INJECTION: forcing a failure. [ 1033.142747] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.154153] CPU: 1 PID: 23049 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1033.155491] atomic_op ffff8880804721c0 conn xmit_atomic (null) [ 1033.162047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.162052] Call Trace: [ 1033.162074] dump_stack+0x142/0x197 [ 1033.162095] should_fail.cold+0x10f/0x159 [ 1033.162112] should_failslab+0xdb/0x130 [ 1033.162122] kmem_cache_alloc+0x2d7/0x780 [ 1033.162137] ? __d_lookup+0x3a2/0x670 [ 1033.162149] ? mark_held_locks+0xb1/0x100 [ 1033.162162] ? d_lookup+0xe5/0x240 [ 1033.162175] __d_alloc+0x2d/0x9f0 [ 1033.162185] ? d_lookup+0x166/0x240 [ 1033.162196] d_alloc+0x4d/0x270 [ 1033.162209] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1033.162223] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1033.184631] ? down_write_nested+0x3c/0x90 [ 1033.200754] rpc_mkpipe_dentry+0xf8/0x350 [ 1033.200769] rpc_fill_super+0x4ee/0x900 [ 1033.200783] ? rpc_pipe_release+0x830/0x830 [ 1033.200795] ? get_empty_filp.cold+0x3b/0x3b [ 1033.200806] mount_ns+0xec/0x190 [ 1033.245044] ? rpc_pipe_release+0x830/0x830 [ 1033.252794] rpc_mount+0xa4/0xd0 [ 1033.252807] mount_fs+0x97/0x2a1 [ 1033.252818] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1033.252829] do_mount+0x417/0x27d0 [ 1033.252841] ? copy_mount_string+0x40/0x40 [ 1033.252854] ? memdup_user+0x58/0xa0 [ 1033.252861] ? copy_mount_options+0x1fe/0x2f0 [ 1033.252871] SyS_mount+0xab/0x120 [ 1033.252879] ? copy_mnt_ns+0x8c0/0x8c0 [ 1033.252891] do_syscall_64+0x1e8/0x640 [ 1033.252900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1033.252916] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1033.252924] RIP: 0033:0x45a919 [ 1033.252929] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1033.252940] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1033.252945] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1033.252950] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1033.252955] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1033.252960] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 21:21:29 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000340)=[0x2, 0x1], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x413955de) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:29 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:29 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:29 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 21:21:29 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:29 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1033.522563] atomic_op ffff88809b9bfc80 conn xmit_atomic (null) 21:21:29 executing program 2 (fault-call:9 fault-nth:45): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:29 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:29 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 21:21:29 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:29 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:29 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) [ 1033.940733] atomic_op ffff888084c653c0 conn xmit_atomic (null) [ 1034.057559] FAULT_INJECTION: forcing a failure. [ 1034.057559] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.069024] CPU: 1 PID: 23109 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1034.076923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.086462] Call Trace: [ 1034.089068] dump_stack+0x142/0x197 [ 1034.092907] should_fail.cold+0x10f/0x159 [ 1034.097514] should_failslab+0xdb/0x130 [ 1034.101587] kmem_cache_alloc+0x2d7/0x780 [ 1034.105939] ? rpc_alloc_inode+0x1a/0x20 [ 1034.110016] selinux_inode_alloc_security+0xb6/0x2a0 [ 1034.115157] security_inode_alloc+0x94/0xd0 [ 1034.119493] inode_init_always+0x552/0xaf0 [ 1034.123741] alloc_inode+0x81/0x180 [ 1034.127380] new_inode_pseudo+0x19/0xf0 [ 1034.131369] new_inode+0x1f/0x40 [ 1034.134755] rpc_get_inode+0x1d/0x1f0 [ 1034.138566] ? d_drop+0x51/0x60 [ 1034.141865] __rpc_create_common+0x5a/0x1a0 [ 1034.146214] rpc_populate.constprop.0+0x1cf/0x360 [ 1034.151074] rpc_fill_super+0x4c4/0x900 [ 1034.155215] ? rpc_pipe_release+0x830/0x830 [ 1034.159559] ? get_empty_filp.cold+0x3b/0x3b [ 1034.164070] mount_ns+0xec/0x190 [ 1034.167442] ? rpc_pipe_release+0x830/0x830 [ 1034.171798] rpc_mount+0xa4/0xd0 [ 1034.175209] mount_fs+0x97/0x2a1 [ 1034.178600] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1034.183108] do_mount+0x417/0x27d0 [ 1034.186838] ? copy_mount_string+0x40/0x40 [ 1034.191078] ? memdup_user+0x58/0xa0 [ 1034.194796] ? copy_mount_options+0x1fe/0x2f0 [ 1034.199304] SyS_mount+0xab/0x120 [ 1034.202749] ? copy_mnt_ns+0x8c0/0x8c0 [ 1034.206630] do_syscall_64+0x1e8/0x640 [ 1034.210515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1034.215366] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1034.220556] RIP: 0033:0x45a919 [ 1034.223741] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1034.231472] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1034.238743] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1034.246283] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1034.253545] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1034.260821] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1034.268637] net_ratelimit: 15 callbacks suppressed [ 1034.268642] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.278704] protocol 88fb is buggy, dev hsr_slave_1 [ 1034.284210] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry info [ 1034.293120] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory clntXX 21:21:30 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) mount$9p_virtio(&(0x7f00000000c0)='syz\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x400, &(0x7f00000003c0)={'trans=virtio,', {[{@privport='privport'}, {@debug={'debug', 0x3d, 0x24000000000}}, {@noextend='noextend'}, {@access_user='access=user'}, {@debug={'debug', 0x3d, 0x100000001}}, {@nodevmap='nodevmap'}, {@posixacl='posixacl'}, {@nodevmap='nodevmap'}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfsdef={'smackfsdef', 0x3d, 'rpc_pipefs\x00'}}, {@measure='measure'}]}}) 21:21:30 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:30 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:30 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:30 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f00000000c0)) bind$vsock_dgram(r4, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:30 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1034.534962] atomic_op ffff888094e0aa80 conn xmit_atomic (null) [ 1034.630148] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.635321] protocol 88fb is buggy, dev hsr_slave_1 21:21:30 executing program 2 (fault-call:9 fault-nth:46): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:30 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:30 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:30 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 1034.812117] 9pnet_virtio: no channels available for device syz [ 1034.848249] atomic_op ffff88809fdefc80 conn xmit_atomic (null) 21:21:30 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:30 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) [ 1034.997239] FAULT_INJECTION: forcing a failure. [ 1034.997239] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.008720] CPU: 1 PID: 23148 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1035.016622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.025993] Call Trace: [ 1035.028597] dump_stack+0x142/0x197 [ 1035.032251] should_fail.cold+0x10f/0x159 [ 1035.036423] should_failslab+0xdb/0x130 [ 1035.040419] kmem_cache_alloc+0x2d7/0x780 [ 1035.044582] ? __d_lookup+0x3a2/0x670 [ 1035.048389] ? mark_held_locks+0xb1/0x100 [ 1035.052557] ? d_lookup+0xe5/0x240 [ 1035.056115] __d_alloc+0x2d/0x9f0 [ 1035.059579] ? d_lookup+0x166/0x240 [ 1035.063221] d_alloc+0x4d/0x270 [ 1035.066511] __rpc_lookup_create_exclusive+0xf8/0x110 [ 1035.071716] ? rpc_d_lookup_sb+0xc0/0xc0 [ 1035.075868] ? down_write_nested+0x3c/0x90 [ 1035.080113] rpc_mkpipe_dentry+0xf8/0x350 [ 1035.084358] rpc_fill_super+0x4ee/0x900 [ 1035.088339] ? rpc_pipe_release+0x830/0x830 [ 1035.092684] ? get_empty_filp.cold+0x3b/0x3b [ 1035.097103] mount_ns+0xec/0x190 [ 1035.100495] ? rpc_pipe_release+0x830/0x830 [ 1035.104825] rpc_mount+0xa4/0xd0 [ 1035.108204] mount_fs+0x97/0x2a1 [ 1035.111683] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1035.116189] do_mount+0x417/0x27d0 [ 1035.119758] ? copy_mount_string+0x40/0x40 [ 1035.124137] ? memdup_user+0x58/0xa0 [ 1035.127853] ? copy_mount_options+0x1fe/0x2f0 [ 1035.132447] SyS_mount+0xab/0x120 [ 1035.135903] ? copy_mnt_ns+0x8c0/0x8c0 [ 1035.139804] do_syscall_64+0x1e8/0x640 [ 1035.143695] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1035.148807] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1035.154002] RIP: 0033:0x45a919 [ 1035.157192] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1035.164928] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1035.172199] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1035.179504] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1035.186789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1035.194068] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1035.243296] atomic_op ffff888099a35c80 conn xmit_atomic (null) [ 1035.270134] protocol 88fb is buggy, dev hsr_slave_0 [ 1035.275421] protocol 88fb is buggy, dev hsr_slave_1 [ 1035.283399] atomic_op ffff8880a5f66a80 conn xmit_atomic (null) 21:21:31 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x4) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000003c0)=""/231) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x413955de) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:31 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:31 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:31 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:31 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000000c0)=0x4) [ 1035.490259] 9pnet_virtio: no channels available for device syz [ 1035.510125] protocol 88fb is buggy, dev hsr_slave_0 [ 1035.510176] protocol 88fb is buggy, dev hsr_slave_1 [ 1035.515233] protocol 88fb is buggy, dev hsr_slave_1 21:21:31 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:31 executing program 2 (fault-call:9 fault-nth:47): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:31 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:31 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r1 = accept4(r0, &(0x7f0000000140)=@pppoe, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:31 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:31 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:31 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1035.867368] FAULT_INJECTION: forcing a failure. [ 1035.867368] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.878798] CPU: 0 PID: 23189 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1035.886714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.896252] Call Trace: [ 1035.898900] dump_stack+0x142/0x197 [ 1035.902639] should_fail.cold+0x10f/0x159 [ 1035.906816] should_failslab+0xdb/0x130 [ 1035.910817] kmem_cache_alloc+0x2d7/0x780 [ 1035.914983] ? rpc_alloc_inode+0x1a/0x20 [ 1035.919153] selinux_inode_alloc_security+0xb6/0x2a0 [ 1035.924273] security_inode_alloc+0x94/0xd0 [ 1035.928615] inode_init_always+0x552/0xaf0 [ 1035.932863] alloc_inode+0x81/0x180 [ 1035.936528] new_inode_pseudo+0x19/0xf0 [ 1035.940517] new_inode+0x1f/0x40 [ 1035.943990] rpc_get_inode+0x1d/0x1f0 [ 1035.947831] ? d_drop+0x51/0x60 [ 1035.951133] __rpc_create_common+0x5a/0x1a0 [ 1035.955515] rpc_mkpipe_dentry+0x125/0x350 [ 1035.959772] rpc_fill_super+0x4ee/0x900 [ 1035.963866] ? rpc_pipe_release+0x830/0x830 [ 1035.968823] ? get_empty_filp.cold+0x3b/0x3b [ 1035.973288] mount_ns+0xec/0x190 [ 1035.976778] ? rpc_pipe_release+0x830/0x830 [ 1035.981118] rpc_mount+0xa4/0xd0 [ 1035.984504] mount_fs+0x97/0x2a1 [ 1035.987903] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1035.992421] do_mount+0x417/0x27d0 [ 1035.995981] ? copy_mount_string+0x40/0x40 [ 1036.000266] ? memdup_user+0x58/0xa0 [ 1036.003996] ? copy_mount_options+0x1fe/0x2f0 [ 1036.008591] SyS_mount+0xab/0x120 [ 1036.012045] ? copy_mnt_ns+0x8c0/0x8c0 [ 1036.012059] do_syscall_64+0x1e8/0x640 [ 1036.012067] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1036.012083] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1036.012091] RIP: 0033:0x45a919 [ 1036.012097] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1036.012107] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1036.012113] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1036.012118] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1036.012123] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1036.012131] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1036.020290] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry gssd [ 1036.062972] net/sunrpc/rpc_pipe.c: rpc_mkpipe_dentry() failed to create pipe clntXX/gssd (errno = -12) [ 1036.310119] protocol 88fb is buggy, dev hsr_slave_0 21:21:32 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, 0xbd, 0x17b, &(0x7f0000000100)="5a5e5517fe517a437be3efa2ef09ae712349535ec179923dce35aa5c62baa6580dd534a5bb9fecc08df6c98c0c47354f000f54a57c65e7cc991d1613d89edbfecf9f8e4cc54c2200a4f191c987b3e3ba3bbd15928a71c09c9eaa03302f6712a40c944e21f1753e7e22ff6e5a5d2697c7e65d1d57fe97d9b98c5af6c2d3a21f810bb43ae72ea7d1c482630e83a7d7b598e1c1b53251fcfa34b4d655f511c1e9b14b741b7ccf3a16ecfa235309843f03f285bc213943fe103d158eaccab0"}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x1, 'ip6_vti0\x00'}) 21:21:32 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:32 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:32 executing program 5: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:32 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:32 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:32 executing program 2 (fault-call:9 fault-nth:48): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:32 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:32 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:32 executing program 0: sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1036.773800] FAULT_INJECTION: forcing a failure. [ 1036.773800] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.785233] CPU: 1 PID: 23232 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1036.793132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1036.802503] Call Trace: [ 1036.805108] dump_stack+0x142/0x197 [ 1036.808763] should_fail.cold+0x10f/0x159 [ 1036.813126] should_failslab+0xdb/0x130 [ 1036.817121] kmem_cache_alloc+0x2d7/0x780 [ 1036.821289] ? rpc_alloc_inode+0x1a/0x20 [ 1036.825368] selinux_inode_alloc_security+0xb6/0x2a0 [ 1036.830487] security_inode_alloc+0x94/0xd0 [ 1036.834829] inode_init_always+0x552/0xaf0 [ 1036.839083] alloc_inode+0x81/0x180 [ 1036.842726] new_inode_pseudo+0x19/0xf0 [ 1036.846719] new_inode+0x1f/0x40 [ 1036.850090] rpc_get_inode+0x1d/0x1f0 [ 1036.853894] ? d_drop+0x51/0x60 [ 1036.857183] __rpc_create_common+0x5a/0x1a0 [ 1036.861519] rpc_mkpipe_dentry+0x125/0x350 [ 1036.865773] rpc_fill_super+0x4ee/0x900 [ 1036.869763] ? rpc_pipe_release+0x830/0x830 [ 1036.874097] ? get_empty_filp.cold+0x3b/0x3b [ 1036.878520] mount_ns+0xec/0x190 [ 1036.881895] ? rpc_pipe_release+0x830/0x830 [ 1036.886228] rpc_mount+0xa4/0xd0 [ 1036.889607] mount_fs+0x97/0x2a1 [ 1036.892986] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1036.897500] do_mount+0x417/0x27d0 [ 1036.901055] ? copy_mount_string+0x40/0x40 [ 1036.905304] ? memdup_user+0x58/0xa0 [ 1036.909028] ? copy_mount_options+0x1fe/0x2f0 [ 1036.913539] SyS_mount+0xab/0x120 [ 1036.917001] ? copy_mnt_ns+0x8c0/0x8c0 [ 1036.920902] do_syscall_64+0x1e8/0x640 [ 1036.924803] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1036.929663] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1036.934867] RIP: 0033:0x45a919 [ 1036.938071] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1036.945790] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1036.953074] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1036.960353] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1036.967634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 21:21:32 executing program 0: sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:32 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) [ 1036.974924] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1036.982737] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry gssd [ 1036.991851] net/sunrpc/rpc_pipe.c: rpc_mkpipe_dentry() failed to create pipe clntXX/gssd (errno = -12) 21:21:34 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000000100)='btrfs\x00', &(0x7f0000000140)='./file0/file0\x00', 0xb5a8, 0xa, &(0x7f0000001a80)=[{&(0x7f00000013c0)="df49e40994e112b878a0b50e60d580d3a1ba5a354d64ce317d351f61b61e96c703ad58bf5533c22540cabdc3fde493e41df7ee7e102c7aa5b2e97893e690acc9c999dfb6f12b2ec366101408c44e873b1616ca6568c87e42e728892d52f0dc7de394bbf47e1f86df76f638495fe506066345d19415de62eb98abe841770ebebdc42684f8ac625c6a44a970cdd29d3223776d1c127a53095cedb3b835647cd1fa88fc37b4b9a3aa40b315d3e04729f1f1c68f77e3f865ab0eb808d305e7649644305e", 0xc2, 0x8}, {&(0x7f00000014c0)="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", 0xfc, 0x100000000}, {&(0x7f00000015c0)="8407abdcc85853af1fac69f5ba2b75adfe8ad7e8ded3158db26d6a3873525be8c21a0d493092c14debe4d3609e0d262b2349e1883278a9c71e3de0bcf60a9019a6714264c8596f34acb4170306017c7655bfd7e0e66b08a44a396acc0511cd225043be651b43e408989fa1e0e6e9c53cf7547e4e56b0360c34d28b897a4fd670e83b67e2740be7da76087b2a58158c42d05303be25350f8c9f8cc6bb53fa6e3d8b1fd22ab881b63e8bfa899214fae7fb777a8900", 0xb4, 0xa4ca}, {&(0x7f0000000200)="334f1de7fdec1af51c64d92f02bf3b9d594ea23e05f50aa605428abd5fb99875c72e70d7cb0e353c516d3dcc27f005e59f88848012cb9ecf7f61f49fca915b051e2c15490c105ac9f397da9a2fd7f6ea3472482d2fd474bbb01a6356d9c28dc8a7d076f7f4fa58261f", 0x69, 0x4}, {&(0x7f0000001680)="2ce34a1644fdea356b8e9ef9a740e537181dead8596b2ade55d5d745b3c2dd6e265ed7cfce8c3c673550a8dd0ac170823784c61d1549220fce8b1502e63468bf71c49a719be2c9fab7b8a6cc952fb10e9dbdefcbb371be76ceda935d51f2c714a7acd117e766492a74b8dcbc9299ebe384780a6da6b294c810042761621331c7780018f69aff7940a3436a2fa72cbdd90defa55badee051288b5bc77ffad137e4036c1da955273faa76a4da475299549111329bfde336ef1b92c48ce56f97650f3dffef30b1d7e90b9a5e0f00ff0", 0xce, 0x9}, {&(0x7f0000001780)="acee96f1fd1287de4f32c6060d3b8453d5b219f0392205ef3c857bc3d8988746aaabf4de5c65152a0003802168d11fc567ce837cc38862d31831e26e183a2137f5f76bb3151fe6f5c8570be91c58661d44fcd720451c6dc48f3892f32d09b39727e0ec87e2", 0x65, 0x1}, {&(0x7f0000001800)="c15baefbe85fafc23cf64e75388f50818bd1e3a22da317e59b8c066ba256dc32e79f78fd2c1b85950cba50545b83e1bb18ef36e040d57ed728cfdfc3931562394350eb5412bb3913496ff36774e05318bbbe7d11dee481d942e44b1691f1fad1616ef3b25e2411465a4046f14e8384677c9da44ea03a4d71b0e577fc8ab5d81a64", 0x81, 0x7}, {&(0x7f00000018c0)="46f204225067b3db12b128ab8cd3bd1bb32f72040ad74f2dd8053001a079d3b4544680dd1bb8661623f439706dcbce7ec96825c42bdadeca66169d7c5050b036691ac5cec276cbae913f9c2dfaa31ff1ba8fb052d9fed06af3984decd5c576cda7b4ea7850ce7538ff656577780eef6ffae04c45ba7a6d043b5b39870ce29006eb38936125feddeef7b950a9540f7e9a62", 0x91, 0x1}, {&(0x7f0000000180)="cca216e18c630fa58495334651d96efa1dc0f9e3280b715a6d526d1232caa93f92e7bec21ca80bce8005daa133154ce600616534", 0x34, 0x7fff}, {&(0x7f0000001980)="335218b22d5a60dbd89b3a7f0e797ac7a08fb7c02c226470d5f3ecdab89238b9632a313994850a98cbaf064d6c7810e86e3a5125d2bd9a79dc53ffb8a855175318e0b4f3084b2825cd770186e3d79fc2e4e43fd233b21e07b3018870cb462df199f89dd8fd898be3687338cc6ddd4e5a74ebf2f325f5d1ea420adc7f3871be451269aaad854abaac8a5dc5d1aa9fa1a78e5b4c9a56fef9db6cb774df2e9339ab17d4837383b93b2992fe289100d089ca363e469cc2a1e43300c1ed6c00629464a51f46c0167eb877d88b4223c53132", 0xcf, 0x3}], 0x80000, &(0x7f0000001b80)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@barrier='barrier'}, {@datasum='datasum'}, {@noautodefrag='noautodefrag'}, {@commit={'commit', 0x3d, 0x6}}, {@max_inline={'max_inline', 0x3d, [0x74, 0x695b3d465fc7ca28]}}], [{@fsmagic={'fsmagic', 0x3d, 0xfff}}]}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000002c0)={0x0, 'netdevsim0\x00', {0x4}, 0x3f}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) sendto$inet(r5, &(0x7f00000003c0)="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", 0x1000, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:34 executing program 0: sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:34 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:34 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/19, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) 21:21:34 executing program 2 (fault-call:9 fault-nth:49): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:34 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:34 executing program 0: sched_setattr(0x0, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1038.526512] rds_sendmsg: 10 callbacks suppressed [ 1038.526605] atomic_op ffff88809a94e1c0 conn xmit_atomic (null) 21:21:34 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) [ 1038.580990] atomic_op ffff888096e12a80 conn xmit_atomic (null) [ 1038.622874] FAULT_INJECTION: forcing a failure. [ 1038.622874] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.634335] CPU: 0 PID: 23279 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1038.642730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.652291] Call Trace: [ 1038.654901] dump_stack+0x142/0x197 [ 1038.658565] should_fail.cold+0x10f/0x159 [ 1038.662751] should_failslab+0xdb/0x130 [ 1038.666756] kmem_cache_alloc+0x2d7/0x780 21:21:34 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) [ 1038.671210] ? rpc_alloc_inode+0x1a/0x20 [ 1038.675295] selinux_inode_alloc_security+0xb6/0x2a0 [ 1038.680430] security_inode_alloc+0x94/0xd0 [ 1038.685058] inode_init_always+0x552/0xaf0 [ 1038.689328] alloc_inode+0x81/0x180 [ 1038.692970] new_inode_pseudo+0x19/0xf0 [ 1038.696972] new_inode+0x1f/0x40 [ 1038.696984] rpc_get_inode+0x1d/0x1f0 [ 1038.696992] ? d_drop+0x51/0x60 [ 1038.697001] __rpc_create_common+0x5a/0x1a0 [ 1038.697013] rpc_mkpipe_dentry+0x125/0x350 [ 1038.707868] nfs4blocklayout_register_sb+0x4c/0x70 [ 1038.707880] rpc_pipefs_event+0x24e/0x3e0 [ 1038.707900] notifier_call_chain+0x111/0x1b0 [ 1038.707914] blocking_notifier_call_chain+0x80/0xa0 [ 1038.721612] rpc_fill_super+0x433/0x900 [ 1038.730247] ? rpc_pipe_release+0x830/0x830 [ 1038.730262] ? get_empty_filp.cold+0x3b/0x3b [ 1038.730272] mount_ns+0xec/0x190 [ 1038.730279] ? rpc_pipe_release+0x830/0x830 [ 1038.730287] rpc_mount+0xa4/0xd0 [ 1038.730298] mount_fs+0x97/0x2a1 [ 1038.730310] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1038.730321] do_mount+0x417/0x27d0 [ 1038.730333] ? copy_mount_string+0x40/0x40 [ 1038.730347] ? memdup_user+0x58/0xa0 [ 1038.730356] ? copy_mount_options+0x1fe/0x2f0 [ 1038.730367] SyS_mount+0xab/0x120 [ 1038.730378] ? copy_mnt_ns+0x8c0/0x8c0 [ 1038.791339] do_syscall_64+0x1e8/0x640 [ 1038.795466] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1038.800584] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1038.805799] RIP: 0033:0x45a919 [ 1038.809009] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1038.817158] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1038.824452] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1038.831834] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1038.839127] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1038.846708] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1038.854234] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry blocklayout [ 1038.863762] net/sunrpc/rpc_pipe.c: rpc_mkpipe_dentry() failed to create pipe nfs/blocklayout (errno = -12) 21:21:34 executing program 0: sched_setattr(0x0, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:34 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 1038.980518] atomic_op ffff888092da0f00 conn xmit_atomic (null) [ 1039.432244] bridge0: port 3(gretap0) entered disabled state [ 1039.444613] device gretap0 left promiscuous mode [ 1039.451112] bridge0: port 3(gretap0) entered disabled state 21:21:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f00000003c0)=""/265, 0x109}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') vmsplice(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e42206f74c6e016a3d7d52d2f0b264ba87ea21026cf55b2ef9d6fab0fc9f7a7309b72711a290ca6a6b9e6d1f96891bcb546adc6e6114319f95cc9b7bd95b17501753a7c4b2ac631d9231e436a6804338f5009da0a0909e5d351cf845ac226f9ee7c5bd531d78e6aa611f444afa978f7bc3452ca589f72ae200bbb600caef1112ef777acf42706", 0x87}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000240)) 21:21:35 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002a00070500"/19, @ANYRES32=r4, @ANYBLOB="0000ffff6b00ffff0000000000000000040002003d3147c6a03877cb9d29a1b2793ee34ba37e168d07c4e95bdd3fe4059aa1a1be35c3354a70ddb0040c2fa65a59c4c1fe029f4c1b1e8b6004086e00ba4444bf6c1cd73d8825f68b176b2e63b5c7984728b42632ec7238a2b36c43dc04ca52f397e99c8f639c7bca012f14958e91afae2effffffff000000006f18607453c5ac3b81028e7c1609cbe5f8a2ac7864da32ac6091e23daa7afcdf0f995b5f2ae15318ee87f562d9a0f7d5c3ccfc63b3a2e5d8e69189440074a0bc1d620192f6e139c065ff105cbbe53c6a84e2aa7a0e60464c12198c01632ba96ec70000000000000000"], 0x3}}, 0x0) 21:21:35 executing program 0: sched_setattr(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:35 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:35 executing program 2 (fault-call:9 fault-nth:50): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:35 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) [ 1039.665603] atomic_op ffff8880a9394f40 conn xmit_atomic (null) [ 1039.674927] device bridge_slave_1 left promiscuous mode [ 1039.681207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.690607] FAULT_INJECTION: forcing a failure. [ 1039.690607] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.703489] CPU: 0 PID: 23320 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1039.711861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1039.721552] Call Trace: [ 1039.724530] dump_stack+0x142/0x197 [ 1039.728511] should_fail.cold+0x10f/0x159 [ 1039.732706] should_failslab+0xdb/0x130 [ 1039.736965] kmem_cache_alloc+0x2d7/0x780 [ 1039.741370] ? rpc_alloc_inode+0x1a/0x20 [ 1039.745563] selinux_inode_alloc_security+0xb6/0x2a0 [ 1039.750955] security_inode_alloc+0x94/0xd0 [ 1039.755307] inode_init_always+0x552/0xaf0 [ 1039.759790] alloc_inode+0x81/0x180 21:21:35 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 1039.763756] new_inode_pseudo+0x19/0xf0 [ 1039.768100] new_inode+0x1f/0x40 [ 1039.771867] rpc_get_inode+0x1d/0x1f0 [ 1039.776124] ? d_drop+0x51/0x60 [ 1039.779476] __rpc_create_common+0x5a/0x1a0 [ 1039.789972] rpc_mkpipe_dentry+0x125/0x350 [ 1039.794663] nfs4blocklayout_register_sb+0x4c/0x70 [ 1039.799885] rpc_pipefs_event+0x24e/0x3e0 [ 1039.804395] notifier_call_chain+0x111/0x1b0 [ 1039.809325] blocking_notifier_call_chain+0x80/0xa0 [ 1039.814460] rpc_fill_super+0x433/0x900 [ 1039.818468] ? rpc_pipe_release+0x830/0x830 [ 1039.823649] ? get_empty_filp.cold+0x3b/0x3b [ 1039.828094] mount_ns+0xec/0x190 [ 1039.831488] ? rpc_pipe_release+0x830/0x830 [ 1039.836537] rpc_mount+0xa4/0xd0 [ 1039.839945] mount_fs+0x97/0x2a1 [ 1039.843363] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1039.848395] do_mount+0x417/0x27d0 [ 1039.851968] ? copy_mount_string+0x40/0x40 [ 1039.856771] ? memdup_user+0x58/0xa0 [ 1039.860544] ? copy_mount_options+0x1fe/0x2f0 [ 1039.865306] SyS_mount+0xab/0x120 [ 1039.868996] ? copy_mnt_ns+0x8c0/0x8c0 [ 1039.873008] do_syscall_64+0x1e8/0x640 [ 1039.877044] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1039.881924] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1039.887243] RIP: 0033:0x45a919 [ 1039.890449] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1039.898346] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1039.905807] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1039.913433] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1039.920731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 [ 1039.928892] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1039.936999] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry blocklayout [ 1039.946561] net/sunrpc/rpc_pipe.c: rpc_mkpipe_dentry() failed to create pipe nfs/blocklayout (errno = -12) [ 1039.958636] device bridge_slave_0 left promiscuous mode 21:21:35 executing program 0: sched_setattr(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1039.984314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.990929] net_ratelimit: 13 callbacks suppressed [ 1039.990934] protocol 88fb is buggy, dev hsr_slave_0 [ 1040.000108] protocol 88fb is buggy, dev hsr_slave_0 [ 1040.001026] protocol 88fb is buggy, dev hsr_slave_1 [ 1040.006076] protocol 88fb is buggy, dev hsr_slave_1 [ 1040.016525] protocol 88fb is buggy, dev hsr_slave_0 [ 1040.021645] protocol 88fb is buggy, dev hsr_slave_1 21:21:35 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x0) [ 1040.126402] atomic_op ffff888085bc9840 conn xmit_atomic (null) 21:21:35 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x0) 21:21:36 executing program 0: sched_setattr(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1040.344168] atomic_op ffff888093173380 conn xmit_atomic (null) 21:21:36 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x0) 21:21:36 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 1040.470154] protocol 88fb is buggy, dev hsr_slave_0 [ 1040.475642] protocol 88fb is buggy, dev hsr_slave_1 [ 1040.687483] device hsr_slave_1 left promiscuous mode [ 1040.745963] device hsr_slave_0 left promiscuous mode [ 1040.807744] team0 (unregistering): Port device team_slave_1 removed [ 1040.838034] team0 (unregistering): Port device team_slave_0 removed [ 1040.870155] protocol 88fb is buggy, dev hsr_slave_0 [ 1040.875422] protocol 88fb is buggy, dev hsr_slave_1 [ 1040.887294] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1040.949926] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1041.058603] bond0 (unregistering): Released all slaves [ 1042.801495] IPVS: ftp: loaded support on port[0] = 21 [ 1043.666900] chnl_net:caif_netlink_parms(): no params data found [ 1043.703886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.711106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.718448] device bridge_slave_0 entered promiscuous mode [ 1043.735032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.742244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.749234] device bridge_slave_1 entered promiscuous mode [ 1043.765699] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1043.777273] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1043.797138] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1043.805228] team0: Port device team_slave_0 added [ 1043.811525] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1043.818828] team0: Port device team_slave_1 added [ 1043.824577] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1043.832936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1043.893943] device hsr_slave_0 entered promiscuous mode [ 1043.940438] device hsr_slave_1 entered promiscuous mode [ 1044.000830] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1044.008937] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1044.024629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.031821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.039604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.046747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.077406] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1044.084294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.094153] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1044.104521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1044.112635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.119890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.130338] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1044.137074] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.147483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1044.156399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.164115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.180537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1044.188641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.197064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.215560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1044.224059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1044.234150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1044.242488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1044.255356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1044.265733] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1044.273932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1044.288538] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1044.296859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1044.304365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1044.317831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.650944] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1045.030377] net_ratelimit: 25 callbacks suppressed [ 1045.030382] protocol 88fb is buggy, dev hsr_slave_0 [ 1045.041141] protocol 88fb is buggy, dev hsr_slave_1 21:21:41 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000000100)='btrfs\x00', &(0x7f0000000140)='./file0/file0\x00', 0xb5a8, 0xa, &(0x7f0000001a80)=[{&(0x7f00000013c0)="df49e40994e112b878a0b50e60d580d3a1ba5a354d64ce317d351f61b61e96c703ad58bf5533c22540cabdc3fde493e41df7ee7e102c7aa5b2e97893e690acc9c999dfb6f12b2ec366101408c44e873b1616ca6568c87e42e728892d52f0dc7de394bbf47e1f86df76f638495fe506066345d19415de62eb98abe841770ebebdc42684f8ac625c6a44a970cdd29d3223776d1c127a53095cedb3b835647cd1fa88fc37b4b9a3aa40b315d3e04729f1f1c68f77e3f865ab0eb808d305e7649644305e", 0xc2, 0x8}, {&(0x7f00000014c0)="28f3bd6981ba0d705e3d683ba4c5e6cac97b6862ada4a2492edc7caeb6d2af0d2df34fca25d881f877342267c697ce5f8bc5684dc5d13ce9dc8083d51f8cdd65b3166f93cef835391aa3f46e93007887d59c57decd09c28dd7c8d5c0beec04de351e99a9df26f42de123ed67d7bbcf9e14b63ebd42d70272bcae5586dfb24de8ca4526d60e74bada1ca02e79e7132606449999bcb77d17cf833352705a7d5472b243c864af77dca7dfe59922f8217eb0933f84a06b00ef0f6e09c9a1be26458a2b540dad85d9a4253e187ad67f23ac4bb1d32740f259c100a8cd73d32a56a39ec2b2f5c30ba0ec57d620b0f9817da99148fb201725b2043b7c44eb90", 0xfc, 0x100000000}, {&(0x7f00000015c0)="8407abdcc85853af1fac69f5ba2b75adfe8ad7e8ded3158db26d6a3873525be8c21a0d493092c14debe4d3609e0d262b2349e1883278a9c71e3de0bcf60a9019a6714264c8596f34acb4170306017c7655bfd7e0e66b08a44a396acc0511cd225043be651b43e408989fa1e0e6e9c53cf7547e4e56b0360c34d28b897a4fd670e83b67e2740be7da76087b2a58158c42d05303be25350f8c9f8cc6bb53fa6e3d8b1fd22ab881b63e8bfa899214fae7fb777a8900", 0xb4, 0xa4ca}, {&(0x7f0000000200)="334f1de7fdec1af51c64d92f02bf3b9d594ea23e05f50aa605428abd5fb99875c72e70d7cb0e353c516d3dcc27f005e59f88848012cb9ecf7f61f49fca915b051e2c15490c105ac9f397da9a2fd7f6ea3472482d2fd474bbb01a6356d9c28dc8a7d076f7f4fa58261f", 0x69, 0x4}, {&(0x7f0000001680)="2ce34a1644fdea356b8e9ef9a740e537181dead8596b2ade55d5d745b3c2dd6e265ed7cfce8c3c673550a8dd0ac170823784c61d1549220fce8b1502e63468bf71c49a719be2c9fab7b8a6cc952fb10e9dbdefcbb371be76ceda935d51f2c714a7acd117e766492a74b8dcbc9299ebe384780a6da6b294c810042761621331c7780018f69aff7940a3436a2fa72cbdd90defa55badee051288b5bc77ffad137e4036c1da955273faa76a4da475299549111329bfde336ef1b92c48ce56f97650f3dffef30b1d7e90b9a5e0f00ff0", 0xce, 0x9}, {&(0x7f0000001780)="acee96f1fd1287de4f32c6060d3b8453d5b219f0392205ef3c857bc3d8988746aaabf4de5c65152a0003802168d11fc567ce837cc38862d31831e26e183a2137f5f76bb3151fe6f5c8570be91c58661d44fcd720451c6dc48f3892f32d09b39727e0ec87e2", 0x65, 0x1}, {&(0x7f0000001800)="c15baefbe85fafc23cf64e75388f50818bd1e3a22da317e59b8c066ba256dc32e79f78fd2c1b85950cba50545b83e1bb18ef36e040d57ed728cfdfc3931562394350eb5412bb3913496ff36774e05318bbbe7d11dee481d942e44b1691f1fad1616ef3b25e2411465a4046f14e8384677c9da44ea03a4d71b0e577fc8ab5d81a64", 0x81, 0x7}, {&(0x7f00000018c0)="46f204225067b3db12b128ab8cd3bd1bb32f72040ad74f2dd8053001a079d3b4544680dd1bb8661623f439706dcbce7ec96825c42bdadeca66169d7c5050b036691ac5cec276cbae913f9c2dfaa31ff1ba8fb052d9fed06af3984decd5c576cda7b4ea7850ce7538ff656577780eef6ffae04c45ba7a6d043b5b39870ce29006eb38936125feddeef7b950a9540f7e9a62", 0x91, 0x1}, {&(0x7f0000000180)="cca216e18c630fa58495334651d96efa1dc0f9e3280b715a6d526d1232caa93f92e7bec21ca80bce8005daa133154ce600616534", 0x34, 0x7fff}, {&(0x7f0000001980)="335218b22d5a60dbd89b3a7f0e797ac7a08fb7c02c226470d5f3ecdab89238b9632a313994850a98cbaf064d6c7810e86e3a5125d2bd9a79dc53ffb8a855175318e0b4f3084b2825cd770186e3d79fc2e4e43fd233b21e07b3018870cb462df199f89dd8fd898be3687338cc6ddd4e5a74ebf2f325f5d1ea420adc7f3871be451269aaad854abaac8a5dc5d1aa9fa1a78e5b4c9a56fef9db6cb774df2e9339ab17d4837383b93b2992fe289100d089ca363e469cc2a1e43300c1ed6c00629464a51f46c0167eb877d88b4223c53132", 0xcf, 0x3}], 0x80000, &(0x7f0000001b80)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@barrier='barrier'}, {@datasum='datasum'}, {@noautodefrag='noautodefrag'}, {@commit={'commit', 0x3d, 0x6}}, {@max_inline={'max_inline', 0x3d, [0x74, 0x695b3d465fc7ca28]}}], [{@fsmagic={'fsmagic', 0x3d, 0xfff}}]}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000002c0)={0x0, 'netdevsim0\x00', {0x4}, 0x3f}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) sendto$inet(r5, &(0x7f00000003c0)="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", 0x1000, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:41 executing program 0: sched_setattr(0x0, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:41 executing program 2 (fault-call:9 fault-nth:51): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x413955de) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 21:21:41 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffdfb, 0x2, 0x0, 0x0, 0x3, 0x7, 0x1, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @rose, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/254, 0xfe}], 0x1, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x413955de) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_pts(r5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000340)=0xe8) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x100, 0x3, &(0x7f0000000200)=[{&(0x7f0000000140)="b15d12c04623d3330f947354808100775cea129842ccfacdcbf6409df038501c5259f150d851153c3fb765dab12ade31916eebe424ddb0ce63217231a9e008449df1df7618e9c4d3dffc4abfe3c8cdd1f602a7e126c8604c", 0x58, 0x2}, {&(0x7f00000003c0)="2b57e63605d3155bef77f9dba63a09c087e3f675372690965452d73f85b422c77583e568e58bf9249caeda06ade184a7fd56a4056b2cf4cbe3718e5d368e6705e96052743791d7028efe48eaae06f40138d78f7930dc356f0520704f9cf4ca520b29333fc0b76378f0143874da0136d017f003b95d9af07074bf998c0b34bf6cb6b51b89c3a6ec6ce88ef29e980847aaf326e84bf90027674cea08b5ff65bbd366018c8a207b1b88afe5682efbffa5464bd089e954e30c5505203e0a48c36e5b0d4f5500365ead57f66c28bacbf074", 0xcf, 0x6}, {&(0x7f00000004c0)="b268128703743c23f7a9c4d49a9ed96d437ac0a5b5b98074583d56d8c3d6a5318fab528bffb128aa799854d5eac1dfa7ac427c1d64db98cbae9c1eab4c5136acfd2249ab12171dc7a97d8668f99a4d0d53c0a27a9d80be27c54897ca36d505553709ed94550ba21f539fd109fc4bbe51feee34742e43a3e4544e162c794bd0014894983f73495fe983402bfe09689d4e20a0d80a53ff9fa5cfd55b200f0690903cbd3a170d26f036d767a8a55aaaca52de9f1aedb656c05dfe180b28633b957f06f81bdaa02195", 0xc7, 0x8000}], 0x100040, &(0x7f00000007c0)={[{@datacow='datacow'}, {@fragment_data='fragment=data'}, {@fragment_metadata='fragment=metadata'}], [{@pcr={'pcr'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@uid_gt={'uid>', r4}}, {@subj_user={'subj_user', 0x3d, '@system'}}, {@fowner_gt={'fowner>', r6}}, {@smackfshat={'smackfshat', 0x3d, 'vboxnet0\\^-.)system!#vmnet1user'}}]}) 21:21:41 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:41 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 21:21:41 executing program 0: sched_setattr(0x0, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:41 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:41 executing program 0: sched_setattr(0x0, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) [ 1045.657376] FAULT_INJECTION: forcing a failure. [ 1045.657376] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.669224] CPU: 0 PID: 23397 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1045.677717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1045.687490] Call Trace: [ 1045.690298] dump_stack+0x142/0x197 [ 1045.693957] should_fail.cold+0x10f/0x159 [ 1045.698138] should_failslab+0xdb/0x130 [ 1045.702148] kmem_cache_alloc_trace+0x2e9/0x790 [ 1045.707067] ? lock_downgrade+0x740/0x740 [ 1045.711245] get_mountpoint+0xd4/0x330 [ 1045.715511] lock_mount+0xe0/0x2c0 [ 1045.719085] do_add_mount+0x27/0x350 [ 1045.723094] do_mount+0x1307/0x27d0 [ 1045.726760] ? copy_mount_string+0x40/0x40 [ 1045.731019] ? memdup_user+0x58/0xa0 [ 1045.734761] ? copy_mount_options+0x1fe/0x2f0 [ 1045.739435] SyS_mount+0xab/0x120 [ 1045.742913] ? copy_mnt_ns+0x8c0/0x8c0 [ 1045.746955] do_syscall_64+0x1e8/0x640 [ 1045.750854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1045.756448] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1045.761785] RIP: 0033:0x45a919 [ 1045.765084] RSP: 002b:00007f82d57e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1045.773083] RAX: ffffffffffffffda RBX: 00007f82d57e3c90 RCX: 000000000045a919 [ 1045.780692] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 1045.788142] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1045.795754] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82d57e46d4 21:21:41 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) 21:21:41 executing program 0: sched_setattr(0x0, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}], 0x58}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2c2, 0x108) 21:21:41 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0"], 0x1}}, 0x2010) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 1045.803243] R13: 00000000004c7d30 R14: 00000000004dec28 R15: 0000000000000005 [ 1046.230171] protocol 88fb is buggy, dev hsr_slave_0 [ 1046.230313] ================================================================== [ 1046.235615] protocol 88fb is buggy, dev hsr_slave_1 [ 1046.243538] BUG: KASAN: use-after-free in tcp_write_timer_handler+0x784/0x7e0 [ 1046.243545] Read of size 4 at addr ffff88805e0e8764 by task blkid/23429 [ 1046.243547] [ 1046.243556] CPU: 1 PID: 23429 Comm: blkid Not tainted 4.14.159-syzkaller #0 [ 1046.243560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1046.243563] Call Trace: [ 1046.243567] [ 1046.243578] dump_stack+0x142/0x197 [ 1046.243587] ? tcp_write_timer_handler+0x784/0x7e0 [ 1046.243601] print_address_description.cold+0x7c/0x1dc [ 1046.300925] ? tcp_write_timer_handler+0x784/0x7e0 [ 1046.305999] kasan_report.cold+0xa9/0x2af [ 1046.310270] __asan_report_load4_noabort+0x14/0x20 [ 1046.315240] tcp_write_timer_handler+0x784/0x7e0 [ 1046.320119] tcp_write_timer+0xd6/0x180 [ 1046.324186] call_timer_fn+0x161/0x670 [ 1046.328092] ? tcp_write_timer_handler+0x7e0/0x7e0 [ 1046.333045] ? __next_timer_interrupt+0x140/0x140 [ 1046.337915] ? trace_hardirqs_on_caller+0x19b/0x590 [ 1046.342958] run_timer_softirq+0x5b7/0x1520 [ 1046.347431] ? tcp_write_timer_handler+0x7e0/0x7e0 [ 1046.352387] ? add_timer+0xae0/0xae0 [ 1046.356122] ? __lock_is_held+0xb6/0x140 [ 1046.360208] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1046.365740] __do_softirq+0x244/0x9a0 [ 1046.369579] ? sched_clock+0x2e/0x50 [ 1046.373380] irq_exit+0x160/0x1b0 [ 1046.376859] smp_apic_timer_interrupt+0x146/0x5e0 [ 1046.381721] apic_timer_interrupt+0x96/0xa0 [ 1046.386054] [ 1046.388308] RIP: 0010:__unwind_start+0x264/0x3d0 [ 1046.393158] RSP: 0018:ffff8880804bf7f0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10 [ 1046.402739] RAX: 1ffff11010097f12 RBX: ffff8880804bf8c0 RCX: ffff8880804c0000 [ 1046.410146] RDX: dffffc0000000000 RSI: ffff8880804bf8c8 RDI: ffff8880804bf890 [ 1046.417684] RBP: ffff8880804bf830 R08: 0000000000000001 R09: ffff8880804bf898 [ 1046.425257] R10: ffff8880804bf868 R11: ffff8880804bf878 R12: ffffed1010097f0a [ 1046.433589] R13: ffffed1010097f09 R14: dffffc0000000000 R15: ffff8880804bf840 [ 1046.440884] __save_stack_trace+0x4a/0xd0 [ 1046.445959] ? save_stack_trace+0x16/0x20 [ 1046.450168] save_stack_trace+0x16/0x20 [ 1046.454147] save_stack+0x45/0xd0 [ 1046.457779] ? __lock_acquire+0x5f7/0x4620 [ 1046.462141] ? save_stack+0xa9/0xd0 [ 1046.465855] ? save_stack_trace+0x16/0x20 [ 1046.469996] ? save_stack+0x45/0xd0 [ 1046.473662] ? trace_hardirqs_on+0x10/0x10 [ 1046.478214] ? save_trace+0x290/0x290 [ 1046.483135] ? trace_hardirqs_on+0x10/0x10 [ 1046.487383] ? kmem_cache_alloc+0x568/0x780 [ 1046.491708] ? find_held_lock+0x35/0x130 [ 1046.496915] ? kmem_cache_alloc+0x568/0x780 [ 1046.501247] ? mark_held_locks+0xb1/0x100 [ 1046.505515] ? kasan_unpoison_shadow+0x35/0x50 [ 1046.510100] kasan_kmalloc+0xce/0xf0 [ 1046.513813] kasan_slab_alloc+0xf/0x20 [ 1046.517982] kmem_cache_alloc+0x11b/0x780 [ 1046.522182] anon_vma_clone+0xde/0x470 [ 1046.526069] __split_vma+0x28a/0x6d0 [ 1046.529912] ? __vma_adjust+0x1760/0x1760 [ 1046.534186] split_vma+0x8d/0xc0 [ 1046.537641] mprotect_fixup+0x6fd/0x920 [ 1046.541648] ? __handle_mm_fault+0x692/0x33d0 [ 1046.546172] ? change_protection+0x1760/0x1760 [ 1046.551071] ? selinux_file_mprotect+0xf4/0x5d0 [ 1046.556226] ? do_mprotect_pkey+0x16d/0x830 [ 1046.560618] ? security_file_mprotect+0x89/0xb0 [ 1046.565567] do_mprotect_pkey+0x470/0x830 [ 1046.569716] ? mprotect_fixup+0x920/0x920 [ 1046.574138] ? do_mprotect_pkey+0x830/0x830 [ 1046.578601] SyS_mprotect+0x2b/0x40 [ 1046.582431] do_syscall_64+0x1e8/0x640 [ 1046.586318] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1046.591210] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1046.596750] RIP: 0033:0x7efe95012447 [ 1046.600459] RSP: 002b:00007fffaa83cb68 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1046.608259] RAX: ffffffffffffffda RBX: 00007efe9521a4c8 RCX: 00007efe95012447 [ 1046.617221] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 00007efe94ff8000 [ 1046.624790] RBP: 00007fffaa83cc60 R08: 0000000000000001 R09: 0000000000000039 [ 1046.632069] R10: 00007efe94ddb4c0 R11: 0000000000000206 R12: 00007efe94dd5000 [ 1046.639480] R13: 00007efe94ffb4b0 R14: 00007efe94ddb4c0 R15: 00007efe94ffafd0 [ 1046.647210] [ 1046.648917] Allocated by task 7022: [ 1046.652934] save_stack_trace+0x16/0x20 [ 1046.657093] save_stack+0x45/0xd0 [ 1046.660547] kasan_kmalloc+0xce/0xf0 [ 1046.664255] kasan_slab_alloc+0xf/0x20 [ 1046.668356] kmem_cache_alloc+0x12e/0x780 [ 1046.672685] copy_net_ns+0xfa/0x440 [ 1046.676314] create_new_namespaces+0x37b/0x720 [ 1046.680890] unshare_nsproxy_namespaces+0xab/0x1e0 [ 1046.685932] SyS_unshare+0x2f3/0x7e0 [ 1046.689651] do_syscall_64+0x1e8/0x640 [ 1046.693690] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1046.699125] [ 1046.700756] Freed by task 2309: [ 1046.704153] save_stack_trace+0x16/0x20 [ 1046.708131] save_stack+0x45/0xd0 [ 1046.711620] kasan_slab_free+0x75/0xc0 [ 1046.715502] kmem_cache_free+0x83/0x2b0 [ 1046.719540] net_drop_ns+0x6e/0x80 [ 1046.723305] cleanup_net+0x4e9/0x870 [ 1046.727337] process_one_work+0x863/0x1600 [ 1046.731617] worker_thread+0x5d9/0x1050 [ 1046.735733] kthread+0x319/0x430 [ 1046.739315] ret_from_fork+0x24/0x30 [ 1046.743026] [ 1046.744667] The buggy address belongs to the object at ffff88805e0e8080 [ 1046.744667] which belongs to the cache net_namespace of size 8832 [ 1046.758018] The buggy address is located 1764 bytes inside of [ 1046.758018] 8832-byte region [ffff88805e0e8080, ffff88805e0ea300) [ 1046.770841] The buggy address belongs to the page: [ 1046.775788] page:ffffea0001783a00 count:1 mapcount:0 mapping:ffff88805e0e8080 index:0x0 compound_mapcount: 0 [ 1046.786608] flags: 0xfffe0000008100(slab|head) [ 1046.791203] raw: 00fffe0000008100 ffff88805e0e8080 0000000000000000 0000000100000001 [ 1046.799533] raw: ffffea000200a120 ffffea000170ff20 ffff8880aa9e93c0 0000000000000000 [ 1046.808551] page dumped because: kasan: bad access detected [ 1046.814256] [ 1046.816020] Memory state around the buggy address: [ 1046.821207] ffff88805e0e8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1046.828975] ffff88805e0e8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1046.836342] >ffff88805e0e8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1046.843853] ^ [ 1046.850356] ffff88805e0e8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1046.858498] ffff88805e0e8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1046.866121] ================================================================== [ 1046.873782] Disabling lock debugging due to kernel taint [ 1046.879336] Kernel panic - not syncing: panic_on_warn set ... [ 1046.879336] [ 1046.886861] CPU: 1 PID: 23429 Comm: blkid Tainted: G B 4.14.159-syzkaller #0 [ 1046.895198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1046.897777] kobject: 'loop2' (ffff8880a415c460): kobject_uevent_env [ 1046.904682] Call Trace: [ 1046.904685] [ 1046.904700] dump_stack+0x142/0x197 [ 1046.904709] ? tcp_write_timer_handler+0x784/0x7e0 [ 1046.904716] panic+0x1f9/0x42d [ 1046.904721] ? add_taint.cold+0x16/0x16 [ 1046.904733] kasan_end_report+0x47/0x4f [ 1046.904739] kasan_report.cold+0x130/0x2af [ 1046.904746] __asan_report_load4_noabort+0x14/0x20 [ 1046.904755] tcp_write_timer_handler+0x784/0x7e0 [ 1046.911500] kobject: 'loop2' (ffff8880a415c460): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1046.914100] tcp_write_timer+0xd6/0x180 [ 1046.914108] call_timer_fn+0x161/0x670 [ 1046.914117] ? tcp_write_timer_handler+0x7e0/0x7e0 [ 1046.973344] ? __next_timer_interrupt+0x140/0x140 [ 1046.978314] ? trace_hardirqs_on_caller+0x19b/0x590 [ 1046.983444] run_timer_softirq+0x5b7/0x1520 [ 1046.987811] ? tcp_write_timer_handler+0x7e0/0x7e0 [ 1046.992477] kobject: 'loop1' (ffff8880a411c3e0): kobject_uevent_env [ 1046.992960] ? add_timer+0xae0/0xae0 [ 1046.992974] ? __lock_is_held+0xb6/0x140 [ 1046.999652] kobject: 'loop1' (ffff8880a411c3e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1047.003335] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1047.003347] __do_softirq+0x244/0x9a0 [ 1047.003354] ? sched_clock+0x2e/0x50 [ 1047.003366] irq_exit+0x160/0x1b0 [ 1047.003372] smp_apic_timer_interrupt+0x146/0x5e0 [ 1047.003379] apic_timer_interrupt+0x96/0xa0 [ 1047.003382] [ 1047.003390] RIP: 0010:__unwind_start+0x264/0x3d0 [ 1047.003399] RSP: 0018:ffff8880804bf7f0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10 [ 1047.058608] RAX: 1ffff11010097f12 RBX: ffff8880804bf8c0 RCX: ffff8880804c0000 [ 1047.066146] RDX: dffffc0000000000 RSI: ffff8880804bf8c8 RDI: ffff8880804bf890 [ 1047.073413] RBP: ffff8880804bf830 R08: 0000000000000001 R09: ffff8880804bf898 [ 1047.080869] R10: ffff8880804bf868 R11: ffff8880804bf878 R12: ffffed1010097f0a [ 1047.088378] R13: ffffed1010097f09 R14: dffffc0000000000 R15: ffff8880804bf840 [ 1047.095981] __save_stack_trace+0x4a/0xd0 [ 1047.100143] ? save_stack_trace+0x16/0x20 [ 1047.104446] save_stack_trace+0x16/0x20 [ 1047.108421] save_stack+0x45/0xd0 [ 1047.111899] ? __lock_acquire+0x5f7/0x4620 [ 1047.116386] ? save_stack+0xa9/0xd0 [ 1047.120013] ? save_stack_trace+0x16/0x20 [ 1047.124252] ? save_stack+0x45/0xd0 [ 1047.128329] ? trace_hardirqs_on+0x10/0x10 [ 1047.132569] ? save_trace+0x290/0x290 [ 1047.136434] ? trace_hardirqs_on+0x10/0x10 [ 1047.140668] ? kmem_cache_alloc+0x568/0x780 [ 1047.145373] ? find_held_lock+0x35/0x130 [ 1047.149817] ? kmem_cache_alloc+0x568/0x780 [ 1047.155146] ? mark_held_locks+0xb1/0x100 [ 1047.159655] ? kasan_unpoison_shadow+0x35/0x50 [ 1047.164393] kasan_kmalloc+0xce/0xf0 [ 1047.168123] kasan_slab_alloc+0xf/0x20 [ 1047.172014] kmem_cache_alloc+0x11b/0x780 [ 1047.176172] anon_vma_clone+0xde/0x470 [ 1047.180066] __split_vma+0x28a/0x6d0 [ 1047.183843] ? __vma_adjust+0x1760/0x1760 [ 1047.188008] split_vma+0x8d/0xc0 [ 1047.191373] mprotect_fixup+0x6fd/0x920 [ 1047.195342] ? __handle_mm_fault+0x692/0x33d0 [ 1047.200009] ? change_protection+0x1760/0x1760 [ 1047.204691] ? selinux_file_mprotect+0xf4/0x5d0 [ 1047.209498] ? do_mprotect_pkey+0x16d/0x830 [ 1047.213890] ? security_file_mprotect+0x89/0xb0 [ 1047.218572] do_mprotect_pkey+0x470/0x830 [ 1047.222726] ? mprotect_fixup+0x920/0x920 [ 1047.226874] ? do_mprotect_pkey+0x830/0x830 [ 1047.231286] SyS_mprotect+0x2b/0x40 [ 1047.234918] do_syscall_64+0x1e8/0x640 [ 1047.238875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1047.243815] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1047.249000] RIP: 0033:0x7efe95012447 [ 1047.252710] RSP: 002b:00007fffaa83cb68 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1047.260414] RAX: ffffffffffffffda RBX: 00007efe9521a4c8 RCX: 00007efe95012447 [ 1047.267678] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 00007efe94ff8000 [ 1047.274946] RBP: 00007fffaa83cc60 R08: 0000000000000001 R09: 0000000000000039 [ 1047.282271] R10: 00007efe94ddb4c0 R11: 0000000000000206 R12: 00007efe94dd5000 [ 1047.289802] R13: 00007efe94ffb4b0 R14: 00007efe94ddb4c0 R15: 00007efe94ffafd0 [ 1047.299205] Kernel Offset: disabled [ 1047.303133] Rebooting in 86400 seconds..