, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:29 executing program 3: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20408008}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032cbd70ad5b29dd57274f9ba0819d97eefa6dc800fddbdf25050000002400060004000200040002000400020004000200"], 0x38}}, 0x40) close(r1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:29 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x84) uselib(&(0x7f0000000000)='./file1\x00') r1 = socket(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000040)) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:29 executing program 2: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e21, 0x800, @dev={0xfe, 0x80, [], 0x21}, 0x7fff}}, 0x8001, 0xfff}, &(0x7f0000000140)=0x90) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:30 executing program 3: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x10040, 0x0) preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') sendmsg$nl_netfilter(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x7bc30b4ee9f4997}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14fddb05000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x404408c}, 0x20000000) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000040)) 23:02:30 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x69eff142e494d5c2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9df3ae76f1cc41d7}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xe0, 0x42, 0x800, 0x70bd28, 0x25dfdbff, {0x8}, [@nested={0xcc, 0x34, [@typed={0x14, 0x1a, @ipv6=@rand_addr="7e8fb4dc40c28951e59974fa677545e9"}, @typed={0x8, 0x30, @ipv4=@local}, @typed={0x8c, 0x53, @binary="ed002f74e2857f3a371f6c879a0a175e1ce9e72d3ee348803cfea826e31ede4348e7038668e05fc482dfda3d2f06cec7c55d14486182a64e48b27430a931a068b7efc4bcf3f14e52d6552dbca62290261a41755443937f9d3e131141b7b35811083ec177997cc21a3618d920ef449c2aa99e77ece77ff7b4c240fdfcb66535c430a06b379e932b86"}, @typed={0x14, 0x37, @binary="88395d90e4975ce8f0120cd30faa"}, @typed={0xc, 0x61, @u64=0x9}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000010) poll(0x0, 0x0, 0xffffffff) preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:30 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000340)=0x3, 0x1) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x0, &(0x7f0000000180)=""/11, &(0x7f00000001c0)=0xb) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) getpeername$netlink(r8, &(0x7f00000002c0), &(0x7f0000000300)=0xc) renameat(r7, &(0x7f0000000180)='.//ile0\x00', r7, &(0x7f00000007c0)='./file0/f.le.\x00') accept$alg(r7, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:30 executing program 3: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r2, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:30 executing program 0: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:30 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000340)=0x3, 0x1) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x0, &(0x7f0000000180)=""/11, &(0x7f00000001c0)=0xb) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) getpeername$netlink(r8, &(0x7f00000002c0), &(0x7f0000000300)=0xc) renameat(r7, &(0x7f0000000180)='.//ile0\x00', r7, &(0x7f00000007c0)='./file0/f.le.\x00') accept$alg(r7, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:30 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80080, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="ed461ed9dace0726e5c6a4a3cb9d7ffbe26957b47a2d29ae7e8995db5f5fc29469970ae3c308d86a652e230d2afcc937b2316cf896d884cb4adaa1fd78f9b86ccf5a4a0bfe015943c2e224e4b3cbe166406a939d4c22609be92e3a1f75b6473a0ee65a4a0e0304c2abac0bd645fef949afc597546f7f704ce2a18c69117754f49b9b8fe6a21e38fcc5f8e4c3cedb", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 23:02:30 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:30 executing program 3: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r2, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:30 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000340)=0x3, 0x1) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x0, &(0x7f0000000180)=""/11, &(0x7f00000001c0)=0xb) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) getpeername$netlink(r8, &(0x7f00000002c0), &(0x7f0000000300)=0xc) renameat(r7, &(0x7f0000000180)='.//ile0\x00', r7, &(0x7f00000007c0)='./file0/f.le.\x00') accept$alg(r7, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:31 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='hwsim0\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="79a24768300474cc8f796ebba9260696917012c309", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 23:02:31 executing program 0: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x6) r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000080), 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r7, @ANYBLOB="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"], 0x3}}, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000400)={&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000480)=""/120, 0x78}], 0x1, &(0x7f0000000500)=""/144, 0x90}, 0x10000) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r10, @ANYBLOB="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"], 0x3}}, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d008000024a6fffff7", @ANYRES32=r12, @ANYBLOB="00000000ffffffff000e00000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000800000d00d337d05000000050000000100000004000000ff7f000000000000000400020002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040000000600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009230000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb70000000000800100000095c5000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006fdb76f73223ab872e5655ffb63b6dd807f800000700000003000000000200000600000008000000b3000000060000004b0d00000500000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a00000020000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f0000000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x3}}, 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r15 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001400)='/dev/bsg\x00', 0x40, 0x0) r16 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r16, 0x101, 0x2, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r14, @ANYRES64=r16], 0x3}}, 0x0) accept4$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14, 0xc0800) r18 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r18, &(0x7f0000000180)='.//ile0\x00', r18, &(0x7f00000007c0)='./file0/f.le.\x00') accept4$packet(r18, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14, 0x1c00) r20 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r20, &(0x7f0000000180)='.//ile0\x00', r20, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet6_mreq(r20, 0x29, 0x36b08c67e6729c30, &(0x7f00000006c0)={@mcast1, 0x0}, &(0x7f0000000700)=0x14) r22 = socket(0x11, 0x800000003, 0x0) bind(r22, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r22, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r23, @ANYBLOB="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"], 0x3}}, 0x0) r24 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r24, &(0x7f0000000180)='.//ile0\x00', r24, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_pktinfo(r24, 0x0, 0x8, &(0x7f0000000900)={0x0, @multicast1}, &(0x7f0000000940)=0xc) r26 = socket(0x11, 0x800000003, 0x0) bind(r26, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r26, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r27, @ANYBLOB="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"], 0x3}}, 0x0) r28 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r28, &(0x7f0000000180)='.//ile0\x00', r28, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000800)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000980)=0xe8) r30 = socket(0x11, 0x800000003, 0x0) bind(r30, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r30, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r31, @ANYBLOB="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"], 0x3}}, 0x0) r32 = socket(0x11, 0x800000003, 0x0) bind(r32, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r32, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r33, @ANYBLOB="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"], 0x3}}, 0x0) r34 = socket(0x11, 0x800000003, 0x0) bind(r34, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r34, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r35, @ANYBLOB="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"], 0x3}}, 0x0) r36 = socket(0x11, 0x800000003, 0x0) bind(r36, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r36, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r37, @ANYBLOB="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"], 0x3}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004080)={'veth1_to_bridge\x00', 0x0}) r40 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r40, &(0x7f0000000180)='.//ile0\x00', r40, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_IP_IPSEC_POLICY(r40, 0x0, 0x10, &(0x7f00000058c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f00000059c0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005b00)={0x0, @remote, @initdev}, &(0x7f0000005b40)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000064c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000006480)={&(0x7f0000005b80)={0x8cc, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x234, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xa73}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x2a5, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0x1dc, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r25}, {0xf4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r27}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r29}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r31}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r33}}}]}}, {{0x8, 0x1, r35}, {0x164, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r37}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r38}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xdf}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x64}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8, 0x1, r39}, {0xf0, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r41}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r42}}}]}}]}, 0x8cc}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r43 = getpgrp(0xffffffffffffffff) tkill(r43, 0x2a) preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/mls\x00', 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 23:02:31 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000340)=0x3, 0x1) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x0, &(0x7f0000000180)=""/11, &(0x7f00000001c0)=0xb) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) getpeername$netlink(r8, &(0x7f00000002c0), &(0x7f0000000300)=0xc) renameat(r7, &(0x7f0000000180)='.//ile0\x00', r7, &(0x7f00000007c0)='./file0/f.le.\x00') ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:31 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80080, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="ed461ed9dace0726e5c6a4a3cb9d7ffbe26957b47a2d29ae7e8995db5f5fc29469970ae3c308d86a652e230d2afcc937b2316cf896d884cb4adaa1fd78f9b86ccf5a4a0bfe015943c2e224e4b3cbe166406a939d4c22609be92e3a1f75b6473a0ee65a4a0e0304c2abac0bd645fef949afc597546f7f704ce2a18c69117754f49b9b8fe6a21e38fcc5f8e4c3cedb", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 23:02:31 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000340)=0x3, 0x1) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x0, &(0x7f0000000180)=""/11, &(0x7f00000001c0)=0xb) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) getpeername$netlink(r7, &(0x7f00000002c0), &(0x7f0000000300)=0xc) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:31 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='hwsim0\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="79a24768300474cc8f796ebba9260696917012c309", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 23:02:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:31 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:31 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000340)=0x3, 0x1) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x0, &(0x7f0000000180)=""/11, &(0x7f00000001c0)=0xb) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:31 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) setsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000080), 0x4) 23:02:31 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80080, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="ed461ed9dace0726e5c6a4a3cb9d7ffbe26957b47a2d29ae7e8995db5f5fc29469970ae3c308d86a652e230d2afcc937b2316cf896d884cb4adaa1fd78f9b86ccf5a4a0bfe015943c2e224e4b3cbe166406a939d4c22609be92e3a1f75b6473a0ee65a4a0e0304c2abac0bd645fef949afc597546f7f704ce2a18c69117754f49b9b8fe6a21e38fcc5f8e4c3cedb", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 23:02:31 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:31 executing program 3: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r8, @ANYBLOB="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"], 0x3}}, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000e00000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000800000d00d337d05000000050000000100000004000000ff7f000000000000000400020002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040000000600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009230000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb70000000000800100000095c5000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006fdb76f73223ab872e5655ffb63b6dd807f800000700000003000000000200000600000008000000b3000000060000004b0d00000500000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a00000020000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f0000000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x3}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', r10}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r14, @ANYBLOB="00000000ffffffff000e00000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000800000d00d337d05000000050000000100000004000000ff7f000000000000000400020002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040000000600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009230000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb70000000000800100000095c5000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006fdb76f73223ab872e5655ffb63b6dd807f800000700000003000000000200000600000008000000b3000000060000004b0d00000500000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a00000020000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f0000000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x3}}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000200)={@dev, @remote, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0, @dev, @multicast1}, &(0x7f0000000880)=0xc) r17 = socket(0x11, 0x800000003, 0x0) bind(r17, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r17, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r18, @ANYBLOB="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"], 0x3}}, 0x0) r19 = socket(0x11, 0x800000003, 0x0) bind(r19, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r19, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r20, @ANYBLOB="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"], 0x3}}, 0x0) r21 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r21, &(0x7f0000000180)='.//ile0\x00', r21, &(0x7f00000007c0)='./file0/f.le.\x00') getsockname$packet(r21, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000900)=0x14) r23 = socket(0x11, 0x800000003, 0x0) bind(r23, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r23, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r24, @ANYBLOB="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"], 0x3}}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000a80)=""/162, 0xa2}, {&(0x7f0000000b40)=""/85, 0x55}], 0x2, &(0x7f0000000bc0)=""/124, 0x7c}, 0x1) r26 = socket(0x11, 0x800000003, 0x0) bind(r26, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r26, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r27, @ANYBLOB="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"], 0x3}}, 0x0) r28 = socket(0x11, 0x800000003, 0x0) bind(r28, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r28, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r29, @ANYBLOB="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"], 0x3}}, 0x0) r30 = socket(0x11, 0x800000003, 0x0) bind(r30, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r30, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r31, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d40)={'team0\x00', r31}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e00)=0x14) r34 = socket(0x11, 0x800000003, 0x0) bind(r34, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r34, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r35, @ANYBLOB="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"], 0x3}}, 0x0) r36 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r36, &(0x7f0000000180)='.//ile0\x00', r36, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r36, 0x29, 0x22, &(0x7f0000000e40)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000f40)=0xe8) r38 = socket(0x11, 0x800000003, 0x0) bind(r38, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r38, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r39, @ANYBLOB="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"], 0x3}}, 0x0) r40 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r40, &(0x7f0000000180)='.//ile0\x00', r40, &(0x7f00000007c0)='./file0/f.le.\x00') getpeername$packet(r40, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000fc0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001000)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, 0xfffffffffffffffd) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002540)={{{@in6=@ipv4={[], [], @initdev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000002640)=0xe8) r44 = socket(0x11, 0x800000003, 0x0) bind(r44, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r44, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r45, @ANYBLOB="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"], 0x3}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000002680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000026c0)=0x14) r47 = socket(0x11, 0x800000003, 0x0) bind(r47, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r47, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r48, @ANYBLOB="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"], 0x3}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002740)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000003400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f00000033c0)={&(0x7f0000002780)={0xc08, r4, 0x501, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x1ec, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xa10f}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x128, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x6, 0x4, 0x0, 0x3f}, {0xfff8, 0x1, 0x0, 0x401}, {0x4, 0x0, 0x35, 0x7}, {0x7, 0x2, 0x8}, {0x1, 0xff, 0x9, 0x8}, {0x8, 0x3, 0x2, 0xffffffe0}, {0x3, 0x8, 0x0, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x74, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r20}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r22}, {0x19c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x16}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xa374}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r27}, {0x16c, 0x2, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x3, 0x81, 0x0, 0x8}, {0x2, 0x1, 0x0, 0xa00}, {0x7, 0x3f, 0x6, 0x5}, {0xcc, 0x7f, 0x2, 0x1}, {0x8, 0x7, 0x3c, 0x80000001}, {0x6, 0xee, 0x0, 0xfff}, {0x9, 0x9, 0x2, 0x4}, {0x0, 0xf0, 0xf7, 0x9}, {0x8000, 0xf0, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff9d76}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r29}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r32}, {0x110, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r33}, {0x1dc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r35}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x7, 0xff, 0xa8, 0x40}, {0x1, 0x20, 0x63, 0x4}, {0xfffd, 0x4, 0x7, 0x1}, {0x20, 0x0, 0x40, 0x50}, {0x5, 0x5, 0xf1, 0x3f}, {0x0, 0xf4, 0x0, 0x3f}, {0x5, 0x7, 0x1}, {0x9, 0x3f, 0x1f, 0xdac74346}, {0x1, 0x4, 0x40, 0x6}, {0x3, 0x2, 0x0, 0x8001}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r37}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x8, 0x7f, 0x6, 0x1f}, {0x4, 0x4, 0x40, 0x54e}, {0x5, 0xfd, 0x3, 0x7}, {0xfff7, 0x9, 0x1, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r39}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8001}}, {0x8, 0x6, r41}}}]}}, {{0x8, 0x1, r42}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r43}, {0x1b0, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r45}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r46}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x58}}, {0x8, 0x6, r48}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r49}}}]}}]}, 0xc08}, 0x1, 0x0, 0x0, 0x2004008a}, 0x40) 23:02:31 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000340)=0x3, 0x1) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x0, &(0x7f0000000180)=""/11, &(0x7f00000001c0)=0xb) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:31 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) setsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000080), 0x4) 23:02:31 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:31 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r2, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:32 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:32 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000340)=0x3, 0x1) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x0, &(0x7f0000000180)=""/11, &(0x7f00000001c0)=0xb) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:32 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:32 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) setsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000080), 0x4) 23:02:32 executing program 3: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x2000, 0x401, 0x1000, 0x1000, 0x1, 0x9}) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) preadv(r3, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="3a38f0baf1bb32ee5fede44b3eff0635ae8fbc69f6f5cd0a0192d6c83a2ac9655ac82bf92793f9bbf321c2c71d67d27378e9135b6df18feb9c06bc3538e7093fed3ce45634662c0867fd29bbfd06088767d61fa9", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 23:02:32 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000100), 0x4) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r4, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r3, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:32 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000340)=0x3, 0x1) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:32 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:32 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:32 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:32 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000340)=0x3, 0x1) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:32 executing program 4 (fault-call:4 fault-nth:0): r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:32 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:32 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000340)=0x3, 0x1) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:32 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:32 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f0000000100)="000b8e2b5375e19b254d6212fd088736f17836fdc5c2fe1a58d8ff563b4c0dc0d4e302f1ea0579e33e43d3ac3b851e0aad8f7391ede1fed312543dc8e945db5af1e592ccdcd4b690d1b3d607031cad1d3b4dfa25814a0c680acad46a7757bc4d4c0af689205b1dbc64cb21109f793642e252ccce25c6f2837fa73ebff90a1b9aae79d6f7bd443132cbef726e897df8626e942b7913c00cceb9e4de1f48361628be1d5000f5223bccc8bbe6ebacfdffc77813dea8a00910cfc1739ce40a50b38259debed19a0f93015536d9f8848c7002e75961bc6060b11b1e38", 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x4010, r0, 0x713a9000) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000040), 0x4) 23:02:33 executing program 3 (fault-call:7 fault-nth:0): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:33 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:33 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x44}) 23:02:33 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:33 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) connect$caif(r1, &(0x7f0000000080)=@rfm={0x25, 0x6, "b5a8fa0322685a40803d5637c4951ea1"}, 0x18) write(r0, &(0x7f00000000c0)='\x00', 0x1) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x10, r2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) setsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:33 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:33 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:33 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:33 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) 23:02:33 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev4\xa8\x97\xf5a\x03\x00', 0x50f8c0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'lapb0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000800)={@empty, r1}, 0x14) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x7, 0x6, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r3, 0x8}, &(0x7f0000000140)=0x8) r4 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r4, &(0x7f00000001c0)="f1e9b6c497dba855f21aedbac8", 0xd) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r6 = socket(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f00000001c0)={r8, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x7, 0x6, 0x1f, 0x9, r8}, 0x10) setsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f0000000040), 0x4) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r9, &(0x7f0000000180)='.//ile0\x00', r9, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$netlink_NETLINK_RX_RING(r9, 0x10e, 0x6, &(0x7f00000002c0)={0x1, 0x0, 0x524d, 0x6232}, 0x10) 23:02:33 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) [ 1553.009028] FAULT_INJECTION: forcing a failure. [ 1553.009028] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.022219] CPU: 1 PID: 31937 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1553.030144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1553.039510] Call Trace: [ 1553.042115] dump_stack+0x142/0x197 [ 1553.045765] should_fail.cold+0x10f/0x159 [ 1553.049941] should_failslab+0xdb/0x130 [ 1553.053936] kmem_cache_alloc_node+0x287/0x780 [ 1553.058620] copy_process.part.0+0x17d5/0x6a70 [ 1553.063229] ? save_trace+0x290/0x290 [ 1553.067042] ? proc_fail_nth_write+0x7d/0x180 [ 1553.071552] ? proc_cwd_link+0x1b0/0x1b0 [ 1553.075628] ? __f_unlock_pos+0x19/0x20 [ 1553.079619] ? find_held_lock+0x35/0x130 [ 1553.083695] ? __cleanup_sighand+0x50/0x50 [ 1553.087947] ? lock_downgrade+0x740/0x740 [ 1553.092113] _do_fork+0x19e/0xce0 [ 1553.095603] ? fork_idle+0x280/0x280 [ 1553.099329] ? fput+0xd4/0x150 [ 1553.102533] ? SyS_write+0x15e/0x230 [ 1553.106284] SyS_clone+0x37/0x50 23:02:33 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) [ 1553.109665] ? sys_vfork+0x30/0x30 [ 1553.113223] do_syscall_64+0x1e8/0x640 [ 1553.117118] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1553.121983] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1553.127180] RIP: 0033:0x45a6f9 [ 1553.130382] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1553.138104] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1553.145384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1553.152672] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1553.159975] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1553.167260] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:34 executing program 3 (fault-call:7 fault-nth:1): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:34 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:34 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {r4, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:34 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) 23:02:34 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r4, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x2]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r4, 0x5}, &(0x7f0000000180)=0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000000, 0x8000) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0xf000, 0x7, 0x401, 0x4e8, 0x0, [{0x2, 0x6, 0x3f, [], 0x2}, {0x63, 0x6, 0x6, [], 0x6}, {0x3, 0x8, 0xfa, [], 0x2}, {0x3f, 0xda, 0x4}, {0x8, 0x5, 0xf5, [], 0x4}, {0x80, 0x9, 0x80, [], 0x1f}, {0x2, 0x6, 0x6, [], 0x2}, {0x3, 0x2, 0x7, [], 0x3}, {0x80, 0x8, 0x6a, [], 0x80}, {0x0, 0xbc, 0x40, [], 0x2}, {0xe4, 0x1, 0x5c, [], 0x1}, {0x3, 0x81, 0xd4, [], 0x40}, {0x7, 0x3f, 0x1f, [], 0x81}, {0x0, 0x9, 0x4, [], 0xff}, {0x5, 0x1, 0xb1, [], 0x9}, {0x1, 0x2, 0x9, [], 0x3}, {0x20, 0x7f, 0x3, [], 0x6}, {0x63, 0x1, 0x2, [], 0x3d}, {0x2, 0x40, 0x1, [], 0x8}, {0xfb, 0x9, 0x11, [], 0xff}, {0x1, 0x3, 0x3f, [], 0x4}, {0x5, 0x99, 0xab, [], 0x7}, {0x4, 0xff, 0x8, [], 0x9}, {0x0, 0xa7, 0x80}]}}) setsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000080), 0x4) setsockopt$ax25_int(r5, 0x101, 0x7, &(0x7f0000000040), 0x4) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x36604, 0x0) write$binfmt_script(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xc0) syz_init_net_socket$ax25(0x3, 0x2, 0x6) 23:02:34 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:34 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:34 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) 23:02:34 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {0xffffffffffffffff, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:34 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) write$binfmt_elf32(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x1f, 0x9, 0x6, 0x5, 0x2, 0x3, 0xfffff1b7, 0x22e, 0x38, 0x81, 0x101, 0x0, 0x20, 0x1, 0x1000, 0x3ff, 0xf8b}, [{0x3, 0xfffffffe, 0x9, 0x400, 0x8, 0x19e3, 0x5, 0x2}, {0x0, 0xfffffffa, 0x6865fe26, 0x8001, 0x1, 0x81, 0x6, 0x101}], "14df9791905fd2825521202a71a904a3f06b0d8314b493dc7a30f20aac3e21321969efd83913f4f423d337c861c15b757866ee7625d864e752d4646231f716c99573aaa3a82e5e87f02d4ba246ce81498667c6e50c7821d3e32bbfe685a2dd3d4838059b184618254ba0a27f85690e61ed37537d4ae0a792ff62d40f15b0490ed367695668bc2e29ce870d3509da3ebad86074a86719b968c94da3b25c29fe4fc28cd69c4bad8010fa91883782d55832d07296", [[], [], [], []]}, 0x52b) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:34 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:34 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) [ 1553.992999] FAULT_INJECTION: forcing a failure. [ 1553.992999] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1554.020303] CPU: 1 PID: 31972 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1554.028250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1554.037617] Call Trace: [ 1554.040222] dump_stack+0x142/0x197 [ 1554.043880] should_fail.cold+0x10f/0x159 [ 1554.048053] ? __might_sleep+0x93/0xb0 [ 1554.052071] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1554.056753] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1554.061780] ? rcu_read_lock_sched_held+0x110/0x130 [ 1554.066815] copy_process.part.0+0x26a/0x6a70 [ 1554.071330] ? save_trace+0x290/0x290 [ 1554.075136] ? proc_fail_nth_write+0x7d/0x180 [ 1554.079639] ? proc_cwd_link+0x1b0/0x1b0 [ 1554.083712] ? __f_unlock_pos+0x19/0x20 [ 1554.087690] ? find_held_lock+0x35/0x130 [ 1554.091762] ? __cleanup_sighand+0x50/0x50 [ 1554.096006] ? lock_downgrade+0x740/0x740 [ 1554.100161] _do_fork+0x19e/0xce0 [ 1554.103624] ? fork_idle+0x280/0x280 [ 1554.107349] ? fput+0xd4/0x150 [ 1554.110691] ? SyS_write+0x15e/0x230 [ 1554.114419] SyS_clone+0x37/0x50 [ 1554.117791] ? sys_vfork+0x30/0x30 [ 1554.121340] do_syscall_64+0x1e8/0x640 [ 1554.125240] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1554.130099] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1554.135287] RIP: 0033:0x45a6f9 [ 1554.138564] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1554.146271] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1554.153541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1554.160811] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1554.168072] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1554.175335] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:35 executing program 3 (fault-call:7 fault-nth:2): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:35 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:35 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:35 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r3, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {0xffffffffffffffff, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:35 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) write(r0, &(0x7f00000001c0)="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", 0x106) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x8, &(0x7f0000000040), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000000)={{0x2, 0x0, @reserved="4c21bbc3c7f8c40475b3afe67ffcf09d23ec29eb7461eb108793101ca968585e"}}) 23:02:35 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:35 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000200)=0xe1, 0x200) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {0xffffffffffffffff, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:35 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') socket$inet(0x2, 0x3, 0x9) sendmsg$nl_crypto(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4800400}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000227bd7000fcdbdf2567636d2d6165732d6365000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000071d2776678004f646c3539d87600000000000000000000000000000000000000000000000000000000000000000000140000000400"/237], 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') sendmsg$nl_generic(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x13, 0x100, 0x70bd2d, 0x25dfdbfe, {0x8}, [@generic="2a8ea7901b49cc5a883850d4a2fdc80db37fe66597e33b97d834cedab7c32d9ef96800ebe632fd0edc40762859a9ee69bb343f7473af6a69491462361a5f082a4c", @typed={0x8, 0x66, @str='\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xce1ec4d81db95592}, 0x2000d014) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f00000001c0)={0x2, 0xfffff845, 0x6, 0x0, 0x1, 0x1, 0x5c79c681}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) 23:02:35 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000000)={'ip6erspan0\x00', @ifru_ivalue=0x17}}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:35 executing program 0: write(0xffffffffffffffff, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x20) 23:02:35 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {r2, 0x9622}, {0xffffffffffffffff, 0x8040}, {r2, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:35 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000140)={0x200, 0x100, 0x5, 0x101, 0x728031735a910f95, 0x401}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000080)=0xfffffff8) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0xffffffffffffffff}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=""/205, 0xcd}, 0xe0f5}], 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x78) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0xa4e}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket(0x0, 0x3, 0x200000000000ff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r9 = syz_open_procfs(r3, &(0x7f00000001c0)='net/udp6\x00') sendfile(r8, r9, 0x0, 0x320f) write(r0, &(0x7f00000000c0)='\x00', 0x1) [ 1554.997238] FAULT_INJECTION: forcing a failure. [ 1554.997238] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.020337] CPU: 0 PID: 32024 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1555.028294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1555.037669] Call Trace: [ 1555.040279] dump_stack+0x142/0x197 [ 1555.043931] should_fail.cold+0x10f/0x159 [ 1555.048120] should_failslab+0xdb/0x130 [ 1555.052117] kmem_cache_alloc+0x2d7/0x780 [ 1555.056282] ? creds_are_invalid+0x48/0x110 [ 1555.060617] ? __validate_process_creds+0x14c/0x200 [ 1555.065662] prepare_creds+0x3c/0x390 [ 1555.069474] copy_creds+0x7b/0x4f0 [ 1555.073028] ? lockdep_init_map+0x9/0x10 [ 1555.077101] copy_process.part.0+0x868/0x6a70 [ 1555.081611] ? save_trace+0x290/0x290 [ 1555.085414] ? proc_fail_nth_write+0x7d/0x180 [ 1555.089918] ? proc_cwd_link+0x1b0/0x1b0 [ 1555.093989] ? __f_unlock_pos+0x19/0x20 [ 1555.097985] ? __cleanup_sighand+0x50/0x50 [ 1555.102228] ? lock_downgrade+0x740/0x740 [ 1555.106381] _do_fork+0x19e/0xce0 [ 1555.109841] ? fork_idle+0x280/0x280 [ 1555.113567] ? fput+0xd4/0x150 [ 1555.116768] ? SyS_write+0x15e/0x230 [ 1555.120490] SyS_clone+0x37/0x50 [ 1555.123857] ? sys_vfork+0x30/0x30 [ 1555.127408] do_syscall_64+0x1e8/0x640 [ 1555.131302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1555.136159] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1555.141354] RIP: 0033:0x45a6f9 [ 1555.144542] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1555.152262] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1555.159548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1555.166833] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1555.174113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1555.181399] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:36 executing program 3 (fault-call:7 fault-nth:3): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:36 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x7530}}) 23:02:36 executing program 0: write(0xffffffffffffffff, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x20) 23:02:36 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:36 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:36 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000080), 0x1c1800) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) fcntl$setpipe(r3, 0x407, 0x8) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:36 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:36 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000000)={0x0, 0x2}) 23:02:36 executing program 0: write(0xffffffffffffffff, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x20) 23:02:36 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000100)={"3bb21b3b6c1d752247abbd65acba9b2d1e86ea1925c54517646224f243be2135612062cd7278b5e51e80e25f27ef0d64c35d6ff27be48c4c3d97e34ac2fb87c4f6953b663d0d8d1d828c1072740bb1fad20f2ddf3679b40023cf3258be18ec93cd64bbb99732f58fabbcbdcc43bb4351858c83c7052ca8c155c0ea947ce8c0b41942466d7f8be29a1ca12d0e31e8152b691521fd226102c0b2c8a5f61535ea465d3a457e80bc81620cf777f856b134c816787e0fa0b7f276cb4170c258e7b7a7c124ec5f47996458716e6ff8d0c5e869b19b8faae87ca78eada65cde0511f047480b8f9fb419daaccfa1654f5da81cde80a908fd02e73b185aa873ccb9ea71032480b7288976e82f99369b51286988e4be3c75f6edd076e16c0cb09750bb051ff7e57282924baba01b06a258ec7e21d1854f59a5d6d6c53ca2d354127c862ead7c1f61e4e1ee636c1a36739ff8f19240ad85ed9cee846db99ea43b6ab7b67040f5fdb8e237b139f8ee753f661f6aafe5b730912104180e883483d0de9a046ce2ab94f6cefd3035f51849cc366e9854c97755c1ff31f995aeec3ab5b38516347e05a34fe354f08c4993f8fa2d53dc08323cae1438fc82044b084fb43d54186ad2162aa37fc83e817d0d50576e11de9f78d5a88e011f06db8efe4360cd6ef3fb9aa8765d3d78c42d0a68bc3b2655cc9e49fd6680cb719d2fc940769b120bffccd13084b8c2f1fbca98723eb1b6c34feee379c2b5b0cb3453646e1b51ecd2f73f0b52bd01698b2c76a5ffea825938ca2751c307237ba2b3045f61dbb7f754651a8d86272b694ae5268b63a6bb843d3eeb3c228133d166985b31f566d7f0b8f68ccef2c9c159b964a6b5645b09e72453e38ec6df16dea77dc89e5a12688324419f11051afe039abafe2d0916e3f8cda769303f1b8772b2897c728dfb948f31f65c4b5fb2bcff0cbe17183bfdad29bf3610078d3282855d08f1b018c550b9463f70d597f867ab6af111b007c51bf8f99869f05e9af2a9ac71ffd63ef7e5d456d292b8ba1c150e8d02a0f8302c5291b5831e65b0c973809e7a85dfd20eb2505b3f12fc8343e50188f3003bc1b86ff2c43fc7e34aaf935979e47195d9e200099d7bf6af086521fd4a2f8dc5d2de1322b2bb61f0a6e267e9e532ba234c5bc8876b28116f5d53a7d8957c5fd400c72a15a071449a378f252e5186fd8034d673756fae420fbcdaa9bd474fc8f46890b7ff5941db4b0b67bfaf29304512c115f35aa32a72db743961a929521de4a4fd6b5501461224605fbfd5d960f6a0015d295f7efc54e64fa1ff686016f597a9009b8c80c4360ad14c4fab837978b5bc776764df2f7606044615ba379600df26582b7024f6252706291a6bc4797a4633d8a3b5fd657b15845568efd9e16618200b2e546cab9b0a0e7c1b470722b18d33e5e0d7a8ea0123"}) write(r0, &(0x7f00000000c0)='\x00', 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000000)={0x80000000, 0xffffffff, 0x80000000000011b, 0x0, 0x0, [{r1, 0x0, 0x5}]}) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x1f, 0x6, 0x608, 0x390, 0x390, 0x110, 0x260, 0x390, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, &(0x7f0000000640), {[{{@ip={@rand_addr=0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xfe000001, 0xffffffff, 'nr0\x00', 'ip_vti0\x00', {}, {0x7dee8a22dfb5ce0}, 0x89, 0x1, 0x4}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@tos={0x28, 'tos\x00', 0x0, {0x8, 0x80, 0x1}}, @common=@ttl={0x28, 'ttl\x00', 0x0, {0x1, 0xff}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @loopback, 0xffffffff, 0xffffff00, 'gre0\x00', 'veth0\x00', {}, {}, 0x33, 0x5, 0xb}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x0, 0x80}}, @common=@unspec=@rateest={0x68, 'rateest\x00', 0x0, {'caif0\x00', 'veth1_to_hsr\x00', 0x16, 0x2, 0xfffffeff, 0x4, 0x3, 0x7000000, 0x7429e0e7, 0x80000000}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x19}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x2, [0x1000, 0x5, 0xffff8000, 0x10000, 0x0, 0x2]}}}, @common=@icmp={0x28, 'icmp\x00', 0x0, {0x4, 0x9, 0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7f, 0x6, @multicast2, 0x4e20}}}, {{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0xf4f, 0x4, 0x3cb, 0x5, 0x7fff, 0x7e4], 0x1, 0xe4}, {0x200, [0x0, 0x5, 0xffff, 0x93, 0x5, 0x9abf], 0x81, 0x2}}}}, {{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x400, 0xfffff001, @local, 0x4e24}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x668) recvfrom$llc(r1, &(0x7f0000000580)=""/122, 0x7a, 0x80000000, &(0x7f0000000600)={0x1a, 0x5, 0x20, 0x6, 0xe4, 0x2}, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x110, r5, 0x1000) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r6, 0x101, 0x8, &(0x7f0000000040), 0x4) symlinkat(&(0x7f0000000500)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000540)='./file0\x00') 23:02:36 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x440, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x9, 0xca6, 0x8, 0x9, 0xa, 0x9, 0x2, 0x0, 0x5, 0x388d, 0x9, 0x4}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:36 executing program 0: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) [ 1555.938169] FAULT_INJECTION: forcing a failure. [ 1555.938169] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.955589] CPU: 0 PID: 32069 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1555.963530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1555.972898] Call Trace: [ 1555.975504] dump_stack+0x142/0x197 [ 1555.979155] should_fail.cold+0x10f/0x159 [ 1555.983333] should_failslab+0xdb/0x130 [ 1555.987331] __kmalloc_track_caller+0x2ec/0x790 [ 1555.992017] ? check_preemption_disabled+0x3c/0x250 [ 1555.997052] ? retint_kernel+0x2d/0x2d [ 1556.000954] ? selinux_cred_prepare+0x49/0xb0 [ 1556.005461] kmemdup+0x27/0x60 [ 1556.008667] selinux_cred_prepare+0x49/0xb0 [ 1556.013002] security_prepare_creds+0x7d/0xb0 [ 1556.017511] prepare_creds+0x2d1/0x390 [ 1556.021415] copy_creds+0x7b/0x4f0 [ 1556.024959] ? lockdep_init_map+0x9/0x10 [ 1556.029025] copy_process.part.0+0x868/0x6a70 [ 1556.033534] ? save_trace+0x290/0x290 [ 1556.037344] ? retint_kernel+0x2d/0x2d [ 1556.041243] ? trace_hardirqs_on_caller+0x400/0x590 [ 1556.046278] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1556.051049] ? __cleanup_sighand+0x50/0x50 [ 1556.055298] _do_fork+0x19e/0xce0 [ 1556.058761] ? fork_idle+0x280/0x280 [ 1556.062484] ? fput+0xd4/0x150 [ 1556.065680] ? SyS_write+0x15e/0x230 [ 1556.069405] SyS_clone+0x37/0x50 [ 1556.072772] ? sys_vfork+0x30/0x30 [ 1556.076317] do_syscall_64+0x1e8/0x640 [ 1556.080209] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1556.085063] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1556.090253] RIP: 0033:0x45a6f9 [ 1556.093445] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1556.101165] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1556.108442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1556.115723] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1556.122999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1556.130271] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:37 executing program 3 (fault-call:7 fault-nth:4): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:37 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) socketpair(0x0, 0x0, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4a4808}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0003e64651234bb25a30010000000000000002410000fe4400137564703a73797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000040) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:37 executing program 0: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:37 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:37 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@bcast, @null, 0x4, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 23:02:37 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:37 executing program 0: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:37 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000540)={0x0, 0x0, 0x5, 0x5, 0x176, &(0x7f00000007c0)="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"}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f00000001c0)='hfs\x00', &(0x7f0000000200)='./file0\x00', 0x3, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3bf1e23bfc140852352d4bfdef8ac3f16f916866f8bbedc19cdcf7a2dee9a7c2a1ca8739c3a4a026037c973edd4ef891f20722c1b438784e3a1df484f4562fa7906c2bff338e6ac08a1ec4ea72e5ab7bd3db9a5f480cd416b994a875dbf476bf42af8c014d80a11079b312ea9000a0c33a459a4f7c214d14925e80baad4c7510b9a749c41c29200de6a8bdb85f8f935c751db1474a978c3ddb602dce693e5d056b444f688a419ab805", 0xa9, 0x8c}, {&(0x7f0000000300)="5711f4818505efd6a709355fdc3849b291ad20146703e52b82447d134889487569eaa36cba2cdd374dadfaa47e254ec45b7c9449ef3f3e72509d8c4ca42bcb856558a3e11730b945f672f0994059bcff12b678179e4b7ff3b847581ef70ce88847e70e0cfb275c517ab943707b4fada714c698e788dd852646e0519bf1c5005947e6c1c5e0e0e1dcfd3aabbcd2a51bf59c607078aa0bf0b7662ef31777664edb7d", 0xa1, 0x875}], 0x20, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage}default,uid=', @ANYRESDEC=r2, @ANYBLOB=',uid=', @ANYRESDEC=r3, @ANYBLOB=',smackfsroot=\x00,\x00']) r4 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r4, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000580)) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000100)={0x5, 0x8, 0xf, "127f35fdd138c6073d839f31c687931b5d25f97ebc0423266317044d1d6e059c9cad2013fb979593557337e657b10eee6083ada1185bc83ca82e6527", 0x35, "75a0996f6bdf295a09395bd77bc4a24df6b6226597cadb6c834a26c3d74c0ecf44a7311c5c3a4a4df44e6e9b8aa0a966771d9e22b7937427c64f5e57"}) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000080)={0x3, 0x1, 0x1, 0x800, 0x14, 0x5, 0x3, 0xf0, 0x1, 0x4}) setsockopt$ax25_int(r6, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:37 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:37 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000000)=0x2) [ 1556.795753] FAULT_INJECTION: forcing a failure. [ 1556.795753] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:02:37 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) [ 1556.846007] CPU: 0 PID: 32096 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1556.853961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.863327] Call Trace: [ 1556.865946] dump_stack+0x142/0x197 [ 1556.869594] should_fail.cold+0x10f/0x159 [ 1556.869609] ? __might_sleep+0x93/0xb0 [ 1556.877656] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1556.877670] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1556.877680] ? rcu_read_lock_sched_held+0x110/0x130 [ 1556.877698] copy_process.part.0+0x26a/0x6a70 [ 1556.896906] ? save_trace+0x290/0x290 [ 1556.900725] ? proc_fail_nth_write+0x7d/0x180 [ 1556.905232] ? proc_cwd_link+0x1b0/0x1b0 [ 1556.909317] ? __f_unlock_pos+0x19/0x20 [ 1556.913314] ? find_held_lock+0x35/0x130 [ 1556.917394] ? __cleanup_sighand+0x50/0x50 [ 1556.921635] ? lock_downgrade+0x740/0x740 [ 1556.925804] _do_fork+0x19e/0xce0 [ 1556.929271] ? fork_idle+0x280/0x280 [ 1556.932998] ? fput+0xd4/0x150 [ 1556.936197] ? SyS_write+0x15e/0x230 [ 1556.940019] SyS_clone+0x37/0x50 [ 1556.943393] ? sys_vfork+0x30/0x30 [ 1556.946945] do_syscall_64+0x1e8/0x640 [ 1556.950839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1556.955689] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1556.960889] RIP: 0033:0x45a6f9 [ 1556.960894] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1556.960904] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1556.960908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1556.960913] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 23:02:37 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) creat(&(0x7f0000000240)='.//ile0\x00', 0x11) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) [ 1556.960918] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1556.960923] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:37 executing program 3 (fault-call:7 fault-nth:5): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:37 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) creat(&(0x7f0000000240)='.//ile0\x00', 0x11) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:37 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1c1200, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r2, 0xffff}) 23:02:37 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:37 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:38 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:38 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x800100, 0xc0a45d5d48823dd7) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x1, 0x9}) 23:02:38 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) connect$nfc_raw(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x9fa5526c7e8559af}, 0x10) [ 1557.741488] FAULT_INJECTION: forcing a failure. [ 1557.741488] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.802255] CPU: 1 PID: 32143 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1557.810202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1557.819568] Call Trace: [ 1557.822169] dump_stack+0x142/0x197 [ 1557.825817] ? vprintk_func+0x65/0x159 [ 1557.829726] should_fail.cold+0x10f/0x159 [ 1557.833898] should_failslab+0xdb/0x130 [ 1557.837888] kmem_cache_alloc+0x2d7/0x780 [ 1557.842063] ? dup_fd+0x21/0xa40 [ 1557.845447] dup_fd+0x85/0xa40 23:02:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getcwd(&(0x7f0000000080)=""/182, 0xb6) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null}) [ 1557.848692] copy_process.part.0+0x1b5a/0x6a70 [ 1557.853296] ? save_trace+0x290/0x290 [ 1557.857111] ? proc_fail_nth_write+0x7d/0x180 [ 1557.861621] ? proc_cwd_link+0x1b0/0x1b0 [ 1557.865706] ? __cleanup_sighand+0x50/0x50 [ 1557.869956] ? lock_downgrade+0x740/0x740 [ 1557.874111] _do_fork+0x19e/0xce0 [ 1557.877557] ? fork_idle+0x280/0x280 [ 1557.881279] ? fput+0xd4/0x150 [ 1557.884480] ? SyS_write+0x15e/0x230 [ 1557.888208] SyS_clone+0x37/0x50 [ 1557.891582] ? sys_vfork+0x30/0x30 [ 1557.895138] do_syscall_64+0x1e8/0x640 [ 1557.899064] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1557.903924] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1557.909121] RIP: 0033:0x45a6f9 [ 1557.912320] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1557.920038] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1557.927312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1557.934589] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1557.941880] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 23:02:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) socketpair(0x2, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x3}, 0x4) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/189) [ 1557.949161] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:38 executing program 3 (fault-call:7 fault-nth:6): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:38 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:38 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, 0xffffffffffffffff, 0x78fbb000) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x8, 0xa}) 23:02:38 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:38 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, 0xffffffffffffffff, 0x78fbb000) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:38 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x400000) recvfrom$x25(r1, &(0x7f0000000080)=""/107, 0x6b, 0x40000003, &(0x7f00000001c0)={0x9, @remote={[], 0x0}}, 0x12) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000140)=0xfffffc01) 23:02:38 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:39 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) [ 1558.645488] FAULT_INJECTION: forcing a failure. [ 1558.645488] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.680818] CPU: 1 PID: 32180 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1558.688772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1558.698285] Call Trace: [ 1558.700893] dump_stack+0x142/0x197 [ 1558.704553] should_fail.cold+0x10f/0x159 [ 1558.708723] should_failslab+0xdb/0x130 [ 1558.712719] kmem_cache_alloc_trace+0x2e9/0x790 [ 1558.717402] ? retint_kernel+0x2d/0x2d [ 1558.721462] alloc_fdtable+0x7f/0x280 [ 1558.725287] dup_fd+0x693/0xa40 [ 1558.728591] copy_process.part.0+0x1b5a/0x6a70 [ 1558.733207] ? save_trace+0x290/0x290 [ 1558.737025] ? proc_fail_nth_write+0x7d/0x180 [ 1558.741539] ? proc_cwd_link+0x1b0/0x1b0 23:02:39 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000)=0x1ff, 0x4) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) [ 1558.745628] ? __cleanup_sighand+0x50/0x50 [ 1558.749879] ? lock_downgrade+0x740/0x740 [ 1558.754051] _do_fork+0x19e/0xce0 [ 1558.757526] ? fork_idle+0x280/0x280 [ 1558.761255] ? fput+0xd4/0x150 [ 1558.764456] ? SyS_write+0x15e/0x230 [ 1558.768180] SyS_clone+0x37/0x50 [ 1558.771543] ? sys_vfork+0x30/0x30 [ 1558.775091] do_syscall_64+0x1e8/0x640 [ 1558.778992] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1558.783855] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1558.789054] RIP: 0033:0x45a6f9 [ 1558.792252] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1558.799983] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1558.807267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1558.814550] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1558.821918] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1558.829206] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:39 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, 0xffffffffffffffff, 0x78fbb000) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:39 executing program 3 (fault-call:7 fault-nth:7): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:39 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:39 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000300)=0xffff8000, 0x4) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, r4, 0xee5d8a7b0e5906ab, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f00000001c0)) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r6, 0x101, 0x2, &(0x7f0000000080), 0x4) accept4$ax25(r6, &(0x7f0000000240)={{0x3, @netrom}, [@bcast, @remote, @null, @bcast, @rose, @remote, @rose]}, &(0x7f00000002c0)=0x48, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2051240}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xaeb}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 23:02:39 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:39 executing program 2: r0 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:39 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:39 executing program 2: r0 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:39 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0x1, "aa2ee9487b5d6e9b61302a47012263642a82941506115f0f492089903f4ec56f", 0x1, 0x1}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000100)={0x3, 0x5, 0x20}) 23:02:39 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) [ 1559.587369] FAULT_INJECTION: forcing a failure. [ 1559.587369] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.625529] CPU: 0 PID: 32220 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1559.633492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1559.642860] Call Trace: [ 1559.645470] dump_stack+0x142/0x197 [ 1559.649126] should_fail.cold+0x10f/0x159 [ 1559.653300] should_failslab+0xdb/0x130 [ 1559.657300] kmem_cache_alloc_node_trace+0x280/0x770 [ 1559.662418] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1559.667887] __kmalloc_node+0x3d/0x80 [ 1559.671706] kvmalloc_node+0x4e/0xe0 [ 1559.675434] alloc_fdtable+0xcf/0x280 [ 1559.679243] dup_fd+0x693/0xa40 [ 1559.682540] copy_process.part.0+0x1b5a/0x6a70 [ 1559.687136] ? save_trace+0x290/0x290 [ 1559.690952] ? proc_fail_nth_write+0x7d/0x180 [ 1559.695459] ? proc_cwd_link+0x1b0/0x1b0 [ 1559.699538] ? __cleanup_sighand+0x50/0x50 [ 1559.703790] ? lock_downgrade+0x740/0x740 [ 1559.707963] _do_fork+0x19e/0xce0 [ 1559.711439] ? fork_idle+0x280/0x280 [ 1559.715170] ? fput+0xd4/0x150 [ 1559.718371] ? SyS_write+0x15e/0x230 [ 1559.722092] SyS_clone+0x37/0x50 [ 1559.725462] ? sys_vfork+0x30/0x30 [ 1559.729012] do_syscall_64+0x1e8/0x640 [ 1559.732909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1559.737771] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1559.742968] RIP: 0033:0x45a6f9 [ 1559.746166] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1559.753885] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1559.761165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1559.768446] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1559.775729] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 23:02:40 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:40 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:40 executing program 2: r0 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) [ 1559.783007] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:40 executing program 3 (fault-call:7 fault-nth:8): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:40 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:40 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:40 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x3}, 0x4) 23:02:40 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:40 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) [ 1560.462701] FAULT_INJECTION: forcing a failure. [ 1560.462701] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1560.474576] CPU: 0 PID: 32246 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1560.482469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.491838] Call Trace: [ 1560.494441] dump_stack+0x142/0x197 [ 1560.498088] should_fail.cold+0x10f/0x159 [ 1560.502263] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1560.506951] ? fs_reclaim_acquire+0x20/0x20 [ 1560.511284] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1560.516320] cache_grow_begin+0x80/0x400 [ 1560.520406] kmem_cache_alloc_node_trace+0x697/0x770 [ 1560.525526] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1560.531001] __kmalloc_node+0x3d/0x80 [ 1560.534814] kvmalloc_node+0x4e/0xe0 [ 1560.538543] alloc_fdtable+0xcf/0x280 [ 1560.542354] dup_fd+0x693/0xa40 [ 1560.545649] copy_process.part.0+0x1b5a/0x6a70 [ 1560.550245] ? save_trace+0x290/0x290 [ 1560.554049] ? proc_fail_nth_write+0x7d/0x180 [ 1560.558551] ? proc_cwd_link+0x1b0/0x1b0 [ 1560.562626] ? __cleanup_sighand+0x50/0x50 [ 1560.566868] ? lock_downgrade+0x740/0x740 [ 1560.571031] _do_fork+0x19e/0xce0 [ 1560.574492] ? fork_idle+0x280/0x280 [ 1560.578213] ? fput+0xd4/0x150 [ 1560.581430] ? SyS_write+0x15e/0x230 [ 1560.585161] SyS_clone+0x37/0x50 [ 1560.588534] ? sys_vfork+0x30/0x30 [ 1560.592079] do_syscall_64+0x1e8/0x640 [ 1560.595967] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1560.600822] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1560.606017] RIP: 0033:0x45a6f9 23:02:40 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:40 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 23:02:40 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:41 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) 23:02:41 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) [ 1560.609211] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1560.616935] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1560.624213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1560.631491] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1560.638775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1560.646063] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:41 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') sendto$netrom(r2, &(0x7f0000000800)="0e5b0aa1c9193f0bcf81f1e63e1e34f758b629d0b3c63156d970e052e480941d6dacb549211508cb0bb646df8c0100a0991277009363e473d185040eeda4c6e980548eace80f77efd6936e74d263afc504d5484b60467722ebf3e6bc7c7241b50c47ca4f56353c3cd6f170cd94e808ba7c45bd84f99c41c98c34845ca53aa6260d9f540d03a117b35eca208fe137374627b558029df34b9c7e56415fb45d50d88c38cdc82136af9c0a959accadbd9c770bb947033c82063c4f1bd2b7456b7b50761cefd7462fd076b23b03eea7853517a6c4bbfb7608e3b963cd376fd88009465502abce0064509a4cb5cf2a8838c28fb9ad3e488a1ff3d53748177934d01ada5f20e01569ddd06f5a7de61b29acd633fb5f298af1d7c374a46e5b954811fe322714ae271caeba7e04d6f8e1d75e5ab35040f0f62b6ba8de7945c0d412e5331b7bbdd188a3536867731583fa7e264877aeefcd7d2bef5033724a3cd34f57cdd6889f72bc3923d275c190f64a32159028ae6832d90598cb87772ae1dab76f46f2b71eed1fb5fa79bfbb09d0ea26e3565eb5432de22590bc050a2dc69961896962ac8b20798a67a731d8b53bb9f0496ba4581deadff05b14a35292a39e453d5b6e485d9f83c45404410e412deed76e5cdd3f7cfeb1e05205bf996a2df501b4d05c0b10df75cf59ac1124287ecf1bbcc31f2fa3cbf3ef855811730d1a4d2ed23b3fe85c2f8336e8d1fd7316f78e93aff0b249fdff8452712ed461fbd8d292e4362938a1723d9bddea6cb8e30704444749e32a1073aaab9ebe5b55437f30c94f4dca8be248ad39cc997bcb3db25643aa4965c2c513b982581bbd3bf9ebae0f7c8257d3b89196966afa20b564307af2834f258db27025826b7aace6a2e2dacac732fed563b153ef0e63d63ebe096ddcb710df042f1e80839a6e4b45bf18be8fecccd6b244f016f19d7f939978a198fd104f6d37f5d680bf028a9325bf71b72b32ff77eb236c41142d98ea94c36038874ef8d7b406e1981f051e9176929ed3297d946a7d948a0152f8056489b9fa0e2c39fbf71164137d691bf52b686688322d6b955057fc6cec299f2163a70dd9c80aca4947f92f606c063d25201946ce3cfa0fff66cf38d445b423e7e11064ea8057c8fcdcedf39ce9457f974e3af052e0854e8e9ee5d5de730ffc390a10256e07698bdf0778ca2bd3cc2ca1d0c4e2b6e7265d84a886a3da7c9652c8763b2115155be6af7eb6fc43836e5adf9f8e11f9798cf1b6773a3bd98dd33dea7e82de83ba39257b833ec55addbe97eddd1bfe921c520fd38b9dd6b7c2d4ec01e160c8b997e4d8647ac67fc11b0542d0f1ddd54cf1f0cae7d80da9b10fa492784b241b09a4ccbc5bade01dfc72d9e0b40f15759e17a7ce40aff6a125979399c5d99b467dc5b67fdb49aeaa76b0910efe0f914f535b98959ba78332dd9de5114ccde0a320787c9810ee6d42db5c473d4274f64aac1f05653992a498b224c10b7f33624634a5aa56ed3fe3cde9b498bae2814b3d59eb34282407eccd696c42f291bc76b8bf6e9c496dbd42b0c9cef9670dac182b729cd9a4cbc763a84e62bc9d2a14e7bb704a97160fcda585282dedc527297214f3a8f9910fe71f2939df6159c6988296163ec1d5d4e088ade6852b92983fc2010f4d0a86f00666867293a95713b81ace54d5c69b749651b0903a1aefa93cdb4c77c914672f373358165886006285550e503e7440f0748a7dce347a1f3e5eed07f5d46bffbb31109270eb803cb6f3ce1fe37acfb8ad45df1521a93102e40a99b4050cb283568e8e9ec1684d10a1978833e8516be802d29c59b39ca06fa4718c525a4cab7c0ffb11da84f08ae028d6375682336dfd3ded998631d22adf9cf5c601195d233fc16ad36dce3cad9d1e6c3a464c85242f20366bff4bd287381ef923feebecda329ac5baae9df26d1bcbb4baf2f37c6723ecc5f7c414549fe1be435ab5f76b5a977ddf0579cbdc51d5a6378e5c944b70f56dfddbbb137f5ef8a70188d5769b8d5074bab66621f581659da965310978d9e98d68d1915a3fc04b28d79ad0b67b334b44fb392b2d278de366e45df061d2afc3e5e63377db84b2669ff1964f87dc2f2bb72aaf640aa271649ec13c71c12ff9e682f9f66a6f2f826e19d2f1603c3689a3444a1c97d7f69532e345d3524ce9e516fe1d0e4fb9c7ab1d027e6dd424d81c52c00f7b4e69572e18bbc98d95f627080729f0190d4c5ed03fef3e4cd56e2a01aead348ebe1dc56cefb8383c43c6d0ddfe896f154a1d5f4aabadb0bc8ea1e41bbfd7a368499d30e3d305ff9d43776785ea200808960be430af8fc1ff6711f9e2a0b6905da9e8d55f1e15218a8f5aa2c247d660acef2e63963457f175e747c97495fd59cb44275672efb51eb9474313e5fb0eb76b7f351a5d8e11b5d4d7cde21da5b0f1101ff316ddea600f920b1b4e924218e98061591becb40dd8f851985b63bfab04106d563cde79fe2188ac8e49b2040c3fd796ea363409a460c34cbfcbb5e9ede98069fe1987962634a1463602d2fe3a95fbacd1f2e63e6fbf924b1c6050144e327524a840c70ea3588dbd1399180cc74b8d4a82e4776d76a8d0836a6226c4383a828af9cd9a8732be5d30503ee3aff38c49b0684fc751fa51ed41507853338d170dd7b36a70eb4235e3a4df0dcd1d9274fd1ce53da088459251f89023e394e531e28d8696c45986c618819a7ff6208e4f178f7c12b4fc13db22a3ec7de283b2aace7b2bdb01b5a09138c16d6cf994cb68591616af8e90e9d81da4341d457fc1c8660871a2362843cca7c8533506096aa7b5247393f79b2ebbc48a7675e50f221e624c3eaaf192ec9b348c9d0950d0bd87c023ecb534857a86f7fe481b9927bfc2a6f98b6b9bd1b20991ccc498b54352bf7adaa9be64af6dc00458c2694e16f974c128d35ed64c23cdb0f41dcc2436fb81a950a95aa667003aa7159a43c4d03676b098ecf449152fb31a91b26349a9bd2fa5f1b97b3bb459231e9966dae227fa0f2321a7fd82ab96cea4392a358f52509b67c79e5e88726ab00a087dfb608d2d0dc2677314555b52d228481f992a0d84ff3f2feb56d5b497d39c86ac9c2da3541d0e3554e8026c354f1fe874c97c6bf2c8f5ebdb7687ae655c20daa5882cd03834b1f747fa82948f861c940bb9076688ca5e72eda252c5e94233b9c135d6bc9ac8519efad2b10dbdb84a1f2c38bcbc70ce0e91b0d4de488461827c55119e4d2a88cbe8795ea5eaa433ce3a122e17a7de2b41db14e9faad8787e05fafe23d663562de6ef186a8c4be00cc1fa654ac67ff7ad51a44c013e3251b1e494f808bd03b0bee008c87d3a48988e7355e4d48d10f0e0d9ace20feed76f2ffd95d684d36923e99a30a401262e8fb6a559c38d91cbdf6bcf5148d3cf16a2919c0997b4add84c6c00f07666c2bcaf86d1ea1960827d9ba57454ceb82cc04225692aa465d6347078938fc86de0773f403ecc5904c21309ece76841b39fdbe22906f61c8fd0a83009fa8564b62cae4490100e773a6be4436509735e783c826e17eacb8ef4eed986a57e508b2fcd88c02c3ce38b856640bb257ceb1aecfc5e8df5c379c0ebc6f663e493a6db1897fdabc22f0e94ea569b6849fe29708ef8fc2c1d7025757aed8704433b37d4a113d7a2f503494b5eba80eeb875201e822d77f828a42958b64ce8562c714c43552007e5aa8bc52a0514857fb2fdbb6c10d4e2a80863051f8740793b50798056af2b1f708bfc47213ac9ff50d1943616fef7f23ed532cbeea4ed3907e1f9053eada5fbf1a1d368cbdb2455f2e166a69adcd6d66720d086166663e9e895243399500b17f1fb408f6f3f01b93ecf843b4383a372b918e69c7a7b7463054c0757306c6d0cb625cbba4f01a4ea6eac73e06debecd7aee517ffc4800d3cc079ec4ac8b43d59b4e299e46e3fcd3edd79a423bdd6793ac2888706b665cab8119e7abb7b41b041408c8d001197aaf375b2a24b0f45fefdcfa96c878161fde9e687ce7dd1a9c7e15df56e3bc5fbe36a2cfb72156d00ffb7fade8126a6b71867060898125b3f6df90caa1b67b5147d49d94f377e8a37dd76101d7fecdf0ed7cd122e3a9395babb181f9ba985e68a05332d4901b8100177a38d8676ea6b079e102d47c0ac90a33ae80ef0dfa806b514e4d6699635067cdff7ade636db7188eed514d2fa3f13d5156f54da86b55a937764cab232164378377a47ff81270432a82592c900384c69a233395e72aa2a0c3753ded49d402aff830fae523f537efcd9f1466facfa4730a89c5e80cf315046fda8e244ceaaf2e5748f8f1e1d3e5a34644da760f97c819e5da88af154d00b7878c494f906bc6f0b1d926a5772998fe23fdafd704817012be4438ddfb7e3b1ed56415ef00b1cf60e2c25f948c0ed30a4c56a1f9b4bfd452a99bfd437c21cac0cf7d38c72e3b30f478dfbfec013ec537c0ae13e7ce60287222579484f1c04d735aa40171057bb128ea6e7259fc12f00c41109866880e65933d91a9880dfc24915887cd89267df3ece2b3310a32a285e43ad7b0147a5d98a3674b59239ab60d0961e5e88029e665ff8c7cd67c7df963cab1cb2b5344298b57e87b7f63436b251ce32090726ff1727446bd1187c1a614f17353f35c7d9dbedc0fb74b181cb0b3ea342cce2bd0637c71e071fbd2f06e5a7c420e63e168857fb0e0d767acfad7c7d5bed931d3bac4cf0351106c1619dcf5b8feb8e109c503728cc17d3c82611c19b34cc9e877150a602edf38328a5df7c63cf2a26bb3b3ac3c13367d118933d2f1d0de392e3b3bf09d3be655c486b3e787266c51961f72e5ef4bf88de787bc02583fe7f80a3e0b7e558861fe522b4d69d76c51f90c7d59e2954da7004dc93db871af43e3df4f88dedf758ebc3f929b77679518c8e7570b4c31e9cb727dd3c1adf4cdb9d76ba48c6301167bc94c302167a6fb863308cc29634210b10e759014dc62031ee4a0bc6fc629a3d22053e6d1e91b9efee6f50c7c39fca622c6ac1f8141116640c1ba8cbfce048bdc8a95af85d4c841d7857afdcec2a1cec7d6bea43e461891f38fba8703cdbd0327845760be6a1bf2581806c1d63e8a6a2685a55341bb7db82d3ba52adec8b36abdbb625f78990be7526130e246ba7e6ab7a4203f7e72fb361680c6b89d63db945b2e6ff25c18753715b8b03ed3040a82166e04dad4b49f0fb3b5a1278b38d6a1251f335eb055007c3d96cf0ebf7b9113cc9adc4da98988acd167e80c2e284377100795dad711c3be05e4dd940e5c3188118c00bcb465383713509016923b40a9c88b5e7f1186e5b57bcdbe3a05b4d5246d0f4e3ef16fdb019f87a50d47da8c2d7f236772a305e9a314b64a28cbd55967357ba960e3f57b7326cb6f1c8a7025de5a53d1dfc106264b3df0d634ea58726cd735ad2f6593dd2927c005a3e433c22d4b9d523c9ea110ca5d1ee2feb18e24a57ea7e79acbe387ff13e88b75b249b2d027380c66fa56adf00c219823c79ca5c32208d37f0f2c833f13208c0146c32b5fdcb37611aed8ef3e447a622e3d1d14bb6cc2db69ca24ee3411468b6b02a2075c9282851eb7c96c9dc794bf662afec5981e61a2947bca084d45250ee5181faa704cff25394570c57a4e3c1a9bb96b3b7af52190c9acc9e2a1f834201984ac9717ded512b4a43c8ca488aa7002fc82873936af121b816ac6ccae850ccab95a3d3723c03a9ba7c9db2dfaac04feefdd28332dcdeda52a15b52c87f405d207aa4ae823750e44d84b8b933c0e227b", 0x1000, 0x4000000, &(0x7f00000003c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x31ac0}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x36}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x55}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @empty, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xee, @empty, 0x37}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @mcast1, 0xb9}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0xac, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc117}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xacd2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76c2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe01}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4000800) 23:02:41 executing program 3 (fault-call:7 fault-nth:9): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:41 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) [ 1560.914425] FAULT_INJECTION: forcing a failure. [ 1560.914425] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.929830] CPU: 0 PID: 32280 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1560.937766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.947138] Call Trace: [ 1560.949744] dump_stack+0x142/0x197 [ 1560.953397] should_fail.cold+0x10f/0x159 [ 1560.957566] should_failslab+0xdb/0x130 [ 1560.961549] kmem_cache_alloc+0x2d7/0x780 [ 1560.965786] ? copy_fs_struct+0x13/0x2d0 [ 1560.969864] copy_fs_struct+0x43/0x2d0 [ 1560.973766] copy_process.part.0+0x3974/0x6a70 [ 1560.978369] ? save_trace+0x290/0x290 [ 1560.982188] ? proc_fail_nth_write+0x7d/0x180 [ 1560.986695] ? proc_cwd_link+0x1b0/0x1b0 [ 1560.990781] ? __cleanup_sighand+0x50/0x50 [ 1560.995032] ? trace_hardirqs_on_caller+0x400/0x590 [ 1561.000060] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1561.004833] _do_fork+0x19e/0xce0 [ 1561.008295] ? fork_idle+0x280/0x280 [ 1561.012014] ? SyS_write+0x159/0x230 [ 1561.015740] ? __sanitizer_cov_trace_pc+0x15/0x60 [ 1561.020595] ? SyS_write+0x15e/0x230 [ 1561.024322] SyS_clone+0x37/0x50 [ 1561.027694] ? sys_vfork+0x30/0x30 [ 1561.031250] do_syscall_64+0x1e8/0x640 [ 1561.035150] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1561.040009] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1561.045212] RIP: 0033:0x45a6f9 [ 1561.048405] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1561.056124] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 23:02:41 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:41 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:41 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:41 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) [ 1561.063405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1561.070688] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1561.077972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1561.085253] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:41 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:41 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x2b) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x4492, 0x8}, 0xc) 23:02:41 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x20) 23:02:41 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f0000000000)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0xfffffffc, 0x2, 0x2, 0x6, 0x13, 0x40, 0xf8, 0x80, 0x400, 0x1, 0x3d34e434, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x4a97693ae7aff989, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x1000, 0x0, 0x10000, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000100)={r3, 0x6}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f0000000040), 0x4) 23:02:41 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x20) 23:02:41 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000000)) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000080)={@default, @null}) [ 1561.240662] Unknown ioctl 1074025832 [ 1561.252724] Unknown ioctl 1074025832 23:02:42 executing program 3 (fault-call:7 fault-nth:10): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:42 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:42 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000000), 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000080)={@default, @null, @bcast, 0x0, 0x3, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:42 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040)=0x402, 0x4) 23:02:42 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x20) 23:02:42 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:42 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:42 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x20) 23:02:42 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10000, 0x40000) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x1) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) write(r2, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) setsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000000040), 0x4) 23:02:42 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = getpgid(0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) setpriority(0x0, r1, 0x9) r2 = socket(0x2, 0x800, 0x43) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x25) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x2) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000100)={0xfffffffe}, 0x4) 23:02:42 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x20) 23:02:42 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x78fbb000) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) [ 1561.874279] FAULT_INJECTION: forcing a failure. [ 1561.874279] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.919530] CPU: 0 PID: 32327 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1561.927481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.936853] Call Trace: [ 1561.939455] dump_stack+0x142/0x197 [ 1561.943103] ? should_fail.cold+0x10a/0x159 [ 1561.947479] should_fail.cold+0x10f/0x159 [ 1561.951650] should_failslab+0xdb/0x130 [ 1561.955624] kmem_cache_alloc+0x2d7/0x780 [ 1561.959760] ? do_raw_spin_unlock+0x16b/0x260 [ 1561.959773] ? _raw_spin_unlock+0x2d/0x50 [ 1561.968414] copy_process.part.0+0x39d7/0x6a70 [ 1561.973014] ? check_preemption_disabled+0x3c/0x250 [ 1561.978051] ? retint_kernel+0x2d/0x2d [ 1561.981951] ? save_trace+0x290/0x290 [ 1561.985774] ? __cleanup_sighand+0x50/0x50 [ 1561.990023] ? trace_hardirqs_on_caller+0x400/0x590 [ 1561.995053] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1561.999833] _do_fork+0x19e/0xce0 [ 1562.003305] ? fork_idle+0x280/0x280 [ 1562.007031] ? SyS_write+0x1e0/0x230 [ 1562.010761] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 1562.015614] ? fput+0xd4/0x150 [ 1562.018821] ? SyS_write+0x15e/0x230 [ 1562.022555] SyS_clone+0x37/0x50 [ 1562.025935] ? sys_vfork+0x30/0x30 [ 1562.029488] do_syscall_64+0x1e8/0x640 [ 1562.033395] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1562.038259] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1562.043455] RIP: 0033:0x45a6f9 [ 1562.046652] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1562.054378] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1562.061655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1562.068933] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1562.076218] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1562.083529] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:43 executing program 3 (fault-call:7 fault-nth:11): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:43 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) write(r1, &(0x7f00000000c0)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) 23:02:43 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x20) 23:02:43 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x20}, {r0, 0x80}, {0xffffffffffffffff, 0x9622}, {0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x600}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:43 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f00000000c0)=[0x5, 0x1f, 0x10001, 0x5, 0x800, 0x2], 0x6, 0x931b, 0x8001, 0x3, 0x0, 0xa5, {0x5, 0x3, 0x81, 0xd53b, 0x80, 0x9, 0x5, 0xff23, 0x211, 0x86e, 0x6, 0x2, 0x8, 0x4, "42c81189e25fd540a0c8f179bafea7c9697678906295b7c50f8e9b85107b9132"}}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x2b8, 0x1, 0xffff, 0x101}, 0x10) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0xfff, 0x341ff9ecffa7f5b3) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x9, 0xc1}) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f00000001c0)={@null, @default, @null, 0x4, 0x8, 0x8, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 23:02:43 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:43 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) 23:02:43 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100)={0x1f}, 0x8) 23:02:43 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000000)) 23:02:43 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x4, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:43 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) 23:02:43 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100)={0x1f}, 0x8) [ 1562.837559] FAULT_INJECTION: forcing a failure. [ 1562.837559] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.869024] CPU: 1 PID: 32377 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1562.876972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1562.886335] Call Trace: [ 1562.888941] dump_stack+0x142/0x197 [ 1562.892591] should_fail.cold+0x10f/0x159 [ 1562.896756] should_failslab+0xdb/0x130 [ 1562.900746] kmem_cache_alloc+0x2d7/0x780 [ 1562.904909] ? do_raw_spin_unlock+0x16b/0x260 [ 1562.909416] ? _raw_spin_unlock+0x2d/0x50 [ 1562.913584] copy_process.part.0+0x39d7/0x6a70 [ 1562.918180] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1562.922956] ? check_preemption_disabled+0x3c/0x250 [ 1562.927987] ? retint_kernel+0x2d/0x2d [ 1562.931888] ? __f_unlock_pos+0x19/0x20 [ 1562.935904] ? __cleanup_sighand+0x50/0x50 [ 1562.940151] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1562.944919] _do_fork+0x19e/0xce0 [ 1562.948378] ? fork_idle+0x280/0x280 [ 1562.952083] ? fput+0x10/0x150 [ 1562.952090] ? fput+0x16/0x150 [ 1562.952098] ? fput+0xd4/0x150 [ 1562.952106] ? SyS_write+0x15e/0x230 [ 1562.952117] SyS_clone+0x37/0x50 [ 1562.952124] ? sys_vfork+0x30/0x30 [ 1562.952135] do_syscall_64+0x1e8/0x640 [ 1562.952145] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1562.981015] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1562.986213] RIP: 0033:0x45a6f9 [ 1562.989405] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1562.997126] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1563.004414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1563.011697] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1563.018978] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1563.026262] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:44 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 23:02:44 executing program 3 (fault-call:7 fault-nth:12): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:44 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x10) 23:02:44 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) 23:02:44 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:44 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:44 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)) 23:02:44 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f0000000000)='\x00', 0x1) openat$random(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x88801, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000007c0)={{0x4, 0xec842dee32e38f62, 0x65a, 0xfffffff8, 'syz1\x00', 0x3}, 0x0, [0xfff, 0x1, 0x5, 0x34ee, 0xee, 0x9691, 0x5, 0x1, 0x40, 0x7, 0x16e, 0x5, 0x1000, 0x7fffffff, 0x1f, 0x7, 0x5, 0x401, 0x1, 0x3f, 0x8, 0x2, 0x2, 0x1, 0xffff, 0x4, 0x33, 0xd65b, 0x7, 0x7, 0x1, 0x1, 0xffffffffffff8001, 0xfc, 0x3c2, 0x200, 0x4, 0x8, 0x9, 0x5, 0x9, 0x1, 0xfffffffffffffffd, 0x1, 0x200, 0x1, 0x200, 0xa3, 0x8, 0x2, 0x9, 0x1f, 0x9, 0x1ed8, 0x8, 0x200, 0x800, 0x1, 0xff, 0xfffffffffffff001, 0x2, 0x29a6, 0x7fff, 0x200, 0xa7a6, 0x0, 0x5, 0x7, 0x100000000, 0x1, 0x9, 0x20, 0x81, 0x5, 0x2f, 0x3d479bbc, 0x0, 0x4, 0x7ff, 0x100000000, 0x4, 0x2, 0x842, 0x7, 0x0, 0x7, 0x100, 0x8, 0x1, 0x2, 0x1, 0x3c6cb7d9, 0x8, 0x7, 0x7fff, 0x80000001, 0xffffffffffffb334, 0x6, 0xab, 0x2, 0x67a, 0x3, 0x5, 0x5, 0xdea, 0x6, 0x7fffffff, 0x3, 0x6, 0x3, 0x100, 0x8d1, 0xfffffffffffffffd, 0x1c, 0x3696b430, 0x80000000, 0x8, 0xfff, 0xfffffffffffffff9, 0x5, 0x8, 0x2, 0x30e9, 0x0, 0x6, 0x46380d33, 0xa814, 0x5], {r2, r3+10000000}}) rt_sigaction(0xa, &(0x7f0000000100)={&(0x7f0000000080)="660f50f5c4c1781129f390c6c600c4e172580e66440f6a804c2d0000400faa66400f3831ca66470f642d0d000000c4a2619004bc", {0x1000}, 0x10000000, &(0x7f00000000c0)="f08115ae88000000800000f30fa7e066420f74df8fc978c132c4e1c2539a4c8ccc4b3e26660f3acfef002ef04280b3cd793debc3c4210defe264f26dddef"}, &(0x7f0000000200)={&(0x7f0000000140)="f6ddf3df26f2460f1a2c8b41cbc44129691336818d0f000000cf9d0000c48131dac80cabc462094636c4a22d8c1a", {}, 0x0, &(0x7f0000000180)="660f3815442401410f66f026410f3803546d7dc461adfe450d430f0fcc0cc4c1b95615aa1a0000c4e1851590655666662e420f2f7900d8690c2666410f380a8761b3ae0e"}, 0x8, &(0x7f0000000240)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r4, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c56108447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r2, 0x3}}, 0x18) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) [ 1563.741568] FAULT_INJECTION: forcing a failure. [ 1563.741568] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.762094] CPU: 1 PID: 32416 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1563.770044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1563.779416] Call Trace: [ 1563.782026] dump_stack+0x142/0x197 [ 1563.785680] should_fail.cold+0x10f/0x159 [ 1563.789854] should_failslab+0xdb/0x130 [ 1563.793972] kmem_cache_alloc+0x2d7/0x780 [ 1563.798146] ? selinux_capable+0x36/0x40 [ 1563.802230] create_new_namespaces+0x34/0x720 [ 1563.806825] ? ns_capable_common+0x12c/0x160 [ 1563.811255] copy_namespaces+0x284/0x310 [ 1563.815337] copy_process.part.0+0x2603/0x6a70 [ 1563.819949] ? proc_fail_nth_write+0x7d/0x180 [ 1563.824466] ? proc_cwd_link+0x1b0/0x1b0 [ 1563.828554] ? __cleanup_sighand+0x50/0x50 [ 1563.832827] ? trace_hardirqs_on_caller+0x400/0x590 23:02:44 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) write(r2, &(0x7f0000000000)="aa1df78544ccf01977aa15bf17f574068bf5c0ee985002087df5054b57cc4b47ce7815998d0fc49da9aa05bc678fd188ca347c949db0", 0x36) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:44 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x1) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x80010, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1563.837863] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1563.842642] _do_fork+0x19e/0xce0 [ 1563.846115] ? fork_idle+0x280/0x280 [ 1563.849852] ? fput+0xd4/0x150 [ 1563.853055] ? SyS_write+0x15e/0x230 [ 1563.856782] SyS_clone+0x37/0x50 [ 1563.860155] ? sys_vfork+0x30/0x30 [ 1563.863708] do_syscall_64+0x1e8/0x640 [ 1563.867777] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1563.872635] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1563.877862] RIP: 0033:0x45a6f9 [ 1563.881061] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 23:02:44 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) write(r0, &(0x7f00000000c0)='\x00', 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$input_event(r1, &(0x7f0000000200)={{}, 0x0, 0x5, 0x9d7}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000100)={{0x0, 0x2, 0x7, 0x0, 0x3}, 0x20, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x4, 0x7fffffff, 0x8, 0x40}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f0000000000)={0x2, 0x1, [0x3, 0x6, 0x94, 0x7, 0x3ff, 0x5, 0xcd2, 0x8]}) [ 1563.888777] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1563.896060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1563.903358] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1563.910646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1563.917924] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:44 executing program 3 (fault-call:7 fault-nth:13): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:44 executing program 0: 23:02:44 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000000)=0x80) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="f7002c00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r3, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3, 0x1f}, &(0x7f0000000140)=0x8) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:44 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0xfff, "ab63d1cd083cbb8cee975de6d05d1c1c757fbafbc6d6f656dd9cf05fa394ca97", 0x0, 0x1}) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x0, 0x400) write(r2, &(0x7f00000001c0)="b361bf918d117190deeb34c38ffe55e8aae3a12fae809742ea9cc09a5bc233a382230d761ed013caa51f3946f64022671e79c20c45fd79e247b4f4ae12731028e8aaa0208978e0c61c184d0cc1fbdd1cadf9b0628407033455f3877cf430bff88a96c64dbd137c6cbab451c368382a4398282c8dd7faf3a7104507e4690cd3571c1dd815353c44d5042d62fb8ba9be58f700c5563e510a4aca617c7a0ea66917c0e4b5ef1b827c52e87aa2a62f2e22005d584513b7d23a3560f1043f3078769110bed1e6694e6ed021d771c04d96adbf42c8d732c2876d36f4c12d73", 0xffffffffffffff02) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) close(r3) setsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:44 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:44 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 23:02:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x4000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0x10, 0x100000000000003, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x7}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x2, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x8000) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 23:02:45 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r4, @in6={{0xa, 0x10, 0x0, @dev}}, [0x0, 0x0, 0x20000000000]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={r4, 0xff81, 0x1, [0x800]}, &(0x7f0000000080)=0xa) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) ioprio_get$pid(0x3, r5) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x80800, 0x0) bind$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:45 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x7) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1564.647624] FAULT_INJECTION: forcing a failure. [ 1564.647624] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.683634] CPU: 0 PID: 32457 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1564.691584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1564.700953] Call Trace: [ 1564.703556] dump_stack+0x142/0x197 [ 1564.707203] should_fail.cold+0x10f/0x159 [ 1564.711371] should_failslab+0xdb/0x130 [ 1564.715361] kmem_cache_alloc_node_trace+0x280/0x770 [ 1564.720630] ? kasan_unpoison_shadow+0x35/0x50 [ 1564.725234] __kmalloc_node+0x3d/0x80 [ 1564.729053] kvmalloc_node+0x4e/0xe0 [ 1564.732781] alloc_fdtable+0x13b/0x280 [ 1564.736681] dup_fd+0x693/0xa40 [ 1564.739966] ? __sanitizer_cov_trace_pc+0x2a/0x60 [ 1564.744828] copy_process.part.0+0x1b5a/0x6a70 [ 1564.749433] ? retint_kernel+0x2d/0x2d [ 1564.753337] ? trace_hardirqs_on_caller+0x400/0x590 [ 1564.758373] ? __cleanup_sighand+0x50/0x50 [ 1564.762627] _do_fork+0x19e/0xce0 [ 1564.766094] ? fork_idle+0x280/0x280 [ 1564.769813] ? fput+0xd4/0x150 [ 1564.773008] ? SyS_write+0x15e/0x230 [ 1564.776728] SyS_clone+0x37/0x50 [ 1564.780106] ? sys_vfork+0x30/0x30 [ 1564.783656] do_syscall_64+0x1e8/0x640 [ 1564.787549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1564.792400] entry_SYSCALL_64_after_hwframe+0x42/0xb7 23:02:45 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast, 0x2, 0x20}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @empty}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) socket(0x10, 0x2, 0x0) setreuid(0x0, 0x0) setresuid(r1, r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x90e00, 0x0) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000140)=0xb2bc96370fd83738) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000000c0)={0x156024e63359e87b, @multicast1, 0x4e21, 0x0, 'sh\x00', 0x21, 0x5, 0x6a}, 0x2c) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') renameat(r5, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') accept4$netrom(r5, 0x0, &(0x7f0000000000), 0x80000) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) [ 1564.797591] RIP: 0033:0x45a6f9 [ 1564.800777] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1564.808494] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1564.815771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1564.823047] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1564.830321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1564.837581] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:45 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x6, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f00000010c0)={0x10000, [[0x400, 0x8, 0x81, 0x9, 0x8000, 0x800, 0x4, 0x1000], [0x3, 0x9c, 0xffffffff, 0x1, 0x2, 0x3ff, 0x7fffffff], [0x9, 0xffff, 0x1203550, 0xd5a0, 0xd52, 0x7, 0x7fffffff, 0x8]], [{0x9, 0x2, 0xff}, {0x0, 0x8, 0x1ff}, {0x2, 0x18269c88, 0x400}, {0x8000, 0x401, 0x4}, {0x7, 0x80800000, 0x7}, {0x43, 0x3, 0x2}, {0xfffffe00, 0x8, 0x7}, {0x800, 0xdc40, 0x8}, {0x1, 0x7, 0x6}, {0x1ff, 0xd94e, 0x7}, {0xffff, 0x6, 0x6}, {0x2, 0x7}], 0x1}) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000, 0x40000126, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000001080)={0x29, 0x4, 0x0, {0x4, 0x9, 0x1, 0x0, [0x0]}}, 0x29) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast}) 23:02:45 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:45 executing program 3 (fault-call:7 fault-nth:14): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:45 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0xffffff6a}}], 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x2f543f6b59bc72f5, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000180)={{0xce, 0x6}, 0x0, 0xfffffffc, 0x0, {0x0, 0x9}, 0x47, 0x10001}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 23:02:45 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x5, 0x3, 0x28e301, 0x5, 0x6b28, 0x0, 0x9}, 0x1c) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56}) 23:02:45 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = request_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f00000002c0)='syz', 0xfffffffffffffffc) add_key(&(0x7f00000001c0)='trusted\x00', 0x0, 0x0, 0x0, r1) keyctl$clear(0x7, r1) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e20, @empty}, 0x100, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0xa, 0x26}) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:45 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:45 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 23:02:45 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="d00800002400fbffe59000002005ffffa6ffff945fdc63573689e24a5df743572fa7b8f09d4b70fc8483bb704059e49f54204f81c55583474a2d1a84da607aee9bb96c5221d56863fa16b17779f6afe4796ff5d128e4b6d21b70ea5eabca0440a1a302e575a18141", @ANYRES32=r4, @ANYBLOB="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"], 0x3}}, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0xe, &(0x7f0000001a80), &(0x7f0000001ac0)=0x14) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') sendmsg$nl_xfrm(r6, &(0x7f0000001b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x285240}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=@polexpire={0x11d0, 0x1b, 0x8, 0x70bd2a, 0x25dfdbfb, {{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in=@broadcast, 0x4e20, 0x0, 0x4e22, 0x1000, 0xa, 0x180, 0x20, 0x87, r1, r2}, {0x4, 0x67, 0x400, 0x18000, 0x22c8, 0x4, 0x81, 0x4}, {0x81, 0xffffffff, 0x1f, 0x7}, 0x7, 0x6e6bb4, 0x4, 0x24a3724aa9291d21, 0x1, 0x1}, 0x1}, [@offload={0xc, 0x1c, {r4, 0x2}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd2c, 0x70bd26, 0x70bd2a, 0x70bd2c, 0x6, [0xff, 0x8, 0x1]}}, @output_mark={0x8, 0x1d, 0x4}, @algo_auth_trunc={0x104c, 0x14, {{'sha224-generic\x00'}, 0x8000, 0x100, "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"}}, @extra_flags={0x8, 0x18, 0x4e}, @address_filter={0x28, 0x1a, {@in=@local, @in6=@remote, 0x0, 0x4, 0x8}}, @address_filter={0x28, 0x1a, {@in=@multicast2, @in6=@remote, 0xa, 0x2, 0x5}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x9, @in6=@mcast1, 0x0, 0xa}}, @migrate={0x4}]}, 0x11d0}, 0x1, 0x0, 0x0, 0x1}, 0x40011) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r7, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:45 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="8b67c5435ba16a33dfc8f23c108cdfc3118497213420a174846243882791a8188a3837dfcde41a06f867b64654b8492516b9d803a44ba635", 0x38) [ 1565.546954] FAULT_INJECTION: forcing a failure. [ 1565.546954] name failslab, interval 1, probability 0, space 0, times 0 [ 1565.564322] CPU: 1 PID: 32500 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1565.572270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1565.581643] Call Trace: [ 1565.584289] dump_stack+0x142/0x197 [ 1565.587973] should_fail.cold+0x10f/0x159 [ 1565.592142] should_failslab+0xdb/0x130 [ 1565.596131] kmem_cache_alloc+0x2d7/0x780 [ 1565.600293] ? check_preemption_disabled+0x3c/0x250 [ 1565.605318] ? retint_kernel+0x2d/0x2d [ 1565.609219] create_new_namespaces+0x34/0x720 [ 1565.613783] ? copy_namespaces+0x24d/0x310 [ 1565.618039] copy_namespaces+0x284/0x310 [ 1565.622108] copy_process.part.0+0x2603/0x6a70 [ 1565.626707] ? proc_fail_nth_write+0x7d/0x180 [ 1565.631207] ? proc_cwd_link+0x1b0/0x1b0 [ 1565.635287] ? __cleanup_sighand+0x50/0x50 [ 1565.639530] ? lock_downgrade+0x740/0x740 [ 1565.643692] _do_fork+0x19e/0xce0 [ 1565.647154] ? fork_idle+0x280/0x280 [ 1565.650878] ? fput+0xd4/0x150 [ 1565.654197] ? SyS_write+0x15e/0x230 [ 1565.657927] SyS_clone+0x37/0x50 [ 1565.661302] ? sys_vfork+0x30/0x30 [ 1565.665010] do_syscall_64+0x1e8/0x640 [ 1565.668909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1565.673772] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1565.679055] RIP: 0033:0x45a6f9 [ 1565.682250] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1565.689978] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 23:02:46 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x50, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1565.697395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1565.704680] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1565.711966] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1565.719254] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:46 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40280) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000100)=""/133) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x1, 0x0, [0x7fff, 0x20, 0x0, 0x40, 0x9, 0x5, 0x10001, 0x5]}) 23:02:46 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x622900) fadvise64(r0, 0x9, 0x40, 0xa1a77296357bec1c) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x2, 0x44}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x600280, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x80, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x12, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x20, 0x5, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000100)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffedc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x900}, 0x423eba0cc6f02c9c) 23:02:46 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4), 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) 23:02:46 executing program 3 (fault-call:7 fault-nth:15): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:46 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f00000000c0)={0xa, 0x4e22, 0x101, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000100)="0c817d4865a192d0a1612a4e9fbe3585ecd7e78fe93a14a4413d4de38875db841a4fe697aef8f70d1de6549cf068911ee130eaf86d1c88fb988e2a92d630cc076dfca6ad5bcd1a7c3878b3dcb11c6a6a9f04ae84f13e4596a1801c27b4dc6ec3f4b1e9ca62787819bdcf85b58673f4fbf8360499af3c", 0x76}, {&(0x7f00000001c0)="d3ef9d295f9b8bfb51fee8e6efc4b13f594dbc1e72a2cf50ae77ea4932b6ec71b2875eb1af98ce0a160920b02b81226f33df00e84e86c05e667255c969c266c0a5861e131082ace83d7871b28c82ddbd787e00f40922265205ac4f831ef0bdb16d0b89ae940d0678f0746ffe83450f389b2daa936a94b8561021afe3276658fc97a7acf156c3080834b3b1b847f59daf003c487a61c3a58886bfc32f9e0ee56a9b43bb1dbc357bc7ec61d2da28ed682ec2267992efa36fa833e760e93f04dbf8c6975c0eb3751661860168f6064198", 0xcf}, {&(0x7f00000002c0)="e7a93c182c2356c51d8c2ccc130767e7aba08f62f79121faf6e33968db4be57fb8c7a120f90ab657bb4bcc3300672c877a4ffdbdd25e7c7b1df26a2a", 0x3c}, {&(0x7f0000000300)="1ee6db27dacb314224991cf93e46bf6f15b6d6", 0x13}, {&(0x7f0000000800)="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", 0x1000}], 0x5, &(0x7f00000003c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x4a, 0x2, 0x0, 0x5, 0x0, [@dev={0xfe, 0x80, [], 0x20}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x0, 0x0, 0x3, 0x3f}}}, @rthdr={{0xb8, 0x29, 0x39, {0x2c, 0x14, 0x7, 0xa4, 0x0, [@remote, @dev={0xfe, 0x80, [], 0x1f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x18}, @mcast2, @local]}}}, @rthdr={{0x98, 0x29, 0x39, {0x62, 0x10, 0x1, 0x8, 0x0, [@local, @mcast2, @mcast1, @rand_addr="53b2609edb5237dfa68d8b33b6de29ab", @empty, @loopback, @empty, @local]}}}, @hopopts={{0x48, 0x29, 0x36, {0x2b, 0x5, [], [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x20, {0x1, 0x6, 0x6, 0x4, [0x6, 0xff, 0x7]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x826}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hopopts={{0x28, 0x29, 0x36, {0x3c, 0x1, [], [@pad1, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x7}, @pad1]}}}], 0x230}, 0x1) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:02:46 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0x20}) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001780)=ANY=[], 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) creat(&(0x7f0000002b00)='./file0\x00', 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000340)=0x6e) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x34000006) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) 23:02:46 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) 23:02:46 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r3, 0x301}, 0x14}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20880}, 0x840) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:46 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:46 executing program 2: socket$inet(0x2, 0x0, 0x0) io_setup(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f00000001c0), 0x0, &(0x7f0000000300)) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8906, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="2436cfec2afd9f9f8a8ab62700000000070000174ab80c9e3b4b001400000997002a2292e59c"], 0x26}, 0x40000) 23:02:46 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x7, 0x7) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20000, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000080)=0x3) 23:02:46 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @rand_addr=0x6}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, @in6={0xa, 0x4e20, 0x800, @mcast2, 0x7f}]}, &(0x7f0000000180)=0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:46 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:47 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xffac, 0x1, [0x7]}, 0xa) [ 1566.580927] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1566.604740] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 23:02:47 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) fcntl$setpipe(r2, 0x407, 0x8) [ 1566.643019] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1566.647672] FAULT_INJECTION: forcing a failure. [ 1566.647672] name failslab, interval 1, probability 0, space 0, times 0 [ 1566.689620] CPU: 1 PID: 32563 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1566.689831] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1566.697583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1566.697590] Call Trace: [ 1566.697610] dump_stack+0x142/0x197 [ 1566.697626] should_fail.cold+0x10f/0x159 [ 1566.697645] should_failslab+0xdb/0x130 [ 1566.697655] kmem_cache_alloc+0x2d7/0x780 [ 1566.697671] alloc_vfsmnt+0x28/0x7d0 [ 1566.697681] clone_mnt+0x70/0xee0 [ 1566.697696] copy_tree+0xd0/0x8a0 [ 1566.697713] copy_mnt_ns+0x11c/0x8c0 [ 1566.697722] ? kmem_cache_alloc+0x611/0x780 [ 1566.697735] ? selinux_capable+0x36/0x40 [ 1566.697750] create_new_namespaces+0xc9/0x720 [ 1566.697761] ? ns_capable_common+0x12c/0x160 [ 1566.697775] copy_namespaces+0x284/0x310 [ 1566.697789] copy_process.part.0+0x2603/0x6a70 [ 1566.697810] ? proc_fail_nth_write+0x7d/0x180 [ 1566.697820] ? proc_cwd_link+0x1b0/0x1b0 [ 1566.697842] ? __cleanup_sighand+0x50/0x50 [ 1566.697853] ? lock_downgrade+0x740/0x740 [ 1566.697868] _do_fork+0x19e/0xce0 [ 1566.697882] ? fork_idle+0x280/0x280 [ 1566.697895] ? fput+0xd4/0x150 [ 1566.697905] ? SyS_write+0x15e/0x230 [ 1566.697919] SyS_clone+0x37/0x50 [ 1566.697927] ? sys_vfork+0x30/0x30 [ 1566.697939] do_syscall_64+0x1e8/0x640 [ 1566.697949] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1566.697964] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1566.697973] RIP: 0033:0x45a6f9 [ 1566.697978] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1566.697989] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1566.697995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1566.698001] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1566.698014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1566.698020] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 [ 1566.888892] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1566.899589] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1566.910408] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1566.934887] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1566.947783] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1566.961774] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 23:02:47 executing program 3 (fault-call:7 fault-nth:16): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:47 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x10, 0x0, 0x8800) 23:02:47 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) 23:02:47 executing program 5: r0 = open(&(0x7f0000000080)='.//ile0\x00', 0x20000, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:47 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) tee(r0, r0, 0x3, 0x1) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:47 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:47 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:47 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:47 executing program 4: r0 = memfd_create(&(0x7f0000000080)='vboxnet1\x00', 0x2) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:47 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:48 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:48 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x8000) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x7, 0x1, [], &(0x7f00000001c0)=0x9}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000240), 0x4) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') write$P9_RRENAME(r3, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000100)={0x1, 0xffffffff, 0x80000000}) [ 1567.651999] FAULT_INJECTION: forcing a failure. [ 1567.651999] name failslab, interval 1, probability 0, space 0, times 0 [ 1567.673434] CPU: 0 PID: 32622 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1567.681388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1567.690763] Call Trace: [ 1567.693377] dump_stack+0x142/0x197 [ 1567.697030] should_fail.cold+0x10f/0x159 [ 1567.701201] should_failslab+0xdb/0x130 [ 1567.705197] __kmalloc_track_caller+0x2ec/0x790 [ 1567.709899] ? kstrdup_const+0x48/0x60 [ 1567.713834] kstrdup+0x3a/0x70 [ 1567.717042] kstrdup_const+0x48/0x60 [ 1567.720772] alloc_vfsmnt+0xe5/0x7d0 [ 1567.724507] clone_mnt+0x70/0xee0 [ 1567.728095] ? is_subdir+0x222/0x389 [ 1567.731831] copy_tree+0x33b/0x8a0 [ 1567.735396] copy_mnt_ns+0x11c/0x8c0 [ 1567.739123] ? kmem_cache_alloc+0x611/0x780 [ 1567.743566] create_new_namespaces+0xc9/0x720 [ 1567.748106] ? ns_capable_common+0x12c/0x160 [ 1567.752631] copy_namespaces+0x284/0x310 [ 1567.756711] copy_process.part.0+0x2603/0x6a70 [ 1567.761326] ? proc_cwd_link+0x1b0/0x1b0 [ 1567.765421] ? __cleanup_sighand+0x50/0x50 [ 1567.769681] ? lock_downgrade+0x740/0x740 [ 1567.773843] _do_fork+0x19e/0xce0 [ 1567.777305] ? fork_idle+0x280/0x280 [ 1567.781026] ? fput+0xd4/0x150 [ 1567.784219] ? SyS_write+0x15e/0x230 [ 1567.787934] SyS_clone+0x37/0x50 [ 1567.791295] ? sys_vfork+0x30/0x30 [ 1567.794831] do_syscall_64+0x1e8/0x640 [ 1567.798745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1567.803586] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1567.808762] RIP: 0033:0x45a6f9 [ 1567.811934] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1567.819632] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1567.826895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1567.834158] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1567.841527] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1567.848790] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:48 executing program 3 (fault-call:7 fault-nth:17): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:48 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:48 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040)=0x101, 0xdd) 23:02:48 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:48 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f00000000c0)={0x58a0cae8157df72a}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:48 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) 23:02:48 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:48 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x11d) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast}) 23:02:48 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1568.445288] FAULT_INJECTION: forcing a failure. [ 1568.445288] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.475760] CPU: 0 PID: 32643 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1568.483705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1568.493070] Call Trace: [ 1568.495672] dump_stack+0x142/0x197 [ 1568.499329] should_fail.cold+0x10f/0x159 [ 1568.503499] should_failslab+0xdb/0x130 [ 1568.507492] kmem_cache_alloc+0x2d7/0x780 [ 1568.511667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1568.516443] alloc_vfsmnt+0x28/0x7d0 [ 1568.520174] clone_mnt+0x70/0xee0 [ 1568.523643] ? copy_tree+0x4de/0x8a0 [ 1568.527382] copy_tree+0x33b/0x8a0 [ 1568.530940] copy_mnt_ns+0x11c/0x8c0 [ 1568.534652] ? kmem_cache_alloc+0x611/0x780 [ 1568.538970] ? selinux_capable+0x36/0x40 [ 1568.543043] create_new_namespaces+0xc9/0x720 [ 1568.547548] ? ns_capable_common+0x12c/0x160 [ 1568.551967] copy_namespaces+0x284/0x310 [ 1568.556041] copy_process.part.0+0x2603/0x6a70 [ 1568.560659] ? proc_fail_nth_write+0x7d/0x180 [ 1568.565166] ? proc_cwd_link+0x1b0/0x1b0 [ 1568.569249] ? __cleanup_sighand+0x50/0x50 [ 1568.573494] ? lock_downgrade+0x740/0x740 [ 1568.577661] _do_fork+0x19e/0xce0 [ 1568.581123] ? fork_idle+0x280/0x280 [ 1568.584849] ? check_preemption_disabled+0x3c/0x250 [ 1568.589874] ? retint_kernel+0x2d/0x2d 23:02:49 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:49 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:49 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x414102, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x65, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, r0, 0x4000) socket$kcm(0x29, 0x5, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e21, 0x87, @loopback, 0x6}, {0xa, 0x4e24, 0x7, @empty, 0xff}, 0x2, [0xfffffff7, 0x2, 0x5, 0x7, 0x80000000, 0x8000, 0x80000000, 0xeb33]}, 0x5c) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') accept$unix(r3, &(0x7f0000000180), &(0x7f0000000080)=0x6e) [ 1568.593775] SyS_clone+0x37/0x50 [ 1568.597147] ? sys_vfork+0x30/0x30 [ 1568.600698] do_syscall_64+0x1e8/0x640 [ 1568.604593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1568.609455] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1568.614654] RIP: 0033:0x45a6f9 [ 1568.617844] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1568.625571] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1568.632843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1568.632853] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1568.647395] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1568.654671] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:49 executing program 3 (fault-call:7 fault-nth:18): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:49 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:49 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0xb, &(0x7f0000000040), 0x4) 23:02:49 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) 23:02:49 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:49 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x7) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000100)='./file0/f.le.\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x20, 0x80}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r3, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x7, 0x1}, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x1, 0x2, 0x3f0}, &(0x7f0000000340)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r4, 0x4) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000500)=0x7) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000200)={0x1, 0x3, 0x1000, 0x81, &(0x7f0000000140)="3fedd9e5bb608ed3c3edda62f7305919ee23b79ef646525207ede5d1e81e9239b73dacbd3ead2f1d7a3846e5711e45c2d61d5f462b647f927bf73f773ae6a47bff758ed0be0a3e11e7af76cefd6b23edbb065e94841f50db866b44ea0aae5b8f6c961bf284f9d671777de3984b4668519eeeacce5ce2f97fcd87f48e51053e4910", 0x1000, 0x0, &(0x7f0000000800)="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"}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:49 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:49 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1569.346835] FAULT_INJECTION: forcing a failure. [ 1569.346835] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.379003] CPU: 0 PID: 32681 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1569.386954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1569.396327] Call Trace: [ 1569.398936] dump_stack+0x142/0x197 [ 1569.402581] ? vprintk_func+0x65/0x159 [ 1569.406489] should_fail.cold+0x10f/0x159 [ 1569.410663] should_failslab+0xdb/0x130 [ 1569.414658] __kmalloc_track_caller+0x2ec/0x790 [ 1569.419345] ? kstrdup_const+0x48/0x60 [ 1569.423254] kstrdup+0x3a/0x70 [ 1569.426466] kstrdup_const+0x48/0x60 [ 1569.430193] alloc_vfsmnt+0xe5/0x7d0 [ 1569.433924] clone_mnt+0x70/0xee0 [ 1569.437398] copy_tree+0x33b/0x8a0 [ 1569.440961] copy_mnt_ns+0x11c/0x8c0 [ 1569.444686] ? kmem_cache_alloc+0x611/0x780 [ 1569.449031] create_new_namespaces+0xc9/0x720 [ 1569.453542] ? ns_capable_common+0x12c/0x160 [ 1569.457964] copy_namespaces+0x284/0x310 [ 1569.462038] copy_process.part.0+0x2603/0x6a70 [ 1569.466657] ? proc_fail_nth_write+0x7d/0x180 [ 1569.471164] ? proc_cwd_link+0x1b0/0x1b0 [ 1569.475242] ? __cleanup_sighand+0x50/0x50 [ 1569.479487] ? lock_downgrade+0x740/0x740 [ 1569.483648] _do_fork+0x19e/0xce0 [ 1569.487113] ? fork_idle+0x280/0x280 [ 1569.490845] ? fput+0xd4/0x150 [ 1569.494043] ? SyS_write+0x15e/0x230 [ 1569.497768] SyS_clone+0x37/0x50 [ 1569.501142] ? sys_vfork+0x30/0x30 [ 1569.504695] do_syscall_64+0x1e8/0x640 [ 1569.508596] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1569.513456] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1569.518652] RIP: 0033:0x45a6f9 [ 1569.521851] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1569.529570] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1569.536855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1569.544136] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1569.551417] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1569.558700] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:50 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:50 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:50 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x80) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xb) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000140)={0x6, 0x5, [{0xfffffffa, 0x0, 0x5}, {0x9, 0x0, 0x800}, {0xfffffffe, 0x0, 0x6}, {0xfff, 0x0, 0x2}, {0x800, 0x0, 0x8}, {0x4, 0x0, 0x2}]}) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:50 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:50 executing program 3 (fault-call:7 fault-nth:19): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:50 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:50 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x40000010}) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)='nlmon0\x00') r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10, 0xc00) dup2(r0, r3) 23:02:50 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:50 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) 23:02:50 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:50 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:50 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f0000000000)=']', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1570.197916] FAULT_INJECTION: forcing a failure. [ 1570.197916] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.236686] CPU: 1 PID: 32719 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1570.244641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1570.254008] Call Trace: [ 1570.256612] dump_stack+0x142/0x197 [ 1570.260271] should_fail.cold+0x10f/0x159 [ 1570.264440] should_failslab+0xdb/0x130 [ 1570.268438] kmem_cache_alloc+0x2d7/0x780 [ 1570.272609] ? find_held_lock+0x35/0x130 [ 1570.276683] ? copy_tree+0x4a2/0x8a0 [ 1570.280412] alloc_vfsmnt+0x28/0x7d0 [ 1570.284143] clone_mnt+0x70/0xee0 [ 1570.287608] ? lock_downgrade+0x740/0x740 [ 1570.291769] ? do_raw_spin_unlock+0x16b/0x260 [ 1570.296283] copy_tree+0x33b/0x8a0 [ 1570.299843] copy_mnt_ns+0x11c/0x8c0 [ 1570.303573] ? kmem_cache_alloc+0x611/0x780 [ 1570.307910] ? selinux_capable+0x36/0x40 [ 1570.311988] create_new_namespaces+0xc9/0x720 [ 1570.316494] ? ns_capable_common+0x12c/0x160 [ 1570.320922] copy_namespaces+0x284/0x310 [ 1570.324998] copy_process.part.0+0x2603/0x6a70 [ 1570.329599] ? proc_fail_nth_write+0x7d/0x180 [ 1570.334104] ? proc_cwd_link+0x1b0/0x1b0 [ 1570.338195] ? __cleanup_sighand+0x50/0x50 [ 1570.342447] ? lock_downgrade+0x740/0x740 23:02:50 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:50 executing program 2: socket$unix(0x1, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1570.346647] _do_fork+0x19e/0xce0 [ 1570.350131] ? fork_idle+0x280/0x280 [ 1570.353856] ? fput+0xd4/0x150 [ 1570.357056] ? SyS_write+0x15e/0x230 [ 1570.360785] SyS_clone+0x37/0x50 [ 1570.364157] ? sys_vfork+0x30/0x30 [ 1570.367704] do_syscall_64+0x1e8/0x640 [ 1570.371597] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1570.376973] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1570.382168] RIP: 0033:0x45a6f9 [ 1570.385360] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 23:02:50 executing program 2: socket$unix(0x1, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:50 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) [ 1570.393075] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1570.400351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1570.407627] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1570.414906] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1570.422192] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:51 executing program 3 (fault-call:7 fault-nth:20): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:51 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x2, 0xa8, 0x9, 0x0, 0x1, 0x20, 0x20, 0xa3, 0x3, 0x0, 0x4, 0x4, 0x7, 0x15, 0xa, 0x3}}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:51 executing program 0: open(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:51 executing program 2: socket$unix(0x1, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:51 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) syncfs(r0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000080), 0x4) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, r3}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000100)={0x1f, 0xdc, 0x219, 0x6, 0x1, "054159cfc018299d4572e22a64e2e9c4c9d2e9", 0x2, 0x6}) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000640)=0x0) sched_rr_get_interval(r7, &(0x7f0000000680)) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000005c0)=0x0) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f00000001c0)='.//ile0\x00', 0x5, 0x5, &(0x7f0000000540)=[{&(0x7f0000000200)="e769e92fcd03e8b56d849e11bebb2ec6d1cc2d95c7f72d6848849817f359b0cfc11ff2e539edbcacb8b04f03f7cacb7b5e64a40106cd8dab6ce8ab409702fffaef037172d98491709a26efc3b5cc9c5919560e08d0f1ddc7264f9a67cd9148fa637a3a420a52b8483064a20e8261f78f0d7f7c4e1962bcb4677197a685d0f9140c50f751942fe0c70ed3e3ba45a5fe6234461c94a8d15b9c109c4c08cc097738602f557cc6db0ddceda85b5b8a55c83cb815835765802fdb6a7cbb8a40350d4fe3733464fec9c764a61893791c5e49fdb9f1bbac97940f1340e6", 0xda, 0xffffffffffffffff}, {&(0x7f0000000300)="d9ac20d7ca8d3d4a415fe2329949a23b17f08b344259fffe3a4d8131c8a61c34070551f06f804bcae4a9e8360ac488d4716f8af39b875b2b6d0cc3596a419c9b01b31e402eae51cd006d1d54c054a2a747edcca7bcb14633ec00bd1ce741b2b97be3d0d9ed0253ffacb776bc10192a6ed988f031e455c6ad418c7fd55eb68f8766d5df69fb", 0x85}, {&(0x7f00000003c0)="64de1d5390e045441f3b82baf46c823b81ab7685a9b53cc6ca075588a8b6e52752ddf1121cd0082cb36a8d71a9601666f222b17918f2bafe909d", 0x3a}, {&(0x7f0000000400)="13cb271712e9eb55963fe73687562bb2b0a0b5df877035019a352bbc4b1f00ebaf0d44130e3a1c2ab649735a6761a4d92df81882773fe6bb90c9bfbbc882186c5b837f24c61aafe4c1fbd5ebca5e325ce131d55a06cf533dfbfd43968e8d64d9c8cb3107f8b5ea8a86e1f2", 0x6b, 0x2}, {&(0x7f0000000480)="6e53932993ad4fc27334681205b23a02b5c59f0b9022581334b6c537f03d66e8befe07deb723938415d08ad6d043b8473379723c947a95e87a99c28dcd97f883149da78bd9e752da64bf0048ad9c3083bd1d2ecd0cd24357d5ad8c662d0a26fe1039c9ce02f0d7ebd1bdeb374db6e00f1a87af83ca7136ef01c940b8e42242e06384f654999c4d917c355e2cb2bf0b78c082e9e498c6b6ec23efaef7fe3fcf8e056a", 0xa2, 0x2}], 0x1020, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r8, @ANYBLOB="2c6d61703d61636f726e2c626c6f636b3d3078666435316637343035383635343031310600"]) dup3(r1, r4, 0x0) 23:02:51 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) 23:02:51 executing program 0: open(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:51 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:51 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r1, 0x100c0000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:51 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000000c0)) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) r3 = dup3(r1, 0xffffffffffffffff, 0x1c0000) ioctl$sock_bt_hci(r3, 0x800448f0, &(0x7f00000004c0)="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") 23:02:51 executing program 0: open(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) [ 1571.166372] FAULT_INJECTION: forcing a failure. [ 1571.166372] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.215812] CPU: 1 PID: 32763 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1571.223758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1571.233126] Call Trace: [ 1571.235734] dump_stack+0x142/0x197 [ 1571.239385] should_fail.cold+0x10f/0x159 [ 1571.243643] should_failslab+0xdb/0x130 [ 1571.247637] __kmalloc_track_caller+0x2ec/0x790 [ 1571.252328] ? kstrdup+0x1f/0x70 [ 1571.255714] ? strlen+0x6b/0xa0 [ 1571.259011] ? kstrdup_const+0x48/0x60 [ 1571.262908] kstrdup+0x3a/0x70 [ 1571.266094] kstrdup_const+0x48/0x60 [ 1571.269815] alloc_vfsmnt+0xe5/0x7d0 [ 1571.273546] clone_mnt+0x70/0xee0 [ 1571.277017] ? lock_downgrade+0x740/0x740 [ 1571.281177] ? do_raw_spin_unlock+0x16b/0x260 [ 1571.285691] copy_tree+0x33b/0x8a0 [ 1571.289249] copy_mnt_ns+0x11c/0x8c0 [ 1571.292973] ? kmem_cache_alloc+0x611/0x780 [ 1571.297318] create_new_namespaces+0xc9/0x720 [ 1571.301828] ? ns_capable_common+0x12c/0x160 [ 1571.306253] copy_namespaces+0x284/0x310 [ 1571.310329] copy_process.part.0+0x2603/0x6a70 [ 1571.314919] ? proc_fail_nth_write+0x7d/0x180 [ 1571.319404] ? proc_cwd_link+0x1b0/0x1b0 [ 1571.323486] ? __cleanup_sighand+0x50/0x50 [ 1571.327737] ? lock_downgrade+0x740/0x740 [ 1571.331905] _do_fork+0x19e/0xce0 [ 1571.335381] ? fork_idle+0x280/0x280 [ 1571.339119] ? check_preemption_disabled+0x3c/0x250 [ 1571.344154] ? retint_kernel+0x2d/0x2d [ 1571.348056] ? sys_vfork+0x30/0x30 [ 1571.351618] SyS_clone+0x37/0x50 [ 1571.354996] ? sys_vfork+0x30/0x30 [ 1571.358554] do_syscall_64+0x1e8/0x640 23:02:51 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) [ 1571.362456] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1571.367314] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1571.372519] RIP: 0033:0x45a6f9 [ 1571.375709] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1571.383433] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1571.390713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1571.397996] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1571.405280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1571.412564] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:52 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000080)={0x4834, {{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x1e}, 0x8}}, {{0xa, 0x4e23, 0x30, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1ff}}}, 0x108) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:52 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) 23:02:52 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:52 executing program 3 (fault-call:7 fault-nth:21): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:52 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x3, 0x7fff, 0xc7, r0}) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='syscall\x00') ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$void(r3, 0x4310b4c841d52042) r4 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r4, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f00000001c0), 0x4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r7, 0xc4}}, 0x10) 23:02:52 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:52 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:52 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getegid() ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@bcast, @default, 0x2, 0x20}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x5, 0x5}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) 23:02:52 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:52 executing program 2: r0 = socket$unix(0x1, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:52 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@default, @bcast, 0x2, 0x44}) 23:02:52 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) [ 1572.193163] FAULT_INJECTION: forcing a failure. [ 1572.193163] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.250251] CPU: 0 PID: 346 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1572.258029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1572.267404] Call Trace: [ 1572.270007] dump_stack+0x142/0x197 [ 1572.273655] should_fail.cold+0x10f/0x159 [ 1572.277823] should_failslab+0xdb/0x130 [ 1572.281819] kmem_cache_alloc+0x2d7/0x780 [ 1572.285980] ? find_held_lock+0x35/0x130 [ 1572.290051] ? copy_tree+0x4a2/0x8a0 [ 1572.293886] alloc_vfsmnt+0x28/0x7d0 [ 1572.297611] clone_mnt+0x70/0xee0 [ 1572.301074] ? lock_downgrade+0x740/0x740 [ 1572.305234] ? do_raw_spin_unlock+0x16b/0x260 [ 1572.309742] copy_tree+0x33b/0x8a0 [ 1572.313299] copy_mnt_ns+0x11c/0x8c0 [ 1572.317017] ? kmem_cache_alloc+0x611/0x780 [ 1572.321352] ? selinux_capable+0x36/0x40 [ 1572.325424] create_new_namespaces+0xc9/0x720 [ 1572.329927] ? ns_capable_common+0x12c/0x160 [ 1572.334350] copy_namespaces+0x284/0x310 [ 1572.338431] copy_process.part.0+0x2603/0x6a70 [ 1572.343033] ? check_preemption_disabled+0x3c/0x250 [ 1572.348067] ? retint_kernel+0x2d/0x2d [ 1572.351987] ? __cleanup_sighand+0x50/0x50 [ 1572.356240] ? lock_downgrade+0x740/0x740 [ 1572.360410] _do_fork+0x19e/0xce0 [ 1572.363902] ? fork_idle+0x280/0x280 [ 1572.367631] ? fput+0xd4/0x150 [ 1572.370842] ? SyS_write+0x15e/0x230 [ 1572.374697] SyS_clone+0x37/0x50 [ 1572.378073] ? sys_vfork+0x30/0x30 [ 1572.381624] do_syscall_64+0x1e8/0x640 [ 1572.385528] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1572.390391] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1572.395585] RIP: 0033:0x45a6f9 [ 1572.398779] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1572.406496] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1572.413775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1572.421057] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1572.428342] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1572.435628] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:53 executing program 3 (fault-call:7 fault-nth:22): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:53 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\n\x83]\xb1\x88\x04\xfc\xfb\xf0\x8a\xcc+\x97g\x10\xf4\x9fg\xa7%\xaco\x1f\xbf\xd4\xcb1ue|{\bV\x8f\xd0\xfc\xff\xadvaH\xb2c\xda\xe8\xe8~\x92\x00E\xe7\xc4\xee+\x12\x02\x99\x1e\xc6\xcf\xc2\xcc\xc3Q<\x89\xda\xbc^\xa9\xe3\xa3\x1f,e~\xdd\xfb\xe3\xbb$\xa7k[\x94; \x97?\xd8i9\tr\x0e\xf4l`A\xa8\x03\x99\x91(u4\x9b\xa1D\xc2\x91\xce\xb3\xe8\'', 0x8) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10010, r0, 0x1968c000) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r4, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) setsockopt$inet_tcp_buf(r1, 0x6, 0x20, &(0x7f00000002c0)="07fee833dcb649ebee0f0c39651c9e2ebe9e299d8179ed7a7c8d58b23d294308bef455122536f9c55b15493a0583d9cf9e3b83551c04d0010732a325624b527bc115348dad5871ca6adcf28d416bcfed6774e3e0e04974af70dd6c6f0c32fd6d82c89060b693f6372c7c6383cb493adacf0a45b154af4f2fdc340ea269", 0x7d) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e20, @empty}}, 0x62, 0x5}, 0x90) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') r7 = socket(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f00000001c0)={r9, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000080)={r9, 0x2}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000380)={r10, 0x65c2}, &(0x7f00000003c0)=0x8) setsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:53 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:53 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0xb0a1, 0x2]}, 0x8) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:53 executing program 2: r0 = socket$unix(0x1, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:53 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) 23:02:53 executing program 2: r0 = socket$unix(0x1, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:53 executing program 4: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffffffffffa, 0x0) r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:53 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r3, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r3, 0x7}, 0x8) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = socket(0xa, 0x2, 0x6) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r6 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x181000) r7 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r5, 0x7, r6, &(0x7f0000000100)={r7, r4, 0xffffffff}) fcntl$setpipe(r6, 0x407, 0x8) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6erspan0\x00'}}, 0x1e) 23:02:53 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:53 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1573.087876] FAULT_INJECTION: forcing a failure. [ 1573.087876] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.119466] CPU: 0 PID: 392 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1573.127241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1573.136606] Call Trace: [ 1573.139214] dump_stack+0x142/0x197 [ 1573.142869] should_fail.cold+0x10f/0x159 [ 1573.147054] should_failslab+0xdb/0x130 [ 1573.151052] kmem_cache_alloc+0x2d7/0x780 [ 1573.155219] ? find_held_lock+0x35/0x130 [ 1573.159292] ? copy_tree+0x4a2/0x8a0 [ 1573.163022] alloc_vfsmnt+0x28/0x7d0 [ 1573.166753] clone_mnt+0x70/0xee0 [ 1573.170216] ? lock_downgrade+0x740/0x740 [ 1573.174373] ? do_raw_spin_unlock+0x16b/0x260 [ 1573.178877] copy_tree+0x33b/0x8a0 [ 1573.182436] copy_mnt_ns+0x11c/0x8c0 23:02:53 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1573.186162] ? kmem_cache_alloc+0x611/0x780 [ 1573.190496] ? selinux_capable+0x36/0x40 [ 1573.194576] create_new_namespaces+0xc9/0x720 [ 1573.199096] ? ns_capable_common+0x12c/0x160 [ 1573.203517] copy_namespaces+0x284/0x310 [ 1573.207597] copy_process.part.0+0x2603/0x6a70 [ 1573.212198] ? check_preemption_disabled+0x3c/0x250 [ 1573.217225] ? retint_kernel+0x2d/0x2d [ 1573.221138] ? __cleanup_sighand+0x50/0x50 [ 1573.225385] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1573.230158] _do_fork+0x19e/0xce0 [ 1573.233626] ? fork_idle+0x280/0x280 [ 1573.237340] ? fput+0x10/0x150 [ 1573.240549] ? audit_add_tree_rule.cold+0x2e/0x2e [ 1573.240558] ? fput+0xd4/0x150 [ 1573.240566] ? SyS_write+0x15e/0x230 [ 1573.240579] SyS_clone+0x37/0x50 [ 1573.240585] ? sys_vfork+0x30/0x30 [ 1573.240598] do_syscall_64+0x1e8/0x640 [ 1573.240606] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1573.240623] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1573.273111] RIP: 0033:0x45a6f9 [ 1573.276302] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1573.284027] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1573.291307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1573.298569] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1573.305825] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1573.313078] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:54 executing program 3 (fault-call:7 fault-nth:23): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:54 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:54 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:54 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000011, 0x11, r0, 0xe744c000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0xef, 0x3, 0x0, 0x0, @sint={0x3, 0x101}}, {0x5, 0x4, 0x0, 0x0, @msi={0x101, 0x280, 0xff}}, {0x6, 0x3, 0x0, 0x0, @adapter={0x693, 0x1ff0000, 0x4, 0xc8f2, 0x3f}}, {0x20, 0x4, 0x0, 0x0, @adapter={0xfff, 0x6, 0x2, 0x19, 0xff}}, {0x8, 0x1, 0x0, 0x0, @adapter={0x7, 0x7, 0x1f, 0x8, 0x8001}}, {0x7, 0xdeb17cb9ed4419e0, 0x0, 0x0, @msi={0x0, 0xbc, 0x3}}, {0x8, 0x3, 0x0, 0x0, @msi={0xfffffffd, 0x7fff, 0x10001}}, {0x1, 0x3, 0x0, 0x0, @irqchip={0x1, 0x1ff}}, {0x9, 0x3, 0x0, 0x0, @msi={0xfffffc77, 0x0, 0x2}}, {0x1000, 0x3, 0x0, 0x0, @msi={0x8, 0x1000}}]}) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 23:02:54 executing program 5: r0 = socket$inet(0x2, 0x80000, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x62, &(0x7f0000000000)={@loopback, @multicast1}, 0x8) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='\t\x00', 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = socket(0x11, 0x800, 0xcc) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r4, @ANYBLOB="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"], 0x3}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000140)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, r4}, 0xc) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:54 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) 23:02:54 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:54 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:54 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x6c800, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000140)=0x6019, 0x4) write(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x1) r1 = accept4$inet6(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x80400) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e21, @rand_addr=0x9}, @in={0x2, 0x4e23, @rand_addr=0x1}, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10000}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @rand_addr=0x4a}], 0x5c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_create(r2, &(0x7f0000000040)=@access={'system_u:object_r:iptables_conf_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x80000001}, 0x51) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) 23:02:54 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:54 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000400)=""/38, &(0x7f0000000440)=0x26) 23:02:54 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1573.986588] FAULT_INJECTION: forcing a failure. [ 1573.986588] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.019874] CPU: 0 PID: 437 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1574.027641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1574.037009] Call Trace: [ 1574.039611] dump_stack+0x142/0x197 [ 1574.043260] should_fail.cold+0x10f/0x159 [ 1574.047433] should_failslab+0xdb/0x130 [ 1574.051435] kmem_cache_alloc+0x2d7/0x780 [ 1574.055605] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1574.060374] alloc_vfsmnt+0x28/0x7d0 [ 1574.064100] clone_mnt+0x70/0xee0 [ 1574.067593] copy_tree+0x33b/0x8a0 [ 1574.071155] copy_mnt_ns+0x11c/0x8c0 [ 1574.074897] ? kmem_cache_alloc+0x611/0x780 [ 1574.079221] ? check_preemption_disabled+0x3c/0x250 [ 1574.084252] ? retint_kernel+0x2d/0x2d [ 1574.088158] create_new_namespaces+0xc9/0x720 [ 1574.092674] copy_namespaces+0x284/0x310 [ 1574.096755] copy_process.part.0+0x2603/0x6a70 [ 1574.101360] ? proc_fail_nth_write+0x7d/0x180 [ 1574.105869] ? proc_cwd_link+0x1b0/0x1b0 [ 1574.109958] ? __cleanup_sighand+0x50/0x50 [ 1574.114244] ? lock_downgrade+0x740/0x740 [ 1574.118480] _do_fork+0x19e/0xce0 [ 1574.121955] ? fork_idle+0x280/0x280 [ 1574.125682] ? fput+0xd4/0x150 [ 1574.128885] ? SyS_write+0x15e/0x230 [ 1574.132608] SyS_clone+0x37/0x50 [ 1574.135975] ? sys_vfork+0x30/0x30 [ 1574.139514] do_syscall_64+0x1e8/0x640 [ 1574.143406] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1574.148263] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1574.153456] RIP: 0033:0x45a6f9 [ 1574.156647] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1574.164394] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1574.171676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1574.178955] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1574.186232] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1574.193498] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:55 executing program 3 (fault-call:7 fault-nth:24): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:55 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x26000) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) fcntl$setown(r1, 0x8, r3) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x8, &(0x7f0000000040)=0xa, 0x4) 23:02:55 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:55 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000000)) 23:02:55 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:55 executing program 1: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) 23:02:55 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:55 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:55 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000080)={0x0, 0x1, [0x6, 0x0, 0x6, 0x5, 0x6, 0x80000001, 0x7ff, 0xfffffc01]}) 23:02:55 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f0000000000)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, &(0x7f0000000300)) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1574.864170] FAULT_INJECTION: forcing a failure. [ 1574.864170] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.895159] CPU: 0 PID: 471 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1574.902936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:02:55 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1574.912306] Call Trace: [ 1574.914917] dump_stack+0x142/0x197 [ 1574.918570] should_fail.cold+0x10f/0x159 [ 1574.922743] should_failslab+0xdb/0x130 [ 1574.926735] __kmalloc_track_caller+0x2ec/0x790 [ 1574.931422] ? kstrdup_const+0x48/0x60 [ 1574.935324] kstrdup+0x3a/0x70 [ 1574.938530] kstrdup_const+0x48/0x60 [ 1574.942257] alloc_vfsmnt+0xe5/0x7d0 [ 1574.945986] clone_mnt+0x70/0xee0 [ 1574.949444] ? lock_downgrade+0x740/0x740 [ 1574.953608] ? do_raw_spin_unlock+0x16b/0x260 [ 1574.958116] copy_tree+0x33b/0x8a0 [ 1574.961676] copy_mnt_ns+0x11c/0x8c0 [ 1574.965404] ? kmem_cache_alloc+0x611/0x780 [ 1574.969745] ? selinux_capable+0x36/0x40 [ 1574.973826] create_new_namespaces+0xc9/0x720 [ 1574.978340] ? ns_capable_common+0x12c/0x160 [ 1574.982763] copy_namespaces+0x284/0x310 [ 1574.986834] copy_process.part.0+0x2603/0x6a70 [ 1574.991484] ? proc_fail_nth_write+0x7d/0x180 [ 1574.995995] ? proc_cwd_link+0x1b0/0x1b0 [ 1575.000074] ? __cleanup_sighand+0x50/0x50 [ 1575.004327] ? lock_downgrade+0x740/0x740 [ 1575.008497] _do_fork+0x19e/0xce0 23:02:55 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1575.011967] ? fork_idle+0x280/0x280 [ 1575.015691] ? fput+0xd4/0x150 [ 1575.018888] ? SyS_write+0x15e/0x230 [ 1575.022608] SyS_clone+0x37/0x50 [ 1575.025974] ? sys_vfork+0x30/0x30 [ 1575.029523] do_syscall_64+0x1e8/0x640 [ 1575.033420] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1575.038300] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1575.043497] RIP: 0033:0x45a6f9 [ 1575.046692] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1575.054409] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1575.061689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1575.068971] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1575.076374] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1575.083684] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:56 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:02:56 executing program 3 (fault-call:7 fault-nth:25): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:56 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:56 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, r5) bind$bt_hci(r7, &(0x7f00000007c0), 0xc) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:02:56 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {r2, 0x6}}, 0x10) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) r4 = memfd_create(&(0x7f0000000080)='-selinuxproc:md5sum-\x00', 0x53b880c4e54abe22) write(r4, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0xca926000) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f0000000040), 0x4) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x100, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r7, &(0x7f0000000180)='.//ile0\x00', r7, &(0x7f00000007c0)='./file0/f.le.\x00') r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r10, &(0x7f0000000180)='.//ile0\x00', r10, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8) sendmsg$nl_route(r7, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=@can_delroute={0x1b4, 0x19, 0x400, 0x70bd26, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_MOD_UID={0x8, 0xe, r9}, @CGW_MOD_SET={0x18, 0x4, {{{0x4, 0x1, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "06d1f222f3622ad3"}, 0x1}}, @CGW_MOD_OR={0x18, 0x2, {{{0x0, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "20f4f64a2750217c"}, 0x2}}, @CGW_MOD_AND={0x18, 0x1, {{{0x0, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "dd9470c56275b153"}, 0x4}}, @CGW_DST_IF={0x8, 0xa, r11}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff9, 0xfffffffffffffffd, 0xfffffffffffffff7, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x8}}, @CGW_MOD_OR={0x18, 0x2, {{{0x2, 0x1, 0x1, 0x1}, 0x5, 0x6, 0x0, 0x0, "4f491f77e4acf268"}, 0x2}}, @CGW_CS_CRC8={0x120, 0x6, {0x73, 0x38, 0x30, 0x81, 0x3, "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", 0x6a3bf22497d0ab42, "8af2b6c80090df9050e887fe2cdd6c73b0319fd8"}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0xc7ea295c6a87ce26}, 0x44812) ioctl$VT_ACTIVATE(r6, 0x5606, 0x7) r12 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x202000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r12, 0x84, 0x13, &(0x7f0000000100)=0x8000, 0x4) 23:02:56 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x8404, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) 23:02:56 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) 23:02:56 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x40, 0x4, 0xfff8, 0x8}, 0x8) 23:02:56 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:56 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040)=0x28b2, 0x4) socketpair(0x2, 0x1856909c8ce7e469, 0xc6, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @remote}, {0x2, 0x4e24, @multicast2}, 0xe2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='ip6gretap0\x00', 0x4, 0x6, 0x1000}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$inet_dccp_int(r3, 0x21, 0xa945072031c0e04e, &(0x7f0000000180)=0x5, 0x4) 23:02:56 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcs\x00', 0x240080, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 23:02:56 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) [ 1575.897684] FAULT_INJECTION: forcing a failure. [ 1575.897684] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.918324] CPU: 0 PID: 529 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1575.926099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1575.935466] Call Trace: [ 1575.938237] dump_stack+0x142/0x197 [ 1575.941898] should_fail.cold+0x10f/0x159 [ 1575.946063] should_failslab+0xdb/0x130 [ 1575.950058] kmem_cache_alloc+0x2d7/0x780 [ 1575.954227] ? find_held_lock+0x35/0x130 [ 1575.959005] ? copy_tree+0x4a2/0x8a0 [ 1575.962718] alloc_vfsmnt+0x28/0x7d0 [ 1575.966431] clone_mnt+0x70/0xee0 [ 1575.969930] ? lock_downgrade+0x740/0x740 [ 1575.974075] ? do_raw_spin_unlock+0x16b/0x260 [ 1575.978570] copy_tree+0x33b/0x8a0 [ 1575.982108] copy_mnt_ns+0x11c/0x8c0 [ 1575.985838] create_new_namespaces+0xc9/0x720 [ 1575.990337] ? ns_capable_common+0x12c/0x160 [ 1575.994749] copy_namespaces+0x284/0x310 [ 1575.998818] copy_process.part.0+0x2603/0x6a70 [ 1576.003450] ? check_preemption_disabled+0x3c/0x250 [ 1576.008476] ? retint_kernel+0x2d/0x2d [ 1576.012363] ? __cleanup_sighand+0x50/0x50 [ 1576.016629] ? lock_downgrade+0x740/0x740 [ 1576.020767] _do_fork+0x19e/0xce0 [ 1576.024262] ? fork_idle+0x280/0x280 [ 1576.027968] ? __f_unlock_pos+0xd/0x20 [ 1576.031846] ? fput+0xd4/0x150 [ 1576.035039] ? SyS_write+0x15e/0x230 [ 1576.038750] SyS_clone+0x37/0x50 [ 1576.042113] ? sys_vfork+0x30/0x30 [ 1576.045640] do_syscall_64+0x1e8/0x640 [ 1576.049512] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1576.054346] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1576.059532] RIP: 0033:0x45a6f9 [ 1576.062704] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1576.070402] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1576.077683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1576.084943] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1576.092201] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1576.099459] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:57 executing program 3 (fault-call:7 fault-nth:26): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:57 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) r1 = gettid() r2 = getpgid(0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) kcmp(r1, r2, 0x2, r3, r0) io_setup(0x1f, &(0x7f0000000000)=0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000002c0)=0xf29) setsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000080), 0x4) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r7, &(0x7f0000000180)='.//ile0\x00', r7, &(0x7f00000007c0)='./file0/f.le.\x00') syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="b9680800000f3267430f0645f40f799100000100b8010000000f01d90f79cfc441791102c4415916bcb300000000f2400f08b9a0090000b800800000ba000000000f30", 0x43}], 0x1, 0x20, &(0x7f0000000280)=[@flags={0x3, 0x1011}, @dstype0={0x6, 0xd}], 0x2) io_cancel(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x401, r5, &(0x7f0000000100)="7b36016aa68cd3e3e8d78c9e453a5d81e87a14dd1773164e3f72a3ee4357f495fb4134252532664e7e12a6ef046f4a51e6ca0df19676e182f7d36dd32732b2cd846341a487d5d40a6ac1cb32ebc6b393a27fd5c236dd7c534dddd294bc9059686248c7142c8e4ea43ce391deba050093ba", 0x71, 0x40, 0x0, 0x3, r7}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r8, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:57 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:57 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(0x0, 0x9) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) 23:02:57 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) 23:02:57 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x134) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) r2 = accept(r1, &(0x7f0000000080)=@hci, &(0x7f0000000000)=0x80) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000100)) fcntl$setstatus(r0, 0x4, 0xc00) 23:02:57 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) 23:02:57 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:57 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, r4, 0xee5d8a7b0e5906ab, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') read$char_usb(r5, &(0x7f0000000200)=""/226, 0xe2) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r4, 0x20, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x800, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40c8000}, 0x4080) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1576.785180] FAULT_INJECTION: forcing a failure. [ 1576.785180] name failslab, interval 1, probability 0, space 0, times 0 23:02:57 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = request_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f00000002c0)='syz', 0xfffffffffffffffc) r2 = add_key(&(0x7f00000001c0)='trusted\x00', 0x0, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) r4 = request_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f00000002c0)='syz', 0xfffffffffffffffc) add_key(&(0x7f00000001c0)='trusted\x00', 0x0, 0x0, 0x0, r4) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r5, r6}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000600)={'sha3-224\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r2, r5}, &(0x7f0000000300)=""/84, 0x54, &(0x7f0000000480)={&(0x7f0000000280)={'blake2s-128-x86\x00'}, &(0x7f0000000380)="98555a89d22728748d665313b6e93ee0506d116112f864a231a4fa644e500a7242123daf8a9869b83b64c66ba52a000efe9d4fd193bf62b59db0741568a82cac86776bebc96176d70ea5eb4c25393c97a86b83f362874914a42dcedee1ce20fff593be65f056cc49c69dc6a30dc6d61bc0997be01e5de314143d5ec800827772eca5fbcd1a3981d99bbae36a03939b00573279954c8fce94d8b843c69a27ba7f39871132ac77466adfcdbb267ba75b6aed0253a000e3ddece21a935b81b8b3d759156d5685ab8269ddea0cba8ac8a511ba037c82ef627931586a", 0xda}) r7 = request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='vmnet1,\x00', r4) keyctl$negate(0xd, r3, 0x200, r7) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r8, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000540)=0x0) r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r10, &(0x7f0000000180)='.//ile0\x00', r10, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TIOCGSID(r10, 0x5429, &(0x7f0000000580)=0x0) r12 = socket$pppoe(0x18, 0x1, 0x0) pwritev(r12, &(0x7f0000000b40)=[{&(0x7f00000006c0)="393399162223644b198b7b3692a2926ffb508fd25b5b441061848e1fc13a7a6f864dff2ffe1ec928cd1d42706a2cf55b0cd5d38d8e279bc9feceadc77d609be74f62eff742053605d0c10a6aab", 0x4d}, {&(0x7f0000000740)="dd63412a6a1f4a9d5663840012760a4b10fc37edd013caf93890842a92c3c913309918b0aba52a7d615917e47dfd0336d76ff2b803d0c3fcc8d023fb6531f004989f2a6019895e1decd6fd7fced52f7e270a117c1a7f8bee859aafd990ac5f14b9443ba915f2657024117d1441fbecbf500ac852493885", 0x77}, {&(0x7f0000000800)="949caad9865c501626c2d49c10efaa61deacfbd86b41f98afeaa709812169d5347aa27f30091253e53502f17d37ef651565cc85e33a394efbc01767fb796db9d42336487018634188f9707be63831fa16c8f9a4f3f4e28796ca3", 0x5a}, {&(0x7f0000000880)="a792c94fe165fa143d21dba3578a6027c31bb345cb902f7c4d9980de7592007b2f46ebd9c882a11ac6280f7c2d52c25fbc74718dd087810289f04ae739669b1773e3a5e86210c175169760d00d65bf68170895074f081fce105a1949480deb3ab512bd089c0aae2c9c93a24189732a03c39fd636b54fdd4b79601b4dd9b95895cb5a693560c981ddbbbf3712ee100fb563878c286aee0d90d258203ac2eade6e71f2c388997c4d49bb79accd152fbc337ba3c69856683f5ec9225c322cee", 0xbe}, {&(0x7f0000000940)="7b83379530c1da1eb6e77287b62975f1287df0178c510ed78855a8ad43862433c6db3d0c9b71ef5cf0bf0ac7981ad216dd5b98563ff5efda5cc13db1c973ff05848af0e8e86231bacfe055cdcac08cfd8d5682eff22813225a1f7f015f37d886a66366e2f66fd051d6db7b551610e772404e7ff6a0e0ee54f9c2269e50b60d7848f0a8207219f0fed9801d4394abac78f772c4a99d8a30fb63978fce2b2fe735344b06727bfd7bdbe62ea6d76fa9b43984bf8485fda6957bfe839a848eaa30d385aa40e28f505428dca246b8f9", 0xcd}, {&(0x7f0000000a40)="2edf6a47d6d4cceeb7f724e201db08edf30cb6bb2db721c06c70d1e668145cd0ca09a705968084212b6c65d1e6f2b9fc4cc6c2fe875943f6684cbc4bb64cb2f9a47803066b5f400229c7648c074217fb8cd85780c3eb65c81cc4febe9fa8f6484444f07e0888303f67b91253ff1edc007171f74230c5513ff08384124ed963a9676337ebc153a32b45ce8ac565ddd62a51d401a9e3f2b93860ae70af1932b6ced7fcc02f412912654193dcf2d4cda7c2108381e47da266236c895a2e5cb43a2d1ab4804270b26718774623ebba53523e41465329a4b1c852d607ee192e52f302e97a1797a2f84b145bc4a339", 0xec}], 0x6, 0x100) r13 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r13, 0x101, 0x2, &(0x7f0000000080), 0x4) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snapshot\x00', 0x101000, 0x0) r15 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r15, 0x101, 0x2, &(0x7f0000000080), 0x4) kcmp$KCMP_EPOLL_TFD(r9, r11, 0x7, r13, &(0x7f0000000680)={r14, r15, 0xecc}) [ 1576.827192] CPU: 0 PID: 554 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1576.834966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1576.844332] Call Trace: [ 1576.846938] dump_stack+0x142/0x197 [ 1576.850581] ? vprintk_func+0x65/0x159 [ 1576.854487] should_fail.cold+0x10f/0x159 [ 1576.858741] should_failslab+0xdb/0x130 [ 1576.862728] __kmalloc_track_caller+0x2ec/0x790 [ 1576.867413] ? kstrdup_const+0x48/0x60 [ 1576.871314] kstrdup+0x3a/0x70 23:02:57 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1576.874516] kstrdup_const+0x48/0x60 [ 1576.878237] alloc_vfsmnt+0xe5/0x7d0 [ 1576.881957] clone_mnt+0x70/0xee0 [ 1576.885424] ? lock_downgrade+0x740/0x740 [ 1576.889585] ? do_raw_spin_unlock+0x16b/0x260 [ 1576.894092] copy_tree+0x33b/0x8a0 [ 1576.897650] copy_mnt_ns+0x11c/0x8c0 [ 1576.901372] ? kmem_cache_alloc+0x611/0x780 [ 1576.905704] ? cred_has_capability+0x142/0x290 [ 1576.910298] create_new_namespaces+0xc9/0x720 [ 1576.914809] ? ns_capable_common+0x12c/0x160 [ 1576.919233] copy_namespaces+0x284/0x310 [ 1576.923301] copy_process.part.0+0x2603/0x6a70 [ 1576.927896] ? retint_kernel+0x2d/0x2d [ 1576.931802] ? trace_hardirqs_on_caller+0x400/0x590 [ 1576.936845] ? __cleanup_sighand+0x50/0x50 [ 1576.941090] ? lock_downgrade+0x740/0x740 [ 1576.945250] ? retint_kernel+0x2d/0x2d [ 1576.949148] _do_fork+0x19e/0xce0 [ 1576.952615] ? fork_idle+0x280/0x280 [ 1576.956339] ? retint_kernel+0x2d/0x2d [ 1576.960243] SyS_clone+0x37/0x50 [ 1576.963614] ? sys_vfork+0x30/0x30 [ 1576.967162] do_syscall_64+0x1e8/0x640 [ 1576.971069] ? trace_hardirqs_off_thunk+0x1a/0x1c 23:02:57 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000082}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x1000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) [ 1576.975929] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1576.981136] RIP: 0033:0x45a6f9 [ 1576.984327] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1576.992048] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1576.999325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1577.006624] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1577.013901] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1577.021181] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:57 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x12}) 23:02:57 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 23:02:57 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:57 executing program 3 (fault-call:7 fault-nth:27): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000440)={0x0, @vsock={0x28, 0x0, 0x4e22, @host}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, @llc={0x1a, 0x300, 0x4, 0x49, 0x6, 0x7}, 0x9, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)='dummy0\x00', 0x2, 0x0, 0x1b4}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r2, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x4000, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ef7b00fd71b8ab4}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30020000", @ANYRES16=r2, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x4000000}, 0xc84a) r3 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) write(r3, &(0x7f0000000000)="004c540886aeac2bc9a7ee61a104a108f16cdb7319747663b39a893979cd6e53391b26c2193353fc7e347cb2685a2779a5b723a6d16baadf43cbd18beb541d", 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:57 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) 23:02:57 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) 23:02:57 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:58 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x800, 0x0) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0xff, 0x0, 0x80, @time={0x0, 0x989680}, {0x3, 0x25}, {0x9, 0x4}, @note={0x7f, 0x7, 0x1, 0x8, 0x1}}], 0x30) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r2 = creat(&(0x7f00000000c0)='\x00', 0xa) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000100)) 23:02:58 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl(r2, 0x10000, &(0x7f0000000100)="73285ca09104e1a56373d4b87df7fffc347fdf1bc4057534613a573cb3ecd134c03bce3aa564f1cef3e9d97138b1359144ad369de90cda1b91ff15e904ed8331393cd258a8c62f0885aa4f5815b9fb32aa37bbd6dbb03aafd996e62400a441bcd9cefa7c0162e4403eede89aca5e7663265f7aecb730a50d2c1613d069408cc6c11c910b70c0036dcf00784214") 23:02:58 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x20006000, &(0x7f0000000080)=""/132) [ 1577.697042] FAULT_INJECTION: forcing a failure. [ 1577.697042] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.714487] CPU: 0 PID: 592 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1577.722285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1577.731677] Call Trace: [ 1577.734283] dump_stack+0x142/0x197 [ 1577.737941] should_fail.cold+0x10f/0x159 [ 1577.742114] should_failslab+0xdb/0x130 [ 1577.746111] kmem_cache_alloc+0x2d7/0x780 [ 1577.750276] ? find_held_lock+0x35/0x130 [ 1577.754362] ? copy_tree+0x4a2/0x8a0 [ 1577.758094] alloc_vfsmnt+0x28/0x7d0 [ 1577.761826] clone_mnt+0x70/0xee0 [ 1577.765284] ? lock_downgrade+0x740/0x740 [ 1577.769441] ? do_raw_spin_unlock+0x16b/0x260 [ 1577.773948] copy_tree+0x33b/0x8a0 [ 1577.777500] copy_mnt_ns+0x11c/0x8c0 [ 1577.781224] ? kmem_cache_alloc+0x611/0x780 [ 1577.785555] ? selinux_capable+0x36/0x40 [ 1577.789631] create_new_namespaces+0xc9/0x720 [ 1577.794142] ? ns_capable_common+0x12c/0x160 [ 1577.798569] copy_namespaces+0x284/0x310 [ 1577.802645] copy_process.part.0+0x2603/0x6a70 [ 1577.807240] ? retint_kernel+0x2d/0x2d [ 1577.811155] ? trace_hardirqs_on_caller+0x400/0x590 [ 1577.816203] ? __cleanup_sighand+0x50/0x50 [ 1577.820449] ? lock_downgrade+0x740/0x740 [ 1577.824611] _do_fork+0x19e/0xce0 [ 1577.828076] ? fork_idle+0x280/0x280 [ 1577.831805] ? check_preemption_disabled+0x3c/0x250 [ 1577.836834] ? retint_kernel+0x2d/0x2d [ 1577.840736] SyS_clone+0x37/0x50 [ 1577.844102] ? sys_vfork+0x30/0x30 23:02:58 executing program 0: [ 1577.847658] do_syscall_64+0x1e8/0x640 [ 1577.851554] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1577.856420] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1577.861617] RIP: 0033:0x45a6f9 [ 1577.864811] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1577.872530] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1577.879812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1577.887099] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1577.894379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1577.901659] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:58 executing program 3 (fault-call:7 fault-nth:28): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:58 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="44b89f6d3977c06d71f42f4e6d3f44b37831be17c733f11733f074a7c06d6d3bf73678229ac2d1767c4d5693721e26114c091c933fa9221a455688dcd5e1e9e6bc7d54809c3719a0bb458fcec39716a685e0dfdecb966c65ca66151fafb5e5e844205d9d8e1fd6ae5d78ed2f265ca603f3f6f14e0ef28224cb97", 0x7a}, {&(0x7f0000000180)="7cf0829b3601c8be01156a698b01ce02b89b5a997afacf6fc9d820712f26d909b6a3161c275acd29be66247b72ca102e0a488e2b06e99e326d4005b62418f81db4de5fed840a695fd39ea4e5c649", 0x4e}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000200)="21ae3ea10dba1ee72b5f7af4a99e229e1b184a5aeb68382afe0517d199965c7002b3fa81b5d6ccc4df8e9c1e23b35362faac8eca95328296c83c2629a10397ac80d51e99027a41495223fcc81953613981fb9e015bbe06d07645a262fa", 0x5d}, {&(0x7f0000000280)="91af5e9294fa76448ba5b931c38b64a4a130613601d4d63d50c2fc7573f137da7f1913878f708347abf5ff0abac3dca21f4e19c76dc720948aa4d528203167a63406db67a21b282aa61266ddb1245cd8e11bcf4a7ee0a431e5a535e688bdf94ed21c68004308ad0e156d6a165d71e339a2bdb412313e960aa35b990006de03c576d93e0b22047961737dc0fb4c1e078603390e4aca29a222347d6a27f8788db7ca8a67aee70dd8723f4e564b9d7e5fcbad37ee7dadd30bfc59bbe71670b56df9792aa32fdf230f9e4aa7f485f4c2b8bc30ef4f060109965edaa9c4548203799eda5dc071d07d27a1ae3b4aef3fa53db2", 0xf0}, {&(0x7f0000000380)="1030aeeecbb449fa9fadd990c69f187a1128dd853ae17442f080fb9b1f362c4d9a17142e212a88a4c85cb224d16c1740059380fb45b190e4075b1404a0fc72d2eddc2cd14f3a65ee02", 0x49}, {&(0x7f0000000400)="3819033dddbf55af087b08902756c9a6f6ad765ef3895958420d46fd47a94c838cfa4f91b955f667915aaf7988dd9531c24d81c45feee1c120c6eaeb0156a8f104bba4628a02511eba292ebd2a43c0fb8f28db80a0680e47eb0b2b3ce78ea92641bdff2ab2dd64914f9664c6fa33dc638e9686b3299b3395ae5b9fa55584adc4d3061469b101fd6eca2c28e3fafd0dc82bdb86a64b1d49123ca8278f75321a45cef50bee18027d28a0a84372c06e2633e66b97fc0080af", 0xb7}], 0x7) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000000)=0xffff, 0x4) 23:02:58 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:58 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) 23:02:58 executing program 0: 23:02:58 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x12}) 23:02:58 executing program 0: 23:02:58 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000000c0)={0x1}, 0x4) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b000000040000000000000000000000020000000000000005000000000000000300000000000000000800"], 0x2b) 23:02:58 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:59 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) write(r1, &(0x7f0000000080)="535a7aaeb05e7b4e9181565c28000406ec8eadbfdd3507070d9b7f7b03ec88f22d7421f502b2e92a4617ff9d2302d29ae9df63c82b35", 0x19f) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x101000, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:59 executing program 0: 23:02:59 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1578.708170] FAULT_INJECTION: forcing a failure. [ 1578.708170] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.746997] CPU: 0 PID: 643 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1578.754772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1578.764136] Call Trace: [ 1578.766742] dump_stack+0x142/0x197 [ 1578.770389] should_fail.cold+0x10f/0x159 [ 1578.774557] should_failslab+0xdb/0x130 [ 1578.778544] kmem_cache_alloc+0x2d7/0x780 [ 1578.782730] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1578.787501] alloc_vfsmnt+0x28/0x7d0 [ 1578.791219] clone_mnt+0x70/0xee0 [ 1578.791235] copy_tree+0x33b/0x8a0 [ 1578.791250] copy_mnt_ns+0x11c/0x8c0 [ 1578.798287] ? kmem_cache_alloc+0x611/0x780 [ 1578.806312] ? selinux_capable+0x36/0x40 [ 1578.810388] create_new_namespaces+0xc9/0x720 [ 1578.814899] ? ns_capable_common+0x12c/0x160 [ 1578.819323] copy_namespaces+0x284/0x310 [ 1578.823391] copy_process.part.0+0x2603/0x6a70 [ 1578.827986] ? lock_downgrade+0x740/0x740 [ 1578.832158] ? cpuacct_charge+0x1f8/0x360 [ 1578.836326] ? __cleanup_sighand+0x50/0x50 [ 1578.840577] ? check_preemption_disabled+0x3c/0x250 [ 1578.845596] ? retint_kernel+0x2d/0x2d [ 1578.849491] _do_fork+0x19e/0xce0 [ 1578.852952] ? fork_idle+0x280/0x280 [ 1578.856667] ? __schedule+0x137b/0x1cd0 [ 1578.860654] ? firmware_map_remove+0x196/0x196 [ 1578.865238] SyS_clone+0x37/0x50 [ 1578.868604] ? sys_vfork+0x30/0x30 [ 1578.872157] do_syscall_64+0x1e8/0x640 [ 1578.876050] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1578.880902] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1578.886204] RIP: 0033:0x45a6f9 [ 1578.889400] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1578.897112] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1578.904386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1578.911658] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1578.918957] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1578.926258] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:02:59 executing program 3 (fault-call:7 fault-nth:29): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:02:59 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@default, @bcast}) 23:02:59 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:02:59 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000100)) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000000)={r3, 0x3ff}) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:59 executing program 0: 23:02:59 executing program 1: 23:02:59 executing program 4: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc8) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:02:59 executing program 0: 23:02:59 executing program 1: 23:02:59 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:00 executing program 0: 23:03:00 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000000)=0x7, 0xe1dc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1579.657375] FAULT_INJECTION: forcing a failure. [ 1579.657375] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.693578] CPU: 0 PID: 675 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1579.701386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1579.710758] Call Trace: [ 1579.713361] dump_stack+0x142/0x197 [ 1579.717011] should_fail.cold+0x10f/0x159 [ 1579.721184] should_failslab+0xdb/0x130 [ 1579.725181] kmem_cache_alloc+0x2d7/0x780 [ 1579.729344] ? find_held_lock+0x35/0x130 [ 1579.733423] ? copy_tree+0x4a2/0x8a0 [ 1579.737157] alloc_vfsmnt+0x28/0x7d0 [ 1579.740879] clone_mnt+0x70/0xee0 [ 1579.744354] ? lock_downgrade+0x740/0x740 [ 1579.748510] ? do_raw_spin_unlock+0x16b/0x260 [ 1579.753019] copy_tree+0x33b/0x8a0 [ 1579.756574] copy_mnt_ns+0x11c/0x8c0 [ 1579.760298] ? kmem_cache_alloc+0x611/0x780 [ 1579.764635] create_new_namespaces+0xc9/0x720 [ 1579.769143] ? ns_capable_common+0x12c/0x160 [ 1579.773571] copy_namespaces+0x284/0x310 [ 1579.777647] copy_process.part.0+0x2603/0x6a70 [ 1579.782365] ? mark_held_locks+0xb1/0x100 [ 1579.786538] ? trace_hardirqs_on_caller+0x400/0x590 [ 1579.791590] ? __cleanup_sighand+0x50/0x50 [ 1579.795848] ? lock_downgrade+0x740/0x740 [ 1579.800019] ? check_preemption_disabled+0x37/0x250 [ 1579.805054] _do_fork+0x19e/0xce0 [ 1579.808530] ? fork_idle+0x280/0x280 [ 1579.812368] ? check_preemption_disabled+0x3c/0x250 [ 1579.817399] ? retint_kernel+0x2d/0x2d [ 1579.821312] SyS_clone+0x37/0x50 [ 1579.824688] ? sys_vfork+0x30/0x30 [ 1579.828243] do_syscall_64+0x1e8/0x640 [ 1579.832144] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1579.837009] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1579.842322] RIP: 0033:0x45a6f9 [ 1579.845516] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1579.853242] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1579.860527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1579.867916] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1579.875207] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1579.882493] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:00 executing program 3 (fault-call:7 fault-nth:30): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:00 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:00 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) write(r1, &(0x7f0000000000)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:03:00 executing program 0: 23:03:00 executing program 1: [ 1580.467574] FAULT_INJECTION: forcing a failure. [ 1580.467574] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.495957] CPU: 0 PID: 685 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1580.503766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1580.513138] Call Trace: 23:03:00 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1580.515740] dump_stack+0x142/0x197 [ 1580.519483] ? vprintk_func+0x65/0x159 [ 1580.523393] should_fail.cold+0x10f/0x159 [ 1580.527562] should_failslab+0xdb/0x130 [ 1580.531551] __kmalloc_track_caller+0x2ec/0x790 [ 1580.536235] ? kstrdup_const+0x48/0x60 [ 1580.540139] kstrdup+0x3a/0x70 [ 1580.543350] kstrdup_const+0x48/0x60 [ 1580.547073] alloc_vfsmnt+0xe5/0x7d0 [ 1580.550798] clone_mnt+0x70/0xee0 [ 1580.554265] ? lock_downgrade+0x740/0x740 [ 1580.558424] ? do_raw_spin_unlock+0x16b/0x260 [ 1580.562934] copy_tree+0x33b/0x8a0 [ 1580.566513] copy_mnt_ns+0x11c/0x8c0 [ 1580.570234] ? kmem_cache_alloc+0x611/0x780 [ 1580.574567] ? check_preemption_disabled+0x3c/0x250 [ 1580.579596] ? retint_kernel+0x2d/0x2d [ 1580.583499] create_new_namespaces+0xc9/0x720 [ 1580.588013] copy_namespaces+0x284/0x310 [ 1580.592092] copy_process.part.0+0x2603/0x6a70 [ 1580.596703] ? proc_fail_nth_write+0x7d/0x180 [ 1580.601209] ? proc_cwd_link+0x1b0/0x1b0 [ 1580.605287] ? __cleanup_sighand+0x50/0x50 [ 1580.609535] ? lock_downgrade+0x740/0x740 [ 1580.613699] _do_fork+0x19e/0xce0 23:03:01 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1580.617161] ? fork_idle+0x280/0x280 [ 1580.620880] ? fput+0xd4/0x150 [ 1580.624079] ? SyS_write+0x15e/0x230 [ 1580.627816] SyS_clone+0x37/0x50 [ 1580.631185] ? sys_vfork+0x30/0x30 [ 1580.634732] do_syscall_64+0x1e8/0x640 [ 1580.638626] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1580.643493] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1580.648688] RIP: 0033:0x45a6f9 [ 1580.651885] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1580.659606] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 23:03:01 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:01 executing program 0: 23:03:01 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x1010, r0, 0x6fea1000) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000080)=0x6, 0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x7, 'ip6tnl0\x00', {0xc57}, 0x65b8}) fsetxattr$security_evm(r2, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@sha1={0x1, "a6a84c5f052a1eb4a2e6d4b7cefc95a718432d0c"}, 0x15, 0x1) 23:03:01 executing program 1: [ 1580.666887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1580.674445] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1580.681726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1580.689002] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:01 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0) 23:03:01 executing program 3 (fault-call:7 fault-nth:31): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:01 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x5820f77d67425470) write(r0, &(0x7f00000000c0)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:03:01 executing program 0: 23:03:01 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0) 23:03:01 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) 23:03:01 executing program 0: socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0x20}) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, 0x0) creat(0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r2, 0x80047456, 0x2070e000) 23:03:01 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @reserved="7ec73df948f1e3ffadc4c87b753f056af1d36979ca9d527086c1a7a2a12519b9"}, 0xa9, [], "a71a83ae2e32ca9249f00c85254cc5157f1ad4526a89e818f6488f3301c1844aacbd7d932d215b50dcf9f1154afdeacce52e0459fbd79f2e692f1e03b4e60e78077d1de78e82aa750673bdd317546a17b5543700b53088acb5bec39c16a15534f2990f1954b05497e7ebf5c11ebb6d3dc21e9e992d20e3d21427d6d83cc65d8a7524bb4b17d5985c0f30501523e96783e5486d0cb5fa784f367ebd2d9e26663885d9911b520344c03d"}) 23:03:01 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0) [ 1581.412376] FAULT_INJECTION: forcing a failure. [ 1581.412376] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.452712] CPU: 1 PID: 725 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1581.460492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1581.469864] Call Trace: [ 1581.472473] dump_stack+0x142/0x197 [ 1581.476131] should_fail.cold+0x10f/0x159 [ 1581.480302] should_failslab+0xdb/0x130 [ 1581.484308] kmem_cache_alloc+0x2d7/0x780 [ 1581.488474] ? find_held_lock+0x35/0x130 [ 1581.492548] ? copy_tree+0x4a2/0x8a0 [ 1581.496276] alloc_vfsmnt+0x28/0x7d0 [ 1581.500004] clone_mnt+0x70/0xee0 [ 1581.503467] ? lock_downgrade+0x740/0x740 [ 1581.507628] ? do_raw_spin_unlock+0x16b/0x260 [ 1581.512139] copy_tree+0x33b/0x8a0 [ 1581.515700] copy_mnt_ns+0x11c/0x8c0 [ 1581.519435] create_new_namespaces+0xc9/0x720 [ 1581.523948] ? ns_capable_common+0x12c/0x160 [ 1581.528381] copy_namespaces+0x284/0x310 [ 1581.532469] copy_process.part.0+0x2603/0x6a70 [ 1581.537077] ? proc_fail_nth_write+0x7d/0x180 [ 1581.541591] ? proc_cwd_link+0x1b0/0x1b0 [ 1581.545688] ? __cleanup_sighand+0x50/0x50 [ 1581.549942] ? lock_downgrade+0x740/0x740 [ 1581.554113] _do_fork+0x19e/0xce0 [ 1581.557581] ? fork_idle+0x280/0x280 [ 1581.561314] ? check_preemption_disabled+0x3c/0x250 [ 1581.566355] ? retint_kernel+0x2d/0x2d [ 1581.570265] SyS_clone+0x37/0x50 [ 1581.573643] ? sys_vfork+0x30/0x30 [ 1581.577202] do_syscall_64+0x1e8/0x640 [ 1581.581112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1581.586128] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1581.591331] RIP: 0033:0x45a6f9 [ 1581.594533] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1581.602253] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1581.609548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1581.616839] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1581.624131] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1581.631452] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:02 executing program 2: r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x24e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x800000000016) 23:03:02 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffe, 0x2000) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x200000, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) 23:03:02 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:02 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={@null, @default, 0x2, 0x56}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x6b62504e3e2c9177, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x9, 0x0, 0x1, 0x3}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x88d9, r1}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) [ 1581.836731] audit: type=1804 audit(1575673382.240:555): pid=742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir285249794/syzkaller.Y23SIT/2521/bus" dev="sda1" ino=17736 res=1 23:03:02 executing program 3 (fault-call:7 fault-nth:32): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:02 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x622900) fadvise64(r0, 0x9, 0x40, 0xa1a77296357bec1c) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x2, 0x44}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x600280, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x80, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x12, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x20, 0x5, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000100)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffedc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x900}, 0x423eba0cc6f02c9c) 23:03:02 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) 23:03:02 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) r3 = dup(r2) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000080), 0x4) fstat(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, r8) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, r10) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, r12) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, r14) getgroups(0x7, &(0x7f0000000080)=[r8, 0xee01, r10, r12, 0xee01, r14, 0xee01]) r16 = gettid() ptrace$setopts(0x4206, r16, 0x0, 0x0) tkill(r16, 0x3c) ptrace$cont(0x18, r16, 0x0, 0x0) ptrace$setregs(0xd, r16, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r16, 0x0, 0x0) r17 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r18) r19 = getegid() r20 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r20, 0x101, 0x2, &(0x7f0000000080), 0x4) r21 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000017c0)={&(0x7f0000000740)='./file0\x00', 0x0, 0x10}, 0x10) r22 = openat(0xffffffffffffffff, &(0x7f0000001800)='./file0\x00', 0x40, 0x80) r23 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r23, 0x101, 0x2, &(0x7f0000000080), 0x4) r24 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r24, 0x101, 0x2, &(0x7f0000000080), 0x4) r25 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r25, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001840)=0x0) getresuid(&(0x7f0000001880)=0x0, &(0x7f00000018c0), &(0x7f0000001900)) r28 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, r29) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001940)={0x0}, &(0x7f0000001980)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000019c0)=0x0) r32 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, r33) r34 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r34, 0x101, 0x2, &(0x7f0000000080), 0x4) r35 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r35, 0x101, 0x2, &(0x7f0000000080), 0x4) r36 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001a00)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r37 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r37, 0x101, 0x2, &(0x7f0000000080), 0x4) r38 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r38, 0x101, 0x2, &(0x7f0000000080), 0x4) r39 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/video1\x00', 0x2, 0x0) r40 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r40, 0x101, 0x2, &(0x7f0000000080), 0x4) sendmmsg$unix(r3, &(0x7f0000001bc0)=[{&(0x7f0000000100)=@file={0x93c8d1b28014030e, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000180)="f76812101e886266604aadb005fc6e3700a482fc384850bb5461ef878564068c963cc5b058010eead8c80514daba908e46b06a7199bc5275e6a450e3c7b7701013394f7b21f62556ff094db8b6ff7b4e2d8cf8f21c2ee6bb4175d66817e9b1f67bc317d9ae9b92ca918d76f4e5c9ffd4844e57824b2491d891f809cc6691ba80ad78c9d31c087c63ee8557cdf1d3ccc90466b4cf895e9b429749a83b79c9eca11faa65c2eab557ef9d6e02dfb6e7953db603befba8b3a2d3d25db70928513fbd355655b948b8a726c83c032320", 0xcd}, {&(0x7f0000000280)="c18fa3a8dd550b9c773cbd98cdd964066189167b791ea34d4ec1081dde927d7392ef3f9e4c17eb02f4f4ce47bb49e60be38c811940543e417d3b28b49de36bf047d54db93253b83417dab390d174aeb48636f1e42e01f9522d816f22a71ab35aabb890add099e03a750596bb157177aa19148c5f313ebe7cc5707a9a750381e9bc669dcad406d6f1974d86fbbc2a247ebaa7cf5e36551c0dadb6ae0defab1a56de5fdc5df4493d4b70158ff63a5b06d64fd39c1e626d8e84f8ed9282ba8a144436333a5221", 0xc5}, {&(0x7f0000000380)="97e086bc280304369c1108fcf111119b8afc4d30f8b7547bf2bc35542338b0b76d90bb45ac2d128dbfe99558285a436d36213d75c0815afa252d1c35cba7d09a73bb6c", 0x43}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000400)="774621d1f446e94eb0302e3c496e75c7975413361b43d51d3b9d3b508c6c7fb1cdcbf99faea095cdc90b383cba4cec93ea62ae29b61db7a0547ae4418ec2312ced6b3c440f81bafd6ad17340a7a02e9ec8dc19c2445f5cb6fe63f46422fe79ad9cc440681a5c8a4cc82c8ab4ecb05d8111b37d3172f913b8bc5eb9abcc1863c7ecab1accebef4e2b528b64d5ea0746222bec9d6c8e27e5d98f38b6c61a8c0d5ef865e944bb6c5b67b6672a07", 0xac}, {&(0x7f00000004c0)="88b43477ef84190c73f4c474ac5d5b71e32146d5314255869dbee9efc93c6d1b202211d247e63a48d3d281e5b5677129e991408469788e8b3862c01e5c0a742b3ef9daa16fe3227eed0d44f08d7b833fb3eed02fd7570e3334f0c363b2cb2f02f6b1e2618e080e48426a856e3eba2cff0e63f670c862285220914db9b9f1605f57f97b75edea4d04086dfce1fec07d8e3065e7905ada602c1121f626b7fd50cebf053f61e7748c75deccbd7e65d3", 0xae}, {&(0x7f0000000580)="40e1652ca375fa4bfca3d051af1479b5950b54b9cf8619d602ac045baea47b91f50252d203a273b60377c708a47b16845ae7912aba05f2ef62e016f753a50d8d8cef4b1bd93c66c1cd61b78dceecd236713aea868de9d7944b559570dbd0c90b1c50187152432a40aa969f2ef161f9b1761c68e6af4ac4aabb29c1d1443d24bfd169a3db8d925cbaba0ac859bd", 0x8d}, {}], 0x8, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, r19}}}, @rights={{0x30, 0x1, 0x1, [r20, r21, r22, r23, r24, 0xffffffffffffffff, r1, r25]}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r29}}}, @cred={{0x1c, 0x1, 0x2, {r30, r31, r33}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r34]}}, @rights={{0x20, 0x1, 0x1, [r1, r35, r36, r37]}}, @rights={{0x2c, 0x1, 0x1, [r38, r0, r39, r0, r1, 0xffffffffffffffff, r40]}}], 0x118, 0x20000011}], 0x1, 0x1) [ 1582.135924] audit: type=1804 audit(1575673382.540:556): pid=742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir285249794/syzkaller.Y23SIT/2521/bus" dev="sda1" ino=17736 res=1 [ 1582.322694] FAULT_INJECTION: forcing a failure. [ 1582.322694] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.347936] CPU: 1 PID: 763 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1582.355867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.365453] Call Trace: [ 1582.368103] dump_stack+0x142/0x197 [ 1582.371748] should_fail.cold+0x10f/0x159 [ 1582.375902] should_failslab+0xdb/0x130 [ 1582.379874] __kmalloc_track_caller+0x2ec/0x790 [ 1582.384682] ? kstrdup_const+0x48/0x60 [ 1582.388567] kstrdup+0x3a/0x70 [ 1582.391764] kstrdup_const+0x48/0x60 [ 1582.395536] alloc_vfsmnt+0xe5/0x7d0 [ 1582.399493] clone_mnt+0x70/0xee0 [ 1582.402995] ? lock_downgrade+0x740/0x740 [ 1582.407302] ? do_raw_spin_unlock+0x16b/0x260 [ 1582.411799] copy_tree+0x33b/0x8a0 [ 1582.415344] copy_mnt_ns+0x11c/0x8c0 [ 1582.419060] ? create_new_namespaces+0x45/0x720 [ 1582.423724] create_new_namespaces+0xc9/0x720 [ 1582.428261] ? ns_capable_common+0x12c/0x160 [ 1582.432674] copy_namespaces+0x284/0x310 [ 1582.436732] copy_process.part.0+0x2603/0x6a70 [ 1582.441340] ? proc_fail_nth_write+0x7d/0x180 [ 1582.445830] ? proc_cwd_link+0x1b0/0x1b0 [ 1582.449897] ? __cleanup_sighand+0x50/0x50 [ 1582.454134] ? lock_downgrade+0x740/0x740 [ 1582.458277] ? retint_kernel+0x2d/0x2d [ 1582.462160] _do_fork+0x19e/0xce0 [ 1582.465613] ? fork_idle+0x280/0x280 [ 1582.469321] ? retint_kernel+0x2d/0x2d [ 1582.473216] SyS_clone+0x37/0x50 [ 1582.476572] ? sys_vfork+0x30/0x30 [ 1582.480109] do_syscall_64+0x1e8/0x640 [ 1582.483991] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1582.488836] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1582.494019] RIP: 0033:0x45a6f9 [ 1582.497201] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1582.504905] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1582.512174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 23:03:02 executing program 1 (fault-call:2 fault-nth:0): open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:03:02 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0x1, "aa2ee9487b5d6e9b61302a47012263642a82941506115f0f492089903f4ec56f", 0x1, 0x1}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000100)={0x3, 0x5, 0x20}) 23:03:02 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f0000000100)="6388ea39a6103eca6265db2775c518d9daa4c647a8f8cbed71bbf4c197b87879b5bb844991c398e514a2eee0ff6f979fa917d27daee003f8e235", 0x3a) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x40000, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5000003, 0x1c26accadd204cd3, r1, 0x12e07000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x80, 0x1) 23:03:02 executing program 2 (fault-call:5 fault-nth:0): r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:02 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r3, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x8000, 0x5, 0x800f, 0x81, 0x1b3d, 0x996, 0xd8, 0x9, r3}, &(0x7f0000000080)=0x20) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) [ 1582.519437] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1582.526705] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1582.534014] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:03 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0x1, "aa2ee9487b5d6e9b61302a47012263642a82941506115f0f492089903f4ec56f", 0x1, 0x1}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000100)={0x3, 0x5, 0x20}) 23:03:03 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:03:03 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x10000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1140}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0xaf44734aca91f2e2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x317ab0de}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1582.561112] audit: type=1400 audit(1575673382.970:557): avc: denied { map } for pid=769 comm="syz-executor.4" path="/dev/vfio/vfio" dev="devtmpfs" ino=16789 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 1582.656983] FAULT_INJECTION: forcing a failure. [ 1582.656983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1582.676657] CPU: 1 PID: 780 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 1582.684610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.694006] Call Trace: [ 1582.696633] dump_stack+0x142/0x197 [ 1582.700300] should_fail.cold+0x10f/0x159 [ 1582.704476] ? __might_sleep+0x93/0xb0 [ 1582.708572] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1582.713270] ? find_held_lock+0x35/0x130 [ 1582.717488] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1582.722553] ? lock_downgrade+0x740/0x740 [ 1582.726957] alloc_pages_current+0xec/0x1e0 [ 1582.731326] __get_free_pages+0xf/0x40 [ 1582.735629] SyS_mincore+0x192/0x720 [ 1582.739369] ? wait_for_completion+0x420/0x420 [ 1582.743738] FAULT_INJECTION: forcing a failure. [ 1582.743738] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.744060] ? mincore_pte_range+0x890/0x890 [ 1582.744075] ? fput+0xd4/0x150 [ 1582.763038] ? SyS_write+0x15e/0x230 [ 1582.766905] ? do_syscall_64+0x53/0x640 [ 1582.771075] ? mincore_pte_range+0x890/0x890 [ 1582.775500] do_syscall_64+0x1e8/0x640 [ 1582.779622] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1582.784484] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1582.789701] RIP: 0033:0x45a6f9 [ 1582.793071] RSP: 002b:00007f75e88adc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 1582.800882] RAX: ffffffffffffffda RBX: 00007f75e88adc90 RCX: 000000000045a6f9 [ 1582.808265] RDX: 0000000020000080 RSI: 0000000000960000 RDI: 0000000020004000 [ 1582.815562] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1582.823020] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75e88ae6d4 [ 1582.830641] R13: 00000000004c787f R14: 00000000004de540 R15: 0000000000000006 [ 1582.838215] CPU: 0 PID: 789 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 1582.846134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.855822] Call Trace: [ 1582.858427] dump_stack+0x142/0x197 [ 1582.862214] should_fail.cold+0x10f/0x159 [ 1582.866397] should_failslab+0xdb/0x130 [ 1582.870578] kmem_cache_alloc_node_trace+0x280/0x770 [ 1582.875713] ? selinux_ipv4_output+0x50/0x50 [ 1582.880144] ? nf_sockopt_find.constprop.0+0x1b7/0x230 [ 1582.885458] __get_vm_area_node+0xf0/0x340 [ 1582.889995] __vmalloc_node_range+0x9f/0x6a0 [ 1582.894497] ? ip_set_sockfn_get+0x249/0xa80 [ 1582.899072] ? security_capable+0x8e/0xc0 [ 1582.903244] vmalloc+0x46/0x50 [ 1582.906437] ? ip_set_sockfn_get+0x249/0xa80 [ 1582.910986] ip_set_sockfn_get+0x249/0xa80 [ 1582.915387] ? ip_set_swap+0x810/0x810 [ 1582.919360] ? mutex_unlock+0xd/0x10 [ 1582.923111] ? nf_sockopt_find.constprop.0+0x1b7/0x230 [ 1582.928541] nf_getsockopt+0x6a/0xc0 [ 1582.932325] ip_getsockopt+0x10d/0x150 [ 1582.936366] ? do_ip_getsockopt+0x1550/0x1550 [ 1582.941040] raw_getsockopt+0xb4/0xd0 [ 1582.945166] sock_common_getsockopt+0x94/0xd0 [ 1582.949671] SyS_getsockopt+0x126/0x1e0 [ 1582.953825] ? SyS_setsockopt+0x210/0x210 [ 1582.958316] ? do_syscall_64+0x53/0x640 [ 1582.962386] ? SyS_setsockopt+0x210/0x210 [ 1582.966793] do_syscall_64+0x1e8/0x640 [ 1582.971170] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1582.976175] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1582.981522] RIP: 0033:0x45a6f9 [ 1582.984711] RSP: 002b:00007f414cb89c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1582.992704] RAX: ffffffffffffffda RBX: 00007f414cb89c90 RCX: 000000000045a6f9 [ 1583.000142] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000003 [ 1583.007656] RBP: 000000000075bf20 R08: 0000000020000040 R09: 0000000000000000 [ 1583.014927] R10: 0000000020000000 R11: 0000000000000246 R12: 00007f414cb8a6d4 [ 1583.022266] R13: 00000000004c1b55 R14: 00000000004d60b0 R15: 0000000000000004 23:03:03 executing program 3 (fault-call:7 fault-nth:33): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:03 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0x1, "aa2ee9487b5d6e9b61302a47012263642a82941506115f0f492089903f4ec56f", 0x1, 0x1}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000100)={0x3, 0x5, 0x20}) 23:03:03 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0x80, &(0x7f00000007c0)="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", 0x1000) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x800, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000100)={0x100000, 0x4000, 0x8, 0x20, 0x80}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x20, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000002c0)={0x0, 'yam0\x00', {0x4}, 0x3}) 23:03:03 executing program 2 (fault-call:5 fault-nth:1): r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1583.096971] syz-executor.1: vmalloc: allocation failure: 7 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 1583.111159] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 1583.116897] CPU: 0 PID: 789 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 1583.124621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1583.133989] Call Trace: [ 1583.134006] dump_stack+0x142/0x197 [ 1583.134022] warn_alloc.cold+0x96/0x1af [ 1583.134030] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1583.134042] ? selinux_ipv4_output+0x50/0x50 [ 1583.134056] ? __get_vm_area_node+0x27f/0x340 [ 1583.134069] __vmalloc_node_range+0x3c3/0x6a0 [ 1583.134079] ? security_capable+0x8e/0xc0 [ 1583.134090] vmalloc+0x46/0x50 [ 1583.134099] ? ip_set_sockfn_get+0x249/0xa80 [ 1583.134110] ip_set_sockfn_get+0x249/0xa80 [ 1583.178915] ? ip_set_swap+0x810/0x810 [ 1583.182829] ? mutex_unlock+0xd/0x10 [ 1583.186573] ? nf_sockopt_find.constprop.0+0x1b7/0x230 [ 1583.191883] nf_getsockopt+0x6a/0xc0 [ 1583.195630] ip_getsockopt+0x10d/0x150 [ 1583.199598] ? do_ip_getsockopt+0x1550/0x1550 [ 1583.204282] raw_getsockopt+0xb4/0xd0 [ 1583.208118] sock_common_getsockopt+0x94/0xd0 [ 1583.212667] SyS_getsockopt+0x126/0x1e0 [ 1583.216676] ? SyS_setsockopt+0x210/0x210 [ 1583.220856] ? do_syscall_64+0x53/0x640 [ 1583.224946] ? SyS_setsockopt+0x210/0x210 [ 1583.229128] do_syscall_64+0x1e8/0x640 [ 1583.233051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1583.237930] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1583.243149] RIP: 0033:0x45a6f9 [ 1583.246357] RSP: 002b:00007f414cb89c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1583.254090] RAX: ffffffffffffffda RBX: 00007f414cb89c90 RCX: 000000000045a6f9 [ 1583.261383] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000003 [ 1583.263207] FAULT_INJECTION: forcing a failure. [ 1583.263207] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.268676] RBP: 000000000075bf20 R08: 0000000020000040 R09: 0000000000000000 [ 1583.268683] R10: 0000000020000000 R11: 0000000000000246 R12: 00007f414cb8a6d4 [ 1583.268688] R13: 00000000004c1b55 R14: 00000000004d60b0 R15: 0000000000000004 [ 1583.349560] Mem-Info: [ 1583.374971] CPU: 1 PID: 799 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1583.382753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1583.388552] active_anon:415234 inactive_anon:194 isolated_anon:0 [ 1583.388552] active_file:14126 inactive_file:22590 isolated_file:0 [ 1583.388552] unevictable:0 dirty:324 writeback:0 unstable:0 [ 1583.388552] slab_reclaimable:22074 slab_unreclaimable:134038 [ 1583.388552] mapped:59461 shmem:253 pagetables:30302 bounce:0 [ 1583.388552] free:877261 free_pcp:313 free_cma:0 [ 1583.392125] Call Trace: [ 1583.392140] dump_stack+0x142/0x197 [ 1583.392155] should_fail.cold+0x10f/0x159 [ 1583.392169] should_failslab+0xdb/0x130 [ 1583.392178] kmem_cache_alloc+0x2d7/0x780 [ 1583.392206] ? lock_release+0x44d/0x940 [ 1583.426278] Node 0 active_anon:1564216kB inactive_anon:768kB active_file:53348kB inactive_file:88636kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:237844kB dirty:736kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1069056kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1583.428822] alloc_vfsmnt+0x28/0x7d0 [ 1583.432568] Node 1 active_anon:96720kB inactive_anon:8kB active_file:3156kB inactive_file:1724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:560kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1583.436663] clone_mnt+0x70/0xee0 [ 1583.440637] Node 0 [ 1583.444770] ? lock_downgrade+0x740/0x740 [ 1583.448734] DMA free:10496kB min:216kB low:268kB high:320kB active_anon:4352kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.448740] lowmem_reserve[]: [ 1583.477027] ? do_raw_spin_unlock+0x16b/0x260 [ 1583.477040] copy_tree+0x33b/0x8a0 [ 1583.477057] copy_mnt_ns+0x11c/0x8c0 [ 1583.480777] 0 [ 1583.507749] create_new_namespaces+0xc9/0x720 [ 1583.507759] ? ns_capable_common+0x12c/0x160 [ 1583.507768] ? ns_capable+0x23/0x30 [ 1583.511271] 2569 [ 1583.513448] copy_namespaces+0x284/0x310 [ 1583.517581] 2569 [ 1583.543807] copy_process.part.0+0x2603/0x6a70 [ 1583.543823] ? proc_fail_nth_write+0x7d/0x180 [ 1583.543832] ? proc_cwd_link+0x1b0/0x1b0 [ 1583.546930] 2569 [ 1583.551429] ? __cleanup_sighand+0x50/0x50 [ 1583.551440] ? trace_hardirqs_on_caller+0x400/0x590 [ 1583.551452] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1583.554971] 2569 [ 1583.558678] _do_fork+0x19e/0xce0 [ 1583.564953] ? fork_idle+0x280/0x280 [ 1583.569346] Node 0 [ 1583.572977] ? check_preemption_disabled+0x3c/0x250 [ 1583.572988] ? retint_kernel+0x2d/0x2d [ 1583.573003] SyS_clone+0x37/0x50 [ 1583.575065] DMA32 free:42520kB min:36380kB low:45472kB high:54564kB active_anon:1559864kB inactive_anon:768kB active_file:53344kB inactive_file:88636kB unevictable:0kB writepending:736kB present:3129332kB managed:2634392kB mlocked:0kB kernel_stack:20576kB pagetables:45136kB bounce:0kB free_pcp:268kB local_pcp:220kB free_cma:0kB [ 1583.579192] ? sys_vfork+0x30/0x30 [ 1583.581257] lowmem_reserve[]: [ 1583.585821] do_syscall_64+0x1e8/0x640 [ 1583.590319] 0 [ 1583.594364] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1583.596413] 0 [ 1583.600647] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1583.600658] RIP: 0033:0x45a6f9 [ 1583.600665] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 [ 1583.605758] 0 [ 1583.610522] ORIG_RAX: 0000000000000038 [ 1583.610527] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1583.610532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1583.610537] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1583.610541] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1583.610547] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 [ 1583.742460] 0 0 [ 1583.744460] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.770714] lowmem_reserve[]: 0 0 0 0 0 [ 1583.775180] Node 1 Normal free:3456256kB min:53508kB low:66884kB high:80260kB active_anon:96788kB inactive_anon:12kB active_file:3156kB inactive_file:1736kB unevictable:0kB writepending:588kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:25408kB pagetables:75956kB bounce:0kB free_pcp:980kB local_pcp:632kB free_cma:0kB [ 1583.805766] lowmem_reserve[]: 0 0 0 0 0 [ 1583.810443] Node 0 DMA: 4*4kB (UM) 4*8kB (UME) 4*16kB (UM) 7*32kB (UME) 7*64kB (UME) 4*128kB (ME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10512kB [ 1583.826453] Node 0 DMA32: 306*4kB (MH) 298*8kB (UM) 25*16kB (UME) 530*32kB (UMEH) 125*64kB (UME) 40*128kB (UME) 15*256kB (M) 9*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 42536kB [ 1583.842688] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1583.853593] Node 1 Normal: 192*4kB (UME) 85*8kB (UME) 29*16kB (UME) 21*32kB (UME) 4*64kB (UME) 4*128kB (UM) 4*256kB (ME) 2*512kB (UE) 4*1024kB (UME) 3*2048kB (UM) 840*4096kB (M) = 3456280kB [ 1583.871536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1583.880587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1583.889697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1583.898720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1583.907469] 36975 total pagecache pages [ 1583.911924] 0 pages in swap cache [ 1583.915396] Swap cache stats: add 0, delete 0, find 0/0 [ 1583.921085] Free swap = 0kB [ 1583.924199] Total swap = 0kB 23:03:04 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/220) r1 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:03:04 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0x1, "aa2ee9487b5d6e9b61302a47012263642a82941506115f0f492089903f4ec56f", 0x1, 0x1}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 23:03:04 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$void(r2, 0xc0045878) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:04 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) getpeername$ax25(r2, &(0x7f0000000100)={{0x3, @null}, [@bcast, @default, @bcast, @remote, @rose, @default, @bcast, @bcast]}, &(0x7f0000000000)=0x48) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:03:04 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\x8c\x96\x05\x81\x96\x13\xb5\x90\xd8T\x9e\xd2\xa0\xdc\xcb\x98\xdf\n\xa05fX@\x04Ne\x17Yh\r\x7f\xfb-}\x16\x1d\xa7\xc1\xf2\'\xe0\xa7\xeb!\xd6)\xea\vN\xb2\x0e\xcb\v\xc00\xfb\xbeL\x06=\xb1S+\xd4\xc2A\xa2\x80\xb8\xf5\xbf\v', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1583.927543] 1965979 pages RAM [ 1583.931035] 0 pages HighMem/MovableOnly [ 1583.935171] 335856 pages reserved [ 1583.938739] 0 pages cma reserved 23:03:04 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0x1, "aa2ee9487b5d6e9b61302a47012263642a82941506115f0f492089903f4ec56f", 0x1, 0x1}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') 23:03:04 executing program 3 (fault-call:7 fault-nth:34): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:04 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000080), 0x4) r1 = accept(r0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000000)=0x80) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000080)={{0xe8, 0x7, 0x9, 0x0, 0x2a, 0x7f}, 0xfff}) r2 = memfd_create(&(0x7f0000000000), 0x7) write(r2, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:03:04 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$ax25_int(r3, 0x101, 0x5, &(0x7f0000000080), 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:04 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) accept4$llc(r2, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000002c0)=0x10, 0x40000) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000280)=0x800) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6c) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x80) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000140)=0x4) setsockopt$ax25_int(r4, 0x101, 0x9, &(0x7f00000000c0)=0xfffffffe, 0x4) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r7, &(0x7f0000000180)='.//ile0\x00', r7, &(0x7f00000007c0)='./file0/f.le.\x00') r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r8, &(0x7f0000000180)='.//ile0\x00', r8, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x4f, "b80ac6272f253fd2b57b0a798ec0e8ce165b092baf3b2c1cef962ecf6bd3e4a4f892631a24afaf3776c4ad4c197026f29db9e883b51a5e457456b5897372e1c350556166bc2d7e72087fa39ba6547d"}, &(0x7f0000000400)=0x57) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000440)={r9, 0x1d}, &(0x7f0000000480)=0x8) 23:03:04 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0x1, "aa2ee9487b5d6e9b61302a47012263642a82941506115f0f492089903f4ec56f", 0x1, 0x1}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 23:03:04 executing program 4: r0 = memfd_create(&(0x7f0000000000)='-\'\x00', 0x0) prctl$PR_GET_SECUREBITS(0x1b) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1584.208669] FAULT_INJECTION: forcing a failure. [ 1584.208669] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.238063] CPU: 0 PID: 831 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1584.246174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1584.255713] Call Trace: [ 1584.258338] dump_stack+0x142/0x197 [ 1584.262004] should_fail.cold+0x10f/0x159 [ 1584.266554] should_failslab+0xdb/0x130 [ 1584.270560] kmem_cache_alloc+0x2d7/0x780 [ 1584.274914] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1584.279705] alloc_vfsmnt+0x28/0x7d0 [ 1584.283596] clone_mnt+0x70/0xee0 [ 1584.287296] copy_tree+0x33b/0x8a0 [ 1584.290886] copy_mnt_ns+0x11c/0x8c0 [ 1584.294748] ? kmem_cache_alloc+0x611/0x780 [ 1584.299497] ? selinux_capable+0x36/0x40 [ 1584.303606] create_new_namespaces+0xc9/0x720 [ 1584.308137] ? ns_capable_common+0x12c/0x160 [ 1584.312738] copy_namespaces+0x284/0x310 [ 1584.316938] copy_process.part.0+0x2603/0x6a70 [ 1584.321642] ? check_preemption_disabled+0x3c/0x250 [ 1584.326683] ? retint_kernel+0x2d/0x2d [ 1584.330810] ? __cleanup_sighand+0x50/0x50 [ 1584.335610] ? lock_downgrade+0x740/0x740 [ 1584.339796] _do_fork+0x19e/0xce0 [ 1584.343278] ? fork_idle+0x280/0x280 [ 1584.347293] ? check_preemption_disabled+0x3c/0x250 [ 1584.352345] ? retint_kernel+0x2d/0x2d [ 1584.356610] SyS_clone+0x37/0x50 [ 1584.360002] ? sys_vfork+0x30/0x30 [ 1584.363574] do_syscall_64+0x1e8/0x640 [ 1584.367710] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1584.372751] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1584.377968] RIP: 0033:0x45a6f9 [ 1584.381181] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1584.389481] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1584.396777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1584.404276] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1584.411897] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1584.419200] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:04 executing program 1: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) r0 = memfd_create(&(0x7f0000000540)='\x00', 0x17) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r0, 0xe, 0x6, 0xffffffffffff5a11) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) close(r4) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000080)) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000380)={0x7, 0x8}) r5 = dup(r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x136, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RLOPEN(r1, &(0x7f0000000640)={0xfffffffffffffeb8, 0xd, 0xffff, {{0x0, 0x1, 0x4}, 0x6}}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10010, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x0) add_key(0x0, &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000580)="03cbda9024fdf5aa818256f950d38167766f5ee316b61a5efd21a85cf40a29413b", 0x21, 0xfffffffffffffffd) r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/59, 0x3b}], 0x2, 0x80000000) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0) add_key(&(0x7f00000006c0)='trusted\x00', 0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r5, r7, 0x0, 0x8000fffffffe) 23:03:04 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0x1, "aa2ee9487b5d6e9b61302a47012263642a82941506115f0f492089903f4ec56f", 0x1, 0x1}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:03:04 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x40002, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f00000001c0)) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xc, 0x0, 0x3b580}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:03:04 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = dup(0xffffffffffffffff) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f00000002c0)=0xe2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r4, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x4]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x1000}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={r4, 0x10000, 0xfff, 0x0, 0x0, 0x7fff, 0x0, 0x1, {r5, @in6={{0xa, 0x4e21, 0xdd, @mcast2, 0x2}}, 0x0, 0x20, 0x1f, 0x2, 0x1}}, &(0x7f00000001c0)=0xb0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r6, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:03:05 executing program 0: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000080)={0x1, "aa2ee9487b5d6e9b61302a47012263642a82941506115f0f492089903f4ec56f", 0x1, 0x1}) 23:03:05 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0)=""/112) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x44002, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @local}, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0xca22, 0x5, 0x2}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) r3 = request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='system\x00', 0xfffffffffffffffa) keyctl$invalidate(0x15, r3) write$FUSE_STATFS(r2, &(0x7f0000000080)={0x60, 0x0, 0x4, {{0x20, 0x7, 0x9ff, 0x49, 0xe1b, 0xffffffff, 0x6bc, 0x1}}}, 0x60) [ 1584.772496] audit: type=1400 audit(1575673385.170:558): avc: denied { relabelto } for pid=869 comm="syz-executor.1" name="bus" dev="sda1" ino=17720 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 [ 1584.829414] audit: type=1400 audit(1575673385.180:559): avc: denied { read } for pid=869 comm="syz-executor.1" name="bus" dev="sda1" ino=17720 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 [ 1584.857895] audit: type=1400 audit(1575673385.190:560): avc: denied { open } for pid=869 comm="syz-executor.1" path="/root/syzkaller-testdir249555798/syzkaller.PgFNbZ/1804/bus" dev="sda1" ino=17720 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 [ 1584.892055] audit: type=1804 audit(1575673385.190:561): pid=870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir249555798/syzkaller.PgFNbZ/1804/bus" dev="sda1" ino=17720 res=1 23:03:05 executing program 3 (fault-call:7 fault-nth:35): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:05 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) fcntl$setflags(r0, 0x2, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') write$P9_RFLUSH(r3, &(0x7f0000000140)={0xfffffffffffffe39, 0x6d, 0xffff}, 0xfffffffffffffc8a) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f0000000080)) 23:03:05 executing program 0: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) 23:03:05 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) [ 1584.924921] audit: type=1400 audit(1575673385.200:562): avc: denied { write } for pid=869 comm="syz-executor.1" name="bus" dev="sda1" ino=17720 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 23:03:05 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080)) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) sysinfo(&(0x7f0000000100)=""/190) r2 = geteuid() ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r2}) 23:03:05 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1ff, 0x800) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000080)=0x20) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') connect$netlink(r2, &(0x7f00000000c0)=@unspec, 0xc) [ 1585.188024] FAULT_INJECTION: forcing a failure. [ 1585.188024] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.230433] CPU: 1 PID: 889 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1585.238224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1585.247896] Call Trace: [ 1585.250516] dump_stack+0x142/0x197 [ 1585.254180] should_fail.cold+0x10f/0x159 [ 1585.258359] should_failslab+0xdb/0x130 [ 1585.262470] kmem_cache_alloc+0x2d7/0x780 [ 1585.266670] ? lock_release+0x44d/0x940 [ 1585.270679] alloc_vfsmnt+0x28/0x7d0 [ 1585.274412] clone_mnt+0x70/0xee0 [ 1585.277892] ? lock_downgrade+0x740/0x740 [ 1585.282068] ? do_raw_spin_unlock+0x16b/0x260 [ 1585.286716] copy_tree+0x33b/0x8a0 [ 1585.290286] copy_mnt_ns+0x11c/0x8c0 [ 1585.294192] ? kmem_cache_alloc+0x611/0x780 [ 1585.298555] ? selinux_capable+0x36/0x40 [ 1585.302653] create_new_namespaces+0xc9/0x720 [ 1585.307172] ? ns_capable_common+0x12c/0x160 [ 1585.311607] copy_namespaces+0x284/0x310 [ 1585.315693] copy_process.part.0+0x2603/0x6a70 [ 1585.320461] ? retint_kernel+0x2d/0x2d [ 1585.324385] ? trace_hardirqs_on_caller+0x400/0x590 [ 1585.329564] ? __cleanup_sighand+0x50/0x50 [ 1585.333829] ? lock_downgrade+0x740/0x740 [ 1585.338010] _do_fork+0x19e/0xce0 [ 1585.341497] ? fork_idle+0x280/0x280 [ 1585.345236] ? check_preemption_disabled+0x3c/0x250 [ 1585.350275] ? retint_kernel+0x2d/0x2d [ 1585.354190] ? SyS_read+0x230/0x230 [ 1585.357852] SyS_clone+0x37/0x50 [ 1585.361234] ? sys_vfork+0x30/0x30 [ 1585.364810] do_syscall_64+0x1e8/0x640 [ 1585.368718] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1585.373724] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1585.378940] RIP: 0033:0x45a6f9 [ 1585.382140] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1585.390091] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1585.397475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1585.404773] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1585.413222] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1585.420655] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 [ 1585.535117] audit: type=1400 audit(1575673385.940:563): avc: denied { relabelfrom } for pid=869 comm="syz-executor.1" name="bus" dev="sda1" ino=17720 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 23:03:06 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x20) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:03:06 executing program 0: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) 23:03:06 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x40, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:03:06 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x4800, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x1}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x90000, 0x0) write$P9_RLOCK(r4, &(0x7f0000000240)={0x8, 0x35, 0x1}, 0x8) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000100)={0x2, 0x8, 0x4, 0x100000, {}, {0x3, 0x2, 0x7f, 0x5, 0x8, 0x9, "aad4cfc5"}, 0x4, 0x4, @planes=&(0x7f0000000080)={0x4, 0x1f, @userptr=0x80000000, 0x6}, 0x4}) 23:03:06 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$packet(r0, &(0x7f0000000080)=""/111, 0x6f, 0x4116ef8808ab51f6, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) [ 1585.578589] audit: type=1804 audit(1575673385.940:564): pid=898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir249555798/syzkaller.PgFNbZ/1804/bus" dev="sda1" ino=17720 res=1 23:03:06 executing program 0: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) 23:03:06 executing program 3 (fault-call:7 fault-nth:36): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:06 executing program 0: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) 23:03:06 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x20c000, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = getpid() r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r7, 0x101, 0x2, &(0x7f0000000080), 0x4) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r8, 0x101, 0x2, &(0x7f0000000080), 0x4) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r9, 0x101, 0x2, &(0x7f0000000080), 0x4) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000640)={0x0, 0x0}) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r14) fcntl$getownex(r0, 0x10, &(0x7f00000006c0)={0x0, 0x0}) r16 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r17) r18 = getegid() r19 = getpgid(0x0) getresuid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000001c00)) r21 = getgid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001c40)=0x0) r23 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r23, &(0x7f0000000180)='.//ile0\x00', r23, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r23, 0x29, 0x23, &(0x7f0000001c80)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000001d80)=0xe8) r25 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, r26) r27 = gettid() ptrace$setopts(0x4206, r27, 0x0, 0x0) tkill(r27, 0x3c) ptrace$cont(0x18, r27, 0x0, 0x0) ptrace$setregs(0xd, r27, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r27, 0x0, 0x0) r28 = getpgid(r27) lstat(&(0x7f0000001dc0)='./file0/f.le.\x00', &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000002000)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)=[{&(0x7f00000001c0)={0x394, 0x2c, 0x20, 0x70bd29, 0x25dfdbff, "", [@generic="8ffdab4f3c28e3464980524e8a7b763db8ee56ce2ef3b864b57987f3a4e35d33f9c54b899a45c12f5cd0cc085d842477b19ab01aefe5e7e4cb0ef7bad65e2c913659669c5f2ee6841f45b0b1ebfbba5d71945f7f8be2976a38c2cf", @generic="b48b9aad8ab5270f537a9ebf8699331797bb9cc74053ad40ad0966280240253b79fb1f33adbbfc5e2e6b5f69f72138c17ec734883fd10bb74de5a98cfacfad13aa5a4ac86f4854a543d22384", @generic="7356ad84001baabd661c9a523c58e94fddba0c3f4e52b3618d330d1ad07e783e35288cc02524e961c2ea037c1200f38daee5d2b3b57e5fa0d7c7052fea33e4294e3a853fb85b43282bad0001d6ef3c7c9e3420e75892625e8d602efe6a52b5", @nested={0x98, 0x91, [@typed={0x8, 0x20, @ipv4=@multicast2}, @generic="8913290ad62234c70e86f23d4565578bcf0920af35b1bf3e573053e3480ec8a27beb67429c5b596b182f50c8406d17d8570b6884176e89c47337daab2626fe3f9f6d6908dc29e01d49d4c935efe15efedec7d46ed906f7e33f0c81aa1c2f0956ba165c4ca94338dba80fa221d7794eccaff08011a788867d051252333e25284929b30ca4eec95185d5ac9206"]}, @nested={0x1e4, 0x12, [@generic="7d697f68dd942ac6b7aefab11fe0a138351ef753dcb7f3dff196baaa1809b2f1f693a4ec1ec09a6dad3624e02969f4c9d00f7c834a78dcc6f8b04bb47cc6d3831120eb8a7e2a4a797f57f500c1f7cf9af97f0c7b45", @generic="5ec9c0ebba4d97ad4c7917047966418d56cbab5694461bbab42077532d50b3a52453db8210837d883236cb3b8f2f0aa2e4cf4d8f06e214c43fed514d492f6bad63556a7ac57666b66223e4c577c9a7d6025aa5acfab5d245c68664279d64b62ef53b98fc948d9596d1c86d184c1557c429506eb49a3654b40b15df2f40a6baf16b304b32912703ea9fca7880030a8426168de03f8e0da5c2b6c43e2ef88299de8833988785348947a5751a5214713dc3668c133dbc803fcbdb179c96ff9831f2070a5c3b5f2847ca3a764332cdd8d6278dac9319d984681be817cb656be6f523ad7f41dc2d0f1381c49fbc", @typed={0x8, 0x38, @pid=r3}, @generic="1944cf4c43b096bb3d8b1b70c59c398c64b24f6abdfff68714c4", @generic="789eaea8ae1b428db8e58d2c55c387a045cf35abd1f14d071db1", @typed={0x64, 0xc, @binary="535170fd2f207523eae812473c17c23940be152967649a011348c44dc127f4af1e33d79bdb7f4480dd1d0b979f1a0a81501c08ad363c60573467230a6e498ca15164ec7c5b32675a306d3d00d54028fb2cb879335f2a5171f5ad4744fc"}]}]}, 0x394}, {&(0x7f0000000800)={0x1188, 0x3c, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x4, 0x1, [@generic]}, @typed={0x8, 0x16, @pid=r4}, @typed={0x14, 0x4c, @ipv6=@local}, @nested={0x1158, 0x67, [@generic="5b7f559b386361a5f1cb08680357139b59a4a97ab18d1226d74fcc4eefd980fdff45959e4278ac5cc8f98a513fbcfdfbc457489556a24e4f2153eae2f96c0df94ddc8bb8512b6a9a0f5ad081bd0ab7bc17e341ba5baae20742284264ac3f99dca4f5682f9552c4664587caf1810a09198d2bb45336e3f6ed4a09cd3c235370b277d3825e8a5dbef415ab479f52157d82282331f1ba857b4a1f61bb74e479c48a79342a0dfc2f1c28ac398f", @generic="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", @typed={0x8, 0x89, @str='\x00'}, @typed={0x8, 0x4b, @uid=r6}, @typed={0x98, 0x57, @binary="2afd3ff9c6186282f3de29978f65296c90d8be53e56b60ca86c8e0b41c5a5737ea2b248f586b505b9b14c281381e9247d58e17c88a6b89ec813c698e11ed496244eb341166abe49cfe3098bf945e31820f8b291d0c12ea5b13103ee846e05f7a00a501abba109800022d9aadde46365795086e56c999f801f413b9863177bf9faf1594b002004aa1d6993aa5c3c7f646d96a98d3"}]}]}, 0x1188}, {&(0x7f0000000580)={0x44, 0x16, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@generic="9f6587bc923d14a91da15fe3e7046486daeb64e0aed9a92a40b8c59a03b76364a02f018175b9851bd4748fb87912ed974f30e6"]}, 0x44}, {&(0x7f00000019c0)={0x210, 0x3b, 0x500, 0x70bd28, 0x25dfdbfd, "", [@nested={0xbc, 0x2e, [@generic="2591b7c89bf52f45b45990d64bd5f37d8e2a4e4c2b1db8ff882fcac84a55ee3122d843ca304354dc9839507a1da36a7f977117db5385bf86c7a4bc7cb97aed27b82dde43bd371dd82b392c8a15b1d210ff7881e9bde18afcb2bf4b896e2ad571d34f0f568d57cedb5927d12e21a30f936902d8c3c1e8c932ab01571e25ee6f70c6f6904442a0f2fac06e870e54c6878d7610ae1bba50642a9c5a1fbcba61be151077366a616fe367fcee379ce7a5ed6683600b1e1b76e7"]}, @typed={0xc, 0x5d, @u64=0x40}, @typed={0x10, 0x2f, @binary="631103bd0e304f1261ee4e"}, @nested={0x90, 0x12, [@generic="9d295ca8ab030d183443f5b2c24104ca4585410da856dee4c32ca634cd848267c136d73d89f4510bc4de1f9b8191f3507f6e8f13bb2696478ad6a9f95c8a33fe898db8a7f79c1b9bb200ca9ba303424d182c5a684cb03bf06372a41e32e7afbcc5c06bd4df3b6dcb5050bd446d29c8f6977f1e97eae0379bf0b394dc41f4cbb6214117b6d9c9c5ea3455882d"]}, @typed={0x14, 0x6e, @binary="254cfcf813c60c242cb566bd6802"}, @typed={0x84, 0x9, @binary="24de7b9af9afd997cc5e568e7b3450092b48153055ba63ebb0be567da1b904ebd552b8d195e89a011f099283ddba26fd0adaae34e28797624b1377361411ad7e4ff93f966e541d0d14857a27bd93be9b06c9f946fe10a55e99bb3b30a1e5bc1650d1c8c23068964b2cdd619611a628092fcc5f2c728904b88eed6c5ffa68"}]}, 0x210}], 0x4, &(0x7f0000001f00)=[@rights={{0x2c, 0x1, 0x1, [r7, r8, r9, r1, r0, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @cred={{0x1c, 0x1, 0x2, {r22, r24, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}], 0xd0, 0x8000}, 0x20000001) r31 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r31, &(0x7f0000000180)='.//ile0\x00', r31, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$BLKGETSIZE(r31, 0x1260, &(0x7f0000000000)) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:03:06 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000140)=0x7fffffff) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x3d) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) sendfile(r3, r4, &(0x7f00000000c0)=0x2, 0x5) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:03:06 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x800, 0x140000) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20000, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040)=0x180c132b, 0xfffffffffffffe98) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) 23:03:06 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) [ 1586.054396] FAULT_INJECTION: forcing a failure. [ 1586.054396] name failslab, interval 1, probability 0, space 0, times 0 [ 1586.120217] CPU: 1 PID: 929 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1586.128264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1586.137641] Call Trace: [ 1586.140262] dump_stack+0x142/0x197 [ 1586.144078] should_fail.cold+0x10f/0x159 [ 1586.148380] should_failslab+0xdb/0x130 [ 1586.152598] kmem_cache_alloc+0x2d7/0x780 [ 1586.156774] ? find_held_lock+0x35/0x130 [ 1586.160853] ? copy_tree+0x4a2/0x8a0 [ 1586.164569] alloc_vfsmnt+0x28/0x7d0 23:03:06 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x6ced0f1052b511e, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff87, 0xfa00, {0x804, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x7}}, 0xfffffffffffffffc) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x608}, "94100eaf4d2cc668", "bc5f144d480225c401f284be7a358606b5b4a1f167eb83fdc8dd383708fea562", "0d9dc509", "91f93cc21b7ab714"}, 0x38) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x40c6, @loopback, 0x200}, r1}}, 0x30) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) eventfd(0x1) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$RTC_AIE_OFF(r3, 0x7002) r4 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000001c0)=0xc) 23:03:06 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x20}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x874, 0x501000) write$char_usb(r1, &(0x7f00000000c0)="c57333b2174db59ab71ce661bae18323a77bd252fd81f14149f67daa00eb16b89388e6ae1db88b555a95cd4baab680b0a652ca22f8b95f62217d9ab49bcae656e7264d2c84718e8ed0348e7061ff08c8fb2cfd04fb28d7bad07b38a61ba64f6360dd3ed430d78515eda924bd389089f0257b155732733aaaa8f94dfa09bd87eaf67bf3ba54d50c5ef89ae8a2a0898ff3a8086076bdb172066be1c5c8924914a14420d9c5e8431dbc7dbd853eb874229a99352d27c6ddf5a75e22a34a5940ed362f4a4d23feb526d52acc7f33724102e1eca5e07f76a89ea1e242e4d9cf360c232b3ddeab37", 0xe5) 23:03:06 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) 23:03:06 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, r3, 0xee5d8a7b0e5906ab, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20484a00}, 0xa26bbf71d242a3b, &(0x7f00000002c0)={&(0x7f0000000300)={0x30, r3, 0x303, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xfffffffffffffd42, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0xfffffffffffffe57}, 0x1, 0x0, 0x0, 0x2}, 0x40000040) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x1ff, 0x3, 0x5, 0x4}, 0x10) setsockopt$ax25_int(r4, 0x101, 0x8, &(0x7f0000000040), 0x4) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) [ 1586.168304] clone_mnt+0x70/0xee0 [ 1586.171783] ? lock_downgrade+0x740/0x740 [ 1586.175958] ? do_raw_spin_unlock+0x16b/0x260 [ 1586.180480] copy_tree+0x33b/0x8a0 [ 1586.184044] copy_mnt_ns+0x11c/0x8c0 [ 1586.187779] ? kmem_cache_alloc+0x611/0x780 [ 1586.192132] create_new_namespaces+0xc9/0x720 [ 1586.196740] ? ns_capable_common+0x12c/0x160 [ 1586.201196] copy_namespaces+0x284/0x310 [ 1586.205435] copy_process.part.0+0x2603/0x6a70 [ 1586.210054] ? get_pid_task+0x98/0x140 [ 1586.214333] ? retint_kernel+0x2d/0x2d 23:03:06 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='dctcp-reno\x00', 0xb) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x42b000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000200)={0x34, 0x0, &(0x7f00000001c0)}) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000100)={0x420a, 0xf, 0xe, "734af44e8357058aee9528482f3aabc1e0d6d10820bbbbb7b22c9284934caa1f7ad0bb849933c3c59b0a751327c6716909788e9fbc6eb7c29b092ba6", 0x22, "d1709c73cd91ea95a6d8e50d1a75d63dcd7d46d0ae367426f3d62996066ee69c49cd1ba9bf4cfb51482fe78733cc145f6a800b2269e7c4f7b02eaee5", 0xe5ca87e043c25646}) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000000)=0x10000) getegid() r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfff) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000240)={0x8, {0x0, 0x3, 0x1, 0xbe1e}, {0x5, 0x1ff, 0xbaaf0000, 0x4}, {0x5, 0x40}}) getuid() setsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1586.218253] ? trace_hardirqs_on_caller+0x400/0x590 [ 1586.223303] ? __cleanup_sighand+0x50/0x50 [ 1586.227864] _do_fork+0x19e/0xce0 [ 1586.231353] ? fork_idle+0x280/0x280 [ 1586.235322] ? fput+0xd4/0x150 [ 1586.238541] ? SyS_write+0x15e/0x230 [ 1586.242284] SyS_clone+0x37/0x50 [ 1586.245666] ? sys_vfork+0x30/0x30 [ 1586.249262] do_syscall_64+0x1e8/0x640 [ 1586.253179] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1586.258051] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1586.263498] RIP: 0033:0x45a6f9 23:03:06 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) [ 1586.266695] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1586.266705] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1586.266710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1586.266714] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1586.266719] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1586.266725] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:07 executing program 3 (fault-call:7 fault-nth:37): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:07 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x105000, 0x100) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:03:07 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) 23:03:07 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xfe) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r2, r4) inotify_rm_watch(r1, r4) 23:03:07 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) 23:03:07 executing program 5: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={@default, @bcast}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x17, 0x0, 0x5f3}, {{r1, r2/1000+10000}, 0x5, 0x0, 0x100}, {{}, 0x16, 0x4, 0xdf4c000}, {{0x77359400}, 0x15, 0xffff, 0x3}, {{}, 0x14, 0xffff, 0x6}, {{r3, r4/1000+10000}, 0x1f, 0x7, 0x2}, {{}, 0x16, 0x1f, 0x10000}, {{0x0, 0x7530}, 0x14, 0x1, 0xffffffff}], 0xc0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ocfs2_control\x00', 0x20000, 0x0) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f00000002c0)) [ 1586.995817] FAULT_INJECTION: forcing a failure. [ 1586.995817] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.022597] CPU: 1 PID: 980 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1587.030377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1587.039758] Call Trace: [ 1587.042378] dump_stack+0x142/0x197 [ 1587.046068] should_fail.cold+0x10f/0x159 [ 1587.050249] should_failslab+0xdb/0x130 [ 1587.054263] __kmalloc_track_caller+0x2ec/0x790 [ 1587.058967] ? kstrdup_const+0x48/0x60 [ 1587.062907] kstrdup+0x3a/0x70 [ 1587.066122] kstrdup_const+0x48/0x60 [ 1587.069921] alloc_vfsmnt+0xe5/0x7d0 [ 1587.073661] clone_mnt+0x70/0xee0 [ 1587.077434] copy_tree+0x33b/0x8a0 [ 1587.081000] copy_mnt_ns+0x11c/0x8c0 [ 1587.084742] ? kmem_cache_alloc+0x611/0x780 [ 1587.089086] ? selinux_capable+0x36/0x40 [ 1587.093179] create_new_namespaces+0xc9/0x720 [ 1587.097703] ? ns_capable_common+0x12c/0x160 [ 1587.102136] copy_namespaces+0x284/0x310 [ 1587.106292] copy_process.part.0+0x2603/0x6a70 [ 1587.110899] ? __rcu_read_unlock+0x61/0x170 [ 1587.115253] ? proc_fail_nth_write+0x7d/0x180 [ 1587.119766] ? proc_cwd_link+0x1b0/0x1b0 [ 1587.123840] ? __cleanup_sighand+0x50/0x50 [ 1587.123852] ? trace_hardirqs_on_caller+0x400/0x590 [ 1587.123863] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1587.123874] _do_fork+0x19e/0xce0 [ 1587.123887] ? fork_idle+0x280/0x280 [ 1587.123896] ? fput+0xd4/0x150 [ 1587.123907] ? audit_add_tree_rule.cold+0x2e/0x2e [ 1587.153296] ? SyS_write+0x15e/0x230 [ 1587.157038] SyS_clone+0x37/0x50 [ 1587.160423] ? sys_vfork+0x30/0x30 [ 1587.163990] do_syscall_64+0x1e8/0x640 [ 1587.167913] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1587.172811] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1587.178029] RIP: 0033:0x45a6f9 [ 1587.181231] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1587.189179] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 23:03:07 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x2000}) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x100) open_by_handle_at(r1, &(0x7f00000001c0)={0x59, 0x0, "2741b121d477aa5287b9835159b7f7f4685fb961454a4c13f135d0219bf472bb7d728933d0822c7f1f374f348fe13c48be2eafb2b985fac3d8653d7277d030339ab9f913a40e6c499f7126b077ce6ff83f"}, 0x600040) r2 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x84100, 0x0) ioctl$SIOCNRDECOBS(r4, 0x89e2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000240)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x3}, 0x4) 23:03:07 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) 23:03:07 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000000)={0x101, {0x72, 0x14, 0x200, 0x7, 0x3cb, 0x5}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000001c0)={{0x1, 0x3, 0x80000000, 0x1, 0x74}, 0x9, 0x3}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/~\x00\x00\x00\x00\x00\x00\x80\x01', 0x109100, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400f700"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000e00000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000800000d00d337d05000000050000000100000004000000ff7f000000000000000400020002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040000000600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009230000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb70000000000800100000095c5000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006fdb76f73223ab872e5655ffb63b6dd807f800000700000003000000000200000600000008000000b3000000060000004b0d00000500000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a00000020000000ce8d00040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f0000000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x3}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan1\x00', r6}) 23:03:07 executing program 5: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000080), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) r2 = fcntl$dupfd(r0, 0x0, r1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x4, 0xb6, 0xe8, "68efb08abdfd9f4f3be0f41360a01457822fed0a356951f77676268a2c36c77cf19963f93a3fd789b545c26e7721d10a073d7c21690b91306bb946b7a5a453", 0x39}, 0x60) [ 1587.196603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1587.203900] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1587.211196] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1587.218708] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:07 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) 23:03:07 executing program 5: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:03:08 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) 23:03:08 executing program 3 (fault-call:7 fault-nth:38): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:08 executing program 4: r0 = socket(0x11, 0x1, 0x1) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xd5b8, @null, @rose={'rose', 0x0}, 0x4, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r1, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0xc0c00, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'eql\x00', 0x3}, 0x18) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000040), 0x4) r4 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000000)=""/185) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, &(0x7f0000000200)={0xffffffff, 0x7}) r6 = shmat(r4, &(0x7f0000000000/0x2000)=nil, 0x2000) shmdt(r6) 23:03:08 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000240)) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x8) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) 23:03:08 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000000c0)={@null, @bcast}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000000)) 23:03:08 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x1) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') write$selinux_create(r1, &(0x7f00000001c0)=@access={'/usr/sbin/cups-browsed', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x92}, 0x43) fcntl$setsig(r4, 0xa, 0xc) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r5}) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:08 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) 23:03:08 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f0000000080)="0004d11ef24e0c00fd80dd41df5f5f696fb7b233768534249a70ca6b", 0xff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f00000000c0)={0x5, 0x0, [], {0x0, @bt={0x0, 0x4, 0x0, 0x1, 0x8000, 0x40, 0x1e0a1a61, 0x59, 0x4, 0x2, 0x8001, 0x0, 0x2cb, 0x7, 0x8, 0x1d}}}) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:03:08 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x48040, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000080), 0x4) r6 = fcntl$dupfd(r4, 0x203, r5) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000140)={'bridge0\x00', 0x600}) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:08 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') connect$x25(r0, &(0x7f00000001c0)={0x9, @null=' \x00'}, 0x12) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0xffc0, 0x81, 0x6, 0x75}, {0x20, 0xd5, 0x37, 0xffff}, {0x0, 0x40, 0x0, 0x3}, {0xffff, 0x1e, 0xf6, 0x4}, {0x0, 0x1f, 0x68, 0x1}, {0x0, 0x40, 0x3f, 0x80000001}, {0x2, 0x2, 0x82, 0x4d5}]}, 0x10) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000000)=0x81) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000140)={0x1f, &(0x7f0000000100)="94dc08446c9bae566309a4947fc0f26dcf5350f4582bfc85e3b0d87070a052a1cc0fd5740797cb4833d5ab1b96b77b731609f01d4937fb"}) [ 1587.807523] FAULT_INJECTION: forcing a failure. [ 1587.807523] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.837875] CPU: 0 PID: 1018 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1587.845901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1587.855378] Call Trace: [ 1587.857999] dump_stack+0x142/0x197 [ 1587.861662] ? vprintk_func+0x65/0x159 [ 1587.865730] should_fail.cold+0x10f/0x159 [ 1587.870169] should_failslab+0xdb/0x130 [ 1587.874176] __kmalloc_track_caller+0x2ec/0x790 [ 1587.878888] ? kstrdup_const+0x48/0x60 [ 1587.882813] kstrdup+0x3a/0x70 [ 1587.886037] kstrdup_const+0x48/0x60 [ 1587.889950] alloc_vfsmnt+0xe5/0x7d0 [ 1587.893697] clone_mnt+0x70/0xee0 [ 1587.897320] ? lock_downgrade+0x740/0x740 [ 1587.901498] ? do_raw_spin_unlock+0x16b/0x260 23:03:08 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000140)={0x0, @capture={0x2000, 0x1, {0xfffffffa, 0x12}, 0x40, 0x4}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1587.906021] copy_tree+0x33b/0x8a0 [ 1587.909592] copy_mnt_ns+0x11c/0x8c0 [ 1587.913328] ? kmem_cache_alloc+0x611/0x780 [ 1587.917670] ? selinux_capable+0x36/0x40 [ 1587.921759] create_new_namespaces+0xc9/0x720 [ 1587.926278] ? ns_capable_common+0x12c/0x160 [ 1587.930708] copy_namespaces+0x284/0x310 [ 1587.934936] copy_process.part.0+0x2603/0x6a70 [ 1587.939556] ? proc_fail_nth_write+0x7d/0x180 [ 1587.944074] ? proc_cwd_link+0x1b0/0x1b0 [ 1587.948166] ? __cleanup_sighand+0x50/0x50 [ 1587.952423] ? trace_hardirqs_on_thunk+0x1a/0x1c 23:03:08 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x20000, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0x0, 0x100, 0x4, 0x7, 0x13, 0xba, 0x91, 0xff, 0x9, 0x1, 0xb1, 0x6}) write(r2, &(0x7f0000000100)="8d48bd2e059cb9851ca190ccc49951c86ad956774d91404b09f184ee009bdecf5231cb0d0bc4b3c199ff5000ff7e9993bfce44f8a588e6cfd467775098dddc10c059e734ff681416ce26e629efcbaf4c86ce46655aa1d8d38ecf860a02580d6faaa9e5270103fc4e0b8881bc7ae28cbfb0f43be20232856c5a2692e999f03b2846634a82b53e77c7f07452e197438b61f9848c79897180fb057375210879a0052fd50e43d4274d9e", 0xfffffffffffffe49) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000000240)="e6aeb9c2bfa19c75c2034fa95d8f537ffcb28ad268389f211ae3796350e77b9012bd8e9b496653a6835928d38484a5497e3b7ecd9218a2b3f32ffed14797120d326bcc500495c5552f796122a03e8daf44a4f622b3c8128d9a53f8f29aa27dbd5da38aa2f0ce94eff9ccb6ee656f7b70dc4d9c4cf0659b3a3be793a061b791f2df6bb23142ec76ada7f1477a437db1b345eaadc0f73fdf7ce00430ab060bda7f4130830181aa57baa126413f4b1c225a0ad23cff0b28f91ff89abd83ce20b163512d22d79724584ec32844f6b661254979220fe623cb75720bfbfec124ae632182ef829d85de4adc4bcd3c64f6f1424a514531c5df91a8e8896edec42b8583", 0xff) setsockopt$ax25_int(r4, 0x101, 0x8, &(0x7f0000000040), 0x4) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setresuid(r8, r10, 0x0) openat$cgroup_type(r6, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000340)) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x8000) [ 1587.957325] _do_fork+0x19e/0xce0 [ 1587.960809] ? fork_idle+0x280/0x280 [ 1587.964545] ? fput+0x10/0x150 [ 1587.967757] ? fput+0x16/0x150 [ 1587.970970] ? fput+0xd4/0x150 [ 1587.974180] ? SyS_write+0x15e/0x230 [ 1587.977919] SyS_clone+0x37/0x50 [ 1587.981301] ? sys_vfork+0x30/0x30 [ 1587.984869] do_syscall_64+0x1e8/0x640 [ 1587.988926] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1587.993800] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1587.999013] RIP: 0033:0x45a6f9 [ 1588.002218] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1588.009951] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1588.017241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1588.024527] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1588.031948] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1588.039529] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 [ 1588.056334] kauditd_printk_skb: 2 callbacks suppressed [ 1588.056342] audit: type=1400 audit(1575673388.460:567): avc: denied { map } for pid=1040 comm="syz-executor.4" path="net:[4026533069]" dev="nsfs" ino=4026533069 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 23:03:08 executing program 3 (fault-call:7 fault-nth:39): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:08 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgrp(0xffffffffffffffff) getpgrp(r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000040)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:08 executing program 5: ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x9, 0x40000) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r2 = socket(0x1, 0x2, 0x80) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000001540)={0xaf9f, 0x0, 0x1ff, 0x5b4}, 0x8) 23:03:08 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, 0x0) 23:03:08 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x2091, r0, 0x96394000) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r2, r0, &(0x7f0000000000)=0x3a, 0x4) 23:03:08 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4, 0xf8) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:03:09 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r4, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000000)={@empty, 0x74, r4}) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:03:09 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x448043) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000080)) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000000c0)) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:03:09 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, 0x0) 23:03:09 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000080), 0x4) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x2, 0x40, 0x7f}, 0xa) signalfd(r0, &(0x7f0000000140)={0x3}, 0x8) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = open(&(0x7f00000001c0)='.//ile0\x00', 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x14fc000000}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) unshare(0x2000400) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) fstatfs(r4, 0x0) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x3000002, 0x12, r2, 0x6b10f000) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200000, 0x0) 23:03:09 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0xeab932ac12097b0f, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x8000, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:03:09 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x4, 0x5, 0x80e7, 0x3]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) timerfd_create(0x5, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={r2, 0x0, 0xe3d, 0x7ff, 0xd90}) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1588.772351] FAULT_INJECTION: forcing a failure. [ 1588.772351] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.780166] audit: type=1400 audit(1575673389.180:568): avc: denied { map } for pid=1089 comm="syz-executor.2" path="socket:[212918]" dev="sockfs" ino=212918 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_dgram_socket permissive=1 [ 1588.846063] CPU: 1 PID: 1085 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1588.854265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1588.863645] Call Trace: [ 1588.866262] dump_stack+0x142/0x197 [ 1588.869927] should_fail.cold+0x10f/0x159 [ 1588.874360] should_failslab+0xdb/0x130 [ 1588.878385] kmem_cache_alloc+0x2d7/0x780 [ 1588.882579] alloc_vfsmnt+0x28/0x7d0 [ 1588.886323] clone_mnt+0x70/0xee0 [ 1588.889808] copy_tree+0x33b/0x8a0 [ 1588.893379] copy_mnt_ns+0x11c/0x8c0 [ 1588.897116] ? kmem_cache_alloc+0x611/0x780 [ 1588.901755] ? security_capable+0x40/0xc0 [ 1588.905967] create_new_namespaces+0xc9/0x720 [ 1588.910499] ? ns_capable_common+0x12c/0x160 [ 1588.914938] copy_namespaces+0x284/0x310 [ 1588.919026] copy_process.part.0+0x2603/0x6a70 [ 1588.923639] ? proc_fail_nth_write+0x7d/0x180 [ 1588.928164] ? proc_cwd_link+0x1b0/0x1b0 [ 1588.932275] ? __cleanup_sighand+0x50/0x50 [ 1588.936698] ? lock_downgrade+0x740/0x740 [ 1588.940899] _do_fork+0x19e/0xce0 [ 1588.944460] ? fork_idle+0x280/0x280 [ 1588.948321] ? check_preemption_disabled+0x3c/0x250 [ 1588.953360] ? retint_kernel+0x2d/0x2d [ 1588.957279] SyS_clone+0x37/0x50 [ 1588.960669] ? sys_vfork+0x30/0x30 [ 1588.964231] do_syscall_64+0x1e8/0x640 [ 1588.968146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1588.973021] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1588.978380] RIP: 0033:0x45a6f9 [ 1588.981591] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1588.989760] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1588.997054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1589.004508] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1589.011789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1589.011794] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:09 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x9, 0x1, 0x1, 0x4, 0x8, 0x5}, 0x20) r1 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x108000, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:03:09 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x148a40, 0x2) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:09 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, 0x0) 23:03:09 executing program 3 (fault-call:7 fault-nth:40): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:09 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xd036195ec208ae96) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000080)) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x2, 0x44}) open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x13) r2 = gettid() ptrace$setopts(0x4206, r2, 0x9, 0x4215d2eb0347852) tkill(0x0, 0x8) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r3}, 0x10) tkill(r2, 0x41) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) fdatasync(r4) 23:03:09 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0)=0x3ff, 0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xfffffed2) 23:03:09 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x7fffffff) 23:03:09 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:09 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0x0, 0x8}}) 23:03:10 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x67) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000000)=[0x3f, 0x7fffffff, 0x7, 0x7fffffff, 0x8, 0x4f1, 0x4, 0x3, 0x1f], 0x9, 0x1, 0x7fffffff, 0x7f, 0x1, 0x6, {0xec87, 0x4, 0x1ff, 0x0, 0x6, 0x4605, 0x7fff, 0xfff, 0x800, 0x1ff, 0x8001, 0x55fc, 0x9, 0x5, "5e4a555185be5eedc636b92676de69fd2614a24693381478611f6d3bb75de259"}}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:03:10 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) [ 1589.608738] FAULT_INJECTION: forcing a failure. [ 1589.608738] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.663469] CPU: 1 PID: 1124 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1589.671578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.681315] Call Trace: [ 1589.683930] dump_stack+0x142/0x197 [ 1589.687585] ? should_fail.cold+0x10a/0x159 [ 1589.691938] should_fail.cold+0x10f/0x159 [ 1589.696130] should_failslab+0xdb/0x130 [ 1589.700132] __kmalloc_track_caller+0x2ec/0x790 [ 1589.704835] ? kstrdup_const+0x48/0x60 [ 1589.708758] kstrdup+0x3a/0x70 [ 1589.712142] kstrdup_const+0x48/0x60 [ 1589.716148] alloc_vfsmnt+0xe5/0x7d0 [ 1589.719886] clone_mnt+0x70/0xee0 [ 1589.723366] ? lock_downgrade+0x740/0x740 [ 1589.727543] ? do_raw_spin_unlock+0x16b/0x260 [ 1589.732221] copy_tree+0x33b/0x8a0 [ 1589.735791] copy_mnt_ns+0x11c/0x8c0 [ 1589.739519] ? kmem_cache_alloc+0x611/0x780 [ 1589.743866] ? selinux_capable+0x36/0x40 [ 1589.748089] create_new_namespaces+0xc9/0x720 [ 1589.752754] ? ns_capable_common+0x12c/0x160 [ 1589.757184] copy_namespaces+0x284/0x310 23:03:10 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1589.761270] copy_process.part.0+0x2603/0x6a70 [ 1589.765874] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1589.770800] ? check_preemption_disabled+0x3c/0x250 [ 1589.775863] ? retint_kernel+0x2d/0x2d [ 1589.779886] ? __f_unlock_pos+0x19/0x20 [ 1589.783897] ? __cleanup_sighand+0x50/0x50 [ 1589.788315] ? lock_downgrade+0x740/0x740 [ 1589.792670] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1589.797445] _do_fork+0x19e/0xce0 [ 1589.801106] ? fork_idle+0x280/0x280 [ 1589.801118] ? fput+0xd4/0x150 [ 1589.801126] ? SyS_write+0x15e/0x230 [ 1589.801137] SyS_clone+0x37/0x50 [ 1589.801143] ? sys_vfork+0x30/0x30 [ 1589.801154] do_syscall_64+0x1e8/0x640 [ 1589.801162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1589.801177] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1589.801187] RIP: 0033:0x45a6f9 [ 1589.836185] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1589.844052] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1589.851638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1589.859120] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1589.866440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1589.873747] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:10 executing program 3 (fault-call:7 fault-nth:41): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:10 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x9) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000002c0)=0x6) renameat(r3, &(0x7f0000000180)='./file1\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f00000001c0)={0xf6, 0x0, [0x447, 0xfffffffffffffffc, 0x7, 0x1]}) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000080), 0x4) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000280)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x5) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x8, 0x0, 0x201d, 0x0, 0x12, 0x9, 0x3}) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r6, 0x101, 0x2, &(0x7f0000000080), 0x4) r7 = dup(r6) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000240)={0xfffffffffffffffe, 0xe2, 0x5}) 23:03:10 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x5, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:10 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = epoll_create1(0x180000) write(r1, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x2010}) 23:03:10 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x9}, &(0x7f0000000100)=0x8) 23:03:10 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) r0 = memfd_create(&(0x7f0000000540)='\x00', 0x17) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r0, 0xe, 0x6, 0xffffffffffff5a11) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) close(r4) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000080)) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000380)={0x7, 0x8}) r5 = dup(r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x136, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RLOPEN(r1, &(0x7f0000000640)={0xfffffffffffffeb8, 0xd, 0xffff, {{0x0, 0x1, 0x4}, 0x6}}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10010, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x0) add_key(0x0, &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000580)="03cbda9024fdf5aa818256f950d38167766f5ee316b61a5efd21a85cf40a29413b", 0x21, 0xfffffffffffffffd) r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/59, 0x3b}], 0x2, 0x80000000) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0) add_key(&(0x7f00000006c0)='trusted\x00', 0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r5, r7, 0x0, 0x8000fffffffe) 23:03:10 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:03:10 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0xbb01f15de24105a9, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, 0xffffffffffffffff, 0xffff1000) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:10 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast}) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) fallocate(r0, 0x2, 0x0, 0x2) [ 1590.483758] audit: type=1804 audit(1575673390.880:569): pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir423246965/syzkaller.74RVLT/2394/bus" dev="sda1" ino=17464 res=1 [ 1590.573145] FAULT_INJECTION: forcing a failure. [ 1590.573145] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.605424] CPU: 1 PID: 1170 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1590.613293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.622773] Call Trace: [ 1590.625389] dump_stack+0x142/0x197 [ 1590.629046] should_fail.cold+0x10f/0x159 [ 1590.633434] should_failslab+0xdb/0x130 [ 1590.637435] kmem_cache_alloc+0x2d7/0x780 [ 1590.641612] ? find_held_lock+0x35/0x130 [ 1590.645694] ? copy_tree+0x4a2/0x8a0 [ 1590.649433] alloc_vfsmnt+0x28/0x7d0 [ 1590.653171] clone_mnt+0x70/0xee0 [ 1590.656779] ? lock_downgrade+0x740/0x740 [ 1590.660952] ? do_raw_spin_unlock+0x16b/0x260 [ 1590.665476] copy_tree+0x33b/0x8a0 [ 1590.669047] copy_mnt_ns+0x11c/0x8c0 [ 1590.672777] ? kmem_cache_alloc+0x611/0x780 [ 1590.677122] ? security_capable+0x40/0xc0 [ 1590.681571] ? __sanitizer_cov_trace_pc+0x4e/0x60 [ 1590.686596] create_new_namespaces+0xc9/0x720 [ 1590.691221] ? ns_capable_common+0x12c/0x160 [ 1590.695648] copy_namespaces+0x284/0x310 [ 1590.695661] copy_process.part.0+0x2603/0x6a70 [ 1590.695677] ? proc_fail_nth_write+0x7d/0x180 [ 1590.704604] ? proc_cwd_link+0x1b0/0x1b0 [ 1590.704623] ? __cleanup_sighand+0x50/0x50 [ 1590.704634] ? lock_downgrade+0x740/0x740 [ 1590.704646] _do_fork+0x19e/0xce0 [ 1590.704658] ? fork_idle+0x280/0x280 [ 1590.704672] ? check_preemption_disabled+0x3c/0x250 [ 1590.704682] ? retint_kernel+0x2d/0x2d [ 1590.704695] SyS_clone+0x37/0x50 [ 1590.704701] ? sys_vfork+0x30/0x30 [ 1590.704715] do_syscall_64+0x1e8/0x640 [ 1590.704723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1590.704737] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1590.704746] RIP: 0033:0x45a6f9 [ 1590.704751] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 23:03:11 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./bus/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) open(&(0x7f00000004c0)='./bus/file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:03:11 executing program 5: lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x1f}, 0x28, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/de\x8d\'\b\x00', 0xa7bfae880eb9bbf1, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r4, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x154, @mcast1, 0x47f}]}, &(0x7f0000000300)=0x10) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @multicast2}, @in=@local}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) [ 1590.704760] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1590.704764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1590.704768] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1590.704773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1590.704778] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:11 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) r0 = memfd_create(&(0x7f0000000540)='\x00', 0x17) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r0, 0xe, 0x6, 0xffffffffffff5a11) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) close(r4) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000080)) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000380)={0x7, 0x8}) r5 = dup(r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x136, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RLOPEN(r1, &(0x7f0000000640)={0xfffffffffffffeb8, 0xd, 0xffff, {{0x0, 0x1, 0x4}, 0x6}}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10010, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x0) add_key(0x0, &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000580)="03cbda9024fdf5aa818256f950d38167766f5ee316b61a5efd21a85cf40a29413b", 0x21, 0xfffffffffffffffd) r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/59, 0x3b}], 0x2, 0x80000000) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0) add_key(&(0x7f00000006c0)='trusted\x00', 0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r5, r7, 0x0, 0x8000fffffffe) [ 1590.989194] audit: type=1804 audit(1575673391.390:570): pid=1207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir423246965/syzkaller.74RVLT/2395/bus" dev="sda1" ino=17444 res=1 23:03:11 executing program 3 (fault-call:7 fault-nth:42): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:11 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r3, @ANYBLOB="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"], 0x3}}, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0xc) 23:03:11 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB="8984a9ccad1223a2bc115861c85c4feb00", @ANYRES16=r1, @ANYBLOB="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"], 0x45c}, 0x1, 0x0, 0x0, 0xa881}, 0x4000) r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'veth1\x00', {0x2, 0x4e24, @empty}}) write(r2, &(0x7f00000006c0)="0031adea894c42a9b3ede85164ff8456d3321ff78cf71fb7f6e722fb2a81c9e8cf842b9525e0bbf4238f230037fe3a6805373060b12ccd6b51aca5e8eb3a57d4ce70a0337cc8753135145f39a70ddc9e2043858031fcd1df3fc42695514ae290e64cada6ea7b0a017ef874efa3c61b29bb3b6d1b7713fca4b63f48c8c087ba87e5dca311404bdf8f01b67636e0c3bad3932b64f3ef38cee750873974f322dbcddf5261c53346", 0x7c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000040), 0x4) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000000)=0xd9, 0x4) 23:03:11 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) 23:03:11 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) r0 = memfd_create(&(0x7f0000000540)='\x00', 0x17) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r0, 0xe, 0x6, 0xffffffffffff5a11) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) close(r4) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000080)) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000380)={0x7, 0x8}) r5 = dup(r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x136, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RLOPEN(r1, &(0x7f0000000640)={0xfffffffffffffeb8, 0xd, 0xffff, {{0x0, 0x1, 0x4}, 0x6}}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10010, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x0) add_key(0x0, &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000580)="03cbda9024fdf5aa818256f950d38167766f5ee316b61a5efd21a85cf40a29413b", 0x21, 0xfffffffffffffffd) r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/59, 0x3b}], 0x2, 0x80000000) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0) add_key(&(0x7f00000006c0)='trusted\x00', 0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r5, r7, 0x0, 0x8000fffffffe) [ 1591.369686] audit: type=1804 audit(1575673391.770:571): pid=1215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir423246965/syzkaller.74RVLT/2396/bus" dev="sda1" ino=17506 res=1 [ 1591.437175] FAULT_INJECTION: forcing a failure. [ 1591.437175] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.469621] CPU: 1 PID: 1221 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1591.477497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1591.486884] Call Trace: [ 1591.489501] dump_stack+0x142/0x197 [ 1591.493160] should_fail.cold+0x10f/0x159 [ 1591.497342] should_failslab+0xdb/0x130 [ 1591.501485] kmem_cache_alloc+0x2d7/0x780 [ 1591.505777] ? find_held_lock+0x35/0x130 [ 1591.510030] ? copy_tree+0x4a2/0x8a0 [ 1591.514141] alloc_vfsmnt+0x28/0x7d0 [ 1591.518018] clone_mnt+0x70/0xee0 [ 1591.521514] ? lock_downgrade+0x740/0x740 [ 1591.525697] ? do_raw_spin_unlock+0x16b/0x260 [ 1591.530222] copy_tree+0x33b/0x8a0 [ 1591.533802] copy_mnt_ns+0x11c/0x8c0 [ 1591.537718] ? kmem_cache_alloc+0x611/0x780 [ 1591.542068] ? selinux_capable+0x36/0x40 [ 1591.546161] create_new_namespaces+0xc9/0x720 [ 1591.550687] ? ns_capable_common+0x12c/0x160 [ 1591.555273] copy_namespaces+0x284/0x310 [ 1591.559359] copy_process.part.0+0x2603/0x6a70 [ 1591.564012] ? proc_fail_nth_write+0x7d/0x180 [ 1591.568541] ? proc_cwd_link+0x1b0/0x1b0 [ 1591.572638] ? __cleanup_sighand+0x50/0x50 [ 1591.576906] ? lock_downgrade+0x740/0x740 [ 1591.581470] _do_fork+0x19e/0xce0 [ 1591.585105] ? fork_idle+0x280/0x280 [ 1591.588843] ? fput+0xd4/0x150 [ 1591.592345] ? SyS_write+0x15e/0x230 [ 1591.596090] SyS_clone+0x37/0x50 [ 1591.599485] ? sys_vfork+0x30/0x30 [ 1591.603198] do_syscall_64+0x1e8/0x640 [ 1591.607112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1591.612145] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1591.617367] RIP: 0033:0x45a6f9 [ 1591.620578] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1591.628649] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 23:03:12 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x202000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080), 0x4) [ 1591.635955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1591.643342] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1591.650637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1591.658079] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:12 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) r0 = memfd_create(&(0x7f0000000540)='\x00', 0x17) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r0, 0xe, 0x6, 0xffffffffffff5a11) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) close(r4) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000080)) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000380)={0x7, 0x8}) r5 = dup(r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x136, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RLOPEN(r1, &(0x7f0000000640)={0xfffffffffffffeb8, 0xd, 0xffff, {{0x0, 0x1, 0x4}, 0x6}}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10010, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x0) add_key(0x0, &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000580)="03cbda9024fdf5aa818256f950d38167766f5ee316b61a5efd21a85cf40a29413b", 0x21, 0xfffffffffffffffd) r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/59, 0x3b}], 0x2, 0x80000000) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0) add_key(&(0x7f00000006c0)='trusted\x00', 0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r5, r7, 0x0, 0x8000fffffffe) 23:03:12 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)={0x5, 0x401}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x12f002, 0x100000, 0x0, 0x2, 0x5, 0x14, 0x20, 0x2, 0x40, 0x7, 0x7, 0x4}, {0x4, 0x1, 0x0, 0xc0, 0xe, 0x3, 0xb2, 0xf2, 0x5, 0x7, 0x4, 0x20}, {0x10000, 0x5000, 0x3, 0x0, 0x6, 0x2, 0xff, 0x7a, 0x4, 0x1, 0x6}, {0xf000, 0xf000, 0x3, 0x1, 0x1, 0x1, 0xfc, 0x3, 0xbd, 0x4, 0x9, 0xfc}, {0xf000, 0x4000, 0x3, 0x3, 0x0, 0xba, 0x7, 0x9, 0x7, 0x2, 0x1f, 0x1}, {0x2000, 0x5000, 0xb, 0x9, 0x6, 0x23, 0x7, 0x5, 0x3, 0x9, 0x3f, 0xff}, {0x2, 0x100000, 0xc, 0x7, 0x2, 0x7, 0xff, 0x5, 0x1, 0x5, 0x4, 0x7}, {0x1, 0xd000, 0x9, 0x0, 0x0, 0x6, 0x40, 0x6, 0x79, 0x0, 0x0, 0xb9}, {0x5000, 0xf000}, {0x0, 0xf000}, 0x80000025, 0x0, 0xb800, 0x200040, 0x1, 0x0, 0x6000, [0x6, 0x5, 0x9, 0x4431]}) [ 1591.789876] audit: type=1804 audit(1575673392.190:572): pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir423246965/syzkaller.74RVLT/2397/bus" dev="sda1" ino=17411 res=1 23:03:12 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 23:03:12 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) userfaultfd(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800002, 0x11, r0, 0x2000) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:03:12 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) r0 = memfd_create(&(0x7f0000000540)='\x00', 0x17) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r0, 0xe, 0x6, 0xffffffffffff5a11) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) close(r4) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000080)) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000380)={0x7, 0x8}) r5 = dup(r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x136, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RLOPEN(r1, &(0x7f0000000640)={0xfffffffffffffeb8, 0xd, 0xffff, {{0x0, 0x1, 0x4}, 0x6}}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10010, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x0) add_key(0x0, &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000580)="03cbda9024fdf5aa818256f950d38167766f5ee316b61a5efd21a85cf40a29413b", 0x21, 0xfffffffffffffffd) r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/59, 0x3b}], 0x2, 0x80000000) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0) add_key(&(0x7f00000006c0)='trusted\x00', 0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r5, r7, 0x0, 0x8000fffffffe) 23:03:12 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000080)={0xca7, [[0x4, 0xffffb5cf, 0x81, 0x0, 0x9, 0x5, 0x1, 0xffffff15], [0x55a4, 0x2, 0x1, 0x2, 0x5, 0x4, 0xffff, 0xfffffff9], [0x0, 0x4, 0xbd4, 0x6, 0x8001, 0x400, 0xfffffffa, 0x5]], [{0x1f, 0x9, 0x1800000}, {0xaea, 0x4, 0x8}, {0x9, 0x77d, 0xff}, {0x1, 0x8}, {0x80000000, 0x6, 0x6}, {0x100, 0x3f, 0x957}, {0x1399, 0x4, 0xbd4}, {0x7fff, 0x2}, {0x0, 0x1ff, 0xd48}, {0x8066, 0x7f, 0x7f}, {0x40, 0x0, 0x8}, {0x0, 0x8, 0x1fffe000}], 0x673}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:03:12 executing program 3 (fault-call:7 fault-nth:43): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:12 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='\x00', 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040), 0x4) [ 1592.120266] audit: type=1804 audit(1575673392.510:573): pid=1245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir423246965/syzkaller.74RVLT/2398/bus" dev="sda1" ino=17190 res=1 23:03:12 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3000, 0x8000}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) 23:03:12 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x400, 0x0) mq_timedreceive(r0, &(0x7f00000003c0)=""/185, 0xb9, 0x76c, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x9) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="97b91937643e7c4c49296c4947cdb71f39184c0bc95893f2b88f41e3b460b6e67745bc3644ba2fd94488c2e48b3847ec6bb210bbf6fdc43228c6ed73f261f76f65885417d62ea3891fcbb68d2d33e3fa7c290a712489cac411e918012a3fe81a0554b4d447509ba142291e2ae19e2e22232cdc5562b2effbe4aeb1912d3828473a56c2dd730d2794d3d2d74717cfd6a15d727d9131d2a57aa8e385601f1b30dab5ccf5754f7dd779df2cd3178f3f04115121cb4fdb288a5f8b28", 0xba, r2) sysinfo(&(0x7f00000002c0)=""/144) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000040)={@dev, @local, @broadcast}, &(0x7f0000000100)=0xffffffbf) r3 = socket$inet6(0xa, 0x3, 0x88) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000080)={'vcan0\x00', {0x2, 0x4e23, @rand_addr=0x7}}) 23:03:12 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x81) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0xa0, 0x8}}) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0x1, "aa2ee9487b5d6e9b61302a47012263642a82941506115f0f492089903f4ec56f", 0x1, 0x1}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@bcast, @bcast}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 23:03:12 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x3) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r2, 0x4) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) close(r1) write(r0, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x8, &(0x7f0000000040), 0x4) 23:03:12 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) [ 1592.374163] FAULT_INJECTION: forcing a failure. [ 1592.374163] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.398716] CPU: 1 PID: 1262 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1592.406579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1592.415951] Call Trace: [ 1592.418558] dump_stack+0x142/0x197 [ 1592.422208] ? vprintk_func+0x65/0x159 [ 1592.426114] should_fail.cold+0x10f/0x159 [ 1592.430279] should_failslab+0xdb/0x130 [ 1592.434273] __kmalloc_track_caller+0x2ec/0x790 [ 1592.438967] ? kstrdup_const+0x48/0x60 [ 1592.442866] kstrdup+0x3a/0x70 [ 1592.446073] kstrdup_const+0x48/0x60 [ 1592.449799] alloc_vfsmnt+0xe5/0x7d0 [ 1592.453523] clone_mnt+0x70/0xee0 [ 1592.456988] ? lock_downgrade+0x740/0x740 [ 1592.461151] ? do_raw_spin_unlock+0x16b/0x260 [ 1592.465660] copy_tree+0x33b/0x8a0 [ 1592.469223] copy_mnt_ns+0x11c/0x8c0 23:03:12 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x440, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x9, 0x4) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x5) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0xffff, 0x12, 0x4, 0x3c467b463b97c658, {r3, r4/1000+10000}, {0x2, 0x1, 0x66, 0x20, 0x8, 0x9, "0aacd1de"}, 0x6, 0x3, @planes=&(0x7f00000001c0)={0x3, 0x8, @mem_offset, 0x80000001}, 0x4}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)) [ 1592.472955] ? kmem_cache_alloc+0x611/0x780 [ 1592.477297] ? selinux_capable+0x36/0x40 [ 1592.481373] create_new_namespaces+0xc9/0x720 [ 1592.485874] ? ns_capable_common+0x12c/0x160 [ 1592.490274] copy_namespaces+0x284/0x310 [ 1592.490285] copy_process.part.0+0x2603/0x6a70 [ 1592.490300] ? proc_fail_nth_write+0x7d/0x180 [ 1592.490307] ? proc_cwd_link+0x1b0/0x1b0 [ 1592.490323] ? __cleanup_sighand+0x50/0x50 [ 1592.490334] ? lock_downgrade+0x740/0x740 [ 1592.490346] _do_fork+0x19e/0xce0 [ 1592.490357] ? fork_idle+0x280/0x280 [ 1592.523032] ? fput+0xd4/0x150 [ 1592.526234] ? SyS_write+0x15e/0x230 [ 1592.529967] SyS_clone+0x37/0x50 [ 1592.533345] ? sys_vfork+0x30/0x30 [ 1592.536901] do_syscall_64+0x1e8/0x640 [ 1592.540803] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1592.545667] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1592.550882] RIP: 0033:0x45a6f9 [ 1592.554079] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1592.561799] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 23:03:13 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r3, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r3, 0x28}, 0x8) r4 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f00000000c0)) [ 1592.569080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1592.576468] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1592.583763] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1592.591752] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:13 executing program 4 (fault-call:6 fault-nth:0): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:13 executing program 0 (fault-call:2 fault-nth:0): r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) [ 1592.711381] FAULT_INJECTION: forcing a failure. [ 1592.711381] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.740541] CPU: 1 PID: 1281 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 1592.748399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1592.757751] Call Trace: [ 1592.760336] dump_stack+0x142/0x197 [ 1592.763957] should_fail.cold+0x10f/0x159 [ 1592.768106] should_failslab+0xdb/0x130 [ 1592.772073] kmem_cache_alloc_node+0x287/0x780 [ 1592.776640] ? get_pid_task+0x98/0x140 [ 1592.780524] copy_process.part.0+0x17d5/0x6a70 [ 1592.785117] ? save_trace+0x290/0x290 [ 1592.788902] ? proc_fail_nth_write+0x7d/0x180 [ 1592.793381] ? proc_cwd_link+0x1b0/0x1b0 [ 1592.797432] ? __f_unlock_pos+0x19/0x20 [ 1592.801391] ? find_held_lock+0x35/0x130 [ 1592.805439] ? __cleanup_sighand+0x50/0x50 [ 1592.809656] ? lock_downgrade+0x740/0x740 [ 1592.813794] _do_fork+0x19e/0xce0 [ 1592.817231] ? fork_idle+0x280/0x280 [ 1592.820930] ? check_preemption_disabled+0x3c/0x250 [ 1592.826091] ? retint_kernel+0x2d/0x2d [ 1592.829973] ? sys_vfork+0x30/0x30 [ 1592.833509] SyS_clone+0x37/0x50 [ 1592.836861] ? sys_vfork+0x30/0x30 [ 1592.840389] do_syscall_64+0x1e8/0x640 [ 1592.844264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1592.849119] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1592.854309] RIP: 0033:0x45a6f9 23:03:13 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) [ 1592.857483] RSP: 002b:00007fd833285c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1592.865186] RAX: ffffffffffffffda RBX: 00007fd833285c90 RCX: 000000000045a6f9 [ 1592.872458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1592.879728] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1592.886987] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8332866d4 [ 1592.894244] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000005 23:03:13 executing program 3 (fault-call:7 fault-nth:44): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:13 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-\xf3ubdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) 23:03:13 executing program 4 (fault-call:6 fault-nth:1): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) [ 1593.137127] FAULT_INJECTION: forcing a failure. [ 1593.137127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1593.189008] CPU: 1 PID: 1295 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 1593.196872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1593.206247] Call Trace: [ 1593.208865] dump_stack+0x142/0x197 [ 1593.212526] should_fail.cold+0x10f/0x159 [ 1593.216697] ? __might_sleep+0x93/0xb0 [ 1593.220613] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1593.225330] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1593.230377] ? copy_process.part.0+0x240/0x6a70 [ 1593.235061] copy_process.part.0+0x26a/0x6a70 [ 1593.239577] ? find_held_lock+0x35/0x130 [ 1593.243663] ? finish_task_switch+0x178/0x650 [ 1593.248183] ? _raw_spin_unlock_irq+0x28/0x90 [ 1593.252698] ? trace_hardirqs_on_caller+0x400/0x590 [ 1593.257732] ? __cleanup_sighand+0x50/0x50 [ 1593.261983] ? __schedule+0x7c0/0x1cd0 [ 1593.265888] _do_fork+0x19e/0xce0 [ 1593.269355] ? fork_idle+0x280/0x280 [ 1593.273086] ? retint_kernel+0x2d/0x2d [ 1593.275986] FAULT_INJECTION: forcing a failure. [ 1593.275986] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.276975] ? SyS_read+0x230/0x230 [ 1593.276990] SyS_clone+0x37/0x50 [ 1593.276998] ? sys_vfork+0x30/0x30 [ 1593.277012] do_syscall_64+0x1e8/0x640 [ 1593.277021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1593.277042] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1593.312625] RIP: 0033:0x45a6f9 [ 1593.315816] RSP: 002b:00007fd833285c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1593.323540] RAX: ffffffffffffffda RBX: 00007fd833285c90 RCX: 000000000045a6f9 [ 1593.330947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1593.338225] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1593.345507] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8332866d4 [ 1593.352790] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000005 [ 1593.361064] CPU: 0 PID: 1303 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1593.368901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1593.378266] Call Trace: [ 1593.380864] dump_stack+0x142/0x197 [ 1593.384625] should_fail.cold+0x10f/0x159 [ 1593.388790] should_failslab+0xdb/0x130 [ 1593.392781] kmem_cache_alloc+0x2d7/0x780 [ 1593.396943] ? find_held_lock+0x35/0x130 [ 1593.401012] ? copy_tree+0x4a2/0x8a0 [ 1593.404735] alloc_vfsmnt+0x28/0x7d0 [ 1593.408455] clone_mnt+0x70/0xee0 [ 1593.411913] ? lock_downgrade+0x740/0x740 [ 1593.416066] ? do_raw_spin_unlock+0x16b/0x260 [ 1593.420573] copy_tree+0x33b/0x8a0 [ 1593.424131] copy_mnt_ns+0x11c/0x8c0 [ 1593.427857] create_new_namespaces+0xc9/0x720 [ 1593.432360] ? ns_capable_common+0x12c/0x160 [ 1593.436780] copy_namespaces+0x284/0x310 [ 1593.440863] copy_process.part.0+0x2603/0x6a70 [ 1593.445461] ? mark_held_locks+0xb1/0x100 [ 1593.449626] ? trace_hardirqs_on_caller+0x400/0x590 [ 1593.454667] ? __cleanup_sighand+0x50/0x50 [ 1593.458913] ? lock_downgrade+0x740/0x740 [ 1593.463070] ? __f_unlock_pos+0x19/0x20 [ 1593.467058] _do_fork+0x19e/0xce0 [ 1593.470524] ? fork_idle+0x280/0x280 [ 1593.474254] ? fput+0xd4/0x150 [ 1593.477451] ? SyS_write+0x15e/0x230 [ 1593.481173] SyS_clone+0x37/0x50 [ 1593.484549] ? sys_vfork+0x30/0x30 [ 1593.488099] do_syscall_64+0x1e8/0x640 [ 1593.491997] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1593.496864] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1593.502060] RIP: 0033:0x45a6f9 [ 1593.505252] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1593.512986] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1593.520262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1593.527540] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1593.534851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1593.542128] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:14 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:03:14 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x28, 0x4) 23:03:14 executing program 4 (fault-call:6 fault-nth:2): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:14 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x224c02, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000040)={0xe, 0x8, 0x80, 0x1f, 0x31, "5d0fc5ca086c7d437cd95d873873aa4e4187af5696af5d4fa6949088625f8cb56d263093084b59e9f610750bfdfc162a5a"}, 0x3d) [ 1593.942136] FAULT_INJECTION: forcing a failure. [ 1593.942136] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.956315] CPU: 0 PID: 1320 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 1593.964172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1593.973541] Call Trace: [ 1593.976148] dump_stack+0x142/0x197 [ 1593.979802] should_fail.cold+0x10f/0x159 [ 1593.983972] should_failslab+0xdb/0x130 [ 1593.988312] kmem_cache_alloc+0x2d7/0x780 [ 1593.992479] ? creds_are_invalid+0x48/0x110 [ 1593.996817] ? __validate_process_creds+0x14c/0x200 [ 1594.001863] prepare_creds+0x3c/0x390 [ 1594.005682] copy_creds+0x7b/0x4f0 [ 1594.009238] ? lockdep_init_map+0x9/0x10 [ 1594.013313] copy_process.part.0+0x868/0x6a70 [ 1594.017828] ? save_trace+0x290/0x290 [ 1594.021644] ? proc_fail_nth_write+0x7d/0x180 [ 1594.026157] ? proc_cwd_link+0x1b0/0x1b0 [ 1594.030237] ? __f_unlock_pos+0x19/0x20 [ 1594.034239] ? __cleanup_sighand+0x50/0x50 [ 1594.038498] ? lock_downgrade+0x740/0x740 [ 1594.042667] _do_fork+0x19e/0xce0 [ 1594.046139] ? fork_idle+0x280/0x280 [ 1594.049876] ? fput+0xd4/0x150 [ 1594.053085] ? SyS_write+0x15e/0x230 [ 1594.056824] SyS_clone+0x37/0x50 [ 1594.060204] ? sys_vfork+0x30/0x30 [ 1594.063769] do_syscall_64+0x1e8/0x640 [ 1594.067673] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1594.072543] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1594.077753] RIP: 0033:0x45a6f9 [ 1594.080947] RSP: 002b:00007fd833285c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 23:03:14 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) 23:03:14 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 23:03:14 executing program 4 (fault-call:6 fault-nth:3): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:14 executing program 3 (fault-call:7 fault-nth:45): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) [ 1594.088670] RAX: ffffffffffffffda RBX: 00007fd833285c90 RCX: 000000000045a6f9 [ 1594.095950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1594.103239] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1594.110527] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8332866d4 [ 1594.117813] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000005 23:03:14 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x5, &(0x7f00000000c0)=0x0) r3 = eventfd2(0x0, 0x0) r4 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, &(0x7f0000000400)={0x4, 0x0, 0x2, 0x5}) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') io_submit(r2, 0x2, &(0x7f00000003c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x3f, r0, &(0x7f00000001c0)="044647c6100122d3019fa0960ca97dd9f2f84e38ab39f05c870bbf21c321b445647f871e3e6cdb6bda4c612a67b5a6c2b1986eb5683305d1b7c38b9be9e38afa8e8a3c04ca05d208268b338104033c3a6ded7271e36c23bf1ba2ff215437f5025bc1e2f1b00a75d663e64522e158eaa6bc1499ade777a6816d4148820290455ade4b084a119818c0997399564bb8459cfd45774adef8fb7eac05cec863c25bd8d1195ed6796547aea8696d809988e14c741de037e31aae09e6a9945d0431f76d62c47bfe359fe0ae81fceec8b1f817d9685b1680795157d69abc6f047ca01b877cdaedfc8fba7bf01f", 0xe9, 0x81, 0x0, 0x0, r6}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x8000, r0, &(0x7f00000002c0)="c23c073858737f7a24805884cd8af57e733d42f9d7910ede5703393968f5fc572fbcd2d20f6a1039ffe42957c00c68a03586ca4c38fada7dbbe5102ed75274a04d1aa7a384300533789cbf159746fb41a13e1f69ff95899a429f0fa80e352622473fbd0aed7329e715961496481ad35b85c51172e565de196ebeab3bf814054ac016a4dcf14ab61914e154bb4f79da695e0088c66dd3d590", 0x98, 0x571}]) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000480)=0xffffffffffffffff, 0x4) r7 = fcntl$dupfd(r0, 0x0, r0) r8 = pkey_alloc(0x0, 0x0) pkey_free(r8) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000000140)={{0x2, 0x4e20, @multicast2}, {0x306, @local}, 0x4, {0x2, 0x4e21, @multicast2}, 'bcsh0\x00'}) r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r10, &(0x7f0000000180)='.//ile0\x00', r10, &(0x7f00000007c0)='./file0/f.le.\x00') r11 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r11, &(0x7f0000000180)='.//ile0\x00', r11, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$HDIO_GETGEO(r11, 0x301, &(0x7f0000000440)) ioctl$TIOCSIG(r10, 0x40045436, 0xc) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x23c235bdf9c5395, r9, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:14 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000080), 0x4) fcntl$setsig(r0, 0xa, 0xa) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)) prctl$PR_SET_TSC(0x1a, 0x1) 23:03:14 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000000, 0x11, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000000)={0x8}, 0xfffffffffffffff8) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') sendto$x25(r0, &(0x7f0000000040)="7e16ab7d9e600843490fa9eb38bf37ef5c9719de06eacf8e7ea033af333fa7936ba1d29b1b90e84edc0f52b2d67c5b4f7e08bd92e2802449976813ea9201c642c8c3add2a07d80ce46134ea12e160946911569f78ca2f9d9d47342ab3e55f68fce37a3521fef19f5681a3677afaaa7c5cf37b5", 0x73, 0x4, &(0x7f00000000c0)={0x9, @remote={[], 0x0}}, 0x12) 23:03:14 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSCTTY(r1, 0x540e, 0xfffffffffffffffa) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) write(r4, &(0x7f0000000140)="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", 0x1000) [ 1594.259743] FAULT_INJECTION: forcing a failure. [ 1594.259743] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.336792] FAULT_INJECTION: forcing a failure. [ 1594.336792] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.349834] CPU: 1 PID: 1337 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 1594.357678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1594.367046] Call Trace: [ 1594.369647] dump_stack+0x142/0x197 [ 1594.373280] should_fail.cold+0x10f/0x159 [ 1594.373298] should_failslab+0xdb/0x130 [ 1594.373308] __kmalloc_track_caller+0x2ec/0x790 [ 1594.373320] ? check_preemption_disabled+0x3c/0x250 [ 1594.373331] ? prepare_creds+0x3c/0x390 [ 1594.373342] ? selinux_cred_prepare+0x49/0xb0 [ 1594.373355] kmemdup+0x27/0x60 [ 1594.373364] selinux_cred_prepare+0x49/0xb0 [ 1594.373380] security_prepare_creds+0x7d/0xb0 [ 1594.386146] prepare_creds+0x2d1/0x390 [ 1594.415458] copy_creds+0x7b/0x4f0 [ 1594.419010] copy_process.part.0+0x868/0x6a70 [ 1594.423522] ? lock_downgrade+0x740/0x740 [ 1594.427689] ? cpuacct_charge+0x1f8/0x360 [ 1594.431846] ? pick_next_entity+0x198/0x3f0 [ 1594.436188] ? __cleanup_sighand+0x50/0x50 [ 1594.440433] ? __schedule+0x137b/0x1cd0 [ 1594.444532] _do_fork+0x19e/0xce0 [ 1594.448003] ? fork_idle+0x280/0x280 [ 1594.451731] ? __schedule+0x137b/0x1cd0 [ 1594.455738] ? firmware_map_remove+0x196/0x196 [ 1594.460337] SyS_clone+0x37/0x50 [ 1594.463711] ? sys_vfork+0x30/0x30 [ 1594.467268] do_syscall_64+0x1e8/0x640 [ 1594.471156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1594.476010] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1594.481207] RIP: 0033:0x45a6f9 23:03:14 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x80000, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000003b46a3420af922ee68d54d78402d75cec8f9b5bf1b02ce92fdcc293f3a133b55ff8cf689867f5bc8db9515d0bcb9fcff5a75fe089d79e89a1c42d701e17ac8c24ed24c7e76e4993410768052e56898c8916de7ad172bf91ff1ac3f6f3747d27bea1c080f5cbf266049eb509a06a6c506f13461188c3609409d8692452a696918099cea9092e839e8c76036240c69d599ff0560c7f965c2ab5ab7bb2432445904838cd1086f0458cc94c2a6061b666"], &(0x7f0000000100)=0x6) 23:03:14 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/devBv\x05\x00\x00\x00\x00\x00\x05\x04\x00\b\x00', 0x2002, 0x5b174acabd30cd26) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380)=0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r8, &(0x7f0000000180)='.//ile0\x00', r8, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000780)={{{@in=@loopback, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000880)=0xe8) r9 = getegid() r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r10, 0x101, 0x2, &(0x7f0000000080), 0x4) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r11, 0x101, 0x2, &(0x7f0000000080), 0x4) r12 = socket(0x11, 0x800000003, 0x0) bind(r12, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r13, @ANYBLOB="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"], 0x3}}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x378000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @map, @generic={0x6, 0x1, 0x1, 0x8, 0xbbf4}, @jmp={0x5, 0x1, 0x0, 0x4, 0x1, 0x2, 0x4}, @alu={0x4, 0x1, 0xc, 0x9, 0x3, 0x50, 0xfffffffffffffff0}, @map, @exit]}, &(0x7f0000000440)='syzkaller\x00', 0xfac, 0xe, &(0x7f0000000480)=""/14, 0x41000, 0x8, [], r13, 0x11, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0x6, 0x8}, 0x10, 0xffffffffffffffff}, 0x78) sendmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="b4aa1f7302fa4a0cf5c3fe8e444fb550dbe2774b634b6cb2d8ba6b66f8c7032697281c4647690f7a237a866c295397298089b50a873f3fc6240c2b155d809c5885a36eff532be4f226c1cf83fca3dc986986e49f8a3e71621f9e3f0d683c24e91f4e984abf3a02f57623250d576e8fdf44", 0x71}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r9}}}, @rights={{0x18, 0x1, 0x1, [r10, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r11, r0, r14]}}], 0x78, 0x20000045}, 0x90) 23:03:14 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x430001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000140)={0x1, 0x7, 0x2, 'queue1\x00', 0x7}) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1594.484405] RSP: 002b:00007fd833285c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1594.492118] RAX: ffffffffffffffda RBX: 00007fd833285c90 RCX: 000000000045a6f9 [ 1594.499394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1594.506673] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1594.513953] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8332866d4 [ 1594.521233] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000005 [ 1594.530739] CPU: 0 PID: 1344 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1594.538612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1594.548109] Call Trace: [ 1594.550720] dump_stack+0x142/0x197 [ 1594.554367] should_fail.cold+0x10f/0x159 [ 1594.558535] should_failslab+0xdb/0x130 [ 1594.562526] __kmalloc_track_caller+0x2ec/0x790 [ 1594.567204] ? kstrdup_const+0x48/0x60 [ 1594.571107] kstrdup+0x3a/0x70 [ 1594.574313] kstrdup_const+0x48/0x60 [ 1594.578033] alloc_vfsmnt+0xe5/0x7d0 [ 1594.581755] clone_mnt+0x70/0xee0 [ 1594.585237] copy_tree+0x33b/0x8a0 [ 1594.588799] copy_mnt_ns+0x11c/0x8c0 [ 1594.592518] ? kmem_cache_alloc+0x611/0x780 [ 1594.596850] ? selinux_capable+0x36/0x40 [ 1594.600921] create_new_namespaces+0xc9/0x720 [ 1594.605429] ? ns_capable_common+0x12c/0x160 [ 1594.609851] copy_namespaces+0x284/0x310 [ 1594.613927] copy_process.part.0+0x2603/0x6a70 [ 1594.618525] ? proc_cwd_link+0x1b0/0x1b0 [ 1594.622604] ? __cleanup_sighand+0x50/0x50 [ 1594.626877] ? lock_downgrade+0x740/0x740 [ 1594.631032] _do_fork+0x19e/0xce0 [ 1594.634502] ? fork_idle+0x280/0x280 [ 1594.638230] ? fput+0xd4/0x150 [ 1594.641432] ? SyS_write+0x15e/0x230 [ 1594.645184] SyS_clone+0x37/0x50 [ 1594.648563] ? sys_vfork+0x30/0x30 [ 1594.652113] do_syscall_64+0x1e8/0x640 [ 1594.656013] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1594.660876] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1594.666075] RIP: 0033:0x45a6f9 [ 1594.669278] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1594.677006] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 23:03:14 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0xe31) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) 23:03:15 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0xffffffffffffffe6) 23:03:15 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xe, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) 23:03:15 executing program 4 (fault-call:6 fault-nth:4): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) [ 1594.684290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1594.691574] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1594.698859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1594.706143] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 [ 1594.788341] FAULT_INJECTION: forcing a failure. [ 1594.788341] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.801289] CPU: 1 PID: 1376 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 1594.809133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1594.818529] Call Trace: [ 1594.821133] dump_stack+0x142/0x197 [ 1594.824790] should_fail.cold+0x10f/0x159 [ 1594.828965] should_failslab+0xdb/0x130 [ 1594.832960] kmem_cache_alloc+0x2d7/0x780 [ 1594.837130] ? creds_are_invalid+0x48/0x110 [ 1594.841466] ? selinux_is_enabled+0x9/0x50 [ 1594.845827] ? creds_are_invalid+0x48/0x110 [ 1594.850265] __delayacct_tsk_init+0x20/0x80 [ 1594.854604] copy_process.part.0+0x1a6c/0x6a70 [ 1594.859203] ? __sanitizer_cov_trace_pc+0x4e/0x60 [ 1594.864064] ? save_trace+0x290/0x290 [ 1594.867878] ? proc_fail_nth_write+0x7d/0x180 [ 1594.872386] ? proc_cwd_link+0x1b0/0x1b0 [ 1594.876586] ? __f_unlock_pos+0x19/0x20 [ 1594.880582] ? __cleanup_sighand+0x50/0x50 [ 1594.884840] ? lock_downgrade+0x740/0x740 [ 1594.889016] _do_fork+0x19e/0xce0 [ 1594.892489] ? fork_idle+0x280/0x280 [ 1594.896216] ? __f_unlock_pos+0xd/0x20 [ 1594.900110] ? fput+0xd4/0x150 [ 1594.904268] ? SyS_write+0x15e/0x230 [ 1594.907994] SyS_clone+0x37/0x50 [ 1594.911372] ? sys_vfork+0x30/0x30 [ 1594.914922] do_syscall_64+0x1e8/0x640 [ 1594.918818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1594.923674] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1594.928867] RIP: 0033:0x45a6f9 [ 1594.932064] RSP: 002b:00007fd833285c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1594.939797] RAX: ffffffffffffffda RBX: 00007fd833285c90 RCX: 000000000045a6f9 [ 1594.947145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1594.954413] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1594.961752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8332866d4 [ 1594.969009] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000005 23:03:15 executing program 3 (fault-call:7 fault-nth:46): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:15 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) 23:03:15 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x40) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:15 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000080), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x9) tee(r0, r1, 0x1, 0x1) r2 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x33d) 23:03:15 executing program 4 (fault-call:6 fault-nth:5): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:15 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffbff, 0x804000) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x8001003, 0x0, 0x1}) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x6, 0x680) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={[], 0x8, 0x20, 0x4, 0x300000000000, 0xffffffffffffe8cb, r3}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 23:03:15 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200000, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0x100000, 0x0, 0x0, 0xff, 0x5, 0x3f, 0x40, 0x0, 0x0, 0x3f, 0x4, 0x81}, {0x6000, 0x4000, 0x4, 0x3, 0x6, 0x7e, 0x9b, 0x6, 0xa3, 0x20, 0x1, 0x4f}, {0x100000, 0xd000, 0xd, 0x1, 0x1, 0x6, 0x9, 0x3f, 0x7, 0x1, 0x68, 0x1f}, {0xd000, 0x2, 0xb, 0x7f, 0x0, 0x5, 0x1, 0x2, 0xc2, 0x8, 0x7, 0x1}, {0x10000, 0x1, 0x8, 0x2, 0x9, 0x6, 0x1, 0xee, 0x80, 0x6, 0xfa, 0xf9}, {0xd000, 0x3000, 0xe, 0x4, 0x9, 0x8, 0x94, 0x9, 0x9, 0xff, 0x7, 0xa8}, {0x1000, 0x4000, 0x0, 0x6, 0x92, 0x1f, 0x1, 0x1f, 0x87, 0x0, 0x0, 0x1}, {0xf000, 0x2000, 0x8, 0x8, 0x5, 0x5, 0x40, 0x1f, 0x40, 0x7, 0x27, 0x1}, {0x1000, 0xd000}, {0x0, 0x2004}, 0x1, 0x0, 0x100000, 0x4, 0x5, 0x1000, 0x3000, [0x400, 0x6, 0x1ff, 0x4]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x3000) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:15 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000004}) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) [ 1595.135522] FAULT_INJECTION: forcing a failure. [ 1595.135522] name failslab, interval 1, probability 0, space 0, times 0 [ 1595.169312] CPU: 0 PID: 1398 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 1595.177207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1595.186585] Call Trace: [ 1595.189189] dump_stack+0x142/0x197 [ 1595.192846] should_fail.cold+0x10f/0x159 [ 1595.197013] should_failslab+0xdb/0x130 [ 1595.201005] kmem_cache_alloc+0x2d7/0x780 [ 1595.205182] ? trace_hardirqs_on_caller+0x400/0x590 [ 1595.210211] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1595.214727] FAULT_INJECTION: forcing a failure. [ 1595.214727] name failslab, interval 1, probability 0, space 0, times 0 [ 1595.215318] dup_fd+0x85/0xa40 [ 1595.215337] copy_process.part.0+0x1b5a/0x6a70 [ 1595.234302] ? save_trace+0x290/0x290 [ 1595.238099] ? proc_fail_nth_write+0x7d/0x180 [ 1595.242591] ? proc_cwd_link+0x1b0/0x1b0 [ 1595.246663] ? __cleanup_sighand+0x50/0x50 [ 1595.250905] ? lock_downgrade+0x740/0x740 [ 1595.255057] _do_fork+0x19e/0xce0 [ 1595.258511] ? fork_idle+0x280/0x280 [ 1595.262225] ? fput+0xd4/0x150 [ 1595.265424] ? SyS_write+0x15e/0x230 [ 1595.269141] SyS_clone+0x37/0x50 [ 1595.272505] ? sys_vfork+0x30/0x30 [ 1595.276045] do_syscall_64+0x1e8/0x640 [ 1595.279927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1595.284772] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1595.289957] RIP: 0033:0x45a6f9 [ 1595.293139] RSP: 002b:00007fd833285c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1595.300850] RAX: ffffffffffffffda RBX: 00007fd833285c90 RCX: 000000000045a6f9 [ 1595.308131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1595.315396] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1595.322659] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8332866d4 23:03:15 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/140) [ 1595.329933] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000005 [ 1595.337244] CPU: 1 PID: 1403 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1595.345061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1595.354449] Call Trace: [ 1595.357053] dump_stack+0x142/0x197 [ 1595.360710] should_fail.cold+0x10f/0x159 [ 1595.364878] should_failslab+0xdb/0x130 [ 1595.368868] __kmalloc_track_caller+0x2ec/0x790 [ 1595.373558] ? kstrdup_const+0x48/0x60 [ 1595.377465] kstrdup+0x3a/0x70 [ 1595.380671] kstrdup_const+0x48/0x60 [ 1595.384398] alloc_vfsmnt+0xe5/0x7d0 [ 1595.388130] clone_mnt+0x70/0xee0 [ 1595.391601] ? lock_downgrade+0x740/0x740 [ 1595.395770] ? do_raw_spin_unlock+0x16b/0x260 [ 1595.400279] copy_tree+0x33b/0x8a0 [ 1595.403840] copy_mnt_ns+0x11c/0x8c0 [ 1595.407566] ? kmem_cache_alloc+0x611/0x780 [ 1595.411900] ? selinux_capable+0x36/0x40 [ 1595.415979] create_new_namespaces+0xc9/0x720 [ 1595.420491] ? ns_capable_common+0x12c/0x160 [ 1595.424915] copy_namespaces+0x284/0x310 [ 1595.428989] copy_process.part.0+0x2603/0x6a70 [ 1595.433593] ? proc_fail_nth_write+0x7d/0x180 [ 1595.438109] ? __cleanup_sighand+0x50/0x50 [ 1595.442362] ? lock_downgrade+0x740/0x740 [ 1595.446530] _do_fork+0x19e/0xce0 [ 1595.449996] ? fork_idle+0x280/0x280 [ 1595.453719] ? check_preemption_disabled+0x3c/0x250 [ 1595.458763] ? retint_kernel+0x2d/0x2d [ 1595.462663] ? sys_vfork+0x30/0x30 [ 1595.466216] SyS_clone+0x37/0x50 [ 1595.469599] ? sys_vfork+0x30/0x30 [ 1595.473150] do_syscall_64+0x1e8/0x640 [ 1595.477043] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1595.481909] entry_SYSCALL_64_after_hwframe+0x42/0xb7 23:03:15 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x48) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x749, 0x4) [ 1595.487103] RIP: 0033:0x45a6f9 [ 1595.490300] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1595.498032] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1595.505305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1595.512683] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1595.519965] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1595.527250] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:16 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), &(0x7f0000000280)=0x2) r1 = socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x100000) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0xffff, 0x7, 0x1, 0x1, 0x7fac1084, 0x5393, 0x2, 0x1, 0x2f74d7c2, 0x5, 0x424b1839, 0x5, 0x7, 0x8, 0x4, 0x7}}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000140)={0x5}) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:16 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) execve(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=[&(0x7f00000000c0)='&\x00', &(0x7f0000000100)='-*-]\r.\x00', &(0x7f0000000140)=':+em0vmnet1\x00'], &(0x7f0000000280)=[&(0x7f00000001c0)='*]$\\md5sum\xcc\xcdvboxnet0}}vboxnet1eth1vboxnet1+Lcgroup}&\x00', &(0x7f0000000200)='vmnet0\x00', &(0x7f0000000240)='loeth1\x00']) 23:03:16 executing program 3 (fault-call:7 fault-nth:47): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:16 executing program 4 (fault-call:6 fault-nth:6): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:16 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1596.032858] FAULT_INJECTION: forcing a failure. [ 1596.032858] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.057819] CPU: 1 PID: 1431 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 1596.065674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1596.075033] Call Trace: [ 1596.077616] dump_stack+0x142/0x197 [ 1596.081237] should_fail.cold+0x10f/0x159 [ 1596.085375] should_failslab+0xdb/0x130 [ 1596.089333] kmem_cache_alloc_trace+0x2e9/0x790 [ 1596.093991] ? lock_downgrade+0x740/0x740 [ 1596.098124] alloc_fdtable+0x7f/0x280 [ 1596.101907] dup_fd+0x693/0xa40 [ 1596.105175] copy_process.part.0+0x1b5a/0x6a70 [ 1596.109742] ? save_trace+0x290/0x290 [ 1596.113525] ? proc_fail_nth_write+0x7d/0x180 [ 1596.118019] ? proc_cwd_link+0x1b0/0x1b0 [ 1596.122083] ? __cleanup_sighand+0x50/0x50 [ 1596.126320] ? lock_downgrade+0x740/0x740 [ 1596.130454] _do_fork+0x19e/0xce0 [ 1596.133892] ? fork_idle+0x280/0x280 [ 1596.137594] ? fput+0xd4/0x150 [ 1596.140768] ? SyS_write+0x15e/0x230 [ 1596.144468] SyS_clone+0x37/0x50 [ 1596.147821] ? sys_vfork+0x30/0x30 [ 1596.151367] do_syscall_64+0x1e8/0x640 [ 1596.155239] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1596.160074] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1596.165269] RIP: 0033:0x45a6f9 [ 1596.168441] RSP: 002b:00007fd833285c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1596.176152] RAX: ffffffffffffffda RBX: 00007fd833285c90 RCX: 000000000045a6f9 23:03:16 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xd2, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x1}, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0x5, 0x7fff, 0x805a}, &(0x7f0000000540)=0x942, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x1000010004}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r1, r2, 0x0, 0x5, &(0x7f0000000240)='bpq0\x00', r4}, 0x30) fcntl$dupfd(r0, 0x203, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r5, 0x2c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r7 = gettid() r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r8, &(0x7f00003fefff)=""/1, 0x1) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r9, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r10}], 0x1, 0xffffffffffbffff8) dup2(r9, r10) fcntl$setown(r9, 0x8, r7) [ 1596.183409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1596.190662] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1596.197913] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8332866d4 [ 1596.205163] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000005 23:03:16 executing program 4 (fault-call:6 fault-nth:7): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:16 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x200000, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8000000000008) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) 23:03:16 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200802, 0x0) ioctl$TIOCCBRK(r1, 0x5428) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x34080, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f00000003c0)={0x0, &(0x7f0000000380)=[&(0x7f0000000180)="3889600b94ac55f14cf4ce403457dfb2e2febe4df01939ebb27788189b6ae2d1b4d188c4345e70b442ad5addc8f6d9e318ebf238625424d7d3ae3e94fb1fa638b348697ddb58d7f65144a6cf11d88b2b4a18deb0180ecabdd7a038ec4c564383d4cdaf0811c9675e325795c5b2e6050e5deb54675c858dafe6243a4fa8191492169f8d5011983fab7ae4745a22a3e64a91dbdd4ed9dfb106c346", &(0x7f0000000240)="c1f95a42de40169c56f232bcafe7ad2c6979ef0ad6b454bc226249682c880b6a05fe9c799a5ccd6353bf960cff23169dd2c3a8f21ca9910af31ae73434a29ad05f908ccff302a6e508c7c6c7724412be6347971d1c5b30bf16ff04a169c727891b0da1780f0915980878f63f99d73c9b3a9b585d061d834ef531ef40848f4ef78b1d05e6f9b1197973218e233cf554f85b3cd3a72bf50098412f03a3742ff5958ab95160346d045583", &(0x7f0000000300)="6ea6b0f6ebd17f9380b213b0cd60d3b6bbe0d0c5e13a5d5fe5f63f13b241aa96586a8f46e2ad2363a8f9be5ff4e44a146ffe0736036a0946154b091a66eef90b86904a1592f7e480755451e306b79c58559f8c7d1ca70d7ecc6b77f65817884c7014bd7ac46fb8e6002506cdd56aa91eda8c6af5ca"]}) socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x52000, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, {0x2, 0x357, 0x7, 0x1}}) [ 1596.453690] FAULT_INJECTION: forcing a failure. [ 1596.453690] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.469952] FAULT_INJECTION: forcing a failure. [ 1596.469952] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.495357] CPU: 1 PID: 1448 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 1596.503214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1596.512585] Call Trace: [ 1596.515188] dump_stack+0x142/0x197 [ 1596.518831] should_fail.cold+0x10f/0x159 [ 1596.522994] should_failslab+0xdb/0x130 [ 1596.526977] kmem_cache_alloc_node_trace+0x280/0x770 [ 1596.532094] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1596.537566] __kmalloc_node+0x3d/0x80 [ 1596.541403] kvmalloc_node+0x4e/0xe0 [ 1596.545131] alloc_fdtable+0xcf/0x280 [ 1596.548933] dup_fd+0x693/0xa40 [ 1596.552229] copy_process.part.0+0x1b5a/0x6a70 [ 1596.556824] ? save_trace+0x290/0x290 [ 1596.560632] ? retint_kernel+0x2d/0x2d [ 1596.564525] ? trace_hardirqs_on_caller+0x400/0x590 [ 1596.569557] ? __cleanup_sighand+0x50/0x50 [ 1596.573809] _do_fork+0x19e/0xce0 [ 1596.577279] ? fork_idle+0x280/0x280 [ 1596.581004] ? fput+0xd4/0x150 [ 1596.584203] ? SyS_write+0x15e/0x230 [ 1596.587934] SyS_clone+0x37/0x50 [ 1596.591303] ? sys_vfork+0x30/0x30 [ 1596.594854] do_syscall_64+0x1e8/0x640 [ 1596.598745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1596.603604] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1596.608796] RIP: 0033:0x45a6f9 [ 1596.611990] RSP: 002b:00007fd833285c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1596.619711] RAX: ffffffffffffffda RBX: 00007fd833285c90 RCX: 000000000045a6f9 [ 1596.626991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1596.634295] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1596.641691] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8332866d4 [ 1596.648973] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000005 [ 1596.656677] CPU: 0 PID: 1440 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1596.664503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1596.673871] Call Trace: [ 1596.676474] dump_stack+0x142/0x197 [ 1596.680139] should_fail.cold+0x10f/0x159 [ 1596.684318] should_failslab+0xdb/0x130 [ 1596.688305] __kmalloc_track_caller+0x2ec/0x790 [ 1596.692993] ? kstrdup_const+0x48/0x60 [ 1596.696896] kstrdup+0x3a/0x70 [ 1596.700098] kstrdup_const+0x48/0x60 [ 1596.703822] alloc_vfsmnt+0xe5/0x7d0 [ 1596.707544] clone_mnt+0x70/0xee0 [ 1596.711011] ? lock_downgrade+0x740/0x740 [ 1596.715288] ? do_raw_spin_unlock+0x16b/0x260 [ 1596.719801] copy_tree+0x33b/0x8a0 [ 1596.723366] copy_mnt_ns+0x11c/0x8c0 [ 1596.727112] create_new_namespaces+0xc9/0x720 [ 1596.731622] ? ns_capable_common+0x12c/0x160 [ 1596.736050] copy_namespaces+0x284/0x310 [ 1596.740127] copy_process.part.0+0x2603/0x6a70 [ 1596.744731] ? check_preemption_disabled+0x3c/0x250 [ 1596.749762] ? retint_kernel+0x2d/0x2d [ 1596.753680] ? __cleanup_sighand+0x50/0x50 [ 1596.757929] ? lock_downgrade+0x740/0x740 [ 1596.762095] _do_fork+0x19e/0xce0 [ 1596.765572] ? fork_idle+0x280/0x280 [ 1596.769298] ? fput+0xd4/0x150 [ 1596.772500] ? SyS_write+0x15e/0x230 [ 1596.776229] SyS_clone+0x37/0x50 [ 1596.779603] ? sys_vfork+0x30/0x30 [ 1596.783168] do_syscall_64+0x1e8/0x640 [ 1596.787070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1596.791930] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1596.797128] RIP: 0033:0x45a6f9 23:03:17 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x540801, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:17 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x8001, 0x8, 0x0, 0x1, 0x3}, 0x14) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x10000, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) 23:03:17 executing program 4 (fault-call:6 fault-nth:8): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) [ 1596.800327] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1596.808048] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1596.815328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1596.822614] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1596.829896] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1596.837204] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:17 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) [ 1596.963751] FAULT_INJECTION: forcing a failure. [ 1596.963751] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.975955] CPU: 0 PID: 1480 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 1596.983785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1596.993152] Call Trace: [ 1596.995761] dump_stack+0x142/0x197 [ 1596.999416] should_fail.cold+0x10f/0x159 [ 1597.003584] should_failslab+0xdb/0x130 [ 1597.007581] kmem_cache_alloc_node_trace+0x280/0x770 [ 1597.012709] ? kasan_unpoison_shadow+0x35/0x50 [ 1597.017311] __kmalloc_node+0x3d/0x80 [ 1597.021131] kvmalloc_node+0x4e/0xe0 [ 1597.024864] alloc_fdtable+0x13b/0x280 [ 1597.028763] dup_fd+0x693/0xa40 [ 1597.032060] copy_process.part.0+0x1b5a/0x6a70 [ 1597.036662] ? save_trace+0x290/0x290 [ 1597.040478] ? proc_fail_nth_write+0x7d/0x180 [ 1597.045111] ? proc_cwd_link+0x1b0/0x1b0 [ 1597.049206] ? __cleanup_sighand+0x50/0x50 [ 1597.053462] ? lock_downgrade+0x740/0x740 [ 1597.057630] _do_fork+0x19e/0xce0 [ 1597.061100] ? fork_idle+0x280/0x280 [ 1597.064827] ? fput+0xd4/0x150 [ 1597.068030] ? SyS_write+0x15e/0x230 [ 1597.071763] SyS_clone+0x37/0x50 [ 1597.075151] ? sys_vfork+0x30/0x30 [ 1597.078707] do_syscall_64+0x1e8/0x640 [ 1597.082613] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1597.087476] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1597.092680] RIP: 0033:0x45a6f9 [ 1597.095876] RSP: 002b:00007fd833285c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1597.103601] RAX: ffffffffffffffda RBX: 00007fd833285c90 RCX: 000000000045a6f9 [ 1597.110894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1597.118176] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1597.125461] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8332866d4 [ 1597.132742] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000005 23:03:17 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x840c0}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x13c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x0, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x967}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xca40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}]}, @TIPC_NLA_LINK={0xd0, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x280}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8bc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0xffffffffffffff2b, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x243, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x42ba}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x4800) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00000002c0)={&(0x7f0000ffb000/0x2000)=nil, 0x4, 0x3, 0x4, &(0x7f0000ffb000/0x4000)=nil, 0x4}) 23:03:17 executing program 3 (fault-call:7 fault-nth:48): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:17 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000008, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x1, 0xfffffff9, 0xe830, 0x4f00, 0x16, 0x1f, 0x2, 0x3f, 0x1, 0x8, 0x9, 0x8}) 23:03:17 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)={0x0, 0x9, 0x3, &(0x7f0000000000)=0x3}) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000200)={0x2ef, &(0x7f00000001c0)=[{}]}) 23:03:17 executing program 4 (fault-call:6 fault-nth:9): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:18 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) socket$unix(0x1, 0x5, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:18 executing program 0: memfd_create(&(0x7f0000000780)='\x00', 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) [ 1597.578105] FAULT_INJECTION: forcing a failure. [ 1597.578105] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.618597] CPU: 0 PID: 1500 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 1597.626457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1597.635823] Call Trace: [ 1597.637966] FAULT_INJECTION: forcing a failure. [ 1597.637966] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.638422] dump_stack+0x142/0x197 [ 1597.638443] should_fail.cold+0x10f/0x159 [ 1597.638460] should_failslab+0xdb/0x130 [ 1597.638474] kmem_cache_alloc+0x2d7/0x780 [ 1597.665590] ? dup_fd+0x533/0xa40 [ 1597.669071] copy_fs_struct+0x43/0x2d0 [ 1597.672976] copy_process.part.0+0x3974/0x6a70 [ 1597.677584] ? save_trace+0x290/0x290 [ 1597.681396] ? proc_fail_nth_write+0x7d/0x180 [ 1597.685897] ? proc_cwd_link+0x1b0/0x1b0 [ 1597.689998] ? __cleanup_sighand+0x50/0x50 [ 1597.694236] ? lock_downgrade+0x740/0x740 [ 1597.698395] _do_fork+0x19e/0xce0 [ 1597.701862] ? fork_idle+0x280/0x280 [ 1597.705592] ? fput+0xd4/0x150 [ 1597.708792] ? SyS_write+0x15e/0x230 [ 1597.712516] SyS_clone+0x37/0x50 [ 1597.715897] ? sys_vfork+0x30/0x30 [ 1597.719486] do_syscall_64+0x1e8/0x640 [ 1597.723385] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1597.728248] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1597.733457] RIP: 0033:0x45a6f9 [ 1597.736654] RSP: 002b:00007fd833285c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1597.744377] RAX: ffffffffffffffda RBX: 00007fd833285c90 RCX: 000000000045a6f9 [ 1597.751663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1597.758950] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1597.766274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8332866d4 [ 1597.773555] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000005 [ 1597.780856] CPU: 1 PID: 1505 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1597.788683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1597.798052] Call Trace: [ 1597.800650] dump_stack+0x142/0x197 [ 1597.804295] ? should_fail.cold+0x10a/0x159 [ 1597.808629] should_fail.cold+0x10f/0x159 [ 1597.812794] should_failslab+0xdb/0x130 [ 1597.816782] __kmalloc_track_caller+0x2ec/0x790 [ 1597.821469] ? retint_kernel+0x2d/0x2d [ 1597.825373] ? kstrdup_const+0x48/0x60 [ 1597.829275] kstrdup+0x3a/0x70 [ 1597.832488] kstrdup_const+0x48/0x60 [ 1597.836213] alloc_vfsmnt+0xe5/0x7d0 [ 1597.839940] clone_mnt+0x70/0xee0 [ 1597.843415] copy_tree+0x33b/0x8a0 [ 1597.846979] copy_mnt_ns+0x11c/0x8c0 [ 1597.850704] ? kmem_cache_alloc+0x611/0x780 [ 1597.855049] ? check_preemption_disabled+0x3c/0x250 [ 1597.860084] ? retint_kernel+0x2d/0x2d [ 1597.863994] create_new_namespaces+0xc9/0x720 [ 1597.868508] copy_namespaces+0x284/0x310 [ 1597.872586] copy_process.part.0+0x2603/0x6a70 [ 1597.877188] ? retint_kernel+0x2d/0x2d [ 1597.881096] ? trace_hardirqs_on_caller+0x400/0x590 [ 1597.886142] ? __cleanup_sighand+0x50/0x50 [ 1597.890548] _do_fork+0x19e/0xce0 [ 1597.894010] ? fork_idle+0x280/0x280 [ 1597.897735] ? fput+0xd4/0x150 [ 1597.900927] ? SyS_write+0x15e/0x230 [ 1597.904680] SyS_clone+0x37/0x50 [ 1597.908044] ? sys_vfork+0x30/0x30 [ 1597.911593] do_syscall_64+0x1e8/0x640 [ 1597.915599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1597.920469] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1597.925680] RIP: 0033:0x45a6f9 [ 1597.928869] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1597.936595] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1597.943886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1597.951168] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1597.958459] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 23:03:18 executing program 4 (fault-call:6 fault-nth:10): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) [ 1597.965744] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:18 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1ff, 0x88400) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x49, 0x0, 0x8002, 0x401}) syz_mount_image$cifs(&(0x7f00000001c0)='cifs\x00', &(0x7f0000000200)='./file0/../file0\x00', 0xaaa, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5a6cf029e127b32b81ea991a337fc3ababd142e8df", 0x15, 0xe0}, {&(0x7f0000000280)="aa905533d9617f4fd8a1eaf791b0b2b3756d033d1bd9f3b40b2ba962d624e6d8f7d7473e993abde993215ca560750bc5177dd5678bc81d8aecec9d19d9aa6d3492c5e60c3864669bc32ef8b1b1758ec790cb9fb3bcb6034ac211807d325906f747b52c7b3f084b3b32f5368ad959e0669fb1c6f8b8ab7fe8e76e6f0779eb1ceb12726b27181f3d5492e36904273d553ba20933fc4521770385c40e7d3b41de30547c26ebca8287ada7a6ecd51bc87e13d5b247f1a71587615e56d07390108219604e7e35d5a73acf5815d9caba4d012a70dcbf10374a58303748173c", 0xdc, 0x1f}, {&(0x7f0000000380)="cc7ce5ff7104382e9d87df5883df88bf93ead8c3ef6fda464b34550d42e1b57474fbfdded361f2e6a8885b92fc2097d13407de32c62b68d4b89079218095e25cadb60c2c1136d98c8bb2737045891791cf6b364a3d48c5259bdfed02c5cf0eb034c3f5fd3b8af67d753841989269c38cc45a090a6c491bcd7d0811c5824dfeb98f7c270c51336b27b9e5da3240c27c", 0x8f, 0x2}, {&(0x7f0000000440)="8810b3ab80918ad46084ffe0e23a7d5a3cf71d26470f2121717eea7d9995f3479d712ff36d3f4ba816b15e78b9cab8ebcafd8249e5dfc11aca9a3af36fbffc49f7e09e468b171716b895a2f1c54381342772a2b8a5fe82b911cf6077cd5b113afba7131936ef7a26c0254b44f9cc10df460a5e2e46cd401affdb38889ae6707fe4c4d16cc11325717033069ec761b78b301fa7fa7cd7d012cefe3e65e8064fb7cd6dce9ff21f12654f79ef3406fd", 0xae, 0x81}, {&(0x7f0000000500)="0ae9e284de6dc8768e61ffeb86fc89ca", 0x10, 0xffff}, {&(0x7f0000000540)="e2e0591aa399ae9611f78f62f1ac3682b9733852e2d2edc643240b1433aaf464dacb80317d7ec8", 0x27, 0x200}, {&(0x7f0000000800)="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", 0x1000, 0x1}, {&(0x7f0000000580)="3b01649005a3e1af6b740f61e02b1f01b3b15c10bb5f9ead77102130affcce", 0x1f, 0x1ff}], 0x8010, &(0x7f0000000680)='wlan1wlan1ppp0\x00') ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r3, 0x7}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x80, 0x2, 0x0, 0x6, 0x7f}) 23:03:18 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) fcntl$notify(r3, 0x402, 0x37) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1598.081461] FAULT_INJECTION: forcing a failure. [ 1598.081461] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.118596] CPU: 0 PID: 1517 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 1598.126455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1598.135804] Call Trace: [ 1598.138390] dump_stack+0x142/0x197 [ 1598.142011] should_fail.cold+0x10f/0x159 [ 1598.146148] should_failslab+0xdb/0x130 [ 1598.150108] kmem_cache_alloc+0x2d7/0x780 [ 1598.154239] ? do_raw_spin_unlock+0x16b/0x260 [ 1598.158724] ? _raw_spin_unlock+0x2d/0x50 [ 1598.162857] copy_process.part.0+0x39d7/0x6a70 [ 1598.167431] ? save_trace+0x290/0x290 [ 1598.171215] ? proc_fail_nth_write+0x7d/0x180 [ 1598.175692] ? proc_cwd_link+0x1b0/0x1b0 [ 1598.179756] ? __cleanup_sighand+0x50/0x50 [ 1598.183977] ? lock_downgrade+0x740/0x740 [ 1598.188110] _do_fork+0x19e/0xce0 [ 1598.191549] ? fork_idle+0x280/0x280 [ 1598.195248] ? fput+0xd4/0x150 [ 1598.198430] ? SyS_write+0x15e/0x230 [ 1598.202133] SyS_clone+0x37/0x50 [ 1598.205483] ? sys_vfork+0x30/0x30 [ 1598.209007] do_syscall_64+0x1e8/0x640 [ 1598.212876] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1598.217708] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1598.222900] RIP: 0033:0x45a6f9 23:03:18 executing program 4 (fault-call:6 fault-nth:11): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) [ 1598.226089] RSP: 002b:00007fd833285c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1598.233782] RAX: ffffffffffffffda RBX: 00007fd833285c90 RCX: 000000000045a6f9 [ 1598.241040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1598.248292] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1598.255545] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8332866d4 [ 1598.262813] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000005 23:03:18 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x80100) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000140)) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1598.451738] FAULT_INJECTION: forcing a failure. [ 1598.451738] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.475103] CPU: 1 PID: 1537 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 1598.482962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1598.492343] Call Trace: [ 1598.494936] dump_stack+0x142/0x197 [ 1598.498580] should_fail.cold+0x10f/0x159 [ 1598.502742] should_failslab+0xdb/0x130 [ 1598.506745] kmem_cache_alloc+0x2d7/0x780 [ 1598.510910] ? copy_process.part.0+0x1cc4/0x6a70 [ 1598.515681] copy_process.part.0+0x1cd5/0x6a70 [ 1598.520279] ? save_trace+0x290/0x290 [ 1598.524085] ? proc_fail_nth_write+0x7d/0x180 [ 1598.528592] ? retint_kernel+0x2d/0x2d [ 1598.532503] ? __cleanup_sighand+0x50/0x50 [ 1598.536754] _do_fork+0x19e/0xce0 [ 1598.540220] ? fork_idle+0x280/0x280 [ 1598.543943] ? fput+0xd4/0x150 [ 1598.547147] ? SyS_write+0x15e/0x230 23:03:18 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) r1 = request_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f00000002c0)='syz', 0xfffffffffffffffc) add_key(&(0x7f00000001c0)='trusted\x00', 0x0, 0x0, 0x0, r1) r2 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='vmnet1*/user\x00', r1) r3 = request_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f00000002c0)='syz', 0xfffffffffffffffc) add_key(&(0x7f00000001c0)='trusted\x00', 0x0, 0x0, 0x0, r3) keyctl$link(0x8, r2, r3) 23:03:18 executing program 3 (fault-call:7 fault-nth:49): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:18 executing program 5: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000600)={'sha3-224\x00'}}) r2 = semget$private(0x0, 0x8, 0x0) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000600)=""/4096) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x4, 0x101, 0x24, 0x0]) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r3, r4}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000600)={'sha3-224\x00'}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r4, ':chain\x00'}) r5 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f00000000c0)) 23:03:18 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e21, 0xfffffff9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, {0xa, 0x4e24, 0x0, @mcast1, 0xf07}, 0x23, [0x81, 0x6, 0x6, 0x8, 0xffffffff, 0x6, 0x9, 0xa71e]}, 0x5c) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') sendto$inet(r3, &(0x7f0000000040)="faf41d0a9031293dd3e22405367c", 0x20f, 0x2000, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x80, 0x80440) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000280)={0x2, 0x0, 0x1007, 0x469c, 0x7, {0x9df}}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/131) [ 1598.550875] SyS_clone+0x37/0x50 [ 1598.554236] ? sys_vfork+0x30/0x30 [ 1598.557790] do_syscall_64+0x1e8/0x640 [ 1598.561687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1598.566542] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1598.571732] RIP: 0033:0x45a6f9 [ 1598.574926] RSP: 002b:00007fd833285c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1598.582646] RAX: ffffffffffffffda RBX: 00007fd833285c90 RCX: 000000000045a6f9 [ 1598.589929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 23:03:19 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1598.597214] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1598.604498] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8332866d4 [ 1598.611779] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000005 23:03:19 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) [ 1598.663021] FAULT_INJECTION: forcing a failure. [ 1598.663021] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.682993] CPU: 1 PID: 1549 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1598.690848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1598.690854] Call Trace: [ 1598.690869] dump_stack+0x142/0x197 [ 1598.690886] should_fail.cold+0x10f/0x159 [ 1598.690903] should_failslab+0xdb/0x130 [ 1598.690914] kmem_cache_alloc_trace+0x2e9/0x790 [ 1598.690923] ? kmem_cache_alloc+0x611/0x780 [ 1598.691013] copy_pid_ns+0x1f5/0xa50 [ 1598.691032] create_new_namespaces+0x267/0x720 [ 1598.732114] copy_namespaces+0x284/0x310 [ 1598.736193] copy_process.part.0+0x2603/0x6a70 [ 1598.740794] ? __rcu_read_unlock+0x7c/0x170 [ 1598.745156] ? proc_fail_nth_write+0x7d/0x180 [ 1598.749664] ? proc_cwd_link+0x1b0/0x1b0 [ 1598.753746] ? __cleanup_sighand+0x50/0x50 [ 1598.757995] ? lock_downgrade+0x740/0x740 [ 1598.762153] _do_fork+0x19e/0xce0 [ 1598.762168] ? fork_idle+0x280/0x280 [ 1598.762181] ? __f_unlock_pos+0xd/0x20 [ 1598.773222] ? fput+0xd4/0x150 [ 1598.776423] ? SyS_write+0x15e/0x230 [ 1598.780166] SyS_clone+0x37/0x50 [ 1598.783539] ? sys_vfork+0x30/0x30 [ 1598.787104] do_syscall_64+0x1e8/0x640 [ 1598.791004] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1598.795861] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1598.801057] RIP: 0033:0x45a6f9 [ 1598.804240] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1598.811945] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1598.811950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1598.811954] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1598.811958] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1598.811962] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:19 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002800)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000002840)={0x0, 0xfffffffd, 0xf8c, 0x6}, 0x10) r1 = memfd_create(&(0x7f0000000140)='\x00\xf3@\xa8\xab\xf3a\x97\xc1\xff\\1\x1a}\x05E\xc2\x18h.\x1c\xcaW\x9f\xe4\xf2\bV\x1b\xeeF{\t\xbd\x18\x99\xb5%\x02\x7f\xc0\xda\x05\x01\xc4Z\xc5q=\xa63c\x89*\xadr\x1b\xdfi?H9a\xe8\xde\xb9\xaa\x84\xaf\xfe@\\\x06+\xbbkng\x91\\fH-\rCi#(v#r\xa8\xc1\x17\x8fgR\xb5\xa4Rj\xab\"A\x1d\xc3\xf1|\xa3\xcf\xde\x93\x86\xf5=%\x04\xe6\xbcL\'\xd2n\xf0\xdef@\xff\v\xcb9\xd4C\xe9\xec\x9e\xfc\xfd\x1b\x1d3\xe2tJM0\'\x82o\x99\x16\x88\xe2\x89-\"h!\xc4J\xcb\x103\xc6\xb4w\xc6\xd2\x15z\xef?\xb8l[\xd5\x881\x1c\xa3\x13d6\xc5\xd8w\xc0\x0e\bH\x05\xf8K\x87\x14\x11\x87\xb6\x8e+\xbct\xc6$\x88\x82\x82\x85\x96\xb5\xae\x88\xd2\xb3\xd9J]\xb6\xe0\x00.,\xb2\x17\xday\xe8\xbf%\xf8.\x19\xdb\x81\x97]\xb1\xcc\xdf\x05', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ppoll(0x0, 0xfffffffffffffe5c, 0x0, &(0x7f00000000c0)={0x800000}, 0xffffff85) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4800) vmsplice(r2, &(0x7f00000019c0)=[{&(0x7f0000000380)="4d3c36f26afc65d2050ca788a0f8b3278da43b37b933ab2efc9d14ff06188c23540ba73459fd3849320d76a600459a99cc43b5db8361eaea1da2b0c8200ff911f99b65042c3133f1c8ed6af31880dab635ca72f106c64312376a1b7fca8e760c431ec877f5177bc2e9daaa10d62086fb3ed47d20fa292f087fe6e39937a02ad97e6d097e32cce867f84ef75ed5a1641ca90e688dc370004c273c36eb93e4d6ee0e04f0f63348d62d193c3658eb800e30999f4a2ff96edadced7f2dc3193246ae6a2349bb61f2cd74b4972e7896ce1645cf6d2228567cca51ac20aa023375c9ef0221eb32727b5dfb57fb97", 0xeb}, {&(0x7f0000000480)="2c13540bebac4a8180be5ffd444869dd89ed196b221d8c9fd0c2c6e07b5f86ea0002b275c8b63fb3f64225c1e3fe9a7ee7c7911bfb69cd172c382d64820e5d2a5a903178baf3df940262d34893e730f66678c470d33db3e73898e6736afee62de8e106791cbc6ad8", 0x68}, {&(0x7f0000000500)="26254bfb", 0x4}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000540)="fa1654fa0be725ead3b029de6924c9df1ddf41f05d0a9244fa620c94d074b3a5b53d2fa69b7ace4700bd6df85a7c1dad68c78fa79ca8ca7aab43177d5400fedd97b737d6186d32cd7f147eea8ec50f4ca1009e6c68b1e712de9b67481453535a388faa140ebe95a41e713579ff842c5a3667a3ee064fc421bbb15f248787f60fc7d76c174bf5", 0x86}, {&(0x7f0000000600)="afd42c184c38a5f2efbd4c7bd0e63225f3d4003829478d38eb6f337ccf537c040550aecc5ca3e155eab13674a996ed4276ec43d5126505b66cf37ba9f260186646704270f61f26c3ad7c22fa36a5d420c300e7fa78eb2d6be2cc03da6c69fe41986b965890c882913cb848d4de79589a67cd1b18e43d9ddb73cc4335f2bf783493a818f2e212da48f8e7e6bff506b296033b77b80ca14ac74d05780e9a69636b94d7a3f49dcc65746ae4935cbb27de8580accbf374aebfce1a45ad217ef09ed767524fc8bd", 0xc5}, {&(0x7f0000001800)="c3ea6d233f905ce6708644b65c3dc42ca9117d719ee6cb3b83d3da88efeff89f0c29cdc121fa2e2958513f442de9df4005172dcf9866e54353d3c4e996f2f7d8c666559d1b255c4958d3810a4e7a3a8f6eb6cbfb273c2a386532d7c21b919d50eb8ec8f969e951a4f0a43eb456d51b2df25a050c5c9f0d9b5fb98ec691e55212ea766b02854e05526d012c780f4d4722ba06a963870d6880c5df4a541a43514e31a736c76fe83f011db371cdeb5caa356e749cd143e784d71e9b57e94c89896591c5c81ca315d75d7605f7", 0xcb}, {&(0x7f0000000700)="67c4a8ea21b9e5c48a8132359738832117b2a1b9d80577db6504a7aeb2b35bbd7b6a24edbd7bcaebb89ea6740dc0118340155e9777de06d7a71e7bae3e08ec43d5171fbef654492a640c104ff069803b5aa46d996e8703e3e12d4818a44f3b94a536cfb3c5488f68fbec9750acbb62db", 0x70}, {&(0x7f0000002880)="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", 0x1000}, {&(0x7f0000001900)="698d40294901f42a21146f5c9e59ac016573e0af07455216b2cfcab1c79b212fc2fd707b501a3f185955ff562a3e7ff5682f7a80b683a94a2a0942f9eefdb500d249883279ef3232320606a8060c7c9c01344d6b519d5ca0eb0dbaf617fc627dcb8c1dcd5632ab2fc702f202a04aecd8cb669d0d1ed602dde19ace3059e29ecc548b8a9f3c0c51229f0d678c2c4ea9563f889f36ae286a996469ee372d6c9e8b", 0xa0}], 0xa, 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x10800, 0x9) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file1\x00') ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000100)=0x6edf) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='.//ile0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "5e945b34e8dd05f4a6077872cc868262"}, 0x11, 0x1) unlink(&(0x7f0000000080)='./file0\x00') 23:03:19 executing program 4 (fault-call:6 fault-nth:12): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:19 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000100)={0x0, {0x3, 0x9}}) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000040)={0x2, 0x0, {0x6, 0x5, 0x100b, 0x2, 0x5, 0x8, 0x2}}) 23:03:19 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x200, 0x40) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x1000) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1598.922004] FAULT_INJECTION: forcing a failure. [ 1598.922004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1598.933882] CPU: 0 PID: 1567 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 1598.941692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1598.951057] Call Trace: [ 1598.953666] dump_stack+0x142/0x197 [ 1598.957317] should_fail.cold+0x10f/0x159 [ 1598.961489] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1598.966176] ? ____cache_alloc_node+0x162/0x1d0 [ 1598.970864] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1598.975905] ? ____cache_alloc_node+0x162/0x1d0 [ 1598.980594] cache_grow_begin+0x80/0x400 [ 1598.984663] ____cache_alloc_node+0x17c/0x1d0 [ 1598.989165] kmem_cache_alloc+0x1f3/0x780 [ 1598.993325] ? do_raw_spin_unlock+0x16b/0x260 [ 1598.997838] copy_process.part.0+0x39d7/0x6a70 [ 1599.002575] ? save_trace+0x290/0x290 [ 1599.006387] ? proc_fail_nth_write+0x7d/0x180 [ 1599.010894] ? proc_cwd_link+0x1b0/0x1b0 [ 1599.014981] ? __cleanup_sighand+0x50/0x50 [ 1599.019223] ? lock_downgrade+0x740/0x740 [ 1599.023383] _do_fork+0x19e/0xce0 [ 1599.026846] ? fork_idle+0x280/0x280 [ 1599.030569] ? fput+0xd4/0x150 [ 1599.033769] ? SyS_write+0x15e/0x230 [ 1599.037500] SyS_clone+0x37/0x50 [ 1599.040871] ? sys_vfork+0x30/0x30 [ 1599.044423] do_syscall_64+0x1e8/0x640 [ 1599.048314] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1599.053174] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1599.058372] RIP: 0033:0x45a6f9 [ 1599.061571] RSP: 002b:00007fd833285c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 23:03:19 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) 23:03:19 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000d, 0x2010, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) socket$inet_udp(0x2, 0x2, 0x0) 23:03:19 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x40) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) [ 1599.069290] RAX: ffffffffffffffda RBX: 00007fd833285c90 RCX: 000000000045a6f9 [ 1599.076570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1599.083862] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1599.091141] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8332866d4 [ 1599.098442] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000005 23:03:19 executing program 3 (fault-call:7 fault-nth:50): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:19 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x149080, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:19 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000080)={0x20000000}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:03:19 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100)) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0xfffffffe, 0x8}}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xafe7, 0x400000) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000001c0)={r7, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ubi_ctrl\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000480)=0x10d) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000300)={r9, 0x687, 0x3}, &(0x7f0000000340)=0x8) r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r10, &(0x7f0000000180)='.//ile0\x00', r10, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f00000002c0)="b02c1196088cdc91b3f2d3deeea7464c", 0x10) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') open(&(0x7f0000000140)='.//ile0\x00', 0x1, 0x298) r11 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r11, &(0x7f0000000180)='.//ile0\x00', r11, &(0x7f00000007c0)='./file0/f.le.\x00') accept$nfc_llcp(r11, 0x0, &(0x7f0000000380)) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) 23:03:19 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/137) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) 23:03:19 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proccapa/capi1\nn\x06ci\x00', 0x20880, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e24, 0x401, @mcast1, 0x1f}}}, 0x90) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x8001003, 0x0, 0x6}) 23:03:19 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="b763e49216641bf3775f03595421", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="a01a00b93f", @ANYRES16=r2, @ANYBLOB="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"], 0x2a0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xfc230caf57295387, 0x0) splice(r0, &(0x7f0000000000)=0xfffffffffffff3ee, r3, &(0x7f0000000080)=0x4, 0x8, 0xdf9a5cf8970d31b2) 23:03:19 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1599.584444] FAULT_INJECTION: forcing a failure. [ 1599.584444] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.605246] CPU: 1 PID: 1612 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1599.613108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1599.622479] Call Trace: [ 1599.625088] dump_stack+0x142/0x197 [ 1599.628736] should_fail.cold+0x10f/0x159 [ 1599.632900] should_failslab+0xdb/0x130 [ 1599.636892] kmem_cache_alloc+0x2d7/0x780 [ 1599.641064] alloc_pid+0x5d/0xc70 [ 1599.644529] ? copy_thread_tls+0x3c8/0x7a0 [ 1599.648779] copy_process.part.0+0x272f/0x6a70 [ 1599.653377] ? proc_fail_nth_write+0x7d/0x180 [ 1599.657878] ? proc_cwd_link+0x1b0/0x1b0 [ 1599.661960] ? __cleanup_sighand+0x50/0x50 [ 1599.666209] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1599.670985] _do_fork+0x19e/0xce0 [ 1599.674443] ? fork_idle+0x280/0x280 [ 1599.678158] ? fput+0x10/0x150 [ 1599.681366] ? fput+0x16/0x150 [ 1599.684572] ? fput+0xd4/0x150 [ 1599.687778] ? SyS_write+0x15e/0x230 [ 1599.691501] SyS_clone+0x37/0x50 [ 1599.694873] ? sys_vfork+0x30/0x30 [ 1599.698417] do_syscall_64+0x1e8/0x640 [ 1599.702309] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1599.707163] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1599.712359] RIP: 0033:0x45a6f9 [ 1599.715548] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1599.723261] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 23:03:20 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r3) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000004", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 23:03:20 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x2, 'rose0\x00', {0x3}, 0x3}) [ 1599.730536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1599.737809] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1599.745084] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1599.752365] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:20 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x10020, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/96) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000), &(0x7f0000000180)=0x4) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x98) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ftruncate(r0, 0x20) ppoll(0x0, 0xbf, 0x0, &(0x7f0000000100), 0x8) 23:03:20 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000180)=0x60, 0xffffffffffffffb8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) prctl$PR_GET_KEEPCAPS(0x7) mincore(&(0x7f0000004000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/119) [ 1599.997721] audit: type=1400 audit(1575673400.400:574): avc: denied { map } for pid=1638 comm="syz-executor.0" path="socket:[214826]" dev="sockfs" ino=214826 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 23:03:20 executing program 3 (fault-call:7 fault-nth:51): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='\x1a\x7f\x0f\x00\b\x00\x00\x00\x00\x00\x00\xe1\x00', 0xa5a, 0x200000) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) fcntl$notify(r3, 0x402, 0x51) fsetxattr$smack_xattr_label(r2, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="1aad09705aaa7f0f000800000000a370c58beeba724fa8e55c4f5d6b046f3f46ecbce3344ae3874dab16b4c98b687e6005bb99c3aeb88a581cdd4baed36d5338"], 0xe, 0x1) 23:03:20 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:20 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0xf978, [0x8001, 0x7fff, 0x7fff, 0xe3ec, 0x5, 0x2], 0x7, 0xfd}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x4, [0x0, 0x5, 0xffffffe0, 0x3, 0x9, 0x2], 0x3f, 0x40}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x65ff, 0x3, 0x2, 0x7fffffff, 0x200, 0x7], 0x10, 0x80}, {0x8, [0x954, 0x9, 0x8, 0x8, 0x6, 0x7f], 0x3, 0x6}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r1 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:03:20 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioperm(0x9, 0xffffffff, 0x6) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000140)={0x0, 0x2}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:20 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, r3, 0xee5d8a7b0e5906ab, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) 23:03:20 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x20000, 0x0) setsockopt$inet_buf(r0, 0x0, 0x26, &(0x7f0000000200)="353a328d630d8f7e2136521e4287927193adc0654112b5790a80cdb3b3d858406c85defb10a855b6d698a440761c9f64a3d76e159257b248d7d087ef2d5ce9123279110b707e9a7211c04da07e9490d9afe2917a4602810bb4f0040a7b2f631cd2a35dd9d0005eef93e65701c08a52d101f9bc40c4ac3a4904a69f484d0193918fc07352749f", 0x86) r1 = open(&(0x7f0000000000)='./file0/f.le.\x00', 0x400, 0x20) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x101800) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0xe7) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000000c0)) 23:03:20 executing program 2: r0 = socket$unix(0x1, 0xcd9924800c2359da, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$int_in(r1, 0x0, &(0x7f0000000140)=0x80) r2 = syz_open_pts(0xffffffffffffffff, 0x100) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x5fd042, 0xe8) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r7, 0x101, 0x2, &(0x7f0000000080), 0x4) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x3c) ptrace$cont(0x18, r8, 0x0, 0x0) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r8, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x284, 0x11, 0x3, 0x100, 0x70bd27, 0x25dfdbfe, {0x5, 0x0, 0x7}, [@typed={0x8, 0x4, @uid=r5}, @generic="6912eb8ddeef0e2fe32b1064994bbe57870c78a4eb1d27d110b67e7819a63c4e8b8cef5234141de98b00635d91beceb5fcabd1baca7aa710efae92a5ffc7a382ae05dfebfd6cc64e9a59902b687b959de276e5900f42cf3f653ed49d5b4c1ff12c741c12188fb86c18db8eb4ef52d9a78aac7421bb8ed671a1e8cffc8f334ab10e24b11d3e65f7038dbbc82d83f76e8e447a3f3dd4e53018e8ae180529c43bfb", @typed={0x8, 0x3, @pid=r6}, @nested={0xdc, 0x1e, [@typed={0xd8, 0x7e, @binary="197ad76a1407981032e74f9dea006a917cc97ea44cf8293f3a6cfc3cfa8b718fb20e328a4a5f77c9a008a1562b544d63403d522db4334c10c786a601fb2de8fe147a3598e49caaccb8b149dc2d5dadfe3808b3b3fd47afa444e77f0ce1003ac438ec80d5e35c45bcc34f6dc1c6ed15e310042a761212f35a2ffe633f03b14448db87eaec5eb06c04bda9384071bebd141acff45281630d06354a8effd8231ca994d1dc1ba1c283bfd2b70ac58d0e746db0fc550c44aff05ab5ca70ae3cf20948f8971673ec6026e96347417091cabc3e55531e"}]}, @typed={0x8, 0x6f, @ipv4=@multicast1}, @typed={0x8, 0x79, @pid=0xffffffffffffffff}, @nested={0x74, 0x39, [@generic="849e15fafbcbe74eff17dc283b433dcb3605d6817fe103587d060c6ef8446b5cc92c122ac6c89ebb039f36368cbc90183c7e9fcf40585e2687924461a797a0c2540a52b3c88981f7e05833bf27c17d9fd105c39e5d2afb5d6b70aa28773c51", @typed={0x8, 0x17, @fd=r7}, @typed={0x8, 0x94, @pid=r8}]}, @generic="3a6b5dd3024bf2d9a4153ed80e8044bfb4b3afc0700e22492623ad011d81ae18b19acfb4337645309eb35d40d730bdfe5eefd5e507eb8b2f04da6f72f9dcc3b86514ac07f78dea6550c5ebedb9727fdb5949c757", @generic="a36520ba76ac77197ba650"]}, 0x284}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x40, 0x0) ioctl$PPPIOCSFLAGS(r9, 0x40047459, &(0x7f0000000200)=0x8100000) mincore(&(0x7f0000007000/0x1000)=nil, 0x1000, &(0x7f0000000080)=""/132) 23:03:20 executing program 1: setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000200)=0xcf, 0x4) r0 = open(&(0x7f0000000240)='./file0/f.le.\x00', 0xc002, 0x1d3) r1 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') write$rfkill(r3, &(0x7f00000001c0)={0xf6d8, 0xe, 0x3, 0xff, 0x4}, 0x8) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e20, 0x80000000, @empty, 0x3ff}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x3f4, @rand_addr="74e1f6c9e3ffec9b7a75a7214c60b858", 0x5}, @in6={0xa, 0x4e20, 0x7, @remote, 0x5}, @in6={0xa, 0x4e20, 0x80, @dev={0xfe, 0x80, [], 0x24}, 0x81}], 0x90) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000340)={0x0, @reserved}) sendto$inet(r2, &(0x7f0000000080)="d58b527c8f9bdfd224b959affe01c76a3244d382f1e4cf112142e9ab261afc978ad180a6b083e3064c11e7ef560cfbf1ddf661e784f562c7ebabee2a3c42d9772532d3fb3f215ef740b2a0159a5deb4ab1e6a20f0e4533090298347876dcf303d631d7e2e50b533b4306b86518c4d88b0c09cd2ef4cec123f44ea2ff6561648786fc315adc188858071d0c7659de9be5e85259c8", 0x94, 0x40, &(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000400)={0x0, 0xb19b28b}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000480)={r6, 0xfffffffc}, &(0x7f00000004c0)=0x8) r7 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername(r7, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r8, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000640)={0x73622a85, 0x1, 0x2}) fcntl$getownex(r8, 0x10, &(0x7f00000005c0)={0x0, 0x0}) ptrace$peeksig(0x4209, r9, &(0x7f0000000600)={0x101, 0x0, 0x7}, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 23:03:20 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x234}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x3c, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000001c0)={r5, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) write$apparmor_current(r1, &(0x7f0000000100)=@profile={'changeprofile ', '/dev/v4l-subdev#\x00'}, 0x1f) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x0, 0x208, 0x200, 0x210d, 0x6, 0x100, 0x8, r5}, 0x20) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) [ 1600.575142] FAULT_INJECTION: forcing a failure. [ 1600.575142] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.590927] CPU: 1 PID: 1674 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1600.598779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1600.608191] Call Trace: [ 1600.610797] dump_stack+0x142/0x197 [ 1600.614449] should_fail.cold+0x10f/0x159 [ 1600.618626] should_failslab+0xdb/0x130 23:03:21 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r3, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x1, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10000180) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, r8) r9 = geteuid() write$P9_RSTATu(r4, &(0x7f0000000200)={0x75, 0x7d, 0x1, {{0x0, 0x53, 0xffff, 0x9, {0x14, 0x0, 0x3}, 0x88a00000, 0x2, 0x8, 0x7fff, 0xc, ':nodevppp1(:', 0x7, 'TIPCv2\x00', 0x9, 'eth1%GPL,', 0x4, 'ppp1'}, 0xd, '\xf7-%em1cpuset?', 0xee00, r8, r9}}, 0x75) r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r10, &(0x7f0000000180)='.//ile0\x00', r10, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r10, 0xc0045540, &(0x7f0000000400)=0x3) [ 1600.622612] kmem_cache_alloc+0x2d7/0x780 [ 1600.626773] ? retire_userns_sysctls+0x90/0x90 [ 1600.631369] ? __sanitizer_cov_trace_pc+0x4e/0x60 [ 1600.636225] copy_pid_ns+0x1af/0xa50 [ 1600.639955] create_new_namespaces+0x267/0x720 [ 1600.644556] copy_namespaces+0x284/0x310 [ 1600.648633] copy_process.part.0+0x2603/0x6a70 [ 1600.653233] ? trace_hardirqs_on_caller+0x400/0x590 [ 1600.658266] ? __cleanup_sighand+0x50/0x50 [ 1600.662522] _do_fork+0x19e/0xce0 [ 1600.665989] ? fork_idle+0x280/0x280 [ 1600.669717] ? fput+0xd4/0x150 [ 1600.672920] ? SyS_write+0x15e/0x230 [ 1600.676644] SyS_clone+0x37/0x50 [ 1600.680178] ? sys_vfork+0x30/0x30 [ 1600.683731] do_syscall_64+0x1e8/0x640 [ 1600.687624] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1600.692484] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1600.697682] RIP: 0033:0x45a6f9 [ 1600.700874] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1600.708594] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1600.715878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1600.723194] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1600.730477] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1600.737764] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:21 executing program 3 (fault-call:7 fault-nth:52): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:21 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) delete_module(&(0x7f00000002c0)='system\\GPL[[em1ppp1\x00', 0x4c23de4036e1b2fe) lsetxattr$security_evm(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.evm\x00', &(0x7f00000004c0)=@sha1={0x1, "9c011df88d0e4053d26be8b5bd2db46cff65982c"}, 0x15, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/fscreate\x00', 0x2, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') close(0xffffffffffffffff) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x9000}, @val={0x2, 0x0, 0x6, 0xfff, 0x8, 0x7}, @llc={@llc={0x0, 0x8e, "12", "cd91343d0522d623aabbcea9bf575880438da9c6beeead2a36f7d425294491237cc5255d8b6944d2b4c047ee02ae6d5f054545afeace3bf21e433ef838a6a1f26efd2ebdcd39bdbcd41ca5f5661a44ed67e762ddfd96d86b837ddf9bfac06faff46327673fcae129198145be00475d44a797be19ffed4b23c7d2555dc6d2b49c02e881d5c7d6cab2139a9a519f2f131120b5d9c8950b983234d1ec1cc0f6286668e184e544c98588df1fa891ce40c4"}}}, 0xc0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={r5, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r6, &(0x7f0000000240)=0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:21 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') bind$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x7611c2, 0x1cc2bf278cfc3ae0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$selinux_create(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656de1ffffff626a65637447cbd1f66d6573675f657865635f743a73302075d9636f6e66696e65642030303030303001ac3030303030303030303635353336202e2f62758241d9879a7e4eb9e4ac710186243d39b8a2c418cf37daada61627ed"], 0x48) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:21 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x9) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0xc, {0xff, 0x80, 0x4, 0x9}, {0x401, 0x3ff, 0xff, 0x9}, {0x3, 0x401}}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000001c0)=0xc) 23:03:21 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0xfffffffffffffe4a, 0x0, &(0x7f0000000140), 0xfffffd16) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/244) 23:03:21 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x0, 0x7, 0x0, 0x7fffffff, 0x0, [{0x3f, 0x9, 0x7f, [], 0x6}, {0x6, 0x80, 0x2b}, {0x8, 0x2, 0x1, [], 0x3f}, {0x3, 0xff, 0x20, [], 0x40}, {0x5, 0x20, 0x40, [], 0x80}, {0x20, 0x1, 0x6, [], 0x3}, {0x0, 0x9, 0x1, [], 0xdf}, {0x1, 0xff, 0x0, [], 0xe9}, {0x0, 0x0, 0x79, [], 0x1}, {0x0, 0xe1, 0x3f, [], 0x7f}, {0x9, 0x18, 0xff, [], 0x3}, {0x81, 0x40, 0xf5, [], 0x4}, {0x80, 0x8, 0x3, [], 0x3}, {0xff, 0x40, 0x6, [], 0x38}, {0x0, 0xe1, 0x2a}, {0xf0, 0xfc, 0x7f, [], 0x4}, {0xdf, 0x6, 0x5, [], 0x3}, {0x9, 0x0, 0x5, [], 0x8}, {0x5, 0x7, 0x3}, {0x1, 0x1, 0x1f, [], 0x1}, {0x7, 0xff, 0x0, [], 0x9}, {0x1f, 0x40, 0x2, [], 0x6}, {0x92, 0x5, 0x1, [], 0x4}, {0x9, 0x2, 0x7c, [], 0x1}]}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = socket(0x10, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000200)={0xffffffffffffffff, 0x2a, 0x1, "a5bc32eefa573d11d490240f8c8f9dcb64c27b6f31a81240a8f8a6af6c7af5d4fadef5ced0633d0d877eff82b3f2789120fc6867d3e3aec0ae10ddc5cf91c891b71aaf4f122f0f6b5a65684bd196514f361c6e16dd46aa72fd68dd"}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, r4) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x0, 0x1, 0x7}}, 0x14) 23:03:21 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') sendmsg$alg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="033dab79a6c80afd3d787b077567ad59e92fd207eaa5016d76fd1224a24ec2d0547f9f431bb9eb15e9197aaaeb8b00462333e8b18418e86956fca2755175e8b38302b1c972d0514fffa8d4dfeadf8a70f8dc2908", 0x54}, {&(0x7f0000000100)="8ec0c57b6e4e0f1ea8144a41b7e0a7980fa5e0e2da98867a4f8318fc3d8f1c573a12ef5c8c948c7445d64430a86907eeb6e8fde566048819847d0f2f143dd4a26deeb54442a8fb4ba277a590e37b157718e42d602119d40e7ceae09def2465d7cd5842f9aa68acb0e8c67263eb3d7011abf9f69b3d845a34248e717c459e63a8877448068fddb5d98fe9f88dd83c889b28e6ee62967230063b6d14eab1becdf55120eba571ca75f660fcd2bc0f16845fe7eadc2d9b549e4718ccac4ba8337080cf030304d34e237150", 0xc9}, {&(0x7f0000000200)="138a829f6e4e0b5a54100540a625bc647163c2585d506f688eeb54b8a23b6432e45d3982e774de46f5ef1aa5d81b181cadf6c7120ecf03405abf398b07341f2afe3a5ca0a55b31750b1d211a06292ddea93bfe12b4a61d50f9ee6dcf5217b547658085a73d56b1d3e43ce0948d25047914ad5254978fa15e957b385588ebe63b6331247d363589c726c8a906ace700b703c86c8cad895882466d54025b2f4501c580b4d774ba62a057cac630fb02b2cb0f73dddc564f863c83c76273f75a3ed562", 0xc1}, {&(0x7f0000000300)="2b3cf0e176720ea767939dca3119a41217359e244bff64eb80484d161744dbb0034d004f7142d502fb0b58fef88d569eccc663afbfda754cd855db98b5be75c84c464f81d9c2a90bd113681863ca2bd169c3a6e27229aa1649eb48ce8115da89bbcef1a9cedba34a6bb20a3bd903b0d1e6dd33d8cdf3686fa815c792c37600c44f864b0bb6c26d927437062614a43cc917a26d561759e0f16e86c971fa622713fcce21c73b84eeb3f3850067cc7d68effe3af9272459", 0xb6}], 0x4, &(0x7f0000000400)=[@iv={0xe8, 0x117, 0x2, 0xce, "ece5ffa253406381497405a84d6414ef8584fbb33dfbb1f81535e7521bf728b798aa617b328d6c321acce7a486732c8391e2d7efea6317ee35e33f0c0640325b35166193c55334ec410be0e6f0078a52133654b1a4e180338971bdb01e0d2481454790bcf74595bf3e200de0d661e53c3a7d1ba9094547abb81df3bec86d6f433c699f0297c361a133190f9ada4ad220361966fd3c954dde5f8e9b39f5caa04155eb6653b857263d55a22fe5845dd5fa8c4e0b2caaa773627344d203463d6f1a525d6398bcc30acf2d6b3b803c54"}], 0xe8, 0x80}, 0x20050) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)) r2 = open(&(0x7f0000000080)='.//ile0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4110000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000e224045aaa0b20bc76598d66c61b4edc952e4f143ca46a41af86ae88f5f0094d2671b1a1183e5ea25c24323ddd591b95920bbe1804b08d72423935f1aa8b2e86c453a6a60c49b8be4290690deb030c94d547fadd7b9950124fdf3a320e", @ANYRES16=r3, @ANYBLOB="20002dbd7000fedbdf25010000000000000008410000001c0018000000406574683a7465616d5f736c6176655f3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x2014800}, 0x1080) 23:03:21 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000040)=0x44) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:21 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x6800, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x212800, 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='security.apparmor\x00', &(0x7f0000000080)='!-keyring{nodeveth0cgroup}-ppp0\x00', 0x20, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c87c96518d4059b6c3b8800dd557e184cbac7bd062ff3e792", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x8, 0x28000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 23:03:21 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000440)='/dev/snd/pcmC#D#c\x00', 0x7, 0x200) memfd_create(&(0x7f0000000780)='\x00', 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@mcast1, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000580)=0xe8) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000040)='proc^user\x00', &(0x7f0000000080)='+\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='&,-user,vmnet1,keyring\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='${[[user\x00', &(0x7f0000000280)='keyringselinux]cpusetkeyringppp0#-$wlan1:)&md5sumproc\x00', &(0x7f00000002c0)='\x00'], &(0x7f0000000400)=[&(0x7f0000000380)='em0\x00', &(0x7f00000003c0)='.proc\\\x00'], 0x1800) 23:03:21 executing program 5: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfffffffffffffff8, 0x800) r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) 23:03:21 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x200200000000}, 0x8, 0x80000) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, r6) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='.//ile0\x00', &(0x7f0000000240)='fuseblk\x00', 0x1160043, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x3}}, {@allow_other='allow_other'}], [{@context={'context', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute'}}]}}) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r7, &(0x7f0000000180)='.//ile0\x00', r7, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000140)=0x8, 0x4) [ 1601.558837] FAULT_INJECTION: forcing a failure. [ 1601.558837] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1601.612755] CPU: 0 PID: 1723 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1601.620712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1601.630079] Call Trace: [ 1601.632692] dump_stack+0x142/0x197 [ 1601.636344] should_fail.cold+0x10f/0x159 [ 1601.640509] ? __might_sleep+0x93/0xb0 [ 1601.644413] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1601.649101] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1601.654145] alloc_pages_current+0xec/0x1e0 [ 1601.658484] __get_free_pages+0xf/0x40 [ 1601.662387] get_zeroed_page+0x11/0x20 [ 1601.666290] mount_fs+0x1cc/0x2a1 [ 1601.669760] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1601.674275] kern_mount_data+0x56/0xc0 [ 1601.678178] pid_ns_prepare_proc+0x1e/0x90 [ 1601.682422] alloc_pid+0x9f0/0xc70 [ 1601.686062] copy_process.part.0+0x272f/0x6a70 [ 1601.690633] ? find_held_lock+0x35/0x130 [ 1601.694697] ? trace_hardirqs_on+0x10/0x10 [ 1601.698970] ? save_trace+0x290/0x290 [ 1601.702761] ? lock_downgrade+0x740/0x740 [ 1601.706907] ? __cleanup_sighand+0x50/0x50 [ 1601.711211] ? _raw_spin_unlock_irq+0x28/0x90 [ 1601.715699] _do_fork+0x19e/0xce0 [ 1601.719153] ? finish_task_switch+0x14d/0x650 [ 1601.723662] ? fork_idle+0x280/0x280 [ 1601.727368] ? __schedule+0x7c0/0x1cd0 [ 1601.731253] ? firmware_map_remove+0x196/0x196 [ 1601.735835] SyS_clone+0x37/0x50 [ 1601.739186] ? sys_vfork+0x30/0x30 [ 1601.742714] do_syscall_64+0x1e8/0x640 [ 1601.746587] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1601.751523] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1601.756708] RIP: 0033:0x45a6f9 [ 1601.759884] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1601.767588] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1601.774848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1601.782105] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1601.789365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1601.796618] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:22 executing program 3 (fault-call:7 fault-nth:53): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:22 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xe8, 0xc44301) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0xfb, 0x8}}) 23:03:22 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:03:22 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfdf}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:22 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r4}}, 0x18) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:22 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:22 executing program 5: accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x1ff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x6, 0x6, 0x3, 0xfffff8d4, 0x17, 0x80, 0x8, 0x0, 0x9, 0x8e2, 0x1ff, 0x971f}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000100)={0x8, 0x4000}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) 23:03:22 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0) 23:03:22 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x145043, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1602.408880] FAULT_INJECTION: forcing a failure. [ 1602.408880] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:03:22 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getxattr(&(0x7f0000000100)='./file0/f.le.\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="73797374656d2ae0656d3065746830006f0b89847001ab8f27153ed1a11d30591301975501dd15cee02c4c490e74d400d11fd40699aa2d0782cdf9ecc928d594d85d96d1"], &(0x7f0000000280)=""/144, 0x90) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x8, 0x4) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x146000) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x41, 0x1ff]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x80) renameat(r1, &(0x7f00000000c0)='./file0/f.le.\x00', r3, &(0x7f0000000200)='./file0/f.le.\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0xffffffffffffff76) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) [ 1602.450821] CPU: 1 PID: 1769 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1602.458684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1602.463503] audit: type=1800 audit(1575673402.860:575): pid=1782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=17462 res=0 [ 1602.468049] Call Trace: [ 1602.468070] dump_stack+0x142/0x197 [ 1602.468089] should_fail.cold+0x10f/0x159 23:03:22 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\x00*`]\x86%\x96\xbf\xa7dl\xce\x1dus\x1f\xa1F\xdaRN\x93\x82\x16\x8azif\xee\"\x977\xd1O=\x8b\xd4\xa4\xd5:l\xe5\xf96K2 \x10\xb6\xc2\xc5\x15\'\x919\xa3\xc9\xa1\xa1\"+\x8f?\xec\xbcAn\x9bJx\x12\x8c\x82g\xb0?\x00\x804\xdd\xd15\x1f\xaf^\xe8G\x9bR|p\xfe}m\xf7\xa3[\xc0\x15\xdd\x85\xdfX\x1f\x00\xefe\x1d^\x10\x90\x93\x1c\xa2\xd4\xeen\xe6\x1f\x01V\xbe\xcf\xf0\xc6\x9a\xd9l6\xbb0a\x90\xc5\x13]\xf2\x92\xc760\xf2\xc2W\xeb\xdc\x06\xc5|\xa9\x00\b~P=H\x8e\x12{\x12\f\xd81O\xd7\x9bk\xc8s\x9dY\x84\xa7', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x1, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0xee, 0x7, 0xc25}) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) [ 1602.468099] ? __might_sleep+0x93/0xb0 [ 1602.468114] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1602.509742] ? check_preemption_disabled+0x3c/0x250 [ 1602.514776] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1602.519808] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1602.520523] audit: type=1800 audit(1575673402.860:576): pid=1782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=17462 res=0 23:03:22 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000300)=""/110) [ 1602.525267] ? __alloc_pages_nodemask+0x639/0x7a0 [ 1602.525283] alloc_pages_current+0xec/0x1e0 [ 1602.525296] __get_free_pages+0xf/0x40 [ 1602.561233] get_zeroed_page+0x11/0x20 [ 1602.565132] selinux_sb_copy_data+0x2a/0x390 [ 1602.569568] security_sb_copy_data+0x75/0xb0 [ 1602.573993] mount_fs+0x1ec/0x2a1 [ 1602.577462] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1602.581969] ? rcu_read_lock_sched_held+0x110/0x130 [ 1602.587001] kern_mount_data+0x56/0xc0 [ 1602.590909] pid_ns_prepare_proc+0x1e/0x90 [ 1602.595160] alloc_pid+0x9f0/0xc70 [ 1602.598723] copy_process.part.0+0x272f/0x6a70 [ 1602.603322] ? proc_fail_nth_write+0x7d/0x180 [ 1602.607833] ? proc_cwd_link+0x1b0/0x1b0 [ 1602.611919] ? __cleanup_sighand+0x50/0x50 [ 1602.616171] ? lock_downgrade+0x740/0x740 [ 1602.620339] _do_fork+0x19e/0xce0 [ 1602.623814] ? fork_idle+0x280/0x280 [ 1602.627546] ? fput+0xd4/0x150 [ 1602.630750] ? SyS_write+0x15e/0x230 [ 1602.634478] SyS_clone+0x37/0x50 [ 1602.637857] ? sys_vfork+0x30/0x30 [ 1602.641416] do_syscall_64+0x1e8/0x640 [ 1602.645320] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1602.650187] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1602.655393] RIP: 0033:0x45a6f9 [ 1602.658597] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1602.666322] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1602.673611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1602.680888] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1602.688176] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1602.695460] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:23 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x6, 0x25, 0x17, 0x12, 0x3, 0x1ff, 0x1, 0x63, 0xffffffffffffffff}}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:23 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x100400, 0x2c) socket$inet(0x2, 0x3, 0x9) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="2d0000000400000000000000000000000300000000000000f73e0000000000000561871480291d5ed7dc888f1466a69a00"/60], 0x2d) r1 = request_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f00000002c0)='syz', 0xfffffffffffffffc) add_key(&(0x7f00000001c0)='trusted\x00', 0x0, 0x0, 0x0, r1) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="6af8559aa0f1bd100f46dc9916b0bb03490762a6daa0c17a0ed2c2a8fd9bc776f3b78e62b2152d18264d9f12f733ff4ba8a49548732dd76352c284dde0a851d53768ed35fefaf8093d8c9deb54f44777174d4a22dd0391e9ceb50fd1bff3bb704c4580a0b0e147e828d7bbb34a7d97d43a8a4d3f393db72a333ae842802c3d412a49", 0x82, r1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140)={r2, 0x1000, 0xcd}, &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'ghash-clmulni\x00'}}, &(0x7f0000000800)="1ea7a00c8f4019411de6e8b97ac21af10ad45d1b6027c95e62556f741033526a3e3339fe96af1a8f5d903a8494ffd47d2bda82b79d112376ad8312b73e1db61b5b9ddbecad8c44e091f2a9e28d88a0e5f49d424e7b026565672363276849a7e9af4c94768e4179d3ddf97e57d6fca730b01134a86af980ac49fcd75cb53e718055bd29cca21b319b8d801119ea99325d09d8f4148c57a96aed4723b74a89e85838213dfcb1cf622a910f7f67bfe0bb28b5400e3d1025ea1432da3379db660a2923f469e73501571735d24a95328a272831096e8fd2223edd1f5d61bafb251a84cc3994069b85d0d4711d35da7461af259ffe595f7ffbb813e685124f47528b947e70032d8564c44faf5abcb99f6131da10e4382954dad12eea979c4dbd5f12d2e314d199dae7d41201e12f36462460772469864e69398abde964a0c0bd2f4497feb87453709f542605bfe0c61c90be83e9fa80be217728bd8d9bcfc4437d2fc7c74ff429e892ff126242b55af1b2306736209828484ea59905d85acb27cffef324ff17e0cf6e51dad4381b605f38c8863a86536e69d898bb135c7691555cb271948ec5e92ef8c14de307192a00f3482a38ff183631198f539e3aea008aa51a2c7e2a573018c96a087aedefbceff765a09b00af14b60ba0a6609237970728c393eff8800fa18c4a0db46a30f9d771bdc7c5e5cc545ebf9b2d78dfc5fa491ac4b7d4ff2e26f15ba6524ac35122d0d799f4f3fb3b05bf6330732b32a404d694b1c6a02e544e6085a889d19e55c2cfb29945f1413b4318ab8301826b57193877439c1af03cc39c78a214b630efcd2580ab818aceae992637a7dea4e86bfe4b1032dc2a890710ff3ab946a3755549865d6e3a9b246a5450b2f06167d2b7c58e431c6e9b701f2ed762dd032a405deecafc4c2acda6b6b5f1f2e4fe5de7f05a7d16542424157301fbaeb82aadbd3f031af641a70fd7dd41eb945d2871472f8274a7ddf876cc75a777aaed6c4c1c92c0fd31d6ca3db2d2c12a9876b304514aa4fa6078ba5dc4cd5130e8a62e2772ac21313a85cd6ce40d0d664af63854d7227b82bfc9f6e802e27e24c1e92c3df74685da05437af8e33c3e4bdc6fd92d7e3c2c89da00bce95de27107177a664675c8d68efebce2cf0ebe26709e62c8e7325950e8ea36667f8548d7c8e980f51fb846cc7ae79ce29a734fbbbf558c8999c9803720b1152af18efc33fdea86563961a10a5f7ceb42c162b25cead169a3dd40c313a89930524f6cbe453c24c4f2439608feeaeeba41d721bf89676120c768ca001a1e0f934ae341f927544619eabe3eae0cea3b993d1fa5d49479236c46c57c8183814abd09f70301c5d4eba6c06b26a12035a40e14190ef4bdf61d44f245a6e8ba90fc25faca5493a22f7b734aec20b1a9ddc3e7b241b132372ac8a3ba8a9d03017ee4ab1a5b31cd3c052898da406e02226fcbea01f501391398b314886727f8d12af431c1a44f145507b6e4eac71c3a2b24ee7a9cbd9872997ca7bedbf97d0dd0ff5191acdb4f1d5fb2bbab1732182b30c1a5b1fc4b4cdaa6976317f8d4e4b290e73f9f71e2c999411666a8d74ceaeb510ebaa508252d94bb962e5db289dd65779e10428c7115b013e1935a3b42320292c542df21938bb0d6f1bf26475e9baf41752d8bd53113e55c020a75d6f75898259aca911e1991da1f5efc24bed3293cf91d1c18c4c727b5d3cf336910bc1bc608e1ef84582d61585178c54d0d9223eb2f645213a985383ccc20d4216e32a295b3b6dc26f2a081098594147ad132dc7a2fbf31e70bc7b4b32de5e3f25077caa11ef8c08bbbf23973b9d0635009216ff177ca4dc460ce6ba9b1be852060a4fae8f60300bf6f7477113eee7d69e93c11c1358b9ca9d8608beaa28123d5e54da59f3f0a841efd90e85d84aaa9f300ee5594aeef8b9c99ff2ecaff68809054f01b6a8c952ab997541e07e51d863fd5558817752b0f768f65079f9bd31195a32851b4f3765bf3119a2f3b21b2445b426d9b83ea7dfca85ea7dc6378bf71b545ffa46829291210264980cea4b18e930fa0788fb9d6b0f483ac15c5d80ae4525d1f74349c75095fd92679839fa438d647507f2e6fa11142d4c5eca794763cb891a49b21d51e1f93eacb44c2a42d409b893932bcb4c2492709339aa85ecbaeff390fe0e9656b596f07b19b492c51522ab8ccf94d2268b5c982bef3fe47a47623bb2fc390261bd961dd6fc3289fce027865078db478f228fb89c3071940ba61c8560aedba9ef8734eea8993c2156b25dd608351a71e23b59f7a2f5d2462ac4283346ef178037ada8d929b384262b37c08f87ce9ec9481c7ec5ee669740e9b017006f290b33b64a6ab3427d7a11b4391ec8e213521b3440807ce61b88eeddc5e5b8e5b99cb44902ef8f3aa8282fadcd76a892ab2344f69c884f2efe3c1e50a5a66dffa8bc99d737cb819b041d15c076896dc3b84ecd2adb795d0eed78d6433ff73197a5312f4b18132d65f75c398549c83162c53dd9703a9f4c4feb1a0c5afa31793e1d158577e5467419b0eba065bf06cd2634bd90782831d362e666f185fbb62e7d493012f12ed0ef7e41644770df183b6de1bf3f5782e83e616ac8f4873ef70aa079d406a55181a9b0acd8dae553532fa33841d7ad0e07e169f3cc1a8f95e75542b246fa0deaf7191b3a216f4c5fd4ba5a45f6842503e3b5bfd45e901e8d3ddadf265dfef95403660d6f7a8628c05ebac17b3c53fd70d7f0bbf127a223e19773933c0752b38630597b7be3c3896cf5e4ae3ef48bbd02dc8f8227581ea7a6d2b5ba4943fca7a225fd811f6c8de6c4a30bb671101f5adea0b1e214fdca46e9c0cbe2df077622da0c930ff2af83fa88e42e1b4fd3e8ff159dfdab2c2ee830a09e183bb947d07a914cf3d45cd55525342b3b70b708a2f0773d7145661e7c5ebae4e8b4697e84f11e15d43b0b10614513602b2660302a34054c1d3e48babbab3c582285200f111140c194e2ad851bd880f79a9ddc45102b47d224e36b32c595d546e42db1dea89d340e72fb2e86912fa2317424d7946d755a8312f84b2eabb6be9b87b693485841bb21baa1f25e4b8036039e43aa6ddd11790cafa68f03862c3545cf59ad252beb226f8089f8227e5481c7afa8adbde98e1d7dd35f5db21e97a1a04cc3c5bf3c2955dbf633064d734678365a8449128c09166814642850564e0dd50224c1b4c659b581e33f6c26b20365a2a2df44fa4bc6a356f2be88d17d59d041c9d7b8042cebde94d8a5c35bccb5a75930b35efe4e6cf2d07bf2006b360acba21ad43d50efeacc08c885527bdee2d818a890f336a9507a6b14c1b3d163914c44f7c0579f8b324732a2149a724ff5736dcaf7b2f97f5bb08d017ffcb9d00619fa35a7b361bd0571cbebd5df1ba8749c926d18eb4246c0df07616962100c9cd5c0aebd64fa858c564a01646c929f8adef9f97975c2afeb39e983257af6e58a8740b40827a1033ea322cd5c7f59f8e98f64f8f7ab84d239e313c9845602a2043bd70a51efa7bbd47526991d80cd0e7e6c6c0a82ca49e4401d0b8bca91a65c0084430570d2380be01c8c6573eeae8916acc8968d6115b24721b64de4570e5aa3aad935eed697bdc2070cd26e925c6aea4fc4e008dc33b12fc86e26fffde20373986d0389f75ba5e092f0618b5e9e51faadd7589be44cabbe8b7deaed832cc2b8a3940b87a87969735d0d6b176147dbfc856a604794309e90d044ddce3382a2f0938ba9744f93641098b4616e5551ef1421557afcb066523442e30151e44b6a53597546d697603354d6a3427c79c3551ffcf0e71efd8f2e8ad863884a1f284dcbd2f17f298886d3e0bccedc30aa86df768211ee905d47dc4b00c816388f34efce206382aac644120638661ee80ae7224445a00be1f65d2d1657982ed43c3c73bd09f4229ddb229baf61c7bd8e28dd3692041296afdebf4984fcbc22f48764cabe6c6c1243b28d00e4b6b2303606d552dc6b4a71e3acc025cb4fea6c2020b0e41c9a8c98a5c8086d16fbbea13d4d71387ba9e2e14c9c8354cc58b76489eba4dc6fcfaffc2a50ba9661407ebd47044530286b56635071e4400cda4fbbe3f8ee91bc3e4f42284bb12c6d35a8faa11a00384a49c44ef8728df066e104a671c98b5cbab64c29a84d90411e3d1b7863cdc33e327bf2164a0d30b0bdcffb75065ded649164f4c14eae78c175bd7a8812bc6f1db1399df92212f7d2947dce4ed8fa8a9ce970b7c9a1f21a4d4e16fcade54427a98c509d8c6dfd1d04e11da9cf710817740804e46d60dc7be9735058fc9b76cbb742a7037d98607b0dc598f4fd28750e67bde2c82abe50e1fdfcb7ba08a24e704e5a235563bdc884c6e3f880369638a8d99eb375ac519b58949af1d8f7eced3f2f5078951f52ffac587a22878932d3a981bcbebf63c374a8736148ce3b432864cb7928663d6d400301c8179e5304455ee8db01a14549f83fa64719acbe5e4053c8e1712e581e5bfce0e4db5ca8f8831d83d0a74d4e4644187e9367529005002b75fa821ee81de4e95edc9c17f8fb90908be1d68779beb366b41dbb2b02d64e29d9ea0bd53c557f4d09a1ba9b48cba55f5fa14cd30238b587187b48ef2c943ad9aebe4eeba47a08444e9031184e9230ae7af2f1a76413ce3071db84601649346d3770f8fc036af00b06b1e6d8a31bb3b4978a44162cf62f446bca84652597bf4484f9dfc15878062d3d0ec4cdf287d73e3e7ecdb6003a01ea9aff4a0778418d6afd1f4ebf5792beb87eec3320bd241960ec3944ab32ea758b5bba41d005a2101a3b95df555f3282ce3d601d7bb2b2a7f32327e54aa9fffa40e7b87a57d469d9a83b54157384e20a1dfaf62175dcef0f2470637e09d41026c913dca37c89f669bb993db39889dad9a8d4d75acbec7bb9ec8b45aa8e4938c87b5aaf4b496f0d30c0c8e73849d7fb9303738e6d771f0bb4efe608394dfd8816abaa3f5aa53c62dbeda999659bdb74c6b5fe098fef50f61f8784650a6883e21a59627baba98c1c556ee0f6f517e171548eee31d709767426a8feac75ba4ab1d3c170c43c6efb5f7ac175d1283d484ffdf1d8e988d34e10224c3df5a199734a82537b43fb62b336af80ba9f0c4a13fd4706cbb8991978706901630203bc20340e982bdf452fbc23ffc0b3934cb23393558350e4af3f088ab077d81e5dfa13a02470bae52a261e0132f64d568d49087274b124e048b0fe1d02b346eec9b1d5104a9eb8fcdf1962ba1e3e74e8f88d5cd3cc7f3336542caf6d9ffb7857ed175bfe734d1a1d95860f04e07565a3abe7eb894bda43723dae4db46c299bca887d83c02b494a9d3b1bd55f6f8dc15736815c5974f790859bf39dbf805fbe40d6b3d22f8d4559555c1fe4511195821683e27668db6925fe9394a51cacd140b77e7ec6a4d8089ca96cd9dfb4adf0830a81a21fb9feed632b5f852a90beda72b2b43a660dd7067d11c8a56788f9d10a7cd156037b9ed0e3ac6c39f4e3e52a83bc36706de22db8e25028bf52bcdd90726bfe1717103f154a12b7f83b6fe8975b07a969a852d7c14de559d4d6b7df3571a7efa67219dd618f7fb31cadf53f71650b0c8d730a5d1fa07ee7b1027b77ffd2859e214483d8b98aec1d8c4d7c2afa67c9943b67d26f1829850669cebf77db8147ad4c59eecca0ad37995848a708039d4aee55d7d5ca2392cdca0208275c977db14e1d5f8dde264f6c1307fad483dfe13f610aa1731298d433f215fa077b199d61e9608eabd8621ca411389b9", &(0x7f0000000300)=""/205) 23:03:23 executing program 0: memfd_create(&(0x7f0000000780)='\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KDMKTONE(r0, 0x4b30, 0xfffffffffffffc00) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) readv(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000000380)=""/124, 0x7c}], 0x2) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) timer_create(0x3, &(0x7f0000000040)={0x0, 0x18, 0x0, @thr={&(0x7f0000000000)="d1fa5df98bd221387a0a1e70c2c1390311e92c87a867a5cc627d67bd", &(0x7f00000001c0)="ec106539f01bfccb8280f929c555097bec14fde6cc3b8c7f8272db8dbf269ef46f34b8ac86f207aee9f7e728787848dd471db5411363a3acadba9e1f726b2ba721099c4e2b77f4bfcb536249628ece1368999a84c1aa1ded34ff5614bf4a4d7f65eaa6df16d9ec746aefeb80d23735d8d9ea307463f4f4f64245b876743a8f10b1de1f8d50f262711e862244952f1c94f7471cdfc40a5c024106f747b288ffe99db9c2cad554b685edf634ed2e4843c2c826eab16b626aae8bce93a1988be76a74d1a78c58a8cae013fcc5a2bf0272dda50608c7497bf282077b7b0365d60609b9f96eb06e24fbf97fbf05"}}, &(0x7f00000000c0)=0x0) connect$rds(r0, &(0x7f0000000440)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000480)=0x63, 0x2) timer_gettime(r2, &(0x7f0000000140)) 23:03:23 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000040)={0x0, {0x2}}) 23:03:23 executing program 3 (fault-call:7 fault-nth:54): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:23 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r2 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x95fde116422c1b8d) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)=0x0) fcntl$setown(r2, 0x8, r4) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) setsockopt$sock_void(r0, 0x1, 0xd, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:23 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x200000003) r2 = open(&(0x7f0000000040)='./file0/f.le.\x00', 0xc1, 0x100) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000100)=0xb2ed) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) 23:03:23 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={0x7fffffff}, 0x8) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x5000008, 0x12, r3, 0xffffe000) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000180)) [ 1603.262856] FAULT_INJECTION: forcing a failure. [ 1603.262856] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1603.281486] CPU: 0 PID: 1816 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1603.289353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1603.298723] Call Trace: [ 1603.301331] dump_stack+0x142/0x197 [ 1603.304973] ? vprintk_func+0x65/0x159 [ 1603.308874] should_fail.cold+0x10f/0x159 [ 1603.313032] ? __might_sleep+0x93/0xb0 [ 1603.316930] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1603.321606] ? check_preemption_disabled+0x3c/0x250 [ 1603.326633] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1603.331667] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1603.337126] ? __alloc_pages_nodemask+0x639/0x7a0 [ 1603.341979] alloc_pages_current+0xec/0x1e0 [ 1603.346308] __get_free_pages+0xf/0x40 [ 1603.350195] get_zeroed_page+0x11/0x20 [ 1603.354088] selinux_sb_copy_data+0x2a/0x390 [ 1603.358507] security_sb_copy_data+0x75/0xb0 [ 1603.362933] mount_fs+0x1ec/0x2a1 [ 1603.366396] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1603.370900] kern_mount_data+0x56/0xc0 [ 1603.374799] pid_ns_prepare_proc+0x1e/0x90 [ 1603.379045] alloc_pid+0x9f0/0xc70 [ 1603.382681] copy_process.part.0+0x272f/0x6a70 [ 1603.387278] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1603.392054] ? check_preemption_disabled+0x3c/0x250 [ 1603.397086] ? retint_kernel+0x2d/0x2d [ 1603.400981] ? __f_unlock_pos+0x19/0x20 [ 1603.404972] ? __cleanup_sighand+0x50/0x50 [ 1603.409221] ? lock_downgrade+0x740/0x740 [ 1603.413385] _do_fork+0x19e/0xce0 [ 1603.416847] ? fork_idle+0x280/0x280 [ 1603.420572] ? fput+0xd4/0x150 [ 1603.423769] ? SyS_write+0x15e/0x230 [ 1603.427495] SyS_clone+0x37/0x50 [ 1603.430870] ? sys_vfork+0x30/0x30 [ 1603.434422] do_syscall_64+0x1e8/0x640 [ 1603.438320] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1603.443177] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1603.448372] RIP: 0033:0x45a6f9 [ 1603.451562] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 23:03:23 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x7e280, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000100)=0x8) r1 = geteuid() mount$9p_xen(&(0x7f0000000140)='syz\x00', &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='9p\x00', 0x2008000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=xen,fscache,access=', @ANYRESDEC=r1, @ANYBLOB="2c6c6f6f73652c707269977ded00f6c84b76706f72742c76657273696f6e132b9e010d77dd1e4108b26b2c995d3d3970323030302e4c2c6c6f6f73652c617564"]) socket$inet(0x2, 0x3, 0x9) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3f, 0x8c801) 23:03:23 executing program 5: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x4}}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x20402, 0xd5647b5ba919ea3, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) shmctl$IPC_RMID(r2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={0x0, @hci={0x1f, 0x0, 0x3}, @tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x2}}, @nl=@kern={0x10, 0x0, 0x0, 0x210088}, 0xfff9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='bridge0\x00', 0x4, 0x1, 0x9}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r4}, 0x10) 23:03:23 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = pkey_alloc(0x0, 0x4) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, r0) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x200, 0x42000) getdents64(r2, &(0x7f0000000040)=""/22, 0x16) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:23 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0xc0000, 0x20) r0 = socket$inet(0x2, 0x3, 0x9) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) [ 1603.459278] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1603.467251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1603.474532] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1603.481812] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1603.489093] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:24 executing program 3 (fault-call:7 fault-nth:55): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:24 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd0, r0, 0x204, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x10}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xc5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3d76}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1d}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8d55edf068a7feed}, 0x20000000) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x50088020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r4, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x10) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80800, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f00000000c0)) 23:03:24 executing program 1: open(&(0x7f0000000080)='./bus/file0\x00', 0xc0040, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:03:24 executing program 4: syz_init_net_socket$ax25(0x3, 0x1, 0x8) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x2b) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204600, 0x0) write$P9_RREADLINK(r1, &(0x7f00000002c0)={0xe5, 0x17, 0x1, {0x7, './file1'}}, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000100)) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000300)) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000240)) r6 = fcntl$dupfd(r4, 0x406, r5) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000200), 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000)=0x1b, 0x4) 23:03:24 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x5, 0xff) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="d0000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x7b1624e43c9371e8, 0x0) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f00000002c0)=""/137) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r4, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4}, &(0x7f0000000040)=0x8) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) creat(&(0x7f0000000080)='./file0\x00', 0x18) 23:03:24 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file1', [{0x20, 'posix_acl_access{}cgroup)'}, {0x20, 'eth0'}, {0x20, 'wlan1bdev'}, {0x20, '#'}], 0xa, "feb42e182e9c6991fa83bd5aa0df43bd51dbfb8307a4926c37188e71a576d55e5489aadc24d145d2ccdd681ea7238583ab41dcdf5984933bbe135009ac99c81bd348417e8b63342717b92321b47a6076cea3180622ff6991d62270c1c47e0019512b5806c1aeda725143c49fb5d00d0ee81fba618e726c5ed622878440742d9e381b0ec279fc2ac89ae9cd89bb4b6752a0cf1d4dd825ee23c4adf2aabea09a14983dc0"}, 0xd9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="90fa7f7d495caecfd31e40c5733fef4b1de80cef25ce85e9e8d1ea74b61d319635fbef7d3cb038022f5d77dc9c5de24190d71b99b224ead1259ef9574e0b1c094e017712c9984f186c72d1a7b7e3946990e3bf1490f408d218554f3eba95daadc51917d0c2619ca21b4b4436ff18922afdfa9e04a7b6176f82c06b9da0fd8a124ce30ca1dd0562ad370d7bfe0ce4541f7f82fe22adac5371bf91fafb5c212149d0a8044e58b40cd4d061874511f0900b3859c56d8a66b0645f0c81f5f00835bbc703a6eb1d34c0eb997a9328", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 23:03:24 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x6dede54310f3a40c) memfd_create(&(0x7f0000000040)='$!cpuset)proc-@em0user-{\x00', 0x7) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x6, 0x200, 0x5}) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000140)) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$FBIOBLANK(r2, 0x4611, 0x3) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) syz_open_dev$ptys(0xc, 0x3, 0x0) [ 1604.148045] FAULT_INJECTION: forcing a failure. [ 1604.148045] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.199453] CPU: 1 PID: 1859 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1604.207326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1604.216693] Call Trace: [ 1604.219295] dump_stack+0x142/0x197 [ 1604.222941] should_fail.cold+0x10f/0x159 [ 1604.227107] should_failslab+0xdb/0x130 [ 1604.231098] kmem_cache_alloc+0x2d7/0x780 [ 1604.235257] ? lockdep_init_map+0x9/0x10 [ 1604.239323] ? copy_pid_ns+0x4f/0xa50 [ 1604.243134] alloc_pid+0x5d/0xc70 [ 1604.246596] ? copy_thread_tls+0x3c8/0x7a0 [ 1604.250838] copy_process.part.0+0x272f/0x6a70 [ 1604.255434] ? proc_fail_nth_write+0x7d/0x180 [ 1604.259937] ? proc_cwd_link+0x1b0/0x1b0 [ 1604.264016] ? __cleanup_sighand+0x50/0x50 [ 1604.268262] ? lock_downgrade+0x740/0x740 [ 1604.272420] _do_fork+0x19e/0xce0 [ 1604.275887] ? fork_idle+0x280/0x280 [ 1604.279606] ? fput+0xd4/0x150 [ 1604.282814] ? SyS_write+0x15e/0x230 [ 1604.286543] SyS_clone+0x37/0x50 [ 1604.289931] ? sys_vfork+0x30/0x30 [ 1604.293479] do_syscall_64+0x1e8/0x640 23:03:24 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:24 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x6, 0x9) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) ioctl$CAPI_INSTALLED(r0, 0x80024322) accept4$llc(r0, 0x0, &(0x7f0000000080), 0x80800) [ 1604.297377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1604.302240] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1604.307436] RIP: 0033:0x45a6f9 [ 1604.310626] RSP: 002b:00007f522f65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1604.318346] RAX: ffffffffffffffda RBX: 00007f522f65fc90 RCX: 000000000045a6f9 [ 1604.325627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1604.332905] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1604.340187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f6606d4 [ 1604.347470] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:24 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x04', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000100)=""/80) setsockopt(r1, 0x4, 0x70000, &(0x7f0000000080), 0x0) ppoll(0x0, 0xfffffffffffffeac, 0x0, &(0x7f00000000c0)={0xfee1}, 0xfffffda4) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) 23:03:24 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x1, 0x50000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x40000) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000400)=0x3, 0x4) tkill(r2, 0x3c) ptrace$cont(0x20, r2, 0x2, 0x3) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0xc0001, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000240)={'team_slave_1\x00', {0x2, 0x4e21, @empty}}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000280)=""/104, &(0x7f0000000300)=0x68) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') readlinkat(r5, &(0x7f0000000540)='./file1\x00', &(0x7f0000000440)=""/194, 0x51) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000340)={0x40000, 0x0, [0x100000001, 0x1b6, 0x4, 0x5ecc, 0x6, 0x6, 0x6, 0x200]}) getsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ptrace$cont(0x20, r2, 0x0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r7, 0x101, 0x2, &(0x7f0000000080), 0x4) sched_getscheduler(r2) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000100)) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) 23:03:24 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') recvmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)}, {&(0x7f0000000200)=""/142, 0x8e}], 0x2, &(0x7f00000002c0)=""/115, 0x73}, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:25 executing program 3 (fault-call:7 fault-nth:56): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:25 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x401) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000080)={0x0, {0x400, 0x2}}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000000c0)) 23:03:25 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:25 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000140)={0x0, 0x1, 0x1, 'queue1\x00', 0x3}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) sendto$ax25(r1, &(0x7f0000000200)="5a4a23e3b6d430f204475c064423401ded798b0d17dd81e5599f904ca355004b9e0cdb55f97ad129d27036ef6ad3906883cf58347ad226dc10abcec97a8da0c7fc63b5286ad6adfd12a9790ecbe27c1b407d8ebc29236975aca6f6fe889753ef2ebd5a54d9980471f2f3d73f7acdeb98c192a8bf5191b72435ed8962530bfc17495287aeaaaabf9f1a780959e5b6ff352e8f1a34a58df540f4bd6506f390b1b06103f58aab7608c283b896036bb0e60e7957091f33b7a386f7568838416f1ad1af0d4fe7fe9d358d21fd7dc639e6834a2861e8", 0xd3, 0x8000, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) memfd_create(&(0x7f0000000780)='\x00', 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080)=0xfffffffb, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r2, 0x0) ppoll(0x0, 0x3d7, 0x0, &(0x7f0000000100), 0xfffffffffffffe70) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000000)) 23:03:25 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r0, @in={{0x2, 0x4e24, @multicast2}}, [0x7, 0x20, 0x59c, 0x80000001, 0x31, 0x8d, 0x2, 0x8, 0x7, 0x100, 0x101, 0x2, 0x9, 0x41, 0xd24a]}, &(0x7f0000000040)=0x100) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:25 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cpuacct.usage_percpu\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000300)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00', 0x6) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x8000, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x1b, &(0x7f0000000140)="794455ea439a7a0433a6b1bd4e27d50689d4336481b233270096db70ae292fb816d6c0076c8eb10d61f553b58da66c2278719d4b211fa648f203e4e11a249780451e3c7c929acebc21049898a5e8e5ea9107c7f02b1d5f4fa207c5fe8a60b6e47c4351a4f6eb5fbce8abecef31d0ac58003e082724fde4972dd388069ef8fbd878c675286f4b753893d2641e8012af0872029a97584193be9344a24d3d9d184134a1951f798baa9ba7557c7a2f9ab00b424a5255c36d8fb220d2cbf3e4443f70d8493f9ee3ee98223f326728983eda4f4fe47e05a8e3401547dea478d0258cf2c913c27c4a2304ad58a62ff0c38f3da8bb650d9dd3d1e2bb21", 0xf9) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000080), 0x4) pwrite64(r0, &(0x7f0000000080)="335ad522e14f3cee915c8387f02490528ba9b1b04f3e0c7feb706f9952dc87625592ac3aa952083c3183de85f8d24f2d08bdc9e074856d87aad56985419362524dee3d44b3b3f60c2d87ce314592b477", 0x50, 0x1f) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x9) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r6, 0x101, 0x2, &(0x7f0000000080), 0x4) getsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 23:03:25 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl(r2, 0xf1, &(0x7f0000000040)="8939fa8e685a237fa1947f75930e42") r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:25 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0xbca, 0x1}) 23:03:25 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0/f.le.\x00', r0}, 0x10) memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000000)={0x1, 0x1}) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') mmap$snddsp_control(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000000, 0x110, r2, 0x81000000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r1, 0x3f7a9000) r3 = accept4(r1, &(0x7f00000001c0)=@caif=@util, &(0x7f0000000240)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000380)={0x7, 0x40, 0x200, 0x1c8, 0xffffffff, 0x2, 0x71ae, 0x4, r4}, &(0x7f00000003c0)=0x20) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}, 0x8) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r5, 0x800443d3, &(0x7f0000000140)={{0x40, 0x3, 0x86, 0x7f, 0x40, 0x6}, 0xf269, 0x0, 0x4}) 23:03:25 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000100)=0x6, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000b00005ccd4dc0bdccb3e9d4b94c25b6d42da3762480259d81e67bf5a74a228f2f433666a5be651f7398a7c645bdb1c5bf508896a978f260401eaa3fd7542a8a7a7f76fc8af7060500fc4a1b46e298889b89d467ebfc77e3271497d68f149e81e84802c1fe9e0a307ebc9400", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x6, 0x0, 0x8, 0x5, 'syz0\x00', 0x6}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x8000, 0x40, 0xb, 0x1, 0x4, 0xec, 0x0, 0x7f, 0xcf, 0x8d}) 23:03:25 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x200000, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:25 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)) [ 1605.148336] FAULT_INJECTION: forcing a failure. [ 1605.148336] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1605.171369] CPU: 1 PID: 1942 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1605.179237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1605.188606] Call Trace: [ 1605.191223] dump_stack+0x142/0x197 [ 1605.194872] should_fail.cold+0x10f/0x159 [ 1605.199032] ? __might_sleep+0x93/0xb0 [ 1605.202943] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1605.207652] ? check_preemption_disabled+0x3c/0x250 [ 1605.212686] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1605.217714] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1605.223187] ? __alloc_pages_nodemask+0x639/0x7a0 [ 1605.228049] alloc_pages_current+0xec/0x1e0 [ 1605.232383] __get_free_pages+0xf/0x40 [ 1605.236278] get_zeroed_page+0x11/0x20 [ 1605.240180] selinux_sb_copy_data+0x2a/0x390 [ 1605.244611] security_sb_copy_data+0x75/0xb0 [ 1605.249033] mount_fs+0x1ec/0x2a1 [ 1605.252501] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1605.257010] ? rcu_read_lock_sched_held+0x110/0x130 [ 1605.262038] kern_mount_data+0x56/0xc0 [ 1605.265960] pid_ns_prepare_proc+0x1e/0x90 [ 1605.270208] alloc_pid+0x9f0/0xc70 [ 1605.273771] copy_process.part.0+0x272f/0x6a70 [ 1605.278358] ? proc_fail_nth_write+0x7d/0x180 [ 1605.282840] ? proc_cwd_link+0x1b0/0x1b0 [ 1605.282858] ? __cleanup_sighand+0x50/0x50 [ 1605.282868] ? lock_downgrade+0x740/0x740 [ 1605.282880] _do_fork+0x19e/0xce0 [ 1605.282891] ? fork_idle+0x280/0x280 [ 1605.282908] ? fput+0xd4/0x150 [ 1605.305682] ? SyS_write+0x15e/0x230 [ 1605.309408] SyS_clone+0x37/0x50 [ 1605.312778] ? sys_vfork+0x30/0x30 [ 1605.316329] do_syscall_64+0x1e8/0x640 [ 1605.320223] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1605.325088] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1605.330280] RIP: 0033:0x45a6f9 [ 1605.333478] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1605.341185] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1605.341190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1605.341195] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1605.341199] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1605.341204] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:26 executing program 3 (fault-call:7 fault-nth:57): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:26 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) 23:03:26 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$UHID_INPUT(r1, &(0x7f0000000100)={0x8, "b735b6f5dfcec97322f0e9361d6ed74f8c7df954eda58f23df8624e6e8c917b9134997fe68ff725356d171578aa64e48c0ea537f0103fda2b977529f3098c1f8532ffd3a7a920e24422c14c03cf48a6069ebce16571e4adfecd2e4422e2a17cba3f95aa84a6f68cc9cff01a99c2883969d8bfb390e9c3d026e756f77e8a04746144cb65999bd8d77a1bb836eba99faec51c14e7b0630bc9bd430efcd4252854b75305c160c102133c2a7ffcc54fd98479acfb077f8e7ec18900cd2e12764cce1eb0e829438db099542102782cae7fea53e9d034508f8e7023c8b0d5baa7b88650776dd4906a23197460019596c6856829a3064c5746638b7051c30e9b0434012b0bc0e24c3b7825c5c1903bfd6daf3b93647e9e90351233e3e1fc44fcc8f8e8c14142740b94b779acf15f7f0be25ebfa3bf92c4241b2a4b60b059c7f394a9cc614678e6b5263fb626260b2a71fd4c6e80a353d889b562f21ac3c6fc31dfe4e909d34a256e5dcc2155362cb8f7df04f41690c4a2a898b415bde970ccefa180887215c09481a59cab8a34e513ac60d20dcce8f15b08854bf69dc3728c414387763e3bc44f06444cbceb4be54d42a72654387085d6545e1412191505e58ea1d8776eda210e61d9386efae48a3311dcc8e86b14a2064fdfda828409896a818dc2c18cbe42b3a140dde143a2e33de75a2cbf81fb051fefcef672cffa99182dd7f83647f448d7a56f347aaba76db20a06e913c22159b2ab5df5332247c6cc86b10dccbff166ecbee7002870a9a2c8f78b1544e90844a2d01edc679a99931d65c659f6729bb8bcf920b59545e2df938412b2cecbb61f467b9bddec67ae27762c212057e1ec02b1d5665ca521295728c31f54eda0e96898ffc7400a29b7848b35894a9638b010ab22afcde972c4fee96754960c97174dc0a4b18fc8330f6ed82d28706730bccca8f4397790295f0f864b99f98e04fb1d29b0fae24b7a0980083fe423d083de2b1a7d5aeaedd2192fafb806eb42501e9db1e825b96f4641dbf8bd16412a3d367a4ba218a744ae4c407504213c97eda195f316bd1a8b24529fc7530faed41287cc75d0e1e232ad3ff76e68076c71e332fbc8662430cd7b78d5703846c4f7c4aa4aad406bf7595424bfe36b06ab61a68025b76c4d6733f1318f6d60a00175bc46ecd51d032850c79c3f39e3fb2e83a988d80ff36cbc25f718f17a97c813edca8ca85b81f3c193be07da14e3cb5cb3cc508aa2e6e7aa30971d7e53f1cc08163ef36d742da740fcfb7936807d9448fe55cb8434c65cfb2ea9dc8cf27e111107530ffe02e6e467b5ee4e29e0d56997010a9495566e673b8263e05b3156307303514f108b777d2c478196c277e734e83a715870d3b3316098c752e60f41489f5d5810a31f6784c133a43b6588699f240e133e8182d0ee1f450820c891c88b976ac3a1e09c47637a05c7099fe26e8963e754985e10d3e4f40b47a3257610308ecb5c04315d919e832bb205abe74d013f301c76b09a7d1afe7b52ed9f41713dd8281ff943d7083a2eaad6d47f66b78d6f8360c156cca41375f85b60b45d11ec217677e2608d7f37d757dd54dafb7180ebe60f244f43a97726f3db74c460c5f1981ca5233d4999f7102aea39d665df0700e12e73a63d830a0edb869e969c46c78acb8a0e888d557be241118970110530efdcbd625679aec4d0df5415c44601f5c178fd1d466accbb0c5cabcb191e50ab1e23fcc9e81052c787460f0622080121db20fa9203a373711ae35dc63c5d63d755367495d157c0e74d0433031382a0d9f654baefd785cc488e38a417a7143bc209ac65e0db919739bee41f4711dfd68269f7c58fa2db6bced2d6146752ed8cfb72dee9e9b629835afdc97d8e0e690d8e2b6c6696c252a3246f9cb7a3629362adc5b5c9b5ec6a9412c542fd769bd2766661721b2d4727ae8646232842df1c648e5e14a963bac6a1a00552c0a2c513424688b09059d19faf90c08b189b683f6771534e9cdaeaa986f12b016c69a74715e07ccd280b58b330bb6ad677b5c88a87755b2454621e8bea11a1e96a02f417e9291eaa6965cde86d60588ee73e3aa8116eb98dd977b03d4266eb937a1a1f0ada58c14d275a3e05c793b472cf35869f9c5a2030fc7ec6ca007e9fc4cfeac8ba6e74dea84662a8c84c38ad3b526cf3f8fc37eb00e9403635ecf7cae228ff590d44aec55afb866c531eb371308ad1cef914beccdb404653560cdc57aa28fa7694361c58daff9cf91dbe548ea204e3166808219c4e9af8299340b27967cd80352b2f0a189967ba5233ce0e288c5c9d690a5bda4dc60a694e2b1ca2918dd65db8ef5ce349aa18eab14c6524dbb7687c9a12147176a53740e45eba9e1c2378b7dcd97d3f997337e0b1e2d3b5ac01d5dbd06ed47563ed9e7ec7fcc6b6a3b6373c12ea66b8fbc316b4ff9dc3c1698f4e350e7598d50f2ddeb8a9775f945433f3bb9f0099a97b6eb116c14a246291c5dd508ffe11eb39ffb0cd87b11fc66f4b0165d1dd671715aa4f74fc2c45e2cfb14e300bcdfb4e519c1aacec478d1d18014116a2f5eecdb0d81e3fbaf2e0f95476bd320da9a852d2b224d396bf1a96098036bcd9d02affefb76d43f9d6d727cfb5606557da7b8b52cd70c0e4ba04fb68c1b51875b741fe76472e628de5dbdefb1d8f649460ed28a67e7a434be96d8cf237d36e7d3f9cb5d21345bd44a9e9ef78a5f5293b35eacfb22383df1444a762fe594566e597904fdded3bf9a397831a3ad3c6db4b4f7742f56339144b4605a908a98871ae56c535e77f1ad59676831ce9dbf916588768b4cd9536c18b914dc9243a32135840cc21859f77b0585908201f7ccf6bfaf671fce808399bb0584b4f63fe3f749795de8ea861fb1970c87c8aace700d9e05952c24b7a1c5e00e63df7dc29b44247e4e709f8caf1d88549b7e5abff3f7bbec454a85b8a5fde6cfd69dc9cde90dc3ce80279affa1c52e95e42df08c8b5cd4c763a4b20dc36341dfa4576ec8f90392fc65f4a339930199930f2a226bb3ea90171ff3d0f6f9764a87aeda6b1140cd861e91fb28391f4e6966aaceebd7d09a26781fe59911259991341763189a1a07bbd6152339aa1b08cfcc2992605033c5bdeedb93c9e78e5558cf459fc81f8540c066a598fec6d1d8b4819443e355546e17bfa21130bf1e858f0a31914aab029b1f5a56aa26ee67ff81de0c619708cb6cc257cc232c6cce06c0f02f724538824ac3568360b701fe8eb8e940df75149ca1fe37c1b427c36d0c306477f1030e42313b447124e85522f0bfbc4a7a7771a6ec2c7e0c9f627d783ab4fe4ee1c19afaace7c586dd0070c911128815ffba26a2f20ca4ec34c6960c79413f924b21a1a2e97aab38d5ff56041326053ed15282acfabf71b14b0e64e361c61165e0ab367c1d1aef03fb0052d9f42679964421d7e461a821a4bf274a8659b95b0f0a66ef429e3828281de10fe66537fea6945e6fa16f85638fca4f10b72a54701bdf1f7ba2bb21310ec3f73cceb634b68c3450a016cf86ce392fffe56a06964b596366608c3b41108b0032641bf2d02da9291ca9fd964e7d0752cd5e2c5843cb553c472b5f39c53c5bca02002b683f3821d31f82a637ffbacbb3b7ea9343431943d06a0d9cb7866a8b202c1871c7749895458fc39fa7bab1d0bdfe3cc13baad398dcbd1b93db70384025f95af87dbf458050d98e90b95c4fe4555d84098416973d0c3f9e1eec6c6a8dd6bbe647a485c8073c1a91af41ee10d75d8ca01ce52189e4bc93edc7d0790ee250d8bd826cb66290bfa09e2e380a5f3a88b3a64fc0c4fd1660110be4a82f29483ebfc810b5ef9e890097f24c17659bcdda2aa5732744dc55155c5872336beb573304e31250bd639b3e4ad26633d24024debaf1b2183de390f846916d9ced18ca62691f33d46c4119453b36fbb3b460f6241258feac27e791c1c436b1b96d63a141fde967fb256c5eb58c7af11c27a1cf24b19056843785d8e9f2a5c2669ea453c97988c348c4d75c2626be7bb377297cbbdf4a9e01d2a62adff1915ebe01105cf6ac663b4319b63530e4898755323d5c6d91c760b96eefb8c6885cd85310e0af9c575c13c26e5776b221db3f1c232d1fb59a28f27708fdba0b4b5cc3ea865f35c0b2ae91dba16c045c2d39d9f34f85ae45ce50f7376a044351599a4b16fd903d3af87db86248dafcd086b3fdf14d1b5e0fd4cb4251f481e9aaa23adbc6c39e70cc302fb8992d82ada798085232a41d366597e844d86222434674c7f08022d53b253094e6d991d427b2cf2af216be92d7f2adf078ed307c4b80347ed533dbdc7ed734f8bd35aacd7cf03165a6361cfc2ef152b414bb6c404c7e312f35124d3665c7607f478a3bc4b9288a08744935d8d452afe48f59941d3ac287b3fabcc40229ae20fa3c6e2f7bcf4689ee28ad3c09632a55d8bf7e0e6ff37c5c43c24d918e075e6dbd30a0f28fc2d7482f93d70edc936786eba056dbb128e0bfbd92c587af4d4bce0cf067109e4349ceea037d9c561d33fc74ea3baf3a48c277c1144a2b90aaa79fc7ceb77deb541ddfe954a865e2e69abf0202cff986e73b6ea5a0695bdbf219f61c6fc81afcbe043c517bcad79bfbfc6d4c14da23123e40955fd9cb41876d0f231a54fa3af3e2e4e4a3fffae05d5defcb8054abd6a83438beb3d3223f07d096babea5678bb97de27280953bcfa8b7a87ca720011100e3d848a3981222742f32d46405d21e077e97519762075372141fb91398846ecbbc00baf8a56262ff3b3d72e3b9fb9bae6276f98266ae1dba263b071ea76356c03d937d3ba89511dd4a6014bcd4e4eb6c2480f74d5feaee61b2b8efc3416825ca79b57d0b95327b61a60df04933642d38d84e9e3b710aee036a2d956c0dc30d3a7e34db2da9058ef84dc99a38b703f1e46a2d4bfe16478888fd3b6fff803ca635b1dd79b83d6588157e3df7d2c470266f380817aec2c4977a908d41e89378c5d5080960003c01290c5baeabfe28b646286e6c796f532851efcc3c5f1a51befe7e453b7f30b9fd8b1d97566c84e29d86d279bbecbba4213e9d16a561fd109ae975641f1d4e4759da3f75e7d835414e84bea87be19bd63d2f58dac71b183d68f5624ef35e411784dd8e9845b49fec2959957e8b2aad0e63f539f2e92eebd0ea78e62e97f4ceb6428b9b925a34c4545231d2b06ef82471c5923fce9c152877402438ea56af2d5fad2054281338364e7d2cdff203bef255ca0b4fb455f27fa3c78168fa5f0299f8350c18b28b27d2da3c3edc81082303dae50ef123a2a159b6c572e561c7710d4ca8d58fe66bf89fa073cc680dfa0c0d8f4c421b7c05289828a0224e50f8c5aa734a73e4c65f993250a416091ed7f4647dd858474058229539d7f08feae52e8eba7eb9fb976b032ed2ceaa539b2425d4d81fe072b857596e53db236d0ee8618c2500fc30b60cc1d1c52a97a779a07198181ff4d63ce234ec0f6460c3fe3ddabb6717c49d67fde26f12785cd74633975e3cf7e13b7e64c5084bc2d28dce3c3efecf4e6bc6d0ada7d3535ca3f5c9a1188a0a86eb42440f0254c6655214abf91291369339c272a2011bfb9648a3cf3bed1135b2203573e127d0bbbc48e8dfadfc6355b7ca468d2738ab7b3e76e4def4e2684815f03253b9a9cf3631fd7c70fe43cc99ebc35952375f763da23297655914d1f83b098848d62f3a08c63d461e8a05a13f0bade8296c4f5cfc56d8fa9def3336b4624dde115bcba7f55ddf953efa049d690cd1a510da90da99", 0x1000}, 0x1006) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f00000000c0)) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000001140)=""/163) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) dup(r4) 23:03:26 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/146) 23:03:26 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) 23:03:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x146601, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 23:03:26 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000240)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:26 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x13, 0x1, 0xb3020c1f, &(0x7f0000000000)=[0x0], 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone(0x3000000a0136101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r4, 0x3}}, 0x18) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) sched_rr_get_interval(r6, &(0x7f0000000400)) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xf, 0x0, 0x80, 0x32, 0x0, 0xee00}, {0x1, 0x3, 0xfff, 0x3, 0xa1, 0x0, 0x4, 0x1a}, {0x14, 0x4191, 0x3f, 0x401}, 0x4, 0x6e6bba, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x3, 0x4, 0x80000000, 0xc561, 0x7fff}}, 0xe8) close(r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e128ac4050000000000010000bc897aaa39d940cdaf8af9e160054a2a9ba807c719fc89776e8eda2164b2e85ecf4cd03bb9cff48ca5dc52a0e230fbf4ebf4bb781e9c7eeb22222cb9fd156c2ed958e41dc41d3dbdc261bf9b221de2bb5a18305fd5ffff18fb4265cb326ac857ad70227aeacd590400", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 23:03:26 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x2, 0x9, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffb, 0x7, @perf_config_ext={0xffffffff, 0x6f}, 0x1, 0x400, 0x800, 0x3fde43bce58b7d18, 0x7fffffff, 0x2, 0x3}, r2, 0xd, 0xffffffffffffffff, 0x1) [ 1606.026128] FAULT_INJECTION: forcing a failure. [ 1606.026128] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.044764] CPU: 1 PID: 1982 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1606.052621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1606.062024] Call Trace: [ 1606.064632] dump_stack+0x142/0x197 [ 1606.068282] ? vprintk_func+0x65/0x159 [ 1606.072187] should_fail.cold+0x10f/0x159 [ 1606.076357] should_failslab+0xdb/0x130 [ 1606.080349] kmem_cache_alloc_trace+0x2e9/0x790 [ 1606.085036] ? ___preempt_schedule+0x16/0x18 [ 1606.089466] sget_userns+0xfe/0xc30 [ 1606.093103] ? set_anon_super+0x20/0x20 [ 1606.097787] ? get_empty_filp.cold+0x3b/0x3b [ 1606.102210] mount_ns+0x6d/0x190 [ 1606.105583] ? proc_get_inode+0x620/0x620 [ 1606.109741] proc_mount+0x6a/0xa0 [ 1606.113200] mount_fs+0x97/0x2a1 [ 1606.116579] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1606.121083] ? rcu_read_lock_sched_held+0x110/0x130 [ 1606.126110] kern_mount_data+0x56/0xc0 [ 1606.130010] pid_ns_prepare_proc+0x1e/0x90 [ 1606.134258] alloc_pid+0x9f0/0xc70 [ 1606.137817] copy_process.part.0+0x272f/0x6a70 [ 1606.142422] ? __cleanup_sighand+0x50/0x50 [ 1606.146683] ? lock_downgrade+0x740/0x740 [ 1606.150839] _do_fork+0x19e/0xce0 [ 1606.154302] ? fork_idle+0x280/0x280 [ 1606.158042] ? check_preemption_disabled+0x3c/0x250 [ 1606.163065] ? retint_kernel+0x2d/0x2d [ 1606.166973] ? SyS_read+0x230/0x230 [ 1606.170614] SyS_clone+0x37/0x50 [ 1606.173988] ? sys_vfork+0x30/0x30 [ 1606.177540] do_syscall_64+0x1e8/0x640 [ 1606.181435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1606.186296] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1606.191497] RIP: 0033:0x45a6f9 [ 1606.194686] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1606.202405] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1606.209682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1606.216961] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 23:03:26 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) r1 = socket$inet_sctp(0x2, 0xf221f8e55b116dca, 0x84) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x4) 23:03:26 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) r2 = fcntl$dupfd(r0, 0xc0a, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) 23:03:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000100)) [ 1606.224245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1606.231549] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:27 executing program 3 (fault-call:7 fault-nth:58): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:27 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="010000005e8f5145f7d8b9d51e398b65c0c86309a4c9a90504b1b905d98a36c1150122f7b5119f46a14e7e870190afd99d61bd765cfc28c2ffdd80cb177c15440008a2d9703a870a3554339218665a802b2500bd98703144c188e9cc80fc76a440359b97ebc611e1329d552f30c686bd6a5bb11db631a4f3f2b2d29588a099c898aee86fcd145317d77dbe67d663d7738186f26899673ebedb8a5e2c298376c7899cdd3aa64deb8e357be9e22ec500b4547eb59834fc523afd55affdc360995ee30d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 23:03:27 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffffd) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:27 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0xab, "0cd5ee773f435ecec466657005246a35f63864735bbf9d30434568941924206c3673efa7a16869a2ade606d72561569826d27303d40bd33e350cae29bb99262b29740bc4a39ad57fb81d4a44d77d38e5c2007a3385ce116f5b43a778ce1300568417518e2139a8aa50601237005bf224da9b0c815e7b5f7e4c4636bd5ebd94ed968e641b4424ac85ac47bf4a46e846edf08aa2c70dee9cc6a1f0ddbdeb8e6c56b4a42243537ff0c77d6e43"}, &(0x7f0000000000)=0xb3) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000001c0)={r6, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0xcf8a6de85993cf79, 0x0) write$uinput_user_dev(r7, &(0x7f0000000800)={'syz0\x00', {0x8, 0xea6, 0xe000, 0x6}, 0x52, [0xfff, 0x4ca3, 0x71, 0x76, 0x0, 0x2, 0xffff, 0x7, 0x0, 0x800, 0x6, 0x5, 0x10001, 0x0, 0x5, 0xac50, 0x7, 0xffff, 0x3, 0xfff, 0x10000, 0xffffffff, 0x3, 0xbe, 0x8, 0x7, 0x6, 0x2, 0x6, 0x6, 0x3, 0x200, 0x3, 0xfff, 0x80000000, 0xda, 0x5, 0xc0000000, 0x6, 0x6, 0x8000, 0xff, 0x2, 0x80, 0x7, 0x1f, 0x6, 0x37, 0x200, 0xb9, 0x9, 0x5, 0x7, 0x6, 0xfff, 0x6, 0x0, 0x9, 0x24000, 0x1, 0x0, 0x101, 0x4, 0x3], [0x101, 0x2, 0x470, 0x0, 0xeca, 0x2, 0x7, 0x7, 0x10001, 0x0, 0x6, 0xffffe669, 0x5, 0x10001, 0x7ff, 0x9, 0x3049, 0x6, 0x6, 0x3ff, 0x4, 0x7ea, 0x800, 0x3, 0x2d793ac5, 0x40, 0x1, 0x7, 0x2, 0x9, 0x8000, 0x2, 0x9, 0x4cb, 0x9, 0xfffffff7, 0x40, 0x4e64e39d, 0xa6, 0x7, 0x75a5e387, 0x0, 0xffffffff, 0x7, 0x218, 0x7fff, 0x0, 0x7, 0x3, 0x7, 0x2, 0x8, 0xffff, 0x8000, 0x101, 0x7, 0x7, 0x4d9f, 0x5, 0x0, 0x68a, 0x5, 0x102, 0x5], [0x5, 0x4, 0x5, 0x10000, 0x8, 0x6, 0x1, 0x8000, 0x400, 0x8, 0x0, 0x9b9, 0x7fffffff, 0xe417, 0x0, 0x1, 0x9, 0x3f, 0xfff, 0xa, 0x101, 0x86e, 0x7fff, 0x2, 0x1, 0x3ff, 0x4, 0x7ff, 0x7, 0x2, 0x0, 0x2, 0x101, 0x100, 0x2, 0xa7ef, 0x1, 0x81, 0x40, 0x3ff, 0x5, 0x3, 0xbd2, 0x6, 0x6, 0x10001, 0x1ff, 0x9, 0xffffffff, 0x9736, 0x59d, 0x1000, 0x3a, 0x9, 0x3f, 0xc66, 0x0, 0x5, 0x0, 0x7, 0x8, 0x307, 0x7fffffff, 0x6], [0xfdb, 0x80, 0xfffffffa, 0xff, 0x200, 0x2, 0x52, 0x0, 0x3, 0x9, 0x1, 0x10000, 0x0, 0x6, 0x4, 0x3, 0x3, 0x800, 0x6, 0x2, 0x8, 0x3ff, 0x5, 0x1, 0x4, 0x840, 0xfffffffb, 0xffff, 0x80000001, 0xfffffffc, 0x8, 0x2e, 0x7, 0x10000, 0x4, 0x9, 0x0, 0x5, 0xdf23, 0x1, 0x80, 0x1a, 0x1, 0x200, 0x3ff, 0x3, 0x4, 0x3, 0x41deb679, 0xffffff70, 0x9, 0x0, 0x0, 0x10000, 0xfff, 0xffc00000, 0x5, 0x1f, 0x4, 0x7327, 0x9, 0x2, 0x5, 0x2]}, 0x45c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000280)={r6, @in={{0x2, 0x4e23, @empty}}, 0x30, 0x79, 0x4, 0x1ff, 0x2}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r2, 0x2, 0x0, 0xfe6f, 0x6c91, 0x1}, &(0x7f00000000c0)=0x14) 23:03:27 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x82) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) 23:03:27 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x1) write$P9_RREADDIR(r1, &(0x7f00000000c0)={0x85, 0x29, 0x1, {0x9, [{{0x41, 0x2, 0x2}, 0x7, 0x9d, 0x5, './bus'}, {{0x44, 0x1, 0x3}, 0xff, 0x6e, 0xb, './bus/file0'}, {{0x0, 0x4, 0x4}, 0x9, 0x8, 0x5, './bus'}, {{0x0, 0x2}, 0x2, 0x9, 0x5, './bus'}]}}, 0x85) 23:03:27 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x20000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r4, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r4, 0x101, 0x10, 0x5, 0x2}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0xfffff907}, &(0x7f0000000200)=0x8) r6 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r6, 0xc0305616, &(0x7f00000000c0)) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000080)={0x2, 0x5, 0x0, "b2ffd43d3c690047c72a9569c11e99803841623bc3e71b04851cb8ae0384e5c2", 0x64737664}) 23:03:27 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x84412, r3, 0xffffc000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000140)=0x2) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:27 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) fsetxattr$security_evm(r2, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000200)=@ng={0x4, 0x5, "eb63fbbec94c"}, 0x8, 0x1) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0xff, &(0x7f0000000040)=0x4) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) getpgrp(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:27 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 23:03:27 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000040)={0x0, {0x3}}) 23:03:27 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x202, 0x110) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000040)) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x5, 0x30, 0x8, 0xffffffffffffffff}) [ 1607.006946] FAULT_INJECTION: forcing a failure. [ 1607.006946] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.029239] CPU: 1 PID: 2042 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1607.037088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1607.046448] Call Trace: [ 1607.046514] dump_stack+0x142/0x197 [ 1607.046532] should_fail.cold+0x10f/0x159 [ 1607.056913] should_failslab+0xdb/0x130 [ 1607.060903] __kmalloc+0x2f0/0x7a0 [ 1607.064459] ? __list_lru_init+0x6b/0x660 [ 1607.068620] __list_lru_init+0x6b/0x660 [ 1607.072603] sget_userns+0x500/0xc30 [ 1607.076325] ? set_anon_super+0x20/0x20 [ 1607.080318] ? get_empty_filp.cold+0x3b/0x3b [ 1607.084739] mount_ns+0x6d/0x190 [ 1607.088110] ? proc_get_inode+0x620/0x620 [ 1607.092265] proc_mount+0x6a/0xa0 [ 1607.095728] mount_fs+0x97/0x2a1 [ 1607.099106] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1607.103615] kern_mount_data+0x56/0xc0 [ 1607.107516] pid_ns_prepare_proc+0x1e/0x90 [ 1607.111761] alloc_pid+0x9f0/0xc70 [ 1607.115317] copy_process.part.0+0x272f/0x6a70 [ 1607.119908] ? retint_kernel+0x2d/0x2d [ 1607.123803] ? trace_hardirqs_on_caller+0x400/0x590 [ 1607.128846] ? __cleanup_sighand+0x50/0x50 [ 1607.133091] ? lock_downgrade+0x740/0x740 [ 1607.137257] _do_fork+0x19e/0xce0 [ 1607.140721] ? fork_idle+0x280/0x280 [ 1607.144442] ? fput+0xd4/0x150 [ 1607.147639] ? SyS_write+0x15e/0x230 [ 1607.151365] SyS_clone+0x37/0x50 [ 1607.154732] ? sys_vfork+0x30/0x30 [ 1607.158277] do_syscall_64+0x1e8/0x640 [ 1607.162171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1607.167022] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1607.172198] RIP: 0033:0x45a6f9 [ 1607.172202] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1607.172212] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1607.172216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1607.172221] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1607.172226] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1607.172231] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 23:03:28 executing program 3 (fault-call:7 fault-nth:59): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:28 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x5, @mcast1, 0x2}}}, &(0x7f00000000c0)=0x84) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000000)={0xaf5, 0xdab}) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:28 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) 23:03:28 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000080), 0x4) fcntl$setstatus(r1, 0x4, 0x4000) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) 23:03:28 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x8490910f314ca80a, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) tkill(r0, 0x3c) ptrace$cont(0x7, r0, 0x3000000, 0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f00000002c0)) syz_open_procfs(r0, &(0x7f00000000c0)='io\x00') r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), 0x4) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000280)={'teql0\x00', 0xfffd}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x341400, 0xa97ec149de82cd12) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x9) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$NBD_DO_IT(r4, 0xab03) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000200)={&(0x7f0000000140)=""/181, 0xb5}) getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xfffffffffffffd29) 23:03:28 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @broadcast}, &(0x7f0000000200)=0xc) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="ffa6fffff7000000020000000000000000786b000000a66f70b468c0b9dbc532ff9f531ff068095468792fd126354247243e9d386baeb37e39ca94e211d66bf45e857b755e7596f2fa9d043e166262c5a34f2088aae5dd77a7f6bd51e8836dcc75cca78ee06a9d593ed0632f938f3f4a87a5b7ece78832f413fb8b9a28fcce3c0422f1f02cb84a8091fde6b7ca2001edd6ff1d55862a690434d5fb9d4ecc629929e73970", @ANYRES32=r3, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r5, @ANYBLOB="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"], 0x3}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r6, 0x101, 0x2, &(0x7f0000000080), 0x4) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32=r8, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f00000002c0)={0x0, @can={0x1d, r8}, @rc={0x1f, {0x40, 0x0, 0xd9, 0x8, 0x3, 0x1}, 0x9}, @xdp={0x2c, 0x1, 0x0, 0x28}, 0x1, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)='ipddp0\x00', 0x9, 0x72cb, 0x754}) socket(0x11, 0x800000003, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f0000000040)={0xa925, 0x1, 0x0, 0xffffffffffffffff}) r13 = dup(r12) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_GEM_CLOSE(r10, 0x4008640a, &(0x7f0000000100)={r14, 0x7000000}) dup2(r9, r10) 23:03:28 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x10, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) socket$rxrpc(0x21, 0x2, 0x2) 23:03:28 executing program 4: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:28 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x800, 0x0) listen(r1, 0x20) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x100, 0x0) renameat(r2, &(0x7f0000000280)='./file0/f.le./file0\x00', r3, &(0x7f0000000200)='./file0/f.le.\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000001c0)={0x0, {0xffffffff}}) 23:03:28 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000800)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0xff16) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:28 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x4600) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) [ 1607.913490] FAULT_INJECTION: forcing a failure. [ 1607.913490] name failslab, interval 1, probability 0, space 0, times 0 23:03:28 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x203, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x6000, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000080), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000080), 0x4) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r6, 0x101, 0x2, &(0x7f0000000080), 0x4) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r7, 0x101, 0x2, &(0x7f0000000080), 0x4) r8 = dup2(0xffffffffffffffff, r0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000016c0)=0x0) r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r10, &(0x7f0000000180)='.//ile0\x00', r10, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000001700)=0x0) getegid() ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001b40)=0x0) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r14) stat(&(0x7f0000001b80)='./bus\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r17, &(0x7f0000000180)='.//ile0\x00', r17, &(0x7f00000007c0)='./file0/f.le.\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001c80)={0xffffffffffffffff, r17, 0x0, 0x10, &(0x7f0000001c40)='cgroup*:trusted\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001cc0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000001dc0)=0xad) r20 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, r21) r22 = gettid() ptrace$setopts(0x4206, r22, 0x0, 0x0) tkill(r22, 0x3c) ptrace$cont(0x18, r22, 0x0, 0x0) ptrace$setregs(0xd, r22, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r22, 0x0, 0x0) r23 = getuid() r24 = getgid() r25 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r25, 0x101, 0x2, &(0x7f0000000080), 0x4) r26 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r26, 0x101, 0x2, &(0x7f0000000080), 0x4) r27 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r27, &(0x7f0000000180)='.//ile0\x00', r27, &(0x7f00000007c0)='./file0/f.le.\x00') r28 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r28, &(0x7f0000000180)='.//ile0\x00', r28, &(0x7f00000007c0)='./file0/f.le.\x00') r29 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x11, 0x10, &(0x7f00000022c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff}, [@map_val={0x18, 0x1, 0x2, 0x0, r27, 0x0, 0x0, 0x0, 0x9}, @ldst={0x0, 0x1, 0x1, 0x8, 0x4, 0xffffffffffffffe0, 0x11}, @call={0x85, 0x0, 0x0, 0x3}, @generic={0x0, 0xe, 0x4, 0x17, 0x9}, @exit, @call={0x85, 0x0, 0x0, 0x24}, @exit, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x0, 0xe, 0x3, 0x0, 0xffffffffffffffae, 0x8}]}, &(0x7f0000002340)='syzkaller\x00', 0x10001, 0x5d, &(0x7f0000002380)=""/93, 0x41100, 0x1, [], 0x0, 0xa, r28, 0x8, &(0x7f0000002400)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000002440)={0x4, 0xa, 0x1, 0x3}, 0x10, 0xffffffffffffffff}, 0x78) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r30 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r30, 0x101, 0x2, &(0x7f0000000080), 0x4) r31 = getpgrp(0xffffffffffffffff) r32 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r33) r34 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, r36) r37 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r37, 0x101, 0x2, &(0x7f0000000080), 0x4) sendmmsg$unix(r3, &(0x7f0000002580)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)="c5fc0208b3caab3cc60d83d24c6ac7b1f933c90428c8166ae074635c90c1d4020e3bfd760c6f715e16c531a14321c49147ab370d7502504883a66c4ec7954d428d8aab96a2fb35e4d7cc35fc04e34fac9993ee0460dd1c5d0884e0c1d148f1a48f74017f57313f40408ea6ca3a769963fb18b790bf18a5bc99fe98d582f384c4d7df01fb6cdd5d9416ba2c94deb9bcc0bb7c2f03f2bfbbea6b2e7543267bd3a21f0b5669832140415ee8e1f42d16d9409b835f4b50501aa48f0db3812aeda209e74369905774", 0xc6}, {&(0x7f00000002c0)="359dd1feee21ccb1773c580588d999b09cc5616fba9bb8e5acb6d33da8306c213e5724c6b1ea0e054244a3bfd3ec2bec6f86ecc150b29d2b69ed62631798f3ebed61a56a61295c87422d130114d49b698e56c63c452646c67e6b8a6454450affa168e02ec43778a69a363f7623a766f15909294fb7ce6cbf793cb0788fd806abf9f3c50202ccad047d311a065763f59db39267fba3366e9c029c426cda0ced833ec628e610e62a0f3e2880b921c6215117f99a28c0f20fc171ae", 0xba}, {&(0x7f0000000380)="1de4d3fc615e78d1130d6ebcbc78a2629bae7c9928f90aab614aa0261a8942c223eb7efb6ebfcbcb33bf8aa73d4b7c7eacdb6a5ab71df95008c96c53cee0dd4e37d16fb00fa1572a0bf78f11ad6ec52d7014ca869737fae5279293bb", 0x5c}, {&(0x7f0000000400)="9b958ed5786fd26fd1a4b874157d61612779692268ce1c1dd712dbf780917ef00d9bfd14ff15ffbbbc8f46fab839e5595999c5cfa5", 0x35}, {&(0x7f0000000440)="a62dd7cf68d5359aba688f3a4e864ad44b7b939dd71cce8f75b28b22a58537bc552fc5db647362b317093345542430a043fde7f715cc87c68e9fa1791b2876feb0c992aa0686e4e5b1942a032085ded1c3542fa26606c50a8344ed62e79b57eaba12f4650db434f02b7fdde683b83cbced513abbf97f24acdaa5a08a3f4a28f4c614a1981a525f74d847727bb1962cdc5957fadd8f2b7b665e202b6f5fbd3f08bd6fc2348b26947cbcbeed691025f29493b304e224e38df8820bd0d007859295dceee2d6910d194b22c286cef61a76f0b7a5e30ec3bf9056f08500bd4abc964d4273c3c3cb7e0083a169d752035dfc33f717ae5f56cbe2cf0bb22b0bc8803fed5dc6768a63489159d0d554fb6d77d3f81a73de4e0cc1dbbe7454182bffaff5047003604053aa5a77bfe2d3c979c94be8a763340820083235a042f5a3cb40e68152e02950e577309e5f828a8fdac193d7270d50d4d71a87f9ba4cfdb959e6c224f80a1bad0ef16a1a508e438ecac8c91b2232b98e9c4c2b5898917036efac08f48a5911b3f7a9f7b385e1509a7e054d2bc173191fc93458b7d7cee4250d1991cf12c8f3fd7ad19755734ca46a3687a34feee77f005c0be0b643dd100462ab4db287a2757591cd6eea1666decc3166fd64a9e95c9f930aaf7ce7d13e1ff6ef252151014609284c015279db03fb2c0a88628102fd6a0017fb7e307dd3320921574c3bc184012d36a93106dc21dc1b6ad769f855558837d10dbec9e49fda92a471b91fad079aeca2f676530229919bd11ec6a9287876bdb40c81f029053c9796e722fb835ab59a9ff940d19e57f5b8cbfca31098dbe28acad1893824513064e5ba3904feddb9aa0db5416149874c3fa4bb0d9f8ba7f3cadd80e0ccdbb0e91302851e4ae70e1e02fe004262ccd6c55b204d4bf2725026807f708652265b6cc2f403fdf4541d20a5ad1a0a4b02d104abeceb5524426b5a033fdc1b9960ae8b058d715d62e34d8cb491fc0b3520c493bd9f673b04c15d6ef5b579488fb7f11e17595ac3784b8176f1f37e88c3594cf0b523cb7f784cdfd534a3b35f73a54b63b86b1345d1433689919593b73d1de6e457fcb5eaff3fa3a8e5bb2f2b3cd7ac2961adffb457db2be795501d2f804fb396f50995285f02bbca597cf8e7fb54c0734e311f603a6cec44f4be38aeebc87b089993c9de39a9e2b1807c6e04f2fda91f75f7b95a6986223e2b1b24a15f8c1fbfa738ddd4ade34de97a85cb29957a7586fb35a92b1100cbfa9d245440c39fa52ab35eea2d827ff02e263434a085576fa20642a19f2c1cc2369eb01dcf08ddb6362d55cc2a0b4529f43a2da6d45749bb2beb6d11e35f3ff07a4b6e592ca9ddef7954cfa893901c72e9d9dfea949da656b440c593f29415745518ed69fe2adf516f2364841c37926a4aab4aaa5656a77f5a0a47f3de486c4959a7ccf926ab170f81ea5bbb022d51449395724bd7954e224990a5ae3c8d74b5347653a545911ba4de8f5f12a99db47abff145cc0500bf6faa861a2ae62aa60ce4175acf72c2ff4fec7ed693a06338d7ec5bf03d682bbffa8429f1e004a0beab10e72aad74e014d9c5894d61b2afbf0e5a1038d9ee86ff67b26319f2fc81b47e3a8c71fb1f2bbf0c105819fb52548a7689afa9a64569c8db3dc09a81e6b0dd348acd1f75053edc4d276e03e5b13807fe4c006f3a55f45a0e1b1be78fd029e9fed301ef6f081dde95fbd0a67bb16f0632ba57cb4f26085ac6037bd9edf37b9e3a74e8d9224c60746cb2d48e118664e53bf4d48873bc25854b14632761797054b210f8c654f55827ac2b47f59c1820b3c64d9984e892875aa3150e5cb91ee57bdef825917d81f759e2dfe8f8e0b2fdebe3aaeaf09c35fd823abb38ea238af41e2b6bb26fcd8f5e4db025cd529aa333097b4188cbba43170d620857911c65e499c16982efa77b8611a35180dfdbdf44436691cb1755ea4c8d3d3b738901b88ddba6a3aa2e685a3e39955cbbf94251ff3d7fd7b78558f773eb335a42777a36bf40ce6b48e757910de4d075d08979ba8f938eb5063b236803e8fbc31f275d4e385b462968241199e2131ab553f8bc3cb477d37958cd1805839264903079d28cb13b01d0dfac0b12c6ad847962660670736ccd61a91c79a7a4d01672f4762d3ea2271bdaa5f2587c99dbbc796a2f526dbe9949ed3e9e9aab3e1453979958d8fb57112d12bcf3b0927076d3f7e4b7f04a3a5865b7d80f261a274e0d23a57cea74c87241fb9753efc7144ef25d1fbd065a1c5f68d6b65cc52337dea7ba6cc130e2107d63230e81f1655a278f4d6413944ab7282d57dbcdc63ccaa95a34f62f1b6954f978dde5715de706f06ccc9a85329e6d079a97e97733691aade31b77e6df6cf80b21963287f71bf6c3d8b131d518de6e962d295b855083510769fa67b18e19793ba475dfb4b0047cdcad841080da0d0e47b557624212979849c67ecf46f53ef032b15fea53ec44c48fa3bcaa2bcc261628c4b07a85f275daa2ea4414e34cb74da7f69b811f22b883f1f78576d9286646a1741b49df484cd7a7f6d761f9007b56bd6c4bdcada7b889d30f233e140947028acb85dd0b1ab9ec36794fd0d2ab6ce975cd4d91fa5b868e9400e2b1b6024f59036716840b0f144d60625584813677afcf70609c0b511e4be30aefb009d95196d7cbfda7f61479c0fe3c9daa1d317ac5952052e8584ebd96ac89432cd6e2195537a462cd82a65a6a40aca4b7bd1026bd98734c07b60692b6cbd3b16d11891376734da961ecca0e2959cb30434e3bfc7830ffaf190300d794f559ead94390d25de0cc708d349ffd92b917210d123967e9b5eb5f85cb9c51d02da681771198f47b6f0a68e5434b5f30f7eae53425628b67e5940c98d217005aaa17bbce8d9edb4adb5dfdd7a58726a07eb417add32861c18ccadd405b782a60f25d4acf1d36b5f32a36c518f5b22a4aee643f9d10a1bb82045baa31e91de06670b0dbb5d6421ed8b6d6776a0aa2ff56a507f558dff5a57775dd0c08dc88a9f009dacc85d7eff510f8bcaeff37b790329e7aa34788053062c3e987f1588984ef93f521549b686cd22a4df9620e73760ca3d02ec0164baa8b96333bb6bc49bba85c9dcb61be182d85266f2aa9ccd93e715e863f729ef49990da975b2b53512435b8a72f43d798f224a587da7cdf40cb80ef294f1af5ace5cbd5bdb2e1ea1ca5edfe86b2a640b1a76e834cd4d6b934b7feb4491d67577e90009d063defdc5e412208a91bbb4c03d021940ff092e9556807c3a57f6c5ca71717ee513cb187aa03024e03c59887e137a876e32d1f53f2107426702c90c55b26e8a4892119043a77baedaa0e6b6937b8e347b4d62f235ff78251b5c4bf028e90c6cf5157968dc225f14e2b7dcf81453b46ec9027eb51295f51e6e03bc6855346b27d43995ba7ef416441c2b9b851d007bb2e49c7920b1175bb69e3c6f3ff0851e19f78def4bd95020a0d8582e5c366a5aef2acb747c6d1961c0bb2224d9735c7fcf6870c35faeb24217c4d36494bf08a715bd83e523fcc11227255524d75515d8845f86f33cb9dd67809335526fc0e011c6f388b34884486e59aa33d70b7666e3fe2d0548add4beb83d265b72ff16af4044d466829b9eb889bee38ec6af6497b00214428f393c0ea5d61ae7fc2fd2e04f7e45ede7150843cbc1a6f11d7d2eecaec94d669f8bba4c33e1aa8e73e29b9d696f20d6f6564646b6ea4d3df34cdf59e9d78544da84723b9a29a0d84525dded86b23cc28fc1db363a4a566d851f8e206c711c9d182637c8951ae31b058fc3b4670e9435b8f0ed23a2fc88060c95a0c530b17d87ab1afeb78e66c45999d361ee008b716e2e996bdeca71102de62da68dd1a8cfeb594cf6fc29ff6d837f93c8d46bfb8a48643ec8b1dc39c1f95bf4e7c524e5ae2c997dbc3bca51893aaedb5e12488d53f5a7ea641aa794838f36b71a7999850abef487d43ede2836604fb88e4ec95af0c7921641bbd4a0911d755238bfbcf9ba872bc7bde2140421e7cc402e86d2088fcc108345e40d986b0c8746fe2fadab49640c98df6723b43cd165189795d4e3968ac222d73a3788838103fbcb9ba739d2ffc4bc4a6877418c08e2b379d1733ac68e636feaf2b7d471979e0f974f5c7bd5f7db0a621b6b1a86bfe60322f8b7dab3fe8257574f0b0c2dbc275b32323eafa0b5c60c9868c28dad7ebc90012f09bc0ed089e10a66dc99b30049b2bc6e4b0590fad6facbcae3bd28fd260a715aecaabb4ea06bd2fc0a980319ebd4c823fc40351002e332def5f8655d8e690563881972275d5a8507f2689de87aaf507c2c400b4331814a84bb7ffcb1db6d216558c4507f3b51a145ff895a5b39c314fe0e21cbb41740c883d3998405b2245aefc57a8dafab1888d019396946bf1165f70b319f82f8ca60ad64a0ddbd7c58271ff6a1340cac80d14db0cde803dcdb8f8b93f1f8df28a6e19f775dd3f6802a9b1be07ba0559b6364c4175ad042a8475b39e3877d55c79f6e80c8c2bc6db770ffe6bd9269bd1ce35e3ded121b942d04efd1c1f531537a4c939b30b59aa19eb2f8ab916f76970c0c435f531fbb90cb8bf9eaf68ef0e9650c1ca4807d61f8362790331087c820bcb230f6154a1abe0ca42aeddc0937c374e8247806fda30899af893f228075ee00f006d5cb8dfe61f32f2e3624f5a12d324c02137eb6c227bbdc8d60f7adbe39dcad500505dbadd2df81eb030e28bfa9bc224dcb456d1cc9ff029770f9987a3ff2eff294cd9592dffa99e98fc573a7172d57545331a27408221d33ae746f27376d6cd50841f820047486c1c094f160288480cfbf65e72e37cc5b2a58d684c98ae56a62b630087b4958c8da5805ab02cc1d495578c849329c92c6de3d3263539dd90d837c2923df43a4a5a0ad8206f66655ec4a81f219e380bcc4aac4c5587003765186db13c436ae9d5a5e9fe5746f4b435664ba90df289e54356d6d25cd0d54494ffed47902050007cd66ecbee68fa33b2ecd9c109bf9f0b13face2b89ff7ca1adc373f8434a9ca53dbd1c7dec3463bfaa958d963790cbb01f45e27e233d63b0e4ca2eead31c71bea683ad86698988534987843c23ec8d3dd50dcd7adc96750159f1e58534876f89ec72693b12ea87d1325bef89d32e31148fffd6199379af461a26f46bbcf8aeeb782995ffe8fa268c8b7f190883eaa0b7195fc2a84e5709b7a25c6cf48c042680ae159288a9238d0dbadfe364fc41e2d7db3a8afc2834aade4a6197eb2319ff1bdf8cdd96ed1e64c5849bae81cf6e14babdbb5974eb613a2f7272a0b5fea2db06c3c403ec6be27a8aa67e0fe38e7bab6c938664f0b95c9fabeb81a8c156121d0e5af6f50f49312d4f3b7d0b7a7356fcc8107a4248f18a39c96996caaae3c202705a1116ee7f9e37216be6767e51ed6388d5c877327556a52384e08abe91f09d846fbef44b6e31d3b371ae1335c1f39fd337aab5b503ec95537659e8d9ddcfcc578083eb8e0e59cec384a072545f65110a827f65924271cb96d2a0b8a868b94d640773612673a54dd3073c5ddfd8df746bb44e380fdacb98f1628ccf77c2611798d6c990a53349f3cbdc7e11c2c558a416aa26242b0f4c22bb0de42cbcbd2a408c767436e1379aa780538f95b113649b21ee1a74248961953a93d51fcd04cfb55d27d9c5a98aede9823b6e69fe28e21fa1b869516b380490d130d1e2106a431137f93807bea1e61e7440430e2c5480db4a7b3dca1c44820fbd28733f9eb7689147221a5363", 0x1000}, {&(0x7f0000001440)="988e12b5eb481bceceba075d6b757fd69c39d898b2c2bbd6392ebec6ce786a0ada8ad08998b01bd6e0db4690511c447668b25ff6a35612f31ca9a675a41dfd2048404f1bf1987cdae0524faf748d8afa7b86f898b59efc0b4fc89efd52c6a630762c5f36f039346a6da9eaf28563d656319e352630fc499d1aef62d5a299621fe278e6c8f3634f9feca5a3436c3ca84b4cbdc103454a35e2908913623716961e5517fc6dffebef3ed08b4d8dca5be6e1c1a748fb52a9c14f134a84195d1eafed21baaddda3b8a487cebcea82140094a58cdfa762f5034e62cdb74bf1fa8fc5114bb11336de514d1bec72833530f34c", 0xef}, {&(0x7f0000001540)="d72f3146549bbad659d4b83ba8489458d6f40f0ccc224f027b8e3fc4f186620b2ec7b38e24229292bef3c94ef00a7c1a48bc262e6e2769c092af7f2b1815f65b3291e0aacd2a31d7d155da834994b2e5bed969fa53da0397ecee662e57c689de0af9feb49aed35f1693d2f13c5ab6661fd77e9a20285e01740d172a86bc9b556b71dc8e0d6b8da2c9e3560b63789c8dfb26be8239b1cd5c5a418d88e2eb6953b60bfa5c230a72070913252c50a6ccfec2f1563aa5b3f6510efa6a4a8e22df0f5d0a5d6b939534544ed730170a8bae8fd0528d3311e2d", 0xd6}], 0x7, &(0x7f0000002840)=ANY=[@ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESHEX=r17, @ANYRESHEX=r35, @ANYRESHEX=r15, @ANYPTR64, @ANYRES16, @ANYRESDEC=r27], @ANYRES32, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r0, @ANYBLOB="1800000000000000010000e401000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r11, @ANYPTR64=&(0x7f0000002800)=ANY=[@ANYPTR64=&(0x7f00000028c0)=ANY=[@ANYRES16=r32, @ANYBLOB="1ac7caf234b05d8191c8e8a33ccdfa2784cccc3736d55c63ca180a1d3d1f3677c0c6a3b420e9b94bad2a1df67490bc3a6db7628937a0747b3a707aefce2e4fe6524cc552839cb82497b8534f7301c26cb31779ba96dddd3fa6a90a0e3c6d8ec82e3ad25e7d50e59c76a536cfb81b3f6a550bf61675f90aab53", @ANYRES16=r37, @ANYRES32, @ANYRES64=0x0]], @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x10}, {&(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001840)="9321c43d904f5f2c8e7d7963cdbeb22c9cfb836a3cecf27344897de135babacb1d7e92c4e4e2b772e6b8c89241ce7f6ae31e803002c1c3d02ed5c231afc8bfb40f4b06facd1f8cfa8513d3d10bad2a1ff9e147913ed57efb865e4170a8a2c0b9c188c2b864d793899013177515a86dad0082a25269e458f03d0005a0de13274f13f24818e6158ea64758e61472243f0808dd26a917db51606767c03d47c043c5dfcfa1392aaeb8b57c8170ce4b3d4fd3e7fc41f156fc1d105a1c23bd1a0d34e2236298527f71129b0d24d55b25e7283186acf822360dd5c7d2fc3a566815157d0e0508c1d1e7a645a678dc", 0xeb}, {&(0x7f0000001940)="41a674cbcccdb2b58562835a3c8404cc9231f751aa16765cdb8385b8e01bd1d01574e88c24cd6e1ddb357b61f9177753a7dc57a2bddf1c", 0x37}, {&(0x7f0000002980)="adce29eef606fde373346a6b9257b01bfa090b6f401ffcc56140db43f0c5281167383cc58bd5fb829c228e7e6c82cb96cc2fa92fe552df60c30556a3fe3e6bc1a5c440feeb507e47300bdd8d28e129d974679dd3b58a3bf14dd746214095c4eddcb4b24fd7c95297e6d9eca08f6087e91a252941c8961feb5f2f5f0b944030", 0x7f}, {&(0x7f0000001a00)="91a50ec7913c0279a671ecc7ed06e4a0966cfa0d7710bc0a74345053714e17ed5275e5186432b5defdb7c22959bc67b53023597b6689f66183fde9c05d6da544892b9c8875cfacca34bf3d423fd99885d0425481d96a5866006736079b120b8c84818bc3d79a27d1792ca16d96556b408193a22376f67d39f3557517238fc456cdcdaa683b34576b93fad3958c441dd307711f933a1c97627017437508aae2ea2030b10e0869441e4618876dcb545acf9b47f2e7c08ea3615f1fcdcbae5914459376ed977f7b5c46709390f1b2af4a23a576b9a61c9bc5c2d0c270e05310923dfadfa134", 0xe4}], 0x4, &(0x7f0000001e00)=[@cred={{0x1c, 0x1, 0x2, {r12, r14, r16}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r21}}}], 0x40, 0x8000}, {&(0x7f0000001e40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000001ec0)="1a71c199a56958aa9f80555f126c4b365510bf735bf2facaf08f1e42101e4a9c5ed06e31bb9137ac88a5f1e27eed28be5da17b5e3f448990eb1c23ca567fec5b44278a75733df9dc5e0f68a206667778ed8b4bf69a555b8193acd79a66018f3bb3575913bd7d0bb84c229538e67dadbcbe3551f0d2a74e6adbb847426be1e9ff5ec64e9832e24894d67653944d2df39724b8e667475993511e44f1b262b45d86dc78a5b17da97bd63d0ac1d5c9f201f88dd3c2f8fe82f54d567438a252ad18c357122f828e0b7b6abd", 0xc9}, {&(0x7f0000001fc0)="e9a0c54402cf928c726710fae73abb928b361aa8ef6d5c62db06f08b0fc33e1dc1f53079dd7c0025d127bdf11739b9c05d3907a2dcea508c3bcd582b3d5b61b8646a7747ce05b3033fbd7f66e79e657e1214a016be68fcf2237b3ca1140823c4d9d50126a9d0869ce7b9b7bf604a4f26054a8aa49b3a2944a48a1c03bd59fbed36fd420ffa7f12db40fb3b429306439a000d6d7f1f32b4c8", 0x98}, {&(0x7f0000002080)="7cef", 0x2}, {&(0x7f0000002640)="b992f290d0d526e6f0f52a30f3638c1f9d51836cbfd4c1940011c5d5532f33d5cf82d825a5dcb40702d7762a15b26d140b7c94a15f91fee277d8fb1fffe81af3c2bd091c053c7e95b32c9e32a9a90f38ba36340ca28988985ee3005c0993e8d083055eaa362ef1d182344a27a2b638ac5886c9ceb3867f2b168d999bfff7d63237b6d1ee3a62b7c613d0e952686c4a5344de5f4d94ec162f47", 0x99}, {&(0x7f0000002140)="c24ba6692d73ece00362802ba0f77a162126aa9462f656162551a710fe00068a4e73a1c70625a52b4301167e95e4d3a11a6abc67a40d08afc9a872fdac8895d620d4caa9ccc1f3769d39e8c0510aca906bec51a1eb0bcadb10f62cc9620029b5f496358aa7e46372298eaed7d18ac512b96580491b23cccadda42fb2966980cc2f2e389555d6c75d81bb18b84498a5dbc2e86656074c43c390dea50fbae0ddf30b0e2e8f87042e50613e06e27827a1b2d6e4460a0c31deac03abfc90c8f64fc0ddb8cb6745c2ae745b5f45f6161e823bc36fa5dedc00", 0xd6}], 0x1000001f, &(0x7f0000002700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r22, @ANYRES32=r23, @ANYRES32=r24, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r25, @ANYRES32, @ANYBLOB="28000000684c2a837768481e9dd73c00", @ANYRES32, @ANYRES32, @ANYRES32=r26, @ANYRES32=r29, @ANYBLOB="6a294092a060bb907c2218ac312263e175390808c12d06b92a1436337f16dfdfe047fa94ef0aa5f8ab2fa5c7", @ANYRES32=r30, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r31, @ANYRES32=r33, @ANYRES32=r36, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4850}], 0x492492492492683, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) [ 1608.002011] CPU: 1 PID: 2089 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1608.009875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1608.019239] Call Trace: [ 1608.021848] dump_stack+0x142/0x197 [ 1608.025506] should_fail.cold+0x10f/0x159 [ 1608.029676] should_failslab+0xdb/0x130 [ 1608.033666] kmem_cache_alloc+0x2d7/0x780 [ 1608.037837] ? proc_parse_options+0x232/0x2b0 [ 1608.042349] ? proc_i_callback+0x30/0x30 [ 1608.046423] proc_alloc_inode+0x1c/0x1a0 [ 1608.050493] alloc_inode+0x64/0x180 [ 1608.054132] new_inode_pseudo+0x19/0xf0 [ 1608.058120] proc_get_inode+0x20/0x620 [ 1608.062018] proc_fill_super+0x1f6/0x2e9 [ 1608.066086] mount_ns+0xec/0x190 [ 1608.069459] ? proc_get_inode+0x620/0x620 [ 1608.073613] proc_mount+0x6a/0xa0 [ 1608.077071] mount_fs+0x97/0x2a1 [ 1608.080447] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1608.084949] ? rcu_read_lock_sched_held+0x110/0x130 [ 1608.090010] kern_mount_data+0x56/0xc0 [ 1608.093911] pid_ns_prepare_proc+0x1e/0x90 [ 1608.098162] alloc_pid+0x9f0/0xc70 [ 1608.101720] copy_process.part.0+0x272f/0x6a70 [ 1608.106316] ? proc_fail_nth_write+0x7d/0x180 [ 1608.110817] ? proc_cwd_link+0x1b0/0x1b0 [ 1608.114896] ? __cleanup_sighand+0x50/0x50 [ 1608.119140] ? lock_downgrade+0x740/0x740 [ 1608.123302] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1608.128071] _do_fork+0x19e/0xce0 [ 1608.131542] ? fork_idle+0x280/0x280 [ 1608.135284] ? fput+0xd4/0x150 [ 1608.138488] ? SyS_write+0x15e/0x230 [ 1608.142216] SyS_clone+0x37/0x50 [ 1608.142871] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=2105 comm=syz-executor.4 [ 1608.145588] ? sys_vfork+0x30/0x30 [ 1608.145629] do_syscall_64+0x1e8/0x640 [ 1608.165201] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1608.170070] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1608.175273] RIP: 0033:0x45a6f9 [ 1608.178467] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1608.186187] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1608.193468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1608.200747] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1608.208029] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1608.215310] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 [ 1608.229324] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=2105 comm=syz-executor.4 [ 1608.320507] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=2105 comm=syz-executor.4 [ 1608.320902] proc_fill_super: get root inode failed [ 1608.357521] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=2105 comm=syz-executor.4 [ 1608.393937] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=2105 comm=syz-executor.4 [ 1608.424130] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=2105 comm=syz-executor.4 [ 1608.465757] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=2105 comm=syz-executor.4 [ 1608.506228] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=2105 comm=syz-executor.4 23:03:29 executing program 3 (fault-call:7 fault-nth:60): syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 23:03:29 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2006, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:29 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfffe, 0x0) 23:03:29 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x400, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) [ 1608.547376] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=2105 comm=syz-executor.4 [ 1608.568344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=2105 comm=syz-executor.4 23:03:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='+v4l-subdev#\x00', 0x0, 0x140) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) 23:03:29 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:29 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc4800, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000000c0)=0x6, 0x4) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000000)) 23:03:29 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000004000/0x2000)=nil, 0x960000, &(0x7f0000000080)=""/132) 23:03:29 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) r0 = open(&(0x7f0000000000)='./file0/f.le.\x00', 0x2080, 0x1f0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e1c, @multicast1}}}, &(0x7f00000000c0)=0x84) r2 = socket(0xa, 0x1, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb, 0x0, @perf_config_ext={0x2}, 0x2049c}, 0x0, 0xf, r3, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x2, 0xf7, 0x5, 0xe46faaa27cd47d23, 0x42, 0x1, 0xc4, 0x40, 0xe6, 0x1, 0x4, 0x38, 0x1, 0x5, 0x0, 0x1}, [{0x2, 0x1000, 0x2, 0x1ff, 0x6, 0xad7, 0x0, 0x8001}, {0x1, 0x3, 0x3339, 0x9, 0x8, 0x5, 0x3755, 0x2}], "dbe6211e89e4a448865666a3b257b234e9fa5e7ecdb98e38ffc36fc12bc4fccab22daee872623986c5996c9f0dbf21eb291ffaf4a6f617e26ffabd76a6152d0040513ce6d3ffa376bc6207ec4be8bac94003", [[], [], [], [], [], [], [], [], []]}, 0xa02) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000200)={{0x8}, 'port1\x00', 0x8, 0x20, 0xfff, 0x2, 0xff, 0x0, 0x9, 0x0, 0x4, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) [ 1608.793977] FAULT_INJECTION: forcing a failure. [ 1608.793977] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.818353] CPU: 1 PID: 2122 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1608.826222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1608.835590] Call Trace: [ 1608.838202] dump_stack+0x142/0x197 [ 1608.841993] should_fail.cold+0x10f/0x159 [ 1608.846177] should_failslab+0xdb/0x130 [ 1608.850176] __kmalloc+0x2f0/0x7a0 [ 1608.853753] ? preempt_schedule+0x4b/0x60 [ 1608.857912] ? ___preempt_schedule+0x16/0x18 [ 1608.862330] ? register_shrinker+0xbd/0x220 [ 1608.866670] register_shrinker+0xbd/0x220 [ 1608.870835] sget_userns+0x9bf/0xc30 [ 1608.874556] ? set_anon_super+0x20/0x20 [ 1608.878545] ? get_empty_filp.cold+0x3b/0x3b [ 1608.882972] mount_ns+0x6d/0x190 [ 1608.886349] ? proc_get_inode+0x620/0x620 [ 1608.890518] proc_mount+0x6a/0xa0 23:03:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0x20, 0x6e}}) [ 1608.893986] mount_fs+0x97/0x2a1 [ 1608.897365] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1608.901873] ? kern_mount_data+0x17/0xc0 [ 1608.905953] kern_mount_data+0x56/0xc0 [ 1608.909849] pid_ns_prepare_proc+0x1e/0x90 [ 1608.914102] alloc_pid+0x9f0/0xc70 [ 1608.917664] copy_process.part.0+0x272f/0x6a70 [ 1608.922257] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1608.927029] ? check_preemption_disabled+0x3c/0x250 [ 1608.932082] ? retint_kernel+0x2d/0x2d [ 1608.935981] ? __f_unlock_pos+0x19/0x20 [ 1608.939986] ? __cleanup_sighand+0x50/0x50 [ 1608.944237] ? trace_hardirqs_on_caller+0x400/0x590 [ 1608.949270] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1608.954043] _do_fork+0x19e/0xce0 [ 1608.957522] ? fork_idle+0x280/0x280 [ 1608.961246] ? check_preemption_disabled+0x3c/0x250 [ 1608.966279] ? retint_kernel+0x2d/0x2d [ 1608.970203] ? sys_vfork+0x30/0x30 [ 1608.973772] SyS_clone+0x37/0x50 [ 1608.977148] ? sys_vfork+0x30/0x30 [ 1608.980699] do_syscall_64+0x1e8/0x640 [ 1608.984711] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1608.989578] entry_SYSCALL_64_after_hwframe+0x42/0xb7 23:03:29 executing program 4: syz_init_net_socket$ax25(0x3, 0x4afa3fa96ca6c677, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x13e) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x0) close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 23:03:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)) [ 1608.994783] RIP: 0033:0x45a6f9 [ 1608.997975] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1609.005688] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1609.012973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1609.020257] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1609.027572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1609.034861] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 [ 1609.120895] ================================================================== [ 1609.128652] BUG: KASAN: use-after-free in put_pid_ns+0x80/0x90 [ 1609.134644] Read of size 8 at addr ffff88803daaf450 by task syz-executor.3/2122 [ 1609.142104] [ 1609.143749] CPU: 1 PID: 2122 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1609.151552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1609.160913] Call Trace: [ 1609.163513] dump_stack+0x142/0x197 [ 1609.167158] ? put_pid_ns+0x80/0x90 [ 1609.170803] print_address_description.cold+0x7c/0x1dc [ 1609.176097] ? put_pid_ns+0x80/0x90 [ 1609.179742] kasan_report.cold+0xa9/0x2af [ 1609.183910] __asan_report_load8_noabort+0x14/0x20 [ 1609.188861] put_pid_ns+0x80/0x90 [ 1609.192325] free_nsproxy+0x104/0x200 [ 1609.196142] switch_task_namespaces+0x98/0xb0 [ 1609.200672] exit_task_namespaces+0x18/0x20 [ 1609.205013] copy_process.part.0+0x3c67/0x6a70 [ 1609.209613] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1609.214560] ? check_preemption_disabled+0x3c/0x250 [ 1609.219600] ? retint_kernel+0x2d/0x2d [ 1609.223673] ? __f_unlock_pos+0x19/0x20 [ 1609.227679] ? __cleanup_sighand+0x50/0x50 [ 1609.231934] ? trace_hardirqs_on_caller+0x400/0x590 [ 1609.236969] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1609.241744] _do_fork+0x19e/0xce0 [ 1609.245436] ? fork_idle+0x280/0x280 [ 1609.249171] ? check_preemption_disabled+0x3c/0x250 [ 1609.254203] ? retint_kernel+0x2d/0x2d [ 1609.258096] ? sys_vfork+0x30/0x30 [ 1609.261636] SyS_clone+0x37/0x50 [ 1609.261648] ? sys_vfork+0x30/0x30 [ 1609.261661] do_syscall_64+0x1e8/0x640 [ 1609.261669] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1609.261686] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1609.261696] RIP: 0033:0x45a6f9 [ 1609.285694] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1609.293416] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1609.300697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1609.308111] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1609.315393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1609.322675] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 [ 1609.329971] [ 1609.331609] Allocated by task 2122: [ 1609.335246] save_stack_trace+0x16/0x20 [ 1609.339246] save_stack+0x45/0xd0 [ 1609.342703] kasan_kmalloc+0xce/0xf0 [ 1609.346420] kasan_slab_alloc+0xf/0x20 [ 1609.350311] kmem_cache_alloc+0x12e/0x780 [ 1609.354477] copy_pid_ns+0x1af/0xa50 [ 1609.354489] create_new_namespaces+0x267/0x720 [ 1609.362760] copy_namespaces+0x284/0x310 [ 1609.362768] copy_process.part.0+0x2603/0x6a70 [ 1609.362773] _do_fork+0x19e/0xce0 [ 1609.362778] SyS_clone+0x37/0x50 [ 1609.362787] do_syscall_64+0x1e8/0x640 [ 1609.362797] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1609.362800] [ 1609.362805] Freed by task 2143: [ 1609.362813] save_stack_trace+0x16/0x20 [ 1609.362822] save_stack+0x45/0xd0 [ 1609.399582] kasan_slab_free+0x75/0xc0 [ 1609.403492] kmem_cache_free+0x83/0x2b0 [ 1609.407478] delayed_free_pidns+0x89/0xb0 [ 1609.411703] rcu_process_callbacks+0x7b8/0x12b0 [ 1609.416364] __do_softirq+0x244/0x9a0 [ 1609.420144] [ 1609.421768] The buggy address belongs to the object at ffff88803daaec18 [ 1609.421768] which belongs to the cache pid_namespace of size 2264 [ 1609.434682] The buggy address is located 2104 bytes inside of [ 1609.434682] 2264-byte region [ffff88803daaec18, ffff88803daaf4f0) [ 1609.446726] The buggy address belongs to the page: [ 1609.451650] page:ffffea0000f6ab80 count:1 mapcount:0 mapping:ffff88803daae2c0 index:0x0 compound_mapcount: 0 [ 1609.461605] flags: 0xfffe0000008100(slab|head) [ 1609.466185] raw: 00fffe0000008100 ffff88803daae2c0 0000000000000000 0000000100000003 [ 1609.474191] raw: ffffea0002095ca0 ffffea00019c6020 ffff8880a6423680 0000000000000000 [ 1609.482093] page dumped because: kasan: bad access detected [ 1609.487827] [ 1609.489449] Memory state around the buggy address: [ 1609.494361] ffff88803daaf300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1609.501702] ffff88803daaf380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1609.509047] >ffff88803daaf400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1609.516386] ^ [ 1609.522344] ffff88803daaf480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 1609.529697] ffff88803daaf500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00 00 [ 1609.537055] ================================================================== [ 1609.544393] Disabling lock debugging due to kernel taint [ 1609.550400] Kernel panic - not syncing: panic_on_warn set ... [ 1609.550400] [ 1609.557793] CPU: 1 PID: 2122 Comm: syz-executor.3 Tainted: G B 4.14.158-syzkaller #0 [ 1609.566805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1609.576164] Call Trace: [ 1609.578764] dump_stack+0x142/0x197 [ 1609.582404] ? put_pid_ns+0x80/0x90 [ 1609.586052] panic+0x1f9/0x42d [ 1609.589227] ? add_taint.cold+0x16/0x16 [ 1609.593186] ? ___preempt_schedule+0x16/0x18 [ 1609.597593] kasan_end_report+0x47/0x4f [ 1609.601552] kasan_report.cold+0x130/0x2af [ 1609.605771] __asan_report_load8_noabort+0x14/0x20 [ 1609.610687] put_pid_ns+0x80/0x90 [ 1609.614138] free_nsproxy+0x104/0x200 [ 1609.617921] switch_task_namespaces+0x98/0xb0 [ 1609.622398] exit_task_namespaces+0x18/0x20 [ 1609.626704] copy_process.part.0+0x3c67/0x6a70 [ 1609.631273] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1609.636016] ? check_preemption_disabled+0x3c/0x250 [ 1609.641014] ? retint_kernel+0x2d/0x2d [ 1609.644886] ? __f_unlock_pos+0x19/0x20 [ 1609.648845] ? __cleanup_sighand+0x50/0x50 [ 1609.653063] ? trace_hardirqs_on_caller+0x400/0x590 [ 1609.658076] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1609.662828] _do_fork+0x19e/0xce0 [ 1609.666270] ? fork_idle+0x280/0x280 [ 1609.669967] ? check_preemption_disabled+0x3c/0x250 [ 1609.674967] ? retint_kernel+0x2d/0x2d [ 1609.678851] ? sys_vfork+0x30/0x30 [ 1609.682431] SyS_clone+0x37/0x50 [ 1609.685902] ? sys_vfork+0x30/0x30 [ 1609.689426] do_syscall_64+0x1e8/0x640 [ 1609.693315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1609.698277] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1609.703461] RIP: 0033:0x45a6f9 [ 1609.706648] RSP: 002b:00007f522f63ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1609.714347] RAX: ffffffffffffffda RBX: 00007f522f63ec90 RCX: 000000000045a6f9 [ 1609.721606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1609.728868] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1609.736120] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f522f63f6d4 [ 1609.743401] R13: 00000000004c0df1 R14: 00000000004d49e8 R15: 0000000000000006 [ 1609.752333] Kernel Offset: disabled [ 1609.755981] Rebooting in 86400 seconds..