$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:14 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}, 0x14) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000140)=0x5, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r6, 0x0, 0xedc0) getsockopt$rose(r6, 0x104, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r7, 0x80f86406, &(0x7f0000000200)=""/170) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:14 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x3, 0x4000}) 00:19:14 executing program 5: 00:19:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x401200, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000140)={0x0, {0x7, 0x7f, 0x4, 0x2, 0x2, 0x7}}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x7, 0x6}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x9, 0x5b6db5c2133afcd8, "5661f1b2d7ce818447836553c4263b7c5d7838b24d8b04df9c2caa5de7ad883c0070336956d12044106c019799a7f5af74348ca5458a10ef40c51ab429f05d60", "2b32bb10eeeb6be2a42b843c305e115add30e7cb8145728065062b3ceab53a16", [0x3, 0x5]}) 00:19:15 executing program 5: 00:19:15 executing program 5: 00:19:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4), 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:15 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) ioctl(r4, 0x8, &(0x7f00000002c0)="06efebaa20cce4a95c0014f070f439d8d798102ad4d95c8c8b0fe041df63b302fa450d52394becae672670cbc5f0389142a55d5c9816770ce9db2103f374a1759721140d4e5bbd89f556f00319a770c70b324f9a803370e3f05719197fff2326177ce5f799b744f6ad46213c0a53db4952d6c17412b3b0e7ca7bc44f893959f2b5b15a3f3c4e8c474950d559e24869fb9818d4adbe57b4d58873798dfbd0c5ba03469c2acda91279a1e1d5ae7bcdb95d2dc30d713dc5eb8a3a4f40651d7f28fee4ac5f5d0615b9fc490900c6878f67f999500e8e8696ef") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f00000001c0)={'gre0\x00', 0x0, 0x4}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x100001) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:17 executing program 5: 00:19:17 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)={r0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x28, r7, 0x31b, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3008040}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x258, r7, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x114, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @ipv4={[], [], @empty}, 0x3f}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4ded}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffca5, 0x1, 0x48}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9aa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xffffff8a}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4), 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:17 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)="99b5160757c5e52c3e9d7d084452a0edf093d604131e4b06df7d42fdddbe49ce987e227c1324a47610e788c519957fcf1bac73a29aa3ec5b68f2173c77") ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:17 executing program 5: 00:19:17 executing program 5: 00:19:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x9) getpgrp(r1) 00:19:18 executing program 5: 00:19:18 executing program 5: 00:19:18 executing program 5: 00:19:18 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @null, @rose={'rose', 0x0}, 0x0, [@default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @loopback}}, 0x1e) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:20 executing program 5: 00:19:20 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'nlmon0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt(r4, 0x3, 0x1fd, &(0x7f0000000080), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@empty, 0x8, 0x0, 0x0, 0x2, 0x8, 0x1}, 0x20) ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x20, 0x40, 0x6, 0x5, 0xb0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, 0x0, 0xedc0) connect$rxrpc(r7, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @empty, 0x9}}, 0x24) r8 = semget(0x2, 0x1, 0x400) semctl$SETVAL(r8, 0x2, 0x10, &(0x7f00000001c0)=0x100) 00:19:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x1000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20038) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x4, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) mq_unlink(&(0x7f00000000c0)='nat\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x28, &(0x7f0000000140)}, 0x10) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r3, 0x0, 0xedc0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) 00:19:20 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) r2 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="7fa48c8f609e97fd2e3eaaab75ff9a2403c0988b2e6b68e17aef2e474d18265ed727a138b7e96233a5bacfb51a5cfe35e1d111dd51c8f8e2f52cc861b79b33cd05632c5e1b27d1209423d8bfd1197a5033eade235e3a707c8c5bd403d8fd", 0x5e, 0x0) keyctl$assume_authority(0x10, r2) 00:19:21 executing program 5: 00:19:21 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() tkill(r1, 0x9) r2 = getpid() tkill(r2, 0x9) wait4(r2, 0x0, 0x80000000, 0x0) ptrace$setopts(0xc606, r0, 0x0, 0xc0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x1b6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x22e) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) ioctl$VIDIOC_G_EDID(r6, 0xc0285628, &(0x7f00000003c0)={0x0, 0x1c938c1b, 0x5, [], &(0x7f0000000380)=0x2}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r7, 0x0, 0xedc0) r8 = accept4$netrom(r7, 0x0, &(0x7f0000000340), 0xdead17e4ede36910) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x7ff, @mcast2, 0xfffffffd}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r9, 0x0, 0xedc0) ioctl$FICLONE(r8, 0x40049409, 0xffffffffffffffff) 00:19:21 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4200, r0, 0x1, 0x22) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x110001, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:21 executing program 5: 00:19:21 executing program 5: 00:19:21 executing program 5: 00:19:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x9) tkill(r1, 0x17) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x653e562d4b6c669b, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:23 executing program 5: 00:19:23 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x37e, 0x0, 0xffffffffffffff77}}], 0x1a8, 0x2040, 0x0) 00:19:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) getpgrp(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e71485a837578e2fa8b621f354e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d5"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r2}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='bdev\x00', r2}, 0x30) ptrace$cont(0x11, r3, 0xfff, 0x20004000800) 00:19:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe3}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000340)="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") getpgid(r3) 00:19:24 executing program 5: 00:19:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x2) r3 = getpid() tkill(r3, 0x9) ptrace$cont(0x1f, r3, 0x0, 0x9) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:24 executing program 5: 00:19:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffffffffff0a, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:24 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) write(r4, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xe) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:24 executing program 5: 00:19:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x3, 0x135, r1}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x1f5) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000300)={0x7, 0x100000000000000, 0x5}) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000006001c0000000000000000f822f2d4a9b7bee09274164a9bc849b1573500c46d7955a5c1f1f9fc0e6704a6d627865be536a21e90a8c1f25828f0e72ccc81ed95b4e55974837a71575ea57371dd528b5307edd5e115bd40832135c5cdb528122d79c4c72e0104000000000000fa63ea34613a37ea5937836bd102cfda2cdb016c3b6c78eaed42ef3783630a12"]) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000340)) clone(0x2102001fee, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fffffff}, r1, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0xef2a, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f8cc7780dc26051d7096f2d1a6ded24d4b92b090c2d06b93234763102d03d1d06ff2c65aca7f18a820eec618e460321d69a5bfc027614e6375114151df4eca31f28b75e2eae1687de23c1b83bc38ad42b3f86265c84579b22ff3ffeb2047f565960d92f41f75eb140cd2be7e775dfcd6035a01fb6a0ae7b555fe453b4bf8ee324e9413f47ab4b4574a00274d1d7af844f9e8887ef5586be24571073cde5e33298da4ce4174eeefdd7f82d3d363696fe7f8464ca3ba6aad02dd5befde336f7e09009ce2e66ae71ce4deaa961ad825f1e2a96290915816cf2bbd27a043b79dbbf3f482b784", 0xe4, 0xff}], 0x10020a8, &(0x7f0000000200)='ppp1/,vmnet0\x00') 00:19:24 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) socket$inet(0x2, 0x6, 0xfd) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x8, 0x7fff, 0x7fffffff, 'queue1\x00', 0x39}) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000000)={0x3, 0x18, [0x1, 0xe5, 0x9, 0xfffffffe, 0x7, 0x3]}) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:26 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0), 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8100, 0x1a4) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) sendfile(r0, r1, 0x0, 0xedc0) ioctl$KVM_NMI(r1, 0xae9a) 00:19:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8100, 0x1a4) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) sendfile(r0, r1, 0x0, 0xedc0) ioctl$KVM_NMI(r1, 0xae9a) 00:19:27 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f00000001c0)=""/229) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) ioctl$TCSETXF(r6, 0x5434, &(0x7f0000000080)={0x5, 0x800, [0x758, 0x1f, 0x20, 0x80, 0x8a11], 0x1ff}) 00:19:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xc001, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r4}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x7, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r4, 0x4}, 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', r6}) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000340)=0x7) ptrace$cont(0x18, r0, 0x0, 0x0) set_robust_list(&(0x7f0000000280)={&(0x7f0000000180)={&(0x7f00000000c0)}, 0xc104, &(0x7f0000000200)={&(0x7f00000001c0)}}, 0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) r2 = shmget(0x3, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) stat(0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1a8e7c16, 0x6, &(0x7f00000014c0)=[{&(0x7f00000000c0)="7489d74238a9b50f48b8cf2cf99260b20649185c166880e71bcba1ec70bb98ba1610939e56a2d8ef5b9599636e6c22a6e1c0262eede7dc77d72588f0f58ca8325f390a02a82409ed3f6fee3eb1b8b79ae95142a8ceeb5749a6de23fa", 0x5c, 0x9}, {&(0x7f0000000140)="b77bd318299e2449785a70f73925", 0xe, 0x4070826d}, {&(0x7f0000000180)="19330729c850bc0691d7", 0xa, 0xfffffffffffffff9}, {&(0x7f00000004c0)="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", 0xe00, 0x7}, {&(0x7f0000000240), 0x0, 0x8}, {&(0x7f0000000340)="6ecbd01a6dab74d28057706ef7cd24b848f39f314194f8333c09f547efc6454227a970d8224567c8babe1033519b504aaacba87f13e8ed14445c86903efd33b82972f9c5806e5c42536d0e00ab58b60fdc0148c2f91e1fe30854ddda267e2221f7e27705d9c742eef9faced5c757b7", 0x6f, 0xfff}], 0x2, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYBLOB=',euid', @ANYRESDEC=r3, @ANYBLOB="2e104a242bbbd8299941a7c44c76548c5b4fb00d4ec4286fca4c3658b153ef726f3af5a47d766c97d83002fc5290fb87b481bd93a9b2828d2d7f9dc89d46eb88d5108b2582cc9eee789c9274707b18c8086e"]) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r9, r10, 0x0, 0xedc0) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000200)=0x0) r12 = getpid() tkill(r12, 0x9) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x6, r3, r4, r7, r8, 0x10, 0x8000}, 0x2, 0x1, 0xfffffffffffffe00, 0xfffffffffffffffc, r11, r12, 0x3}) 00:19:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) write$tun(r1, &(0x7f00000005c0)={@val={0x0, 0xeec}, @void, @llc={@snap={0xaa, 0x1, '.', "f88932", 0x800, "d77bc23ebdedf0b47f5eca05a33d5cdec7136fc91e3611a032b442ff49f8996c2635a42fa1464d066aba98858e8b7010ec0a8d374feee4765674e84aff5ffa4dbfb990594f1057cc0706946d7d2c2d1f80d053016c4ae4aa5b5d8f21ce8d1ee72992b73fca0482940500efd9f52d7ee2bad9038ebd23aadeb44450acf32494cdee7df9395265334911399289c8f1aa2198308c5388b8c6afecc925b9587452b06e4f04c0e57bb94e10076edb853a3f38b3b3713db781ae0fbe491d35463396a8b78b8291ce9dc0851c81393dd5381a82ee1483f232389f6a24821ca560f680ac5a6434a5d368de7e7a71a4b17c2ee0904dbed595fbfba9480dd1af9b5ee860210635567870d270207c0c9ab9b61cfed68846f447f98f2dd6110f21e4587d8c8d7dd7864ea5817736e26159abc6d4f9dde915e962cd83e4945832134cc8b04911afd8d43d7dbd49025bae56c719647ceeded68689258b9ce0153037a9c7705f40676edc2d4b5fed90baf3d7a9e7d248e3814b6c93b9873a4dce6bb499c20edafb6e6ebf9bab6ce15fde9cb01ec7a934d5630e25c5fc78941007750ee4453eb46ceaeea17e9ff18d74fd60d1cc45ed224974725bdc3bf4935af6102d249a2099a2165d8602f8f33232ca2dfdbbb89e2716ac735d352829694bfeb21fb90de7dd437876ea3b67ca388b656b113e73003bdb4d2c2abf137654474004f4827490f9e2c734e9e82e65580c8c3c06dffd861fd9c0840878333f61f799e390a31470c308a368f6b17b00c8ec828c71e5aebcdb2e925e8b5834582185a9701e69e50fb3b1e29d16e1c76858f1438c625cdddc6d2b7cdb0727d137b6d33417bcf8849d0a536aa0144476163f1b3ee036dae6234e2653d737fb635d002044fdf320a2813f6f18257a0dda078ea40766f04224331fc606fca60f8990e237d4c6e7b07dc2f7f38ef46775d554449b169ce38c11725d343c3def0dc8849be9d18d81a05a64d44cdc2cb125e1bd88995ae6ea23521802547c19ec4326a2d2e6761bd9f0e04d6b1593a6acaf9b5b727b84913ce8abb709757405ca73f42d7a24558b256ab3c5b0aa2a51ed103acdc4644fafdf7abdb4c9ac963872a16add741656aa724d13932fd6644216d715f3c57d78d32066dc2ef3b21c275b28ea1a6aed6f9f32d2dc2f693693c7035ec013d69cf74d219b98c59f0070b73211dd71b065c3f328c0453efd7361d25378fa415832dfcfd073148374929a5ee70ed3a4ec512b60c58e5773b1ccfdd925dd7cdb93e3819da9b9f49b5e288401884791be9be7d71ab3b9f36e45ce9fda3924cdd3933ee62a8e0114f9b1d5ca157d8d0072345acb4e45aafc70b2c4a3186b3b6cb61456dca9366873a247569749c06bad1b0a56050e7fac312c1471c33bb598af0702b0832739a09a1422cf23b96ba9282f6c7af1927681265f23f4631583696481a2778427576a57d60f251c862e2805ce27bb747cd37a9a5656df0a1c3b6a959c0f3e4453652aeb3aaadc49c1773e007f3fc32f988c2e4eb9716c280662c3f322a6d05881dda5d2180ab663be8617d5145b17a0ecd0962b91a767355a9f6177357d3da2c9d325466417bef86a4b86b75b39f1167073e5e4d88b17fb9010630f9c916edd9c45734b33a2432a89315a359e613c53a0078ec9a84d40c69be350b0eaafdf7339779095609ac1a9a6020b5c83a6c756a222129e1f4d1b76de5af4a3408d723a02282cce4b96059cdb13ce986dd75853cfc9d9e9b2115f7c12569a723bc012bdf651a4df50f31a6d694a3e29923fd6776bd8b6639108b1c38b2f41fd6dca8316d51e87f48394603253234ced006a730506c7b2cf2c22ec51ceab0fe68e6882a15e9f26939daad2f9f760620d6783865a1d444678574f3e82f671129a73fbc3546c8037e6582fe571f27957f16d46fc5b7deb916b83c3340750cec1e49979aac680668e4af43d3da0a7fb093eeb4cd3e71417e6b8753a7c000f41617a7cd8b2c537d75013d78aa73e57b9fa7e798a010d0f6f22a2b469350b2de8f26e0c3a588a753c9f5368a9bef8f8adc1c1605072d29cf9bccf93d4fb93fd1efc4db4b686972716379513b1e77a5eed2e998f91b8d3ff91809f7f1794dfc1b890a92b5059f6fc89be7547db9661055ae8580e22972d70af4513241e92f4a78e1712bcd12500056cedb01467d2c741182fb331c796d15c801bf7a64837799d8e8f030257471d3b6e3a541683ba35113a592bf1e56d91210ad152a70e6d0eaf9010690f1806ae93bede5b9b2673f7ed9f994206eeec56cbeea697094c92fbf45cded893e5cb23b3e843687ba8dfba3678d48f0c55ed269afa00e4a0d4475adb1290a64e2a90274d3f03216351843d784e42e1b940084a516525098443b3aea11aac1c2549e282ebb5413aac6accf39145bd07c923db445a0b6730fbd0de18985a25f73e9ef23ca5c13f20e651cd65df84d65787a6cdf60a0cfa10202aac788ac1fcca2bfe6f551972dcb341c2411d111cee2f0b68a3f9fe8b5266c288a13245550ad308ed96d0a40145a6ade5c839f6b3ea9bb98427c723170b0cfe2fddb12136bc7041a40299f9884e668eace4138d6c26fdda5baa17e61558ed667500cc8cabad95eb03a264e3c6e92146c17cd759edb9a2a8e58f72864a2170634deaff272f9d060c8905c17552e22a2c6a7ee61e414ade4307ead1ea65b7708a67f9ae66465f62f88ff74bc6c08d9d8f73ce3fba3d1ff829d484ae6c93b75a71a1d47baf8be8b6dc7d9475ca894b7d396ab4a627f80b1a6221a5606e7d21c5fde1721cc25229578073ea5caae8555c6e39708614a1981043128607548c7ab55b6351dca741fe522f396b04cd5a1fd19bc8690431843f76552c0c7fc43b15911c77cd6f05038afa6963f219369ddfbb1080809ae006176b237bc033c960d1d87aa879c658f2009e523f1b4ede5bad1ebde6a93b9f50cf4c01fa78012a7a28cd7e228ba6cb1e16524d3352a7a0a58aa0c8fdd705277504bbb88330131328d90d40d9b5246571007674cee694df73fa35d736142b1856e3cfcea35b6141914a897363e31b75ae444c358a24264025bacef3459d0be8c071504766201856971335acfc827dcfcaa72f103083186c4aee5381e499c11b49cdefa4c8d46063712155cacb65a90206d19f002e445849b2e59c6ddd9ca89596e236ac6e9a8456abcdf631b5934b99a548e63bd43ad34657addd07dfa1ca2ae922b8923783bd6af364a4154e760a1edea064c038aff8350676c1fce96b5fb4c30b531e45a84d259dceda8bee9918f405fd550916b766f40980b729470e584a2e4987451f36265bd86bce496a5e34fc9c1bfb4a714f9174072e6a90c0409dc3ba4d21baf12d5033f30c4d286a2f1c5b31480ca94f53d41559ce86f30912acd7500cb9fa9b9609acea80f865b5e83661d4c62473d03c54e98ff8d936587671879cab1ea8e0a20b3c98122044f41229b795555d53e9ca04df3fb959f628d4db6b886d50159fa20a628dbb52a06be4c0f1b84fda79a98a49b2469c4dc048b284eb4de415a6ebff2ebd01227004678c03eef4f8dbc5a4b96045e4485c6afff54d89b89d71bbc082a667feb21e7fdb5b5055139fff3627ac4e46b6719d0ecaf49e032af8038565981e7556cb74a36e062db2de1a8cc708a152357bfa3c13fb75adba8d1641688f1d0cf26ebedb1b7b23b59a498179c1b02303817aaa0696b26e90b83c12702857f114cd8a984be15e3046a04eb4b784ac0a63ee12af1ccea9040f22729c6b8769821d34e631492f6ccf6b9ed8ee5ef816ea746459093ede0ff087863120c81eebd266cf125c76fcc2fe428f9deef852fa8842b0c639db1d1bf9399ebb510de083fdde2db84df933ac4d394c6bffe11efb34827d5cc39389b597fc17d4871e7dd40acbdbfdd010b1a46427322f9a1aa0cb11405377cf16b5a17374c360444041e5bd10f85819f559ec7dc41831e8aea23ed8eef156513303189d7699220244c80a8710c0680b3b697474f7a4d5caf931c9bde2d05af339523f179bc49514c7fa618df8fe03712bf2a7470e5203735115a26363639f4cc6bbbc454e9fbc0214b0446d8ef7e61ebf550dbd8d6e58a0d2a8d74f261b434b95344dbde509aca1d3fc2cf93001bcec3a0b67c2f91520c8a6813fcf7626b59e5b913dc51a9ae85f347d2f3d464cd02852a83d43ed23a12d6b3a6e7d476efd7cec373c5fc2fcdcbea9ea7f4abb36bd1462454d38556be6c8fa5c33581237fc3e40024658248a5924fa7db505e06cfe55294871ebf8d1ddf8fbeeba29f45bd3d606682815ecc3de4e42fb42d74ed96598130ac7ca2a0a19be982a0bea9c4fb1b2101e2ec8e84d8681fd4e45483a7caca9f19fe7d88e2fe9fd7bed52543a575db5cc831cf85f4489eb70e431f87be3f3caf7a0de420690bd70d96bb4c2d2dd4760dc2be7f5d0c7ef752f119748cb6115becba1160c9a613fbb383c5d93b44468832d8a49abc0b8675b263741f5c47de6b8ef043a7b70c3243869dc9e7f2fabfbf8003680157d862b6131369e4cc2e5e590b9d6b5f35f631b6121e4a133bfc0f7d7bf0517cdfb29361155c32b824ad106485e4a67830010b1934356f5e338cde5d9e20b4a5d5bc708525063df518df869456dadd2b1f6fc78b71d1168296a3a763c343938f8722af2a617e7c121f807b849d2c9676ba48ab1d7a03c838588141240b62e040169e65b269e1b27e917549dabe6bc6b6814534c67a0f882c7c697403f32a636e4ef62b7077a4ff81e2f38276d6770e8432b8edea48b3cf6714cf2b209809914520567d5fdb1bf28c4ba2bf63cbac9a8ab0d02af9e176eea863922b349c1e33e8ca6bd63838342c46e541d50a4eda2fe41509682608deff523c61f70200a2e1cd64005d8ec32ca69967d331d27eaa77d8f6780fa7d76d39a02af6232ab4c751b03931c662f1265522f2aa5dfb62cccc2a53c54ca09ba2c12529d8e1d9c7cac084c8cacb28590705025e4f5ba20e44ace43727b90aed4903355774296c4d6ab72ec4bdf5cac354c4eae763a63c9e5727c261c13575de08564088ff583a5800f28296781485bc120873ebb452874860367596c50af5583d2743a201393dead2c148ff26d7846e555fe6334c4ec6a87a4922fb5cd5bb2f63578ed79020f2ed58f85d40609dc219fcd13444ab18ac61448643f5d1e256d27bda9c5146cdd065ae89191f99383acec5cb62403e6cba5e8a9bccdbc8fbadf70d697fec5b1d21c27099a5d86da81f344bee87007b9ea68c1e8702266fd76b157e68c3b73c493f953d19c4e5757f5298f0e1c6664c520fd4d6281b664d2d79e6b70f9077493290d417678825da3b0f041fb22d7cf84460ca0b727780fb1e51b612eef7fd0e0edba56655f4cc99ddcc1e573dcf53b5dd3509a8b9fd25067407d91d7800e6f6d1122cefc3f784f5225ac210c08afd9963ee2f0e892283a19148cb1b603c00ca11e0b80d060c22174a3ffb9622301328958018c80dd0b8c6b2596584d7f689eab0121a3c09d045aa774739ab85671f4324ce1f73dfa295eb8e07d5e22529b585df240f51949cd26b945c3894fa6c019b217c4c2c650a6e545fb24a56e247dbb4425fe4b1f8dac2f7397352e69f4c637ed1e398c104dc5ec657e0c2f3a303463bac36a01d53b76893bfa287180ab47676a014dc3fb7da95006f50d9779945688170ee2e18bef2874c8555be12fde4d24c43717af3fb7c819df043de0361ee8f740a5503abc8d677ee89d17e6cac56db3ee07d862d3f5c7"}}}, 0x100c) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x10000, 0x70}) [ 498.931917] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 00:19:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:30 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0xca35c2c4ab6e4d13) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x100, 0xffffffffffffff5b) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="095367219f8c"}, 0xb3446ffda2b4bb49) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:30 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) r6 = syz_open_dev$amidi(&(0x7f0000001640)='/dev/amidi#\x00', 0x400, 0xa500) r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000001680), &(0x7f00000016c0)=0x10, 0xc0000) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r9 = getpid() stat(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r11, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r12, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r13, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r14, 0x0) getgroups(0x8, &(0x7f00000017c0)=[0x0, r11, r12, 0xee01, 0xffffffffffffffff, 0xee00, r13, r14]) r16 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001800)='/dev/loop-control\x00', 0x101000, 0x0) r17 = socket$l2tp(0x18, 0x1, 0x1) r18 = socket$inet(0x2, 0x5, 0x7) r19 = socket(0xa, 0x80000, 0xc5) r20 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r20, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r20, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r21 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r20, r21, 0x0, 0xedc0) r22 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000001840)='/dev/usbmon0\x00', 0x200, 0x0) r23 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r23, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r23, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r24 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r23, r24, 0x0, 0xedc0) r25 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r25, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r25, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r26 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r25, r26, 0x0, 0xedc0) r27 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001880)='/dev/cuse\x00', 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000001940)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000100)="51b9e9dd94544c7686c6174f4f91a0f094d2282ebfd2caff1efe863938b89a71ee1f0b1ff9c9e10d369406d5b88e7d5bb9d3c11f2d891f7bf6d046973546f15e900b12dce338e235c9812694162b09c6c4a0328b5ffe74a0f220a3fb", 0x5c}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="2898a7db8b47e111655ce3e04e4dd2028be398ae0771ed56e8d987f5a005876f4429e143400b9165a45005e4517adec2ec084aa35af94cec7cece4b4d503d81541dfec02fa491d643e0caa233de9e54e33f7908b9b8249836354823d99f0c53687b7709ff65818c27c0720afb0fcdcad069263d7d2a0c62e3fe9", 0x7a}, {&(0x7f0000001200)="5a14d27b9dd4e0218d33f1854d322df06a1e3aa486c5b5d894c5b36c41be5c3c7b8a5165367fa4e5f66c1aab35", 0x2d}, {&(0x7f0000001240)="ea41c92c4fe10f68cdff730972a785c9c06ab3ed3c5aee2178e60b549c37f47ad59ced1ab0ac5b7eae831bd361a7c983d89524b9c54b5bd2fd5424fbbfd08642566fb09f39f77dbd7b5ef42d48b06a6df49d0b19d4114d65af2a84c17daef8cf532db1a7e782210319c2557ca85289df2c724d7c681963b6112487878d811c0475a536d374d26012aa59109195a21794ce6bce9dffac48231108db697041363c951597cd0a1147ffcd8c258354191ec530838c83defc415a", 0xb8}, {&(0x7f0000001300)="691557144a4799bb08f0336e0d389abae13f554383", 0x15}, {&(0x7f0000001340)="8f1dd1c860a67fef36381036f829f535b5bdaefd081bf35075cc570ec5d30b16e33ece4253ac8840a9756b93a468f81d4121062141c60a06012b0f07840fe25d093ae23d7ace45d4c758d4f6b40ec48d760a8279c6a09881751013699e50aa5f92bbbfabeb4c260baaadbd563be95f5a9a894e55baa227134b1c299071a4e4f63bee66b18147650614b24d3256a01cf2fa2474b8d9bbcaa0a96d2127cc87156137cee220870e02690069f4eac2e47a6ac7fbbfc20bd01e259a6c8d83", 0xbc}, {&(0x7f0000001400)="1f9f2b24fbc5f3bd638a8d6d885e80af6472736be795e2e883fb49c66d989f103d3074e69c8ee1dff2826634676c98320e701b8c04b347f9d4eff10af81ad2b7dee4e934747a9e9e3e0be623a7be61cc39c5dac02bc1ad93fbdc1aede539d03e3615a1bfa8472680315d20", 0x6b}, {&(0x7f0000001480)="ab223e0e74ca69c59d30eb952bb305836a9e80d4b1c0fd795a88870e22dbc00461bde9ef6c11b4dd40fc84be47a20151c8e13f2a4beaa307fa911dcfa73d04d3bd8b4fe55770983fb0ff924c680afad2c63ac4901a2d344b27bcd24997d4e27bb26d10461dfdcf7e81ba6e79bc3817f2c0540a2f55129530c0c61e3ce0619bfd69753011e42a61cf0b2ad5caa73278c257093430135792c05ff41ae46af2cfda3e070b5896a9e27623e7eaac3bf8db7dfb8bc83883c1d196bf66a901aa4296c0c551b824b295e9b551365c9bd5ef1394dee5af77897f4316d7ce8061700d0e6ebf088b52b649471ed3af30d4aefeb7752a3069397122e4", 0xf7}], 0x9, &(0x7f00000018c0)=[@rights={{0x28, 0x1, 0x1, [r2, r3, r5, r6, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r15}}}, @rights={{0x34, 0x1, 0x1, [r16, r17, r18, r19, r21, r22, r23, r25, r27]}}], 0x80, 0x8008800}, 0x4000) 00:19:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:30 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000280)) sendfile(r1, r2, 0x0, 0xedc0) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000000)={0x401, 0xffffffc6, 0x9}) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r4 = socket$inet6(0xa, 0x2, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="00fbc400067a17949e1fdf694745b34d671cb03cb628b2893203490111d58d65c29db675d82921a9bddfd37bbd90dfccc5bcc8075ab9c749973c3cc0656624e2d2dd2e657fb477d76e1cd680cc28964ee1b1d03444e83dd5169b3441032585c73fd8dc5aa8be44f747c041db4edba4df1c47bc5316d514094a49649cefc55088f5a87ab762ac6b76417e546e0be3404da9751ccd58735d75e4987f8826989c79c54a9e808ff309808239f8ffd16717bed33ed84659e2f7e6214ce3cbb895b3d1eda8733ca30d001b"], 0xc4, 0x2) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x18) truncate(&(0x7f0000000080)='./file0\x00', 0xb3) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:30 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, r6, {0xf, 0x4ffa515846fa247e}, {0x5, 0xc}, {0xfff3, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4910}, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:30 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009000d000000", 0x24) 00:19:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x9, r1, 0x0, 0xfffffffffffffffd) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}, 0xfffffffc}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r3}) write$binfmt_misc(r4, &(0x7f0000000080)={'syz0'}, 0x4) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r6, 0x203ffffd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r6, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:30 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) r2 = shmget(0x3, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) stat(0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1a8e7c16, 0x6, &(0x7f00000014c0)=[{&(0x7f00000000c0)="7489d74238a9b50f48b8cf2cf99260b20649185c166880e71bcba1ec70bb98ba1610939e56a2d8ef5b9599636e6c22a6e1c0262eede7dc77d72588f0f58ca8325f390a02a82409ed3f6fee3eb1b8b79ae95142a8ceeb5749a6de23fa", 0x5c, 0x9}, {&(0x7f0000000140)="b77bd318299e2449785a70f73925", 0xe, 0x4070826d}, {&(0x7f0000000180)="19330729c850bc0691d7", 0xa, 0xfffffffffffffff9}, {&(0x7f00000004c0)="38b87db6986cef2f2d1a4450d377b6e920dfe43c11bcb444e5a30178c04f37b5a32727c1608fedb5aa0c0dea554ade411cfd42a973b58281e1baf136bd9fc621a06c9fa7ea096395b2bf28e1df14413083a7bc9c32fb0820cd71a91a0b98e09d0f2f21fee9fbaf83999f14ddd4e7fcfa9352f66a2c2b7c0b978ada828dc07faaac9c7d321d33dae3bcd98aca8f1028638434607cbc8612137c5b830100f587915e5f036c2797dde5b47250d9b0d656ff185f35b3eded8ae7e6ac9766189895588d0efc9c7ee96bf7c565f8ec1ac424b472b5f51555dbb8659a093db427701c47f8d64b7cf2b4111a3fba0cc78c8beb8e6471ee742b6da3ac3683b88843b15b0f7c3d5c8ac216d837c4d0fb0f7ac75b3754b0e2c2dcab05297ee497e6cbd907668ae1bace5557dcefa4f20e0c8fe69506df75cb062d7d9cd29598d880867df33c5f55a339736dd6eb9c49ed78a997fdc8c6d4ad2f2f3dd99e96e5c315404657cfd90a0b7814fcf3cac67b408c3719a8efd1fb68fac80a9efe787a21fda74f30fa2f2785a9a9146dfd00117517e850e4b1637f1a4601c4b3d79c1dffbf58d44449f24d615ca3b17b36197d87da47002e27c067d54f674b247d4f29fb271be97f0b0f611704e0e77fea9aedf6b0c22f01153fa8d99e89eea404b1dc768c8b7167fca4ce4b8f78c448da0b7bca64e31458f8bfd0fcd36ce840b94c9ef317c935b0f57ba4e1ddb2dc255b471fd5fa30119db358221c7f846681aa466ad6b795e3df8703fe5d7a11862e663a36606afef5772caf023c2ac58f7d52901633b1dead97b8303384df206084c59be554de115d1d47dc842a41f2e4d3bbb62cbbecd99c783680448b459c1e6d06b8db35968df63078afbe461d34c841d86dc7f301db6fce4c16f9bcc88ab6bf490a8665774886904df872d1f85f2b964eb7f14733b6ae72851d0227044f65596597c5feded39a05c7f1afe99358abd149a8c2989372279d3d57e165be4a16cfbd1d6306d00f18e3135e05cb442f5df316757470837042d9aeb2bddbf7d263d160de3ca7059db4d5eb30044a08158ad7c5358e7dca596aa6b657c23d236a4acdf52c9d78a4ee1f35c854b158ceca3dc40c08de86ed93c56a2ac155bf9a69f05e470f3f56f17cb998523df813b256c9ebc97077ea87db1a3c7002fb7f2fdfd6a9bd0c9ddec03dc93bfc2a1fa7af4cc40dba49536d988f6d6c9985380eed57ca1b978bb13c35b435d4cde6630767f1a148ebeb50c1016f945dba59698c9c7510b8e5cb7cd483e77175aec1e2ffe946268954e1e306ebf43cc3f0a39cab456535163398a469f1cab3763959cb3257422903f04a5adb3e252b69dfd2fc28fd904b7697c5e84fd0ac1b166e38bfdc2dc8e91447383e61ae1f4012133ae3af75589c5bf327ea8b58d455f33d2dcd03ddbb853b6e7edefbffd9e1fdc7389261eeb991c1f143bd68c4ca8892671e2d11a46e8fc71d1e28c4938d6e2b442a6cb538b649275efafe8e481d95dba9d29bf448890df5102485cbe262e3b53c2088888c769ea4f7443bdbce9c3412fb41fecfec172090f65c00b5a7f6edbeb7a00bfc5a8c711f54da1e4e9eaa2c20c5bba1b79254d97462016269d11994bcd7cb43dd19ee1f0882224bbbbff6e7c00dbd9694512cf26349fcfe2eb2307e2aa5e246c2204acaeb243a35c1184912839f74cddd9d2938f1cd5f5491428e43eaf77ee410ce76af30bccb80f1683555a3199d19195cc6d124e45eb8e92b3f7a672d68f58866e487331fce9db6a934b08d0b850cdb0fa1efeb13e46f1e410747da114055d2534215ebd2347cbccf99dfa9ef772126ba998bdb69b3db50dbec68c6ea4983eb5cba3d4ce48025f8d3ab7081894af5b0e596a9609cd36a81ff8bf7438e67ae93c6ac5a6ed34ccb8a699638cfe6416b919d174e63da86c206353943eb6abe7e223936e515bc93d4a4a3c72cb61368f8dac797507e2733600ce2641456e21a7b3c2182b22184a15854e58bb1e6f9d0dff534e3dae879fa0dd397da3358c3083cc57328d6af70e6dabf6c7c6c7b55c489f50ee557853478a7ce5185b5ab08d782bb356844d07d7f9c8946776210d05b854c0170be9b1b0c8d8260fc9310fd822ab58e6d7eb7ef61323bd19db428291068dfce8d6ddc1403d489abe6f7a030a731514144b72284b84e61e9f57e8034dc72ac147c4605352c0fbae2fb03be7beb9f1fb6061022a05203abfcf603d7feaa25b1b446cf858523e1d31814be84bc6cfa6b0981f29c88875ec356547e34715c6b8b4e4be7c9ecb148cb644b94ff0879a3594b2fd93fa797ef86d0bdccaa0998d02291c9fd0233e458683211f270e07f1d319011bfaf7826c1a9297740be297d0fc3c52e77c245096d3ab7c940ed0781586c6cd287d22db4d5db70cbed2f99c2d729dc93b8cc0c709c81b55a3b231b60c1e4828005ab5f53c646787ea57a67aa8f14100fdca6d2e0e86da3da3439dc13389e3a217941bd67c74d7948bca0cd94167be281d1c8b3ee90e56c4fc85a0b6fd28829997891164ac4edd2bd699715fe85cf7b7a358582d84991ef2ddf76fe18ed4022c4ac03d1b61d77f0389e1c5c9405fce5882af581583c2feb775e303ff4328c953b79ef5323da8b07c9a1c909c848090cf86d0581f8a69fca9d2f9074c62ebfce6336b9fd686e186444f48376299f5df3d60a42f382e7ca733983b6f38c832cddcf16e28258dd2c13a2927bbbd62f02c839715b82e2a7c03520bbce25d711d66f209d4b0f1194d6d0ef98272f7313f683bb366258efba0b14b4b658ee18e4115fc1a97560e0153f49e1104e8c143b887cd3fe2ddec05fa9ab8cd48795e2e7b097c23060482a34cef854c12d09bc096c821509f23cca3b5e27aca080a90a5989a3b83141ae8dadfc61d8ca1d1f9565e06e801ead0abe1815728868726f97babb37c04ab3041e629008513eafd18465efb1e160c80f5e397e7383489c9e864a946a643f1956b3940dcc9fa08741a7d4011902188df228ad8571ff6ad2703a1a894ec41bf1bdcf598f95491e636de672433b14696ce50d2350136802706f1649566304f8aa95f62ee4c176108260193d3772ad549b05632cf640d1274ee8b6413884bad5fae3e1a6fe15b4542c2a91635f2156ea89fc57dcf92165efa0a0d2cd5e255cfaddf947768bc8e05fbff0be3b75da5dc4dc5ab94847503b52f1cdaa45cb9a3b837753a06a8820eb4bfe05a5a5acdf0f85766ab564ec973942c9af6228763f09e736a712a6ac2a15dc3a428133361d5c853db14a0f63569cfce67de079e861732c7e01d10491931803d01cfeaccaca14661c93ec8c056b3c8b1ac30a23a0102a231e2fd7abb2c730241630b4022c163b2cf308e799015d94faabf71330fd9a92942ed8b7157f43db977fd1f60a950384499eca076049bc75bf1d7c5a279508e8173a2303841489b2845f0574122edf8ef97903d126195c1fa7507693a5d373ec9da8bee0ef34bfe29b301730bf4e30f2c056f28981719b4444c9f2595031c35810e8f26b6f413d16e866ca402fc1342f9fee60e112e9c54b96534c73ea1944f13f463537e55ceae3b70ec8fcad0d050c97055afa619fa9dcba70d6167b15cd7c5a9487fe8c35db3061713cc258ac31756c3f26621dba60e06dca53269293f8c6d1e51ec78a584467ea88fab969f5bb60a00b3f607ab01e68a099b204af448dfb74af47c7bb855a2c6a95d7cd77a5b5191d5fe86b36d35e68b0cd218a3ea5e5477cda81b5e3fada27b119405cf49e7eb83f9eecf1cd8808ac4d06178cb141554e374dbc2c98699bfa2591a1e149d97668b027995c82f898d14e23e650097c921ea8502d98def2b9fca6e8f74a94bed58b7a8fd06b65613429b50c6b31ba0e124ce37d264b1816babaa7b1b0649c8c462cc5f5f516bc83a94087577c139692c52cda35e58ec6d360d5cdf76c89ab5dc6998c45aa622e262e11319fc40a3431c8db067ae600f97653fe08e50239769d6cb70657ec64f7ae9acbd1024309207d092c5365879ceee59bbfa05d888e9c6df0bca32b9e670fda949759b7323f8404313ed7f3aca9e99b9b6967a63e58b08f531272de65abb452be9df519f7ff43b6af9d50c5718f1760e83ba2f34e55c05b026a852e2590183a97d60e2ffaba445511aa37416ff18260a00b7c6a05c4567c55bc6bca3a493103a62615e89bc4825a039a86e0ff450e4929bce87ed7e87d1fb7be12b037c6993b87b3a89dfc27482e506aba5247e6eba83ccba9870275c7be925beaae858695d58b7ad7240cd7faa4745d67e9f9792b45352d9f8dcb8e427521bfa5dd060ba722f20726448a125d1f4a63414b259996ed08c94248d0845865248832f803677195bb98c7fa3e526a39f67c9ff9c25ca535c583319b4273ca54ada91ab3479986b3313112ecd173a7e05e3003d96384c4f9bd4ba621b4df4d8910c84431ee0d49937755da3dbdb96e7e0caea7f9ddf1e18f831f0e32db4fab752c1bdc76278e4977415605f619e1e8b922d350a4f6afe95da1815e08e864af00b5b1b676a2e9a1a0c940a52f6eb509e378ca6bb292f5ce8c2f10bbecb5126a377321f96f4b35186db2da8a0909168e6266349993651bc0746339cde8faf0c6c6e79008a643146ef3558ad1c113b4b61c0cc9a9a7da1ef030d0b10b780656b0700d258500467c72c317835085ddd50bd494c910d376e5fe611f99f01d8f1ed032abc4f311b68bfaca17bed5ad7a8a936bb1070658441b7e2b4f634a775fdbdeb066bc7294107edf4e754cdaaeafd906908088deff410e6ce789fe297f767dd16e79eb75ad3b91abf20befea6b2ce811156516422b32e7849d917f3bdc763357da361205945ed5a07b5b5421523cfbcdb4a17f8164131674e437e1b38e85b54fd975c5ffef0c058a7df5fa3991486d69e13e8da562208c853c0930e7e3871f445cf6eaa8d05e46488d292529b2ecf9c919d4c4e66bfe629601a855cdd85eca7290ccec63bf237e55584a7169c8a23e46d7711ed27897c6740effd1f5d7866a300cd97893e4f00c219656e59aa73d", 0xe00, 0x7}, {&(0x7f0000000240), 0x0, 0x8}, {&(0x7f0000000340)="6ecbd01a6dab74d28057706ef7cd24b848f39f314194f8333c09f547efc6454227a970d8224567c8babe1033519b504aaacba87f13e8ed14445c86903efd33b82972f9c5806e5c42536d0e00ab58b60fdc0148c2f91e1fe30854ddda267e2221f7e27705d9c742eef9faced5c757b7", 0x6f, 0xfff}], 0x2, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYBLOB=',euid', @ANYRESDEC=r3, @ANYBLOB="2e104a242bbbd8299941a7c44c76548c5b4fb00d4ec4286fca4c3658b153ef726f3af5a47d766c97d83002fc5290fb87b481bd93a9b2828d2d7f9dc89d46eb88d5108b2582cc9eee789c9274707b18c8086e"]) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r9, r10, 0x0, 0xedc0) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000200)=0x0) r12 = getpid() tkill(r12, 0x9) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x6, r3, r4, r7, r8, 0x10, 0x8000}, 0x2, 0x1, 0xfffffffffffffe00, 0xfffffffffffffffc, r11, r12, 0x3}) 00:19:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 501.830042] protocol 88fb is buggy, dev hsr_slave_0 [ 501.830069] protocol 88fb is buggy, dev hsr_slave_1 [ 501.835281] protocol 88fb is buggy, dev hsr_slave_1 [ 501.840320] protocol 88fb is buggy, dev hsr_slave_0 [ 501.850323] protocol 88fb is buggy, dev hsr_slave_1 [ 501.865440] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 00:19:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = getpid() tkill(r0, 0x9) ptrace$cont(0x7, r0, 0x2, 0xffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() tkill(r2, 0x9) ptrace$setopts(0x4206, r2, 0x0, 0x10) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000000)={0x5, 0x2, 0x4, 0x70000, {0x77359400}, {0x4, 0x1, 0x0, 0xf8, 0x4, 0x8, "d5cba521"}, 0x7, 0x2, @fd, 0x4}) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:30 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x108) accept4$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x2711}, 0x10, 0x800) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r7, 0x0, 0xedc0) r8 = fcntl$dupfd(r3, 0x80c, r7) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x1f, 0x0, 0x600, 0x12}, 0x98) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:30 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) r2 = shmget(0x3, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) stat(0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1a8e7c16, 0x6, &(0x7f00000014c0)=[{&(0x7f00000000c0)="7489d74238a9b50f48b8cf2cf99260b20649185c166880e71bcba1ec70bb98ba1610939e56a2d8ef5b9599636e6c22a6e1c0262eede7dc77d72588f0f58ca8325f390a02a82409ed3f6fee3eb1b8b79ae95142a8ceeb5749a6de23fa", 0x5c, 0x9}, {&(0x7f0000000140)="b77bd318299e2449785a70f73925", 0xe, 0x4070826d}, {&(0x7f0000000180)="19330729c850bc0691d7", 0xa, 0xfffffffffffffff9}, {&(0x7f00000004c0)="38b87db6986cef2f2d1a4450d377b6e920dfe43c11bcb444e5a30178c04f37b5a32727c1608fedb5aa0c0dea554ade411cfd42a973b58281e1baf136bd9fc621a06c9fa7ea096395b2bf28e1df14413083a7bc9c32fb0820cd71a91a0b98e09d0f2f21fee9fbaf83999f14ddd4e7fcfa9352f66a2c2b7c0b978ada828dc07faaac9c7d321d33dae3bcd98aca8f1028638434607cbc8612137c5b830100f587915e5f036c2797dde5b47250d9b0d656ff185f35b3eded8ae7e6ac9766189895588d0efc9c7ee96bf7c565f8ec1ac424b472b5f51555dbb8659a093db427701c47f8d64b7cf2b4111a3fba0cc78c8beb8e6471ee742b6da3ac3683b88843b15b0f7c3d5c8ac216d837c4d0fb0f7ac75b3754b0e2c2dcab05297ee497e6cbd907668ae1bace5557dcefa4f20e0c8fe69506df75cb062d7d9cd29598d880867df33c5f55a339736dd6eb9c49ed78a997fdc8c6d4ad2f2f3dd99e96e5c315404657cfd90a0b7814fcf3cac67b408c3719a8efd1fb68fac80a9efe787a21fda74f30fa2f2785a9a9146dfd00117517e850e4b1637f1a4601c4b3d79c1dffbf58d44449f24d615ca3b17b36197d87da47002e27c067d54f674b247d4f29fb271be97f0b0f611704e0e77fea9aedf6b0c22f01153fa8d99e89eea404b1dc768c8b7167fca4ce4b8f78c448da0b7bca64e31458f8bfd0fcd36ce840b94c9ef317c935b0f57ba4e1ddb2dc255b471fd5fa30119db358221c7f846681aa466ad6b795e3df8703fe5d7a11862e663a36606afef5772caf023c2ac58f7d52901633b1dead97b8303384df206084c59be554de115d1d47dc842a41f2e4d3bbb62cbbecd99c783680448b459c1e6d06b8db35968df63078afbe461d34c841d86dc7f301db6fce4c16f9bcc88ab6bf490a8665774886904df872d1f85f2b964eb7f14733b6ae72851d0227044f65596597c5feded39a05c7f1afe99358abd149a8c2989372279d3d57e165be4a16cfbd1d6306d00f18e3135e05cb442f5df316757470837042d9aeb2bddbf7d263d160de3ca7059db4d5eb30044a08158ad7c5358e7dca596aa6b657c23d236a4acdf52c9d78a4ee1f35c854b158ceca3dc40c08de86ed93c56a2ac155bf9a69f05e470f3f56f17cb998523df813b256c9ebc97077ea87db1a3c7002fb7f2fdfd6a9bd0c9ddec03dc93bfc2a1fa7af4cc40dba49536d988f6d6c9985380eed57ca1b978bb13c35b435d4cde6630767f1a148ebeb50c1016f945dba59698c9c7510b8e5cb7cd483e77175aec1e2ffe946268954e1e306ebf43cc3f0a39cab456535163398a469f1cab3763959cb3257422903f04a5adb3e252b69dfd2fc28fd904b7697c5e84fd0ac1b166e38bfdc2dc8e91447383e61ae1f4012133ae3af75589c5bf327ea8b58d455f33d2dcd03ddbb853b6e7edefbffd9e1fdc7389261eeb991c1f143bd68c4ca8892671e2d11a46e8fc71d1e28c4938d6e2b442a6cb538b649275efafe8e481d95dba9d29bf448890df5102485cbe262e3b53c2088888c769ea4f7443bdbce9c3412fb41fecfec172090f65c00b5a7f6edbeb7a00bfc5a8c711f54da1e4e9eaa2c20c5bba1b79254d97462016269d11994bcd7cb43dd19ee1f0882224bbbbff6e7c00dbd9694512cf26349fcfe2eb2307e2aa5e246c2204acaeb243a35c1184912839f74cddd9d2938f1cd5f5491428e43eaf77ee410ce76af30bccb80f1683555a3199d19195cc6d124e45eb8e92b3f7a672d68f58866e487331fce9db6a934b08d0b850cdb0fa1efeb13e46f1e410747da114055d2534215ebd2347cbccf99dfa9ef772126ba998bdb69b3db50dbec68c6ea4983eb5cba3d4ce48025f8d3ab7081894af5b0e596a9609cd36a81ff8bf7438e67ae93c6ac5a6ed34ccb8a699638cfe6416b919d174e63da86c206353943eb6abe7e223936e515bc93d4a4a3c72cb61368f8dac797507e2733600ce2641456e21a7b3c2182b22184a15854e58bb1e6f9d0dff534e3dae879fa0dd397da3358c3083cc57328d6af70e6dabf6c7c6c7b55c489f50ee557853478a7ce5185b5ab08d782bb356844d07d7f9c8946776210d05b854c0170be9b1b0c8d8260fc9310fd822ab58e6d7eb7ef61323bd19db428291068dfce8d6ddc1403d489abe6f7a030a731514144b72284b84e61e9f57e8034dc72ac147c4605352c0fbae2fb03be7beb9f1fb6061022a05203abfcf603d7feaa25b1b446cf858523e1d31814be84bc6cfa6b0981f29c88875ec356547e34715c6b8b4e4be7c9ecb148cb644b94ff0879a3594b2fd93fa797ef86d0bdccaa0998d02291c9fd0233e458683211f270e07f1d319011bfaf7826c1a9297740be297d0fc3c52e77c245096d3ab7c940ed0781586c6cd287d22db4d5db70cbed2f99c2d729dc93b8cc0c709c81b55a3b231b60c1e4828005ab5f53c646787ea57a67aa8f14100fdca6d2e0e86da3da3439dc13389e3a217941bd67c74d7948bca0cd94167be281d1c8b3ee90e56c4fc85a0b6fd28829997891164ac4edd2bd699715fe85cf7b7a358582d84991ef2ddf76fe18ed4022c4ac03d1b61d77f0389e1c5c9405fce5882af581583c2feb775e303ff4328c953b79ef5323da8b07c9a1c909c848090cf86d0581f8a69fca9d2f9074c62ebfce6336b9fd686e186444f48376299f5df3d60a42f382e7ca733983b6f38c832cddcf16e28258dd2c13a2927bbbd62f02c839715b82e2a7c03520bbce25d711d66f209d4b0f1194d6d0ef98272f7313f683bb366258efba0b14b4b658ee18e4115fc1a97560e0153f49e1104e8c143b887cd3fe2ddec05fa9ab8cd48795e2e7b097c23060482a34cef854c12d09bc096c821509f23cca3b5e27aca080a90a5989a3b83141ae8dadfc61d8ca1d1f9565e06e801ead0abe1815728868726f97babb37c04ab3041e629008513eafd18465efb1e160c80f5e397e7383489c9e864a946a643f1956b3940dcc9fa08741a7d4011902188df228ad8571ff6ad2703a1a894ec41bf1bdcf598f95491e636de672433b14696ce50d2350136802706f1649566304f8aa95f62ee4c176108260193d3772ad549b05632cf640d1274ee8b6413884bad5fae3e1a6fe15b4542c2a91635f2156ea89fc57dcf92165efa0a0d2cd5e255cfaddf947768bc8e05fbff0be3b75da5dc4dc5ab94847503b52f1cdaa45cb9a3b837753a06a8820eb4bfe05a5a5acdf0f85766ab564ec973942c9af6228763f09e736a712a6ac2a15dc3a428133361d5c853db14a0f63569cfce67de079e861732c7e01d10491931803d01cfeaccaca14661c93ec8c056b3c8b1ac30a23a0102a231e2fd7abb2c730241630b4022c163b2cf308e799015d94faabf71330fd9a92942ed8b7157f43db977fd1f60a950384499eca076049bc75bf1d7c5a279508e8173a2303841489b2845f0574122edf8ef97903d126195c1fa7507693a5d373ec9da8bee0ef34bfe29b301730bf4e30f2c056f28981719b4444c9f2595031c35810e8f26b6f413d16e866ca402fc1342f9fee60e112e9c54b96534c73ea1944f13f463537e55ceae3b70ec8fcad0d050c97055afa619fa9dcba70d6167b15cd7c5a9487fe8c35db3061713cc258ac31756c3f26621dba60e06dca53269293f8c6d1e51ec78a584467ea88fab969f5bb60a00b3f607ab01e68a099b204af448dfb74af47c7bb855a2c6a95d7cd77a5b5191d5fe86b36d35e68b0cd218a3ea5e5477cda81b5e3fada27b119405cf49e7eb83f9eecf1cd8808ac4d06178cb141554e374dbc2c98699bfa2591a1e149d97668b027995c82f898d14e23e650097c921ea8502d98def2b9fca6e8f74a94bed58b7a8fd06b65613429b50c6b31ba0e124ce37d264b1816babaa7b1b0649c8c462cc5f5f516bc83a94087577c139692c52cda35e58ec6d360d5cdf76c89ab5dc6998c45aa622e262e11319fc40a3431c8db067ae600f97653fe08e50239769d6cb70657ec64f7ae9acbd1024309207d092c5365879ceee59bbfa05d888e9c6df0bca32b9e670fda949759b7323f8404313ed7f3aca9e99b9b6967a63e58b08f531272de65abb452be9df519f7ff43b6af9d50c5718f1760e83ba2f34e55c05b026a852e2590183a97d60e2ffaba445511aa37416ff18260a00b7c6a05c4567c55bc6bca3a493103a62615e89bc4825a039a86e0ff450e4929bce87ed7e87d1fb7be12b037c6993b87b3a89dfc27482e506aba5247e6eba83ccba9870275c7be925beaae858695d58b7ad7240cd7faa4745d67e9f9792b45352d9f8dcb8e427521bfa5dd060ba722f20726448a125d1f4a63414b259996ed08c94248d0845865248832f803677195bb98c7fa3e526a39f67c9ff9c25ca535c583319b4273ca54ada91ab3479986b3313112ecd173a7e05e3003d96384c4f9bd4ba621b4df4d8910c84431ee0d49937755da3dbdb96e7e0caea7f9ddf1e18f831f0e32db4fab752c1bdc76278e4977415605f619e1e8b922d350a4f6afe95da1815e08e864af00b5b1b676a2e9a1a0c940a52f6eb509e378ca6bb292f5ce8c2f10bbecb5126a377321f96f4b35186db2da8a0909168e6266349993651bc0746339cde8faf0c6c6e79008a643146ef3558ad1c113b4b61c0cc9a9a7da1ef030d0b10b780656b0700d258500467c72c317835085ddd50bd494c910d376e5fe611f99f01d8f1ed032abc4f311b68bfaca17bed5ad7a8a936bb1070658441b7e2b4f634a775fdbdeb066bc7294107edf4e754cdaaeafd906908088deff410e6ce789fe297f767dd16e79eb75ad3b91abf20befea6b2ce811156516422b32e7849d917f3bdc763357da361205945ed5a07b5b5421523cfbcdb4a17f8164131674e437e1b38e85b54fd975c5ffef0c058a7df5fa3991486d69e13e8da562208c853c0930e7e3871f445cf6eaa8d05e46488d292529b2ecf9c919d4c4e66bfe629601a855cdd85eca7290ccec63bf237e55584a7169c8a23e46d7711ed27897c6740effd1f5d7866a300cd97893e4f00c219656e59aa73d", 0xe00, 0x7}, {&(0x7f0000000240), 0x0, 0x8}, {&(0x7f0000000340)="6ecbd01a6dab74d28057706ef7cd24b848f39f314194f8333c09f547efc6454227a970d8224567c8babe1033519b504aaacba87f13e8ed14445c86903efd33b82972f9c5806e5c42536d0e00ab58b60fdc0148c2f91e1fe30854ddda267e2221f7e27705d9c742eef9faced5c757b7", 0x6f, 0xfff}], 0x2, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYBLOB=',euid', @ANYRESDEC=r3, @ANYBLOB="2e104a242bbbd8299941a7c44c76548c5b4fb00d4ec4286fca4c3658b153ef726f3af5a47d766c97d83002fc5290fb87b481bd93a9b2828d2d7f9dc89d46eb88d5108b2582cc9eee789c9274707b18c8086e"]) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r9, r10, 0x0, 0xedc0) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000200)=0x0) r12 = getpid() tkill(r12, 0x9) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x6, r3, r4, r7, r8, 0x10, 0x8000}, 0x2, 0x1, 0xfffffffffffffe00, 0xfffffffffffffffc, r11, r12, 0x3}) 00:19:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = getpid() tkill(r1, 0x9) getpgrp(0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xfffffffffffff013) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000040)=0x1, 0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) r4 = getpid() tkill(r4, 0x9) ptrace$peek(0x3, r4, &(0x7f0000000000)) [ 502.065862] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 00:19:30 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000100), 0x108) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:33 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) bind$isdn(0xffffffffffffffff, &(0x7f0000000140)={0x22, 0xbc, 0x20, 0x6, 0x6}, 0x6) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x10001, 0x2, 0x20, 0x0, 0xffffffffffffffff, 0x2, [], r1, r3, 0x4}, 0x3c) 00:19:33 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = getpid() ptrace$cont(0x20, r1, 0x1, 0xfffffffffffffffd) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0xfffffffc, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8000000}, 0xfffffffffffffec2) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) sendfile(r4, r5, 0x0, 0xedc0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r9}, &(0x7f0000000100)=0x20) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r10, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r11 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r10, r11, 0x0, 0xedc0) write$P9_RREADDIR(r11, &(0x7f0000000240)=ANY=[@ANYBLOB="2a000000290100ff7fffff4c03000000030000000000000000000000010000000007002e2f66696c65306f0e362b809eb4f68221b4ae26421f776064ee4ebf9a9a6c9e0a956ec2946981a6b38209532e7ec29aae9fc50b868be7d55aae0f4e21466e0cc7933502c62399f1376eb9dd3d783e7d817246e573f128a32919c7c0"], 0x2a) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000140)={r9, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x6f, 0x7fffffff, 0x1, 0x1f, 0x8, 0x6, 0x2, {r9, @in={{0x2, 0x4e21, @rand_addr=0x5}}, 0x3, 0x4, 0x80000000, 0xffff, 0x80}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r12, 0xffffffff}, &(0x7f0000000140)=0x8) 00:19:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', r6}) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000340)=0x7) ptrace$cont(0x18, r0, 0x0, 0x0) set_robust_list(&(0x7f0000000280)={&(0x7f0000000180)={&(0x7f00000000c0)}, 0xc104, &(0x7f0000000200)={&(0x7f00000001c0)}}, 0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:33 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x3) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r3, 0x0, 0xedc0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x101, 0x2, 0x0, 0x5, r6}, 0x10) r7 = accept4$bt_l2cap(r3, 0x0, &(0x7f0000000000), 0xc0000) sync_file_range(r7, 0x80000000, 0x10000, 0x5) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x1, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) 00:19:33 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x5, 0xff) 00:19:33 executing program 1: r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@mcast1, @remote, @remote, 0x80, 0x1ff, 0xffc0, 0x900, 0x6, 0x8}) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000800010063627100180402000404060004140000000000100000000000000000000000000000000000000000000000ff2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r7}, 0x10) socketpair(0x8, 0xa, 0x20, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x54, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x1, @rand_addr="90432413ccdce1052b25d5d4528c23cd", 0x5}, @in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7000}, @in6={0xa, 0x4e24, 0xd1, @rand_addr="2b0a97b976e9ddc37bcf552ed1d1c0a6", 0x81}]}, &(0x7f0000000380)=0x10) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r10, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r11 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r10, r11, 0x0, 0xedc0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x80}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000440)={r9, 0x101, 0x7, 0x4, 0x6, 0x3, 0x0, 0x3fcd25e4, {r12, @in={{0x2, 0x4e24, @local}}, 0x80, 0x34, 0x80000001, 0x965, 0x401}}, &(0x7f0000000500)=0xb0) tkill(r3, 0x9) ptrace$pokeuser(0x6, r3, 0x1, 0xffff) r13 = syz_open_procfs(r3, &(0x7f0000000140)='net/ip_mr_cache\x00') bind$packet(r13, &(0x7f0000000180)={0x11, 0x1, r1, 0x1, 0x4, 0x6, @dev={[], 0xe}}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x401, 0x0) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, r7, {0xfff3, 0xa}, {0xfff3, 0xc}, {0x7, 0x4}}, [@TCA_RATE={0x8, 0x5, {0x40, 0x7}}, @TCA_STAB={0x58, 0x8, [{{0x1c, 0x1, {0x1, 0x3f, 0x0, 0x80000000, 0x4, 0x80000001, 0x80000001, 0x3}}, {0xc, 0x2, [0x5, 0x6, 0x6091]}}, {{0x1c, 0x1, {0x3, 0x20, 0x4000, 0x2, 0x6, 0xfffffffc, 0x7fffffff, 0x5}}, {0x10, 0x2, [0x6, 0xdd97, 0x8000, 0x9, 0x3f]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}, @qdisc_kind_options=@q_gred={{0xc, 0x1, 'gred\x00'}, {0xc, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x8}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x8, 0x5, {0x8, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffc}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:33 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000002040)=[{{&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast2}}, 0x0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/238}, {&(0x7f0000000140)=""/13}, {&(0x7f00000002c0)=""/179}, {&(0x7f0000000380)=""/124}, {&(0x7f00000021c0)=""/4096}, {&(0x7f0000000400)=""/130}, {&(0x7f0000002140)=""/70}], 0x0, &(0x7f0000001640)=""/134}, 0x7}, {{&(0x7f0000001700)=@generic, 0x1fe, &(0x7f0000001a00)=[{&(0x7f0000001780)=""/192}, {&(0x7f0000000540)=""/4, 0x25a}, {&(0x7f0000001840)=""/221}, {&(0x7f0000001940)=""/12}, {&(0x7f0000001980)=""/94}], 0x0, &(0x7f0000001b40)=""/147}, 0x80000000}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)=""/172, 0xffffff0f}, {&(0x7f0000001a80)=""/75}, {&(0x7f0000001cc0)=""/106}, {&(0x7f0000001d40)=""/99}], 0x0, &(0x7f0000001e00)=""/11}, 0x1ff}, {{&(0x7f0000001e40)=@in6={0xa, 0x0, 0x0, @dev}, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001ec0)=""/42}], 0x0, &(0x7f0000001f40)=""/246}, 0xffffffc1}], 0x1, 0x12040, 0x0) 00:19:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x40481) read$eventfd(r1, &(0x7f00000000c0), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) r4 = dup(r2) setsockopt$inet6_dccp_buf(r4, 0x21, 0xe, &(0x7f0000000340)="15d73600b02a5d0122a5a6b0376b040661a164cfe2e94bbc08038714e09148d55f22debdc840b69baa83f725b14b883bc2d1b46a3a29de694e12d0ae3d639ae05b62de6706c3f9fa79b501ea127c4f1f747394b6adc8c6fd76d42ba1892eb92f49eef9c8f06c92f1323d5db7eac024c579b1a623818abf799d721bf8dda733df4a3df3059e28eebf68494fabd7", 0x8d) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x38) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000830f000020000000000000000600000000000000bed32c9a7416087c5ac963e2dafd151a2a84623a6e3edf598357054c82b1d837d225cab5b18bc64a8155f716b41f45c73689415cf2b1c503132d61e94a27e2963010a5938cfd1fa139fc1a4724c86c2e1b1ad13311fd9ff274f3a45e9f99ec126bbd3d7b30bb263eade104b878628bc279b8910ce3b94e933af9008b3c036fdea871c23526554d6f9a108463ceb50fa890"]) ptrace$cont(0x18, r5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x5, 0x0, 0x1, 0xfffffffffffffffc, 0xffffffff, r5}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000280)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f0000000140)={0x7, 0x45b, 0x200, 'queue1\x00', 0x200}) ptrace$cont(0x1f, r5, 0x0, 0x0) 00:19:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7ff, 0x2000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000c7b6df555b60fbce2db55daf2fb35472d6915b2aafd417420f83fdc2f0752a1d7c1b949a5a77cc7bed1c90edab22bac6f99d6a01cf", @ANYRES16=r3, @ANYBLOB="00022abd7000fbdbdf25160000000c0005000800010075647000"], 0x20}, 0x1, 0x0, 0x0, 0x54}, 0x4004900) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x1, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) write$binfmt_elf32(r2, 0x0, 0xff86) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x7, r1, 0x8, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:36 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10800060}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40008000) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:36 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000002c0)=@buf={0x2a, &(0x7f0000000280)="3e7c6db855c38a8b150a73b65ecbf245ad2cd4a1a05066176d90f2002947479d34f17c8d77c573a8b096"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r7}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000140)={r7, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r7, 0x4c, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0xffffffff}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0xffffffc0}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @empty}]}, &(0x7f0000000240)=0x10) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x0, 0x0, [0x8, 0x378d, 0x6, 0x1, 0x10, 0x6, 0x1ff, 0x7e8]}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000280)) 00:19:36 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', r6}) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000340)=0x7) ptrace$cont(0x18, r0, 0x0, 0x0) set_robust_list(&(0x7f0000000280)={&(0x7f0000000180)={&(0x7f00000000c0)}, 0xc104, &(0x7f0000000200)={&(0x7f00000001c0)}}, 0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) setsockopt$inet6_dccp_buf(r3, 0x21, 0x80, &(0x7f0000000140)="4f02c599b00262cfc7a3caaa2d314daa2738f16c491ece517eb96727928a340437a27c4e76928c35895b888dd45408d6f8e2cbe4e562311098b093e589d3c8205542f6a8c49c7ba002e588adbe1a8d0d22f905196e1e1e95606d9a7af68ea546c549f11a", 0x64) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000100)={0x10, 0x9d995c25d1f493fc, &(0x7f0000000040)="142bed6a9039191ef2cc0503bee630fc59dec8d99113992ff5624deb994ce6940169de2d82f3d9db7e3b84412608020b5ea201aea685412551c67e44cff43d6b93a792b04134332b4320cccc7044f32f6b39b78756e6e3e978cff61b90652420af7d2528b744ba915e95f1a433e45b23d54b54a573cb700ffdcb165a73a61dda2abc640c177c7b1416ee89d19130eb0b4df2377a", {0x1ff, 0x2, 0x47425247, 0x3, 0xffff, 0x7f, 0xf, 0x10000}}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:36 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x100000890f, &(0x7f0000000140)="15dca5055e0bcfe47bf025") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x339) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f00000000c0)={0x7, 0x1f, 0x3f, 0x36, 0x7}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:36 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', r6}) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000340)=0x7) ptrace$cont(0x18, r0, 0x0, 0x0) set_robust_list(&(0x7f0000000280)={&(0x7f0000000180)={&(0x7f00000000c0)}, 0xc104, &(0x7f0000000200)={&(0x7f00000001c0)}}, 0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:36 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', r6}) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000340)=0x7) ptrace$cont(0x18, r0, 0x0, 0x0) set_robust_list(&(0x7f0000000280)={&(0x7f0000000180)={&(0x7f00000000c0)}, 0xc104, &(0x7f0000000200)={&(0x7f00000001c0)}}, 0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:36 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000000c0)={0xffffffc0, 0x7}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000140)={0x6, 0x2}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:36 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x73c}], 0x1, 0x2040, 0x0) 00:19:36 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @local}, 0xfffffffffffffd30) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000200)=0xc6) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @rand_addr=0xfff}}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000100)=0x3, 0xffffffffffffff7e) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r9, 0x0, 0xedc0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @loopback, 0x3}, 0x17) sendfile(r2, 0xffffffffffffffff, 0x0, 0xedc0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) 00:19:36 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) bind$packet(r4, &(0x7f0000000180)={0x11, 0xe9cd45ada33a06b7, r1, 0x1, 0x0, 0x6, @dev={[], 0x28}}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:39 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x20000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:39 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x8000, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) dup2(r3, r5) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 00:19:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 510.458043] audit: type=1400 audit(1569457179.087:60): avc: denied { setattr } for pid=14827 comm="syz-executor.1" path="/proc/14827" dev="proc" ino=54040 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 00:19:39 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r7}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000140)={r7, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000340)={r7, 0x1000, "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"}, &(0x7f0000000080)=0x1008) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000000c0)={r8, 0x7b, "bdaad36ea627060f103c015752dd9acf4af06603253d21c28dd203e8476bb1b762741524686e83944da5490bed6bd00462cc95ccf0ea487de34dff63a6e2549e1546859eebb47040575301a72547d94bedc084291de399a5ffacc9d8fd660fa004fe60a37431e4d02d20bea8fd6ff071c751ae513342cd815faf20"}, &(0x7f0000000180)=0x83) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0x9, 0x3, 0x3f}) 00:19:39 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000080)={0x51, 0x1, 0x72, 0x10000, "8de28a13d7c4ad9c573ad6db48042ca49386f1a7e1df4287872ef5fd8fe694f9"}) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) execveat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000080)='vmnet0\\cgroup[%\x00', &(0x7f00000000c0)='nodev-user[%GPLeth1eth1\x00', &(0x7f0000000100)='^\x00', &(0x7f0000000140)=',\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='selfppp1\x00'], 0x1e00) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:39 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x100000890f, &(0x7f0000000140)="15dca5055e0bcfe47bf025") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x339) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f00000000c0)={0x7, 0x1f, 0x3f, 0x36, 0x7}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:39 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000080)=""/80, &(0x7f0000000140)=0x50) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000100)=0x100, 0xb65c) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x81, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x127}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x19) 00:19:39 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r6}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={r6, 0x7, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x7fff, 0xc57bf555b2812802, 0x800, 0x3, 0x8, 0xfffffffa, 0x3, r6}, 0x20) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:39 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() tkill(r2, 0x9) r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x8001, 0x400000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000140)={{0x20, 0x9}, 'port0\x00', 0x80, 0x100000, 0x3, 0x8, 0x62ee, 0x6, 0x6}) getpgrp(r2) ptrace$setopts(0x4206, r1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0xedc0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f00000000c0)={0x21, 0x2, 0xc, 0x7, 0xfff}) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) ioprio_set$pid(0x2, r2, 0x10001) 00:19:39 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'v\x8a\"\x85\x8b\xd0iB\xf0\t\n\xaad\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x17, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:39 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x7, r1, 0xfffffffffffffffd, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:39 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000140)={0x2, 0x3c, "54968c957c3b0583e95f7a4687f0c2b7d4b5bdf77305980322e52612a666a4145605d5896cd3ad839632f5adbab29e4254ea6ab0b4cc9455c3b8cf80"}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x1ff, 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:42 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r10, &(0x7f0000000640)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r12, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newneigh={0x34, 0x1c, 0x4, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r8, 0x30, 0x82, 0x9}, [@NDA_PORT={0x8, 0x6, 0x4e24}, @NDA_IFINDEX={0x8, 0x8, r12}, @NDA_PORT={0x8, 0x6, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x492200, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) fchmodat(r3, &(0x7f0000000080)='./file0\x00', 0x44) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r4, 0x0, 0x0) 00:19:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) r1 = getpid() tkill(r1, 0x9) ptrace$setregs(0xf, r1, 0x3f, &(0x7f0000000100)="fba1961a26fadccbc5bbcd8d2344f2176f127e500a865dacc48b713cf55a5a133997ebbfa973214e5827fc03000079be826ce735ceb5921350fe93f421dd61c4d15320720db4bba003fc765962234ec02b2d970d3139cbcc545732bec5e1de9bc187251f7efd60ac77f1036ab22e40727cf7044f7fffc8b720f5cf20885057e1c5353a808e7ede2b46af") ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$getenv(0x4201, r0, 0xffffffffffffc500, &(0x7f0000000000)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:42 executing program 5: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000002e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r4}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={r4, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r5, 0x80000001, 0x6, 0x899}, &(0x7f00000000c0)=0x10) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000240)='memo\xdaI\xfd=\x973\xf4}Dr', 0x26e1, 0x0) 00:19:42 executing program 5: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000002e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r4}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={r4, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r5, 0x80000001, 0x6, 0x899}, &(0x7f00000000c0)=0x10) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000240)='memo\xdaI\xfd=\x973\xf4}Dr', 0x26e1, 0x0) 00:19:42 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x1ff, 0x674, 0x0, 0x1, 0x3, 0xf326, 0xefd6, 0x3b, 0x2, 0x4, 0x7fffffff, 0x7, 0x1, 0x80000001, 0x7, 0x10}}) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, 0x0, 0xedc0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ppoll(&(0x7f0000000140)=[{r3, 0x8406}, {r5, 0x8a}, {r6, 0x8000}, {r8, 0x4000}], 0x4, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={0x1000}, 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:42 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") nanosleep(&(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r0}, 0x14) connect$caif(0xffffffffffffffff, &(0x7f0000000080)=@dgm={0x25, 0x1000, 0x3f}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:42 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = getpid() tkill(r2, 0x9) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x1, 0x1, 0x0, 0x135, r2}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:43 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffffb, 0x322000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000080)={0x0, 0x3, {0x2, 0x3, 0x7, 0x3, 0x5}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r2, 0x0, 0x0) 00:19:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {r2, r3/1000+10000}}, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:45 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x1) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f00000001c0)={0x2, 0x1, @start={0x97a, 0x201271e59460b259}}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:45 executing program 5: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x800000002e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r4}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={r4, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r5, 0x80000001, 0x6, 0x899}, &(0x7f00000000c0)=0x10) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000240)='memo\xdaI\xfd=\x973\xf4}Dr', 0x26e1, 0x0) 00:19:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000040)={0x90b3, 0x2, {0x3, 0x1, 0x2, 0x1, 0x6}}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x4000, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) r6 = getpid() tkill(r6, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r6, 0xffffffffffffffff, 0x0, 0x13, &(0x7f00000000c0)='*securitymime_type\x00'}, 0x30) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000140)={[], 0x20, 0x80000000, 0xd110, 0x80000000, 0x2494, r7}) 00:19:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e62, 0x0, @dev={0xfe, 0x80, [], 0x1b}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, 0x0, 0xedc0) getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='tmpfs\x00\x80\n\x0f\xa0\'\x87\x9e\xee\xde.$^\x19\x15\xb8.\x19\x1c\xae\xf6\xbf\x9c\xda~\xf7\xb4lE\x82j\x00\x88\xfb_\xab\xf8\x9c\x1f\xc59\xd4\xb5\xd9\x19', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f00000004c0)='./file0\x00') umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x80000000002) r5 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fchdir(r4) 00:19:45 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000140)="a378f8c5e4cde7797a19cf38b23832c6c23b834b3f48a819641f48c6a7079a6b08c16f29eeaddae83979c2d53592b8dfde5ac1", 0x33) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) timerfd_gettime(r4, &(0x7f0000000240)) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x20000, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000200)=0x101) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000080)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:46 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x23000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) listen(r0, 0x3ff) 00:19:46 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000140)="a378f8c5e4cde7797a19cf38b23832c6c23b834b3f48a819641f48c6a7079a6b08c16f29eeaddae83979c2d53592b8dfde5ac1", 0x33) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) timerfd_gettime(r4, &(0x7f0000000240)) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x20000, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000200)=0x101) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000080)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) [ 517.430037] protocol 88fb is buggy, dev hsr_slave_0 [ 517.435225] protocol 88fb is buggy, dev hsr_slave_1 00:19:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1ad00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r0, 0x0, 0x0, 0x0) seccomp(0x1, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x400000050000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x1c9, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 00:19:46 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) sendmmsg(r0, &(0x7f0000004e00)=[{{&(0x7f0000002f80)=@in={0x2, 0x4e22, @local}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000003000)="c998774a0ac46aa7ffb055b1acaa3996410ab2c41d65e61e551768befec4f4b644856f707aef0242156b288040a991aa6fcd6950ad0d57d53d7f8e1d7709bd79ead37be54f20c20ffb674b71a0121a9d28a771a98f698d97f9d7e28b09ff004490848cde75f786863d6197cc56a18d", 0x6f}, {&(0x7f0000001980)="4b767c6d876cccd2bca8a0b0434796507c1a445cd64ecdc01d8daefe503ea8c250704b3790a9fe57b3b1a6ba59df481e03fb5262ae3c41754c639214cb9673", 0x3f}, {&(0x7f0000003080)="9f3eece279aeaaeee22b70e9148783fa69a52c0301087d7986a9833a64f4bf47d32ac811f8df9a22088438128f78a9c0fab745643473d93eaff034a377ec80ec55423cc98c895a0a7ae779f5adb39b", 0x4f}, {&(0x7f0000003100)="a55d882a596cff1d704e3b2d7ee71678b282ba3207930f5cd0c9c4b664d70a95538a72451982e6990ec214134c07b5882fa1ff2e6b5548cb865dc3449f2cdf0bfef177d7eb1ca2ab5be9e0acbbe0485dc7aa2d0b1c8e192aa39b6c6255d199cee3a88e6792e2c64b728aa5e45502d07a930db92915a0ade9053ada27558216e535d6d18bb5f0ca7a24ada01f8f896bee23d8a537b35e9a644454566f2779678c36d3159e8d14a8a27a09d460e5410c", 0xaf}], 0x4, &(0x7f00000031c0)=[{0x108, 0x10c, 0x5, "3e24060910ce89cf76ce4f9782546b451008096fa5cb9bb5a8200b8b76c447730e5a5ed872b40b7b9f84ba7c11d35d87ccbef2ffba922ec64fc8d212bf6253ec05ed0e74ab23c9acbd27399ddcd4c7fcaff309e5b4e97306d1a35d45b05d88a82fd188a7d6813d89ad94de291e73d1ee9e0430bc28cdae528f9a60568117ccf1536065a1be2586c50d2e8b7d641019b4e674144eb949f1cc7b1229081b248258f6c6a4b305c75b82bcc83952c0e5a61e26723680ec38bff72591a7bb02b60f1554d0f2d2bda879e1aa564a3e9374074478028f6ebb72555fa82cf988f30f801c04deaa2dfd1f40f1a95471b5016dfbc719b6e2f5242fab"}, {0x48, 0xeaba97a93bfbf360, 0x9, "935b96422451a9bf228df677646dba918d75dca04677167f92df19a4e85f5464dfbd738cb943561e5bc91f8797e35991ee82700bbe2d463f"}, {0x50, 0x107, 0x4, "fb087a2ae1dc9ea932da4f3ca42cfa5724d1739aa053aa87f15b4af7189836e8b5f2f180574de07f145248ef02fc51b9ce60d7acb519173caeec7a"}, {0x50, 0x29, 0x8, "8a94f9f8044ddda9a3a26b4baee0d08715047211c3b5077024b9ac41744a387b2f9957575201400c3e5735bff96215cb24091c859b0af53008890a5e7ed979"}, {0x88, 0x112, 0x1ff, "bcd6e437f321d19c57b9a770580e8e60334a417c4bd85472d3bb3cfc4d3c72d82b2a5c80c27f15506dcf5098b285c69db2973edaf0e385338ceee3630fd4cca115c058c4fe92c45c681ecce683a0c764476756374290a34080383471ca4388b863aa4017ddbb63b01f8eaf104be6c7c2970f99"}, {0x90, 0x3a, 0x80000000, "81c87f5b98bf2f68d5c229197442ad3cc8e1f34842e937d5fef2366c5300873e01846a9a118be3c3a4c68760a24ddb6e06c44a005c67322bea9a36b839a19875084f24905063514af74ce5093bec1d4ec534f76c070925f1d93a0e73a81155d8a3204845ed96c0e0f7dfff81d2c9b415d87249a6f7f4f5437c"}, {0xc8, 0x10d, 0x4, "0d74d961abcd4a081dbc82ab1746fa81e412c37086e1b50ca01c84a6c7d85100c553a553f379f42cb102a100413934ade724b91540faf68cf6c3cf3371fe5da9bccf81abe53c43a143b355e291741af66aaf0f3d263964ac97cf76f25c39b9a6108231cb84b3c19c3d131cf841a7f85554948993bcd0abe7a765f3400af76e8e3831e67ecec4ab92fa31dc234f10c4ecd00457e2bd5f4c2797d406d0231869276b5fc27c17eea2da96c0b7e045b28e3ead"}, {0x58, 0x17, 0x8, "9b7a8e85dcfbb9d65a41d47110c94e722c01fb7cd29b22ad67e6757297a8910c5bb3ace23585058b41473e8d9611c99d3b7640f54927ef84ce1a6de33949f65c110b31f16968"}, {0x80, 0x112, 0x8f, "5aa4d198e6c660241662f5da526c28c8e398a56b1310403e53094c9b3940833faa4bccf56cbe41f836013397c3b349c331c596008227cc593ed07c3723c7fa3728fd079fbe4d0c77564e4bfe2e5ed0e1d97df20b1defde04529084fa235b5a863d576efd998b4f8ed16cd255d516"}], 0x4a8}}, {{&(0x7f0000003680)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003700)="ddbd8eac6928146cb25bb38ef60905a8c564d01cb1cf961c3f257d190d1b74cd346a80bf5fadf065bc9727d74c61043f99a95cce568bac9397cd71db6eb6a0fcfff4eeac564d2e5498bf40b39e4acad4c39df16b620ea195d7bda6ec10655aa3af5666e0ea7b4430b29f19a1d906138049c3f831225480ff1b077daaca3c5f3d21322e39a55d8e3cf6cb2721a2c36c40a35db32791a79f4965a68adbd3d2e4aee94b5a61e25c911aa11ea61914256619e273519189cf016337", 0xb9}, {&(0x7f00000037c0)="c8357256d1a84bd98fb7a88c401f38d00fa814fdaff7828aabfc29a6057305245c40f824bd50d02f11f1ce57c28f899227a296a6dca390494ec9af4eff328320003a8b91c80619ba798e2b5399", 0x4d}], 0x2, &(0x7f0000003880)=[{0xb8, 0x3b3, 0x7fff, "d214e9840dd106ee119041907874197d3464ea695a45e791feb062df1f686343b4194162f6abf36d8327dd3cccfd1843513ae57b6e19e48789c26fbaf15ef424e43ec016357ebc187ed13facf75c1f557ab06290e65932d701a622523c2ee24865e864fe79bc1d33b6a68040d81cc2d3c7e1f8fc0540b1b4270299bea89ac63842ac883ab9592181f3ec6e3d103efcd6a4aca4556ca5a778841b2fc446415881b23ad2"}], 0xb8}}, {{&(0x7f0000003940)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f00000039c0)="a3d944228c4739c5d7aa6b834bd70bebebbc650e87b22b229b3ab9b2ef68fa9da368e1e9af293eca8ad1095a9acc27f0de4132c292fb9ddd6ec2515c182fdb3abd8ca9cc2d35728a127723fcf7b095bb434ec242e567de8a999ca2", 0x5b}, {&(0x7f0000003a40)="afef04c7885f618be934ec9c16b6cc877acdef3af72cb1bae6d3c7757d0393034035742c1bd468821aec50f1a97f59ccd14744ea23337eb5a43b9106d63083723ef25a35e36ae83c", 0x48}, {&(0x7f0000003ac0)="3012b3f3462cc71166d07f028fa55732cee6d4fb5323d49f04fa78b10bdf0cf4ae9570dc0286652bc2d0c8dda31f89113b5380576d245211e3de68b08761de67b36ec2de16787db2b7d5b5689fa9a76fb0c46249d52b7c7731d471136844979fc4ddb9a5a5ca2a1e0f19e87f406ecb6c76f3d129d6b2dfbdd06a4e5ae114", 0x7e}, {&(0x7f0000003b40)="545bd196810ec20981c35c01bbc89a8c3540e5e519f0255197036addd52c94174f917c51ffeae3d18958c4afbf", 0x2d}, {&(0x7f0000003b80)="1d2870fcd5f1fc3c728093b697ef7b68f46574c4dad6929a6e6502f2d437fe9ceb16e850a87a077bcbc032cb756062f2c917dd4b9a00850289d310", 0x3b}], 0x5, &(0x7f0000003c40)=[{0x40, 0x111, 0x2, "823f12d9f070fc9ec22cd3568727766706ea58facd196ef7a52b3027aa16306cacb8110140073651374a18b06d643696"}, {0x40, 0x6, 0x20, "3c6be19adcb55067668e44029948a53cabe56847629a802e58a08b5e0f8e1758c7da0e9911088d6a45ccfaacdea6"}], 0x80}}, {{&(0x7f0000003cc0)=@rc={0x1f, {0x1, 0x81, 0x0, 0x7, 0x9, 0x4}, 0xc1}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003d40)="4dcd824b8e6b5132764326642fae293be01cea8de0ce8ec29720ec877531d20e5c1f0bcd58f1cd3a03ada3c427f316a0fe7597c8f2bf69ff7ce7c0ae614bf933bed83229351be4ce6f627d3f73831d8f41bd5f0907f685e2104186bc3a3d5dbbd0a8e323b34fe246b885578c2ecfb6088259e00dfa21e2020a120661567368a7f0638a0d9f84fd7483468befffc76875412fb9b685ae71b3abf49a5128985d73f8d4077db454cb4e58e5e191526b1771002183aef240057a8476805604cd5a6af4a3f8941a321dbae32e051a4cb24ad6", 0xd0}, {&(0x7f0000003e40)="d19d1202d44320d941de19139732c1789ae081dafacd835d937669a0fd84d604736de8bda113d2b385f7ec2e6fbc2f5343dd9668262ebe941ff8dfda13312b3435ba504a67aaf3f5de3ae517c8e5888c9a51421764ed14981d5ce7443b52f4becfab119773052dcbb2de1072560fc9e20ebbc3e93fb25ba59119b0a5da47cc56607d91ec7b507e2487c136e01f4a0a57ec3f48db6bfc0166d8543ea73b90fd3dfa7245cb3446a2682816879466c8a0e01c2b2391dfd7fb0f42d3d7061e3ee0dff20104f8c14e5ad8265d65ca5b4a792d55a19c96c25b26", 0xd7}], 0x2, &(0x7f0000003f80)=[{0xf8, 0x29, 0x101, "586be41a257be63f96f8a89945b55c3d9809b1d944df335b659f9657470673420ba46d21370a44a3727acf76c9422a7f5a5045ed972a14d73af8c9d22b998a6732b9f4436550d430411fc51f1c9becde7fb34d62ad3c95d54b7455dd253ba5d21327dc819260096bd2b693454868a22e84018fef4272820eb1823879f7edc5227d90890c4e8c0e4a17cc36b14a9e04fac854ef03aaad18991753f81f75cd55c2ed751cbba581f2a8ca17e5cccec363be76e35436ea72c13b349737bacd0a738be888dc09264c045a9cca95ec4080cfe1e9678f1b2c2792db5f68d2db95220ec698aa718dcd0ac4f7"}, {0xb0, 0x6, 0x3, "4caa7bf40c19aa83344c267fa704e2e336527aa49bd2cb7cea492912ea9b3fe599b4d12efd401fa4f3c97c47bf6e43f9602442ebd097e5723f1a55bb89bacdfba4358aac4c745d28ff7de87dee1f19ab78dd4b0a23e9deb8ad1d9d79f27049c30b5f5bd650f6b4ef1206259620625fd6b81bbc173139cddf8f88fadf1fd3d82d748ecb69b81542a354a5471cabc308c5e0a803d9a543864c63"}, {0x20, 0x10f, 0x7ff, "e44e8a3a1e6eecb2d7ae4e4cdb311969"}, {0x68, 0x110, 0x7, "0c6dfb96b8b21eddffd23616366d56b3541d394eb25849c8cfe87ad131f7882306e5c34e619ff9196b75a783b385fdac9c45a08e83365bbe6e2495c4d4d5696c29c32132a851914ed188a6fb6122e648545a838a9a3e16"}], 0x230}}, {{&(0x7f00000041c0)=@xdp={0x2c, 0x2, r1, 0xd}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004240)="1fbb7d85cd372b612ab077d8744313170ae492f45809ffe6f7c5a1b3c99b14aad9151c2ec861a874f27c20d8ff794fb4614adb2ede31da4215e6ef5c8957bb81d3b86c10b0fcfaf07396d96437d68f6e212a78454fab99100d2b8f", 0x5b}, {&(0x7f00000042c0)="e8729b06134db278d318b1e03c501e8e53de59ed0274546c43817c520314", 0x1e}], 0x2, &(0x7f0000004f80)=ANY=[@ANYBLOB="d000000000000000880000006c000000423855ca2d6d0e3c348d005c9f2384d570441a9eb965f158434460abd0c109cc0149e06897547419ac13344f5cabb6c64f1cc04688ae4e519b9fef4da61c4eaeb68d99621a97c2de89e568a225501ba8339e57695e1f99c99c8b44f64cd672ada8518f879b1d643147c45dc1ff11d163a6b32fb0e33e42f493832848db135706f21765396922b865ee139b41f0589cba8ce65a167b3bd77dde9ed4fd0bffa248d6fff01abbaebbf8528043054347bef80a21288b394fa13075e3af6000000000c8000000000000003a00000000800000cc35f2e8ca885809187f8d911928ef251c7ad958e5846a548f8e019bd791b5b28c2bfd82f6018f98e96dbc07454ea3b10dd4af4293773141151acfeedabd2a0743176d114900bd944bcb3235e900463cb0c3596914b4662729158c374a7c6db639ec473a5114475530bb9dd223dfd4851fa0c07f6041fa41016e8badf85f5d9d9d76d108b7ef09a9df4515345d2eefcf4c857b2155432d1b7b69b48dd6b4d3eee7d5d9f74e959e42962222c07f24406b170b000000000000f00000000000000017010000fd1c0000393411ab7f37d1c52a87db3a0fd28ee2291045439381a66e4233e1bc3962832bd862296e3c216f380a5327829664197630c77bf93bdc5785e83a3686e3c653082b962ce65776a2705bf98160bf366d9c80046053127bff307e5c92a49bfdbbe37e267abf4fab261e1d2ba3ac75ecade37aeed472757322689863bd7169902ad2903faef1587a678dca6dd550c293293bb83f125d84dfd921cc225aa15714798b8b5b5c6a764044784048fefed2508fbb69b1bf5feb31509874be0e7b2c11e249da8ce342fcb2450eeb5828e67829ea594e978e98f86cac4be1340f42a26c0000a8000000000000008400000040000000086df3c80d16324781a9b857629f8b768bb914f33ded7f4b5b6f6a18be7a5a9994bf918432867e2882b8c7cde68852c3eaf5d1d1b118c791b36a93ae2ad90c999d3fdbd32c20b61c587544afcf17899adac39ffb95613a8d897a0a0c3ffd3818ea1ac426bae78c53de07faae7c9488c033ea82779c5cb01b4650abae358c17d9720edf737a9a82522485bef1f4fc1d0e465f5b30e5000000d8000000000000000001000006000000eef6c10ac09fb53f9f86748d0549b3d00c5040d945f570aa27dce5dde9f1a159b373ca4639960665b442efe194d40742e4d59087031ce66733b6617bca3a0531c654cad0c3ef1d8ace77ba2ef45b28ba4602a3a3312d71bba8d798b500f8171469f943e8a91ae6b7b5f6ceab0142b4eccc53ea617f46027981d2bd00ad925b2849ae99e9795d8e3fcbbcb16459c0e8e5468c1eee22d0fd4f3139a7d076c5cd68f84824c1a1fe9d42b209aec1caa543c02774f4afc113f69014a60be3f1653aac5a0000000000000080000000000000002f03000001000000fb20fbaf04f31b9dff5e3fcb73a71c63fa42bd115ac56cf55ed9d2521d78bff895ac70639f52fcabc160a72e2aff4f4590ddc375a715c8dfb72ff412b95467c047d2bd1413ec35e226f6fc16fe60433530cb87ad76c5f9d1fe3a57e40e674d33fe4f70862ab8bc802503ee16ffb2ff00cd8e80fa550491423378d1c6afd367035bdd2ebba9b53f2f0b97048c896cb8"], 0x488}}, {{&(0x7f0000004800)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004880)="9dc2a22fe4f5a2532ecc7c27f121bcbfc8fe0b0896ccdee96d83182db772d7cd1a71b5c10dbc74357643222c361323428ab2eb9fa37a1ce9f8c2d86d040e98225169a476bf7b3354e97182c86ef673451810ccbfb6084870678ce829a5541c58f9ddaa", 0x63}, {&(0x7f0000004900)="e4fe4b7f5df7e2c75f2a3a4c2e1a3c01c5f35a7839cdfe6d837ddcc5656f4d25cde6f8c8bdb60332b0a3b1e02e8da52d36831c9d55c62b2553c66b0659cc146f2921562060f288fc2c29115c38717f9c84556f5420050f7746b4992a092fd859d6e2a3525ac13b330ff26c51db0bf878fc9f4014ea20a579ab86217720b343230926e03f22a9e98d712540c042dd", 0x8e}, {&(0x7f00000049c0)="ac0ae006e4f5e2121dc046094a8aa83fcf3bfed394dd95af6e248cb9643aa494", 0x20}], 0x3, &(0x7f0000004a40)=[{0xf0, 0x111, 0x80000000, "c24f949460fe0aa0647827cee5800847527b9b2a85110dcae72a846f887c27a79603502c7839e8ce499e5417bd6f46836b50deb8e83cf663519c005f137062e836b92c106381dea64c336c63d6ee845ea9cbb500752ca3e4091417079f187cbb48c86cdc4af7ceac00dea62674ff59c7835b25c3846e1b5df29989f86c4d7bc8fe34d24dd7fd97a2ea202e634f7d8eb56ec76409290fb352a270ea38d02c2040b07ae684fb2be901dc8060f484f10f3f06432fef3dcdf7854c5b626872d6bbfd6c173d3f7229ec1820c8ea1cbadec59de8761c3f19f4fc0605311e"}, {0xc0, 0x113, 0x2, "1220e262625123ccbf31bd07aff32dc8a696e9172f6b5e77784d91ca3ab9c44f07b358afa5bfa0d6f958a1bc2092ceb8e31907b2ac251d550632000ffbc02e74280c7de7d573c84aba9225a1be2ad5a2bccd31e761f747a164e9d69a1d5bdfda5eb2221a9a0b68a93d41d2a33d443e1bf3b67366a52224e3abf994200fd72dab3fc72694c603a6439298a4408a454a4f0666ce51474a9c347a8c1c6ccda88bf2658ea30ba955b72355c43866c0bb"}, {0x20, 0x180, 0x8001, "2ee5330bf21f51f9996c7eb946"}, {0x38, 0x1e, 0x0, "fd3b91f51704f28088b593069e4e3fdf8bcf44e9cf4defbf3f967c31a1f1282f168e5647ec50c5b8"}, {0xa0, 0x10e, 0x5, "6c80fc269613605a09b469fcb68956680a7756ef74edd1df24da6ac9b23a7927c573e3fa027f82fc423cb845543e4872ef03e04126df0af002a424563a2a3d2ddebd52f2f96260a092bfb2376c3b56731b5b8146f94269686f4b94d1c922b1efea574a85ff9066379d4349bb582e9a348aa22c2bfe742f4b95e93a7626f2ab034e7fceea299cf56c037f331d4f"}, {0x110, 0x107, 0x3, "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"}], 0x3b8}}], 0x6, 0x9010) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) r5 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x100, 0x80440) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000001900)={0x4, 0x3, 0x1}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/3}, {&(0x7f00000001c0)=""/100}, {&(0x7f0000000240)=""/65}, {&(0x7f0000000340)=""/107}, {&(0x7f00000005c0)=""/4096}, {&(0x7f0000000480)=""/191}, {&(0x7f0000000140)=""/24}, {&(0x7f0000001b40)=""/4096}]}, 0x8}, {{&(0x7f00000015c0)=@tipc=@name, 0x0, &(0x7f0000000540)=[{&(0x7f0000001640)=""/198}, {&(0x7f0000001740)=""/106}, {&(0x7f00000017c0)=""/167}, {&(0x7f00000002c0)=""/36}]}, 0x100}, {{&(0x7f0000001880)=@nfc, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001900)}, {&(0x7f0000001940)=""/5}, {&(0x7f0000002f40)=""/12, 0x36e}, {&(0x7f00000019c0)=""/154}, {&(0x7f0000001a80)=""/72}, {&(0x7f0000002b40)=""/130, 0x307}], 0x0, &(0x7f0000002c80)=""/116}, 0x7}, {{&(0x7f0000002d00)=@ax25={{}, [@netrom, @null, @default, @default, @default, @rose, @default, @default]}, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002d80)=""/109}]}, 0x4000000}], 0x92, 0x2040, 0x0) [ 517.752442] audit: type=1326 audit(1569457186.367:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15019 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c86a code=0x50000 [ 517.776957] protocol 88fb is buggy, dev hsr_slave_0 [ 517.777000] protocol 88fb is buggy, dev hsr_slave_1 [ 517.799161] audit: type=1326 audit(1569457186.387:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15019 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459a29 code=0x50000 [ 517.831082] audit: type=1326 audit(1569457186.387:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15019 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459a29 code=0x50000 [ 517.855615] audit: type=1326 audit(1569457186.387:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15019 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459a29 code=0x50000 [ 517.880561] audit: type=1326 audit(1569457186.387:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15019 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459a29 code=0x50000 [ 517.905939] audit: type=1326 audit(1569457186.397:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15019 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459a29 code=0x50000 [ 517.930901] audit: type=1326 audit(1569457186.397:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15019 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459a29 code=0x50000 [ 517.956592] audit: type=1326 audit(1569457186.397:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15019 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459a29 code=0x50000 [ 517.981300] audit: type=1326 audit(1569457186.407:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15019 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459a29 code=0x50000 [ 518.005797] audit: type=1326 audit(1569457186.407:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15019 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459a29 code=0x50000 [ 518.470051] protocol 88fb is buggy, dev hsr_slave_0 [ 518.470055] protocol 88fb is buggy, dev hsr_slave_0 [ 518.470090] protocol 88fb is buggy, dev hsr_slave_1 [ 518.475175] protocol 88fb is buggy, dev hsr_slave_1 [ 518.490308] protocol 88fb is buggy, dev hsr_slave_0 [ 518.495335] protocol 88fb is buggy, dev hsr_slave_1 00:19:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x0, 0x0, 0x131}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:48 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000080)=@buf={0xb7, &(0x7f00000001c0)="39e6318c1d8674ea926f7cee4049b50606f34d82c15042fdea08adcb33351869e70e4c09e2513b1e5ee6ee22ceea3975fde54bcc62f871705433a36cb14d600b32be83673c27cfbb20fcd4e3746d622be430f5d9d75416454e7cb3f3e625d3e341bd17f09d0562754a697fb1f1273f230f18f3b72860ee6113b365ccf20afb2db6afa881d6101ab42af90f4ed11397115b1b0837571cd277ec7638288248bca9a3a2fd97880583a4a08de472bb5322a9b8f335be9b7aa0"}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:48 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xcff, 0xf335ac4830c376bc) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/169, 0x8c}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r4) quotactl(0x2080000201, &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000002c0)) ptrace$cont(0x1f, r1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) write$P9_RSYMLINK(r6, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x45, 0x2, 0x8}}, 0x14) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x9000, 0x0) 00:19:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:48 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r0) 00:19:48 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r0) 00:19:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000000)="b9891d8ff12b") ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:48 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e31, 0x8, @local}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) ioctl(r5, 0x1000008912, &(0x7f0000000080)="11dca5075e0bcfa9d0eac1") connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0xedc0) getsockopt$nfc_llcp(r6, 0x118, 0x4, &(0x7f0000000200)=""/59, 0x3b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x2) bind$packet(r0, &(0x7f0000000180)={0x11, 0x8, r1, 0x1, 0x0, 0x6, @dev={[], 0x19}}, 0x1e7) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0xfffffffd}, 0x6) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40000000000005c, 0x40012041, 0x0) 00:19:48 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x7, 0x240, 0x8, {0x0, 0x2710}, {}, {0x4}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x81, 0x2, 0x0, 0x0, "f529d544d3fcead90c512cd308ced0f8084e0fab23ff5fafbd962251c3b0838d4339ef9fbf1e31557d4b791cb4778bee1f070b0ddfae17e7da806b3f5a627ad5"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x38) r6 = syz_open_dev$sndpcmp(&(0x7f0000001940)='/dev/snd/pcmC#D#p\x00', 0x40, 0x0) sendmsg$alg(r6, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001980)="ac5fa0b374b0e2f2c747f0d2e8fbb9b76cf7112edf4b2bf8a23414f87ea23ac14106ecc8fe2abd42bc24beb59a1f5aa259aa20bc8d1504b762105a69947a96cc210dddd375b12cf056065c2600d684596e40b59d1f0b083441744d933d21520da6c146885bf96e2eecc91e3921c51d71b118013129d13ae4f5174b2ff1932645955ab386fac58228ffcb1ed53d95cfdbcaa7ad7f3e33b3cc176af59bb047f3199b60cf9ed44af3c87628546ca296ffbf6f8e3a8c10a1d47ce6d779a9e60cf9edf6a5a989862b45eaf90a83e378d74905b4ba0bf0b026a30b", 0xfe96}, {&(0x7f0000001a80)="4d5bf4fc0e44ffc4183e0049b6b18b4df0015f9c0685673b0e412d30ffa73d1263509cab1db7daf2e21b2edd3daf133ccadca80b0c570701dbe35423cf008af003fa2d1aef5ec520eec2834027df797ca8fbd3c330b26ef09f73d8fdc961af6d34d300fef21be19417b3fb2021724ae4b89f0da978ff6ef9bbd3d7d6d01b459f046b2af3e0d73b39e8ceeaf93f78", 0x8e}], 0x2, &(0x7f0000001b80), 0xa8, 0x4}, 0x200000c0) ptrace$cont(0x18, r5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r5, 0x0, 0x0) 00:19:48 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f00000001c0)='Ilev/dmmidi#\x00', 0x34, 0x1) stat(0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1a8e7c16, 0x6, &(0x7f00000014c0)=[{&(0x7f00000000c0)="7489d74238a9b50f48b8cf2cf99260b20649185c166880e71bcba1ec70bb98ba1610939e56a2d8ef5b9599636e6c22a6e1c0262eede7dc77d72588f0f58ca8325f390a02a82409ed3f6fee3eb1b8b79ae95142a8ceeb5749a6de23fa", 0x5c, 0x9}, {&(0x7f0000000140)="b77bd318299e2449785a70f73925", 0xe, 0x4070826d}, {&(0x7f0000000180)="19330729c850bc0691d7", 0xa, 0xfffffffffffffff9}, {&(0x7f00000004c0)="38b87db6986cef2f2d1a4450d377b6e920dfe43c11bcb444e5a30178c04f37b5a32727c1608fedb5aa0c0dea554ade411cfd42a973b58281e1baf136bd9fc621a06c9fa7ea096395b2bf28e1df14413083a7bc9c32fb0820cd71a91a0b98e09d0f2f21fee9fbaf83999f14ddd4e7fcfa9352f66a2c2b7c0b978ada828dc07faaac9c7d321d33dae3bcd98aca8f1028638434607cbc8612137c5b830100f587915e5f036c2797dde5b47250d9b0d656ff185f35b3eded8ae7e6ac9766189895588d0efc9c7ee96bf7c565f8ec1ac424b472b5f51555dbb8659a093db427701c47f8d64b7cf2b4111a3fba0cc78c8beb8e6471ee742b6da3ac3683b88843b15b0f7c3d5c8ac216d837c4d0fb0f7ac75b3754b0e2c2dcab05297ee497e6cbd907668ae1bace5557dcefa4f20e0c8fe69506df75cb062d7d9cd29598d880867df33c5f55a339736dd6eb9c49ed78a997fdc8c6d4ad2f2f3dd99e96e5c315404657cfd90a0b7814fcf3cac67b408c3719a8efd1fb68fac80a9efe787a21fda74f30fa2f2785a9a9146dfd00117517e850e4b1637f1a4601c4b3d79c1dffbf58d44449f24d615ca3b17b36197d87da47002e27c067d54f674b247d4f29fb271be97f0b0f611704e0e77fea9aedf6b0c22f01153fa8d99e89eea404b1dc768c8b7167fca4ce4b8f78c448da0b7bca64e31458f8bfd0fcd36ce840b94c9ef317c935b0f57ba4e1ddb2dc255b471fd5fa30119db358221c7f846681aa466ad6b795e3df8703fe5d7a11862e663a36606afef5772caf023c2ac58f7d52901633b1dead97b8303384df206084c59be554de115d1d47dc842a41f2e4d3bbb62cbbecd99c783680448b459c1e6d06b8db35968df63078afbe461d34c841d86dc7f301db6fce4c16f9bcc88ab6bf490a8665774886904df872d1f85f2b964eb7f14733b6ae72851d0227044f65596597c5feded39a05c7f1afe99358abd149a8c2989372279d3d57e165be4a16cfbd1d6306d00f18e3135e05cb442f5df316757470837042d9aeb2bddbf7d263d160de3ca7059db4d5eb30044a08158ad7c5358e7dca596aa6b657c23d236a4acdf52c9d78a4ee1f35c854b158ceca3dc40c08de86ed93c56a2ac155bf9a69f05e470f3f56f17cb998523df813b256c9ebc97077ea87db1a3c7002fb7f2fdfd6a9bd0c9ddec03dc93bfc2a1fa7af4cc40dba49536d988f6d6c9985380eed57ca1b978bb13c35b435d4cde6630767f1a148ebeb50c1016f945dba59698c9c7510b8e5cb7cd483e77175aec1e2ffe946268954e1e306ebf43cc3f0a39cab456535163398a469f1cab3763959cb3257422903f04a5adb3e252b69dfd2fc28fd904b7697c5e84fd0ac1b166e38bfdc2dc8e91447383e61ae1f4012133ae3af75589c5bf327ea8b58d455f33d2dcd03ddbb853b6e7edefbffd9e1fdc7389261eeb991c1f143bd68c4ca8892671e2d11a46e8fc71d1e28c4938d6e2b442a6cb538b649275efafe8e481d95dba9d29bf448890df5102485cbe262e3b53c2088888c769ea4f7443bdbce9c3412fb41fecfec172090f65c00b5a7f6edbeb7a00bfc5a8c711f54da1e4e9eaa2c20c5bba1b79254d97462016269d11994bcd7cb43dd19ee1f0882224bbbbff6e7c00dbd9694512cf26349fcfe2eb2307e2aa5e246c2204acaeb243a35c1184912839f74cddd9d2938f1cd5f5491428e43eaf77ee410ce76af30bccb80f1683555a3199d19195cc6d124e45eb8e92b3f7a672d68f58866e487331fce9db6a934b08d0b850cdb0fa1efeb13e46f1e410747da114055d2534215ebd2347cbccf99dfa9ef772126ba998bdb69b3db50dbec68c6ea4983eb5cba3d4ce48025f8d3ab7081894af5b0e596a9609cd36a81ff8bf7438e67ae93c6ac5a6ed34ccb8a699638cfe6416b919d174e63da86c206353943eb6abe7e223936e515bc93d4a4a3c72cb61368f8dac797507e2733600ce2641456e21a7b3c2182b22184a15854e58bb1e6f9d0dff534e3dae879fa0dd397da3358c3083cc57328d6af70e6dabf6c7c6c7b55c489f50ee557853478a7ce5185b5ab08d782bb356844d07d7f9c8946776210d05b854c0170be9b1b0c8d8260fc9310fd822ab58e6d7eb7ef61323bd19db428291068dfce8d6ddc1403d489abe6f7a030a731514144b72284b84e61e9f57e8034dc72ac147c4605352c0fbae2fb03be7beb9f1fb6061022a05203abfcf603d7feaa25b1b446cf858523e1d31814be84bc6cfa6b0981f29c88875ec356547e34715c6b8b4e4be7c9ecb148cb644b94ff0879a3594b2fd93fa797ef86d0bdccaa0998d02291c9fd0233e458683211f270e07f1d319011bfaf7826c1a9297740be297d0fc3c52e77c245096d3ab7c940ed0781586c6cd287d22db4d5db70cbed2f99c2d729dc93b8cc0c709c81b55a3b231b60c1e4828005ab5f53c646787ea57a67aa8f14100fdca6d2e0e86da3da3439dc13389e3a217941bd67c74d7948bca0cd94167be281d1c8b3ee90e56c4fc85a0b6fd28829997891164ac4edd2bd699715fe85cf7b7a358582d84991ef2ddf76fe18ed4022c4ac03d1b61d77f0389e1c5c9405fce5882af581583c2feb775e303ff4328c953b79ef5323da8b07c9a1c909c848090cf86d0581f8a69fca9d2f9074c62ebfce6336b9fd686e186444f48376299f5df3d60a42f382e7ca733983b6f38c832cddcf16e28258dd2c13a2927bbbd62f02c839715b82e2a7c03520bbce25d711d66f209d4b0f1194d6d0ef98272f7313f683bb366258efba0b14b4b658ee18e4115fc1a97560e0153f49e1104e8c143b887cd3fe2ddec05fa9ab8cd48795e2e7b097c23060482a34cef854c12d09bc096c821509f23cca3b5e27aca080a90a5989a3b83141ae8dadfc61d8ca1d1f9565e06e801ead0abe1815728868726f97babb37c04ab3041e629008513eafd18465efb1e160c80f5e397e7383489c9e864a946a643f1956b3940dcc9fa08741a7d4011902188df228ad8571ff6ad2703a1a894ec41bf1bdcf598f95491e636de672433b14696ce50d2350136802706f1649566304f8aa95f62ee4c176108260193d3772ad549b05632cf640d1274ee8b6413884bad5fae3e1a6fe15b4542c2a91635f2156ea89fc57dcf92165efa0a0d2cd5e255cfaddf947768bc8e05fbff0be3b75da5dc4dc5ab94847503b52f1cdaa45cb9a3b837753a06a8820eb4bfe05a5a5acdf0f85766ab564ec973942c9af6228763f09e736a712a6ac2a15dc3a428133361d5c853db14a0f63569cfce67de079e861732c7e01d10491931803d01cfeaccaca14661c93ec8c056b3c8b1ac30a23a0102a231e2fd7abb2c730241630b4022c163b2cf308e799015d94faabf71330fd9a92942ed8b7157f43db977fd1f60a950384499eca076049bc75bf1d7c5a279508e8173a2303841489b2845f0574122edf8ef97903d126195c1fa7507693a5d373ec9da8bee0ef34bfe29b301730bf4e30f2c056f28981719b4444c9f2595031c35810e8f26b6f413d16e866ca402fc1342f9fee60e112e9c54b96534c73ea1944f13f463537e55ceae3b70ec8fcad0d050c97055afa619fa9dcba70d6167b15cd7c5a9487fe8c35db3061713cc258ac31756c3f26621dba60e06dca53269293f8c6d1e51ec78a584467ea88fab969f5bb60a00b3f607ab01e68a099b204af448dfb74af47c7bb855a2c6a95d7cd77a5b5191d5fe86b36d35e68b0cd218a3ea5e5477cda81b5e3fada27b119405cf49e7eb83f9eecf1cd8808ac4d06178cb141554e374dbc2c98699bfa2591a1e149d97668b027995c82f898d14e23e650097c921ea8502d98def2b9fca6e8f74a94bed58b7a8fd06b65613429b50c6b31ba0e124ce37d264b1816babaa7b1b0649c8c462cc5f5f516bc83a94087577c139692c52cda35e58ec6d360d5cdf76c89ab5dc6998c45aa622e262e11319fc40a3431c8db067ae600f97653fe08e50239769d6cb70657ec64f7ae9acbd1024309207d092c5365879ceee59bbfa05d888e9c6df0bca32b9e670fda949759b7323f8404313ed7f3aca9e99b9b6967a63e58b08f531272de65abb452be9df519f7ff43b6af9d50c5718f1760e83ba2f34e55c05b026a852e2590183a97d60e2ffaba445511aa37416ff18260a00b7c6a05c4567c55bc6bca3a493103a62615e89bc4825a039a86e0ff450e4929bce87ed7e87d1fb7be12b037c6993b87b3a89dfc27482e506aba5247e6eba83ccba9870275c7be925beaae858695d58b7ad7240cd7faa4745d67e9f9792b45352d9f8dcb8e427521bfa5dd060ba722f20726448a125d1f4a63414b259996ed08c94248d0845865248832f803677195bb98c7fa3e526a39f67c9ff9c25ca535c583319b4273ca54ada91ab3479986b3313112ecd173a7e05e3003d96384c4f9bd4ba621b4df4d8910c84431ee0d49937755da3dbdb96e7e0caea7f9ddf1e18f831f0e32db4fab752c1bdc76278e4977415605f619e1e8b922d350a4f6afe95da1815e08e864af00b5b1b676a2e9a1a0c940a52f6eb509e378ca6bb292f5ce8c2f10bbecb5126a377321f96f4b35186db2da8a0909168e6266349993651bc0746339cde8faf0c6c6e79008a643146ef3558ad1c113b4b61c0cc9a9a7da1ef030d0b10b780656b0700d258500467c72c317835085ddd50bd494c910d376e5fe611f99f01d8f1ed032abc4f311b68bfaca17bed5ad7a8a936bb1070658441b7e2b4f634a775fdbdeb066bc7294107edf4e754cdaaeafd906908088deff410e6ce789fe297f767dd16e79eb75ad3b91abf20befea6b2ce811156516422b32e7849d917f3bdc763357da361205945ed5a07b5b5421523cfbcdb4a17f8164131674e437e1b38e85b54fd975c5ffef0c058a7df5fa3991486d69e13e8da562208c853c0930e7e3871f445cf6eaa8d05e46488d292529b2ecf9c919d4c4e66bfe629601a855cdd85eca7290ccec63bf237e55584a7169c8a23e46d7711ed27897c6740effd1f5d7866a300cd97893e4f00c219656e59aa73d", 0xe00, 0x7}, {&(0x7f0000000240), 0x0, 0x8}, {&(0x7f0000000340)="6ecbd01a6dab74d28057706ef7cd24b848f39f314194f8333c09f547efc6454227a970d8224567c8babe1033519b504aaacba87f13e8ed14445c86903efd33b82972f9c5806e5c42536d0e00ab58b60fdc0148c2f91e1fe30854ddda267e2221f7e27705d9c742eef9faced5c757b7", 0x6f, 0xfff}], 0x2, &(0x7f0000001600)=ANY=[@ANYRESDEC, @ANYBLOB=',euid', @ANYRESDEC=r1, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_none='cache=none'}, {@nodevmap='nodevmap'}, {@aname={'aname', 0x3d, 'Ilev/dmmidi#\x00'}}, {@nodevmap='nodevmap'}, {@fscache='fscache'}, {@access_any='access=any'}, {@access_user='access=user'}, {@privport='privport'}, {@afid={'afid', 0x3d, 0x1}}, {@noextend='noextend'}], [{@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'Ilev/dmmidi#\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'Ilev/dmmidi#\x00'}}, {@seclabel='seclabel'}, {@dont_measure='dont_measure'}, {@uid_gt={'uid>', r1}}]}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5155e0bcfe47bf070") r3 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000200)=[{r0}, {r3}, {r0}], 0x3, 0x0) 00:19:48 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0x4, 0xc, 0x40}) sendfile(r1, r2, 0x0, 0xedc0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r4, 0x0, 0x0) 00:19:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = getpid() r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) recvmmsg(r2, &(0x7f0000003440)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/99, 0x63}], 0x1, &(0x7f0000000140)=""/57, 0x39}, 0x80000001}, {{&(0x7f0000000180)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/25, 0x19}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000440)=""/138, 0x8a}], 0x3}, 0x80}, {{&(0x7f0000000500)=@caif, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f0000000680)=""/109, 0x6d}, {&(0x7f0000000700)=""/101, 0x65}, {&(0x7f0000000780)=""/38, 0x26}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)}], 0x7, &(0x7f0000000940)=""/84, 0x54}, 0x81}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/121, 0x79}, {&(0x7f0000000a80)=""/117, 0x75}, {&(0x7f0000000b00)=""/189, 0xbd}], 0x4}, 0x6}, {{&(0x7f0000000c00)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c80)=""/204, 0xcc}, {&(0x7f0000000d80)=""/75, 0x4b}, {&(0x7f0000000e00)=""/204, 0xcc}, {&(0x7f0000000f00)=""/87, 0x57}, {&(0x7f0000000f80)=""/13, 0xd}, {&(0x7f0000000fc0)=""/46, 0x2e}], 0x6, &(0x7f0000001080)=""/252, 0xfc}, 0x8}, {{&(0x7f0000001180)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001200)=""/178, 0xb2}, {&(0x7f00000012c0)=""/209, 0xd1}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/19, 0x13}], 0x4, &(0x7f0000002440)=""/4096, 0x1000}, 0x2}], 0x6, 0x10000, 0x0) tkill(r1, 0x9) ptrace$cont(0x8, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 520.427745] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 520.452678] 9pnet: Insufficient options for proto=fd [ 520.485311] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 520.523360] 9pnet: Insufficient options for proto=fd 00:19:51 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x9, &(0x7f0000000240)="11dca5055e0bcfe47bf070") r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080)=0x1, 0x4) r4 = dup2(0xffffffffffffffff, r0) getsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) r5 = dup(0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, 0x0, 0xedc0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r7) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000100)=0xa25, 0x4) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x804, 0x0) write(r8, &(0x7f00000001c0)="bdfaa5c93eca4500000000000000000700011838832aa0304316619f2c8e21d32d090000000000000093828e97324c9f04fd861a2ab3dfd1b7329d39c1dba698278b4a00230d0b9be0218166d972e57b0055ec5e4200"/97, 0x9d) r9 = socket$inet(0x2, 0x5, 0x1) setsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f00000000c0)={@multicast2, @rand_addr=0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:51 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:51 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$setregs(0xd, r2, 0x8, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x9) ptrace$setregs(0xd, r3, 0x4, &(0x7f0000000000)="22fe832aa45f7cad34a370d62eba12d51c5b9d84668e9b68bf013f088603b1e9870ee05c4f598bfe3df151ddcd3968a03171b8b3f38081eafdbe36dc181f0840a7bc4635e1bb885f3693ad03b124f88f9f2f2db46f2f033b885c5e8dd53301") ptrace$cont(0x1f, r1, 0x0, 0x0) r4 = getpid() tkill(r4, 0x9) r5 = syz_open_procfs(r4, &(0x7f0000000080)='attr/fscreate\x00') ioctl$KVM_PPC_GET_PVINFO(r5, 0x4080aea1, &(0x7f0000000140)=""/132) 00:19:51 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x11, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="191c8ccbf89b0ea207630c35000000caefe4f900aa"], 0xa1, 0x0, 0x0}) 00:19:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() tkill(r1, 0x9) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)=0x0) wait4(r4, 0x0, 0xe000000b, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 522.985215] kauditd_printk_skb: 58 callbacks suppressed [ 522.985223] audit: type=1400 audit(1569457191.617:129): avc: denied { set_context_mgr } for pid=15097 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 523.017652] binder: 15097:15100 unknown command -880010215 00:19:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r5}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r5, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e22, 0x2be, @rand_addr="8343ae8ce000f4283645e10d9bb92233", 0x1}}, 0x0, 0x7, 0x80, 0x3, 0x18}, &(0x7f00000000c0)=0x98) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r1 = gettid() ptrace$setregset(0x4205, r1, 0x6, &(0x7f0000000140)={&(0x7f00000000c0)="5ce39d643ba98ced8804d604f0d0c95d7f354b46f60f94d0dbc5b4a39c8ab2b8c283fea6969cebdaa6ef52986f92f4f55127a5e9c315403b2da763c190bf5581f3c44ce23b861b2ed12ea7526d31d68d31638f488d039bc38d9eabc9fb2f964f625bb337fd2531d3c3c8e2178412b1b485cd2d4a940912ca32c34598592cd8b7", 0x80}) ptrace$cont(0x1f, r0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20ca00, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x34) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="395c0d91cc848922b4bf2bb2338301b1026f0ea0e5c41421d312425671df3e424b88e73b7beba525", @ANYRES16=r3, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 00:19:51 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xa000, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/99) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x40006011, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 523.029095] ptrace attach of "/root/syz-executor.0"[15102] was attempted by "/root/syz-executor.0"[15111] [ 523.041470] binder: 15097:15100 ioctl c0306201 20000140 returned -22 00:19:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() tkill(r1, 0x9) prctl$PR_SET_PTRACER(0x59616d61, r1) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) socket$inet_udplite(0x2, 0x2, 0x88) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x18102, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) 00:19:51 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') sendmmsg$inet(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="bb1181d961de1656d0a5ed0e566647d9cca07783c8aa1f1060f27d0e429cabf9b5304c70144f19a964", 0x29}], 0x1}}], 0x1, 0x4000) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000280)=""/37) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000240)={0x3, 0x5, 0x5, 0x7, 0x51d9}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') bind$rds(r3, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) move_pages(r0, 0x5, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000100)=[0x9, 0x3f, 0x9, 0x5, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x4) sendfile(r2, r3, 0x0, 0xedc0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'bond0\x00', @ifru_flags}}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) 00:19:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x332, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="8000ffff08b7960ff7f96e041aefb1ebea7e7de8e703000000d8fc279f7c1deadb2487d9b2d074101b09cfb5fe9f187d95a3affbf68194"], 0x37) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000040)='./bus\x00', 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) dup(r2) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x20200, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x507481, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000240), 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r6) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080), 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 00:19:54 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) 00:19:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x16) ptrace$cont(0x18, r0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x420, 0x1, 0x2, 0x9, 0x135}) ptrace$cont(0x20, r0, 0xfffffffffffeffff, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x200, 0x401, [], &(0x7f0000000040)=0x4}) 00:19:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x332, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="8000ffff08b7960ff7f96e041aefb1ebea7e7de8e703000000d8fc279f7c1deadb2487d9b2d074101b09cfb5fe9f187d95a3affbf68194"], 0x37) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000040)='./bus\x00', 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) dup(r2) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x20200, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x507481, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000240), 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r6) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080), 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 00:19:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:54 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x3, 0xffff}}, 0x30) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0xfffffffffffffc87) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000080)={0x9}, 0x4) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r8}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000140)={r8, 0x7, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={r8, 0x40}, 0xc) 00:19:54 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000002c0)={[], 0xfffc, 0x1fffff, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:55 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) accept$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @bt={0xb12, 0x0, 0x1000, 0x9, 0x4, 0x1ff, 0xda3be9475df381f2, 0x4}}) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x1, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:55 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ud(\x15') finit_module(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r6}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={r6, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x7, 0x218, 0x7, 0xea, r6}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0)={r7, 0x6, 0x6}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 526.726864] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 71786864)! [ 526.757574] EXT4-fs (loop5): group descriptors corrupted! 00:19:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:55 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, 0x0, 0xedc0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r7, 0xc0385720, &(0x7f0000000280)={0x1, {0x0, 0x989680}, 0xfffffffa, 0x6845}) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012bbd7000fedbdf25030000000000010000000000000000000000000000000001080083002ffeffff"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x28000000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:55 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4164}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x759}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x173c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xef}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000003c0)={0x242, 0xf7, 0x401}) 00:19:55 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4164}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x759}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x173c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xef}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000003c0)={0x242, 0xf7, 0x401}) [ 526.942804] overlayfs: filesystem on './file0' not supported as upperdir 00:19:55 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r3}, &(0x7f0000000100)=0x20) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000200)={0x1d, 0x3, 0xfffffffa, 0x5, 0xffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r3, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r5, 0xdd5, 0x7, 0x8, 0x0, 0x5}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r6}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r8, r9, 0x0, 0xedc0) ioctl$KVM_RUN(r9, 0xae80, 0x0) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:57 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4164}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x759}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x173c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xef}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000003c0)={0x242, 0xf7, 0x401}) 00:19:57 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) r4 = accept4$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x80800) ioctl(r4, 0x401000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) ioctl$FICLONE(r5, 0x40049409, r7) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x7, {{0xa, 0x4e24, 0x8, @local, 0x40}}, 0x2, 0x8, [{{0xa, 0x4e22, 0x0, @rand_addr="51823f880144904ed1a799a02a24b7a8", 0x2}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}, {{0xa, 0x4e24, 0x80000000, @empty, 0x8}}, {{0xa, 0x4e24, 0xeb0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x28}}, 0x1000}}, {{0xa, 0x4e24, 0x3, @empty, 0x81}}, {{0xa, 0x4e24, 0x81, @loopback, 0x73e}}, {{0xa, 0x4e23, 0x8, @loopback, 0x8}}, {{0xa, 0x4e24, 0x3, @remote, 0x2}}]}, 0x490) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x9) r2 = getpid() tkill(r2, 0x9) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40880040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x190, 0x7, 0x3, 0x2, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0xa}, [@generic="d6dde9cfca918e4d6266520c0f160e009dbc0fe6d20740b206473986ce85e57d3c1ff2de30c22efbd30a664984529231c8583b418300ddb832e0997605492a32778be0d524ae2c6729aacc60c7f2574a78dbb4971284bfdac7e2e10b33570386f87e10b2a2bc25ff7396516b604261f0e1de5336abc9fb1266a5c81e434ad38aeeb6ccee0af82d3a80af8ccf2c208aecdb28cb22438a39ef1d48d739a2605a32d0e3c1072b7b1abd6d3113a33314d76a556ca94f2ecc6804e234d131fcdd21871121584055e45d08663db35830fec3ed0640ff3badc0bc716049be70eee752030329df0809e93bf2cc0e07cac6c10f7123a8af", @generic="7465713bba27b305553f2a3b4841056d2b7ad0b8f69ed84dc139507254fd8a177b9c6483a4c3413c0e6f20bfe8ab82b06d2c3d96efaa608cd8f9e6a41978624a1693cca2d9e7498bd293ced3a0c48f3577b98788e385def082b65146eb61c6", @typed={0x8, 0x3, @fd=r0}, @typed={0x8, 0x6, @u32=0x2}, @typed={0xc, 0x51, @u64=0x8}, @nested={0xc, 0x0, [@typed={0x8, 0x34, @pid=r2}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x80000}, 0x40000) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000240)={&(0x7f0000000640)=""/4096, 0x1000}) 00:19:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:58 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4164}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x759}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x173c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xef}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000003c0)={0x242, 0xf7, 0x401}) 00:19:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x100000000, 0x14b000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0xfdfffffd, 0x8c54, 0x2, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:58 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x20201, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='bdev&\x00', r0}, 0x10) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) socket$bt_cmtp(0x1f, 0x3, 0x5) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:19:58 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) ioctl(r4, 0x1000008912, &(0x7f0000000080)="11dca5055e01cfe47bf07011040773016a86a353026aacae5de3e4d9b57f19677e9a2b5f9c1e09b4c8b7d2f58544272eec67936c28f0e19ee2562aed4d85fa715c92") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) fcntl$dupfd(r2, 0x0, r6) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:58 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = getpid() tkill(r3, 0x9) r4 = getpid() tkill(r4, 0x9) prctl$PR_SET_PTRACER(0x59616d61, r4) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x38) ptrace$cont(0x18, r5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r5, 0x0, 0x0) 00:19:58 executing program 4: perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) getgid() perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) getgid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$dupfd(r4, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x0, 0xf, &(0x7f0000000040)='em1GPL-vmnet0*\x00'}, 0x30) getpgrp(r6) r7 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x38) ptrace$cont(0x18, r7, 0x0, 0x0) 00:19:58 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4164}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x759}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x173c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xef}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:19:58 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4164}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x759}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x173c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xef}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:19:58 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50000800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x9, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c871) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r3, 0x0, 0x0) 00:19:58 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = getpid() tkill(r1, 0x9) sched_getattr(r1, &(0x7f0000000040)={0x30}, 0x30, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:19:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:19:58 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) r9 = getpid() tkill(r9, 0x9) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100108}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=@bridge_dellink={0x15c, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r8, 0x80001, 0x1}, [@IFLA_PHYS_PORT_ID={0x24, 0x22, "c97e5d0e1c9a74d0fce03512183f27cba4d5ae42aaf677c2b8e15fd6a8"}, @IFLA_VFINFO_LIST={0xf4, 0x16, [{0x68, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0xc6d}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7f, 0x6e7, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0xfffffffd, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x8bd, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x2}}]}, {0x28, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xf7da, 0x401}}, @IFLA_VF_TRUST={0xc, 0x9, {0xab, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x2}}]}, {0x60, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xc00}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x401, 0x1f}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0xffffffff}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6e55, 0x301}}]}]}, @IFLA_NET_NS_PID={0x8, 0x13, r9}, @IFLA_PHYS_SWITCH_ID={0x18, 0x24, "eb8fe69190f3d79df492e779d355693f7205fdf9"}, @IFLA_IFALIASn={0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x100) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:19:58 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4164}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x759}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x173c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xef}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x81, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:01 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0xffffffffffffffff}, 0x30) r2 = getpid() tkill(r2, 0x9) tkill(r2, 0x800001) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000080)={0x7, 0x6, 0xff}) ptrace$cont(0x18, r1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @ipv4={[], [], @multicast1}}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r7, r8, 0x0, 0x5) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000002c0)={[], 0xfff, 0x0, 0x1, 0x0, 0x135, r6}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x800000, @ipv4={[], [], @broadcast}}, r10, 0x4000000}}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @ipv4={[], [], @dev}}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r10}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000480)={0x6, 0x118, 0xfa00, {{0x83, 0x2, "431f6d43bef58a4cb235aa46e73ae2013538c62e6a58a049b7af49196447b2b5d783e34a5c4568410dd3ce528316e0f428ea4ea41d6c28e97e62ff5eb23d00f4122a4b2094ea22daab29ee951344bec8cf89af2b4abc6e7507a7324ed437554f0e48a246682a50ae3f5fcbed0c4986f587031f12ab85a9b82de1a649c5694f16a053342ababbe621fd7a578ea89bb9b65280a188fcf01f8d293b9245e81533893821153eb17f06f452a81a231fc7557cb4ba644c1497132ed9027b4ac670455024a16cdacf94945667a67c4b849cbd0f04b8cdfed52c122cddbef92cc05623ab1ea969ef249b4da6bab0b9e83431ccfbab08a37d6a8eb891b5fea1b046564340", 0x5a, 0x1e, 0xfe, 0x8f, 0x40, 0x40, 0xa5}, r10}}, 0x92) 00:20:01 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4164}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x759}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x173c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xef}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:01 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r5, 0x0, 0xedc0) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x800, 0xffff, 0x0, 0x3, 0x3c, 0x1, 0xc6f, 0x2, 0x6, 0x401, 0x7f, 0x6, 0x1f, 0x8, 0xe391feb3bb950a6f, 0x58362bc46d5c1eaf}}) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000000)=""/157) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:01 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2001, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:01 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:01 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000000000048001200100001006970366772657461700000003400020014000600fe8000000000000000000000000000aa14000700fe8000000000000000000000000000aa08000100", @ANYRES32=r5], 0x68}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x6}, 0x28, 0x1) 00:20:01 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 532.568459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15355 comm=syz-executor.1 00:20:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 532.627039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15359 comm=syz-executor.1 00:20:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="f7e504795e04f9f01df2ee3e15a1791f5c12b51501b683006aab208ad4a064939850d045b29147f17afcbc4f73924c1007f77318ad24a3d9ea62ea029c0d9a305488fc0cf302f43288f1c9891608a088d3c1ba069a724d124a28150ea3bbba05a5961a5d5c0276094d1c64b0702eb44ffbd212a207245b389f5e9894c89d1dc35bfc000a0104000000000000e5b5051581322264d9872e4234e63679b445c274d9c1791d7b8c023cc69d82819b54e96a2a6d4f87ac51a183b8f10a4c372cc100e3c42ac00af8adbe5230557fa013da797275") ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:04 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x9, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:04 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:04 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000080)='}{%lo\xa7system\x00', &(0x7f00000000c0)='!\x00', &(0x7f0000000100)='!em1+(\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='[#vmnet1bdev', &(0x7f00000001c0)='vboxnet0\x00'], &(0x7f0000000380)=[&(0x7f0000000240)='system\x00', &(0x7f0000000280)='\x00', &(0x7f0000000340)='.-&*^eth1ppp0\x00'], 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x110, r1, 0x0) clone(0x2a0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1000038) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) tkill(0x0, 0x5) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r3, 0x0, 0x0) 00:20:04 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES16=r3, @ANYBLOB="59482e240be7501c333daf785dbad127b4c641714c8a70490f5c36013f8c2796492d82c6becf37f65f61a2e2c3ab46e851b2bcedcd8960e26f28891133a1cb2cbd2b1039176df16dd46137438a3a4c96df29c5bb3daec019ca8d352025952ac50041535398fdd7a2708cd5c17cde1033ccb3caebcbc78ebfe36765ba4d30a1972c23b3f8dfe5"], 0x2}, 0x1, 0x0, 0x0, 0x4000}, 0x41080) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20080045}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x106, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x2, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r4, 0x0, 0x0) 00:20:04 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:04 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0xa6556d21f67622e2, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x10c) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f00000001c0)={0x4, 0x79c, 0x2, 'queue1\x00'}) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) ioctl$SCSI_IOCTL_SYNC(r5, 0x4) 00:20:04 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xba, 0x12) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:04 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) write$P9_RXATTRWALK(r3, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x3}, 0xf) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:04 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:04 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x5a5, 0x100) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @null, @rose={'rose', 0x0}, 0x0, [@bcast, @bcast, @bcast, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r5, 0x0, 0xedc0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000080)=0x9) 00:20:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xffffffffffffffff, r0, 0x40000000000000, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:07 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:07 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4000, 0x0) write$P9_RMKNOD(r3, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x4, 0x4, 0x4}}, 0x14) 00:20:07 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r4}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e22, 0xffffffff, @local, 0x9}}, 0xff000000, 0x4, 0x1000, 0x7, 0x4}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r5, 0x0, 0x10, 0x2, 0x81}, &(0x7f0000000140)=0x18) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x38) ptrace$cont(0x18, r6, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r6, 0x0, 0x0) 00:20:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x9, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r1 = getpid() tkill(r1, 0x9) ptrace$cont(0x7, r1, 0x4, 0x0) 00:20:07 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$getown(0xffffffffffffffff, 0x9) r1 = getpid() tkill(r1, 0x9) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000340)={{0x1, 0x4}, {0x4, 0x4}, 0x0, 0x0, 0x7f}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) clone(0x20000, &(0x7f0000000080)="bc1f93e2cbbb3244821683938f200992423fc6dd2d12778cca278a035a4a6a05166ca40a6c74ad9957ad1518ec984510978ae5bb4bfd36b3fee5346b3e0d2c14e71e5156cf19f11a023e507a2ecb342d5aea5818be2a5a9f08020d611936a0fd110e9db0867d6e9f6a532b8c6f86012b084231e9803100d527902571705b2f0813da57a906e06cc9325adab350", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="091cbbcbdb07184ddcb1ca6f627d1ac6cf273b806701a65e9e99797d0f1d02308c2417da229620def4c959c46cc93bdf110122af33b781258b0c1859179231466dda23f2dbba21ec7494b99db450951595931f100adddf656c68fe2dee4208e922b599ce246c3fca570076a4eb34a413b08f613291e4a613de99cc7ceb73da5708814f90ff5410851a1d1260e782d276a6596b3ec17347acf35d5a1d99ace2279435425c200618105523172b107c8413a2bf3a209f304102f0583a7fd15b0bb7ec6e3ab5e140b01a964ad8ecfbff30f56cfae7fba552ad0cc1163e1ee677db97fc267313d171fd08657cb8b607a2bb7863b9fa9e") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000280)) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) ioctl$void(r5, 0x5450) ptrace$cont(0x1f, r2, 0x0, 0x0) 00:20:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x56}) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x35) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000040)) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2f3, 0x8000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r2, 0x0, 0x0) 00:20:07 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:07 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100041, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x28, r5, 0x31b, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, 0x0, 0xedc0) sendmmsg$alg(r7, &(0x7f00000075c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="83f7ae60aef8906bbb5c52407d1c7e351b14ab73c34407e0c237a9fdf1f2d234381c1b45ec132a21fbd4c5c8f6df3a069ba5a9b2ad0b62150489aa015c00213647b138b0f977224f64c24acf5b7fdb12f96146a456b2935d7a619d441a7d5dd04d77d3efb4df2bf8ae4942bcc614aececf618ea14fe6b1ad2a5f829ad6f0c8ce81220fd2e436f7ee5cf63dc9735866953adeac9d4d00cac92ad52bde8300ebd87ab1caa82fd9", 0xa6}, {&(0x7f0000000340)="d20be4013b202d6f4fd1ebbdac103f346ed89598ffd8a8e60bdac94f8c05dcd48ff453bec3", 0x25}, {&(0x7f00000006c0)="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", 0x1000}], 0x3, &(0x7f00000016c0)=[@iv={0xf0, 0x117, 0x2, 0xd6, "e892eb1317a14232fd3d0244a93abbad8212e55c7d4edd5ffdb91f6ffc3ba51b2fc685a0808e1b076645a41037cd3a09d33e8595450672e4892ef0ce131e90ec8cd4494d3e84ef73db4d8af0b10ca01db8bfa7f9889645e8fe97e94abf288faa7d65567d8a73c2039218158bd5a3c9271c754a357397bb8792148e08e25179eaf2eb5a789962e7c7e300821d2b6c20b9f0b97eef156050ff98f5628747e6e017414428f47a7cdc6c48c15c84f263b100e24262641131f541763806c39ae4ae46ed8acdfc4d9c87f677e01e9f7153a8c65fece31aa718"}], 0xf0, 0x850}, {0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="bc854ecf84560a9c58", 0x9}, {&(0x7f00000004c0)="577e0f7edd03db05392845ef03c11e5bfdc31c277a305e5c8905397bfc0731bbe8a255886ca16d64e62ac4f113bf417283db80a88789460482a83fe05b575a5d9628ae031ddef471de10f0dc2d444f7b396dfd9f2451d53439f4fbeeecc5777131e820cde4570c285bd978948f86e0e81eccdfea5fbb8ebc3637470521c15a7294a9eae6e3f7bbd0eaa95f2b726bef", 0x8f}, {&(0x7f00000017c0)="f38b845d3f18eef8f0db1b48f666cf223eb74a75c1010cd8f4ffba35e4ff8e7c53cc3d278459fbee190a203507334e6c76df2e853d48d70fd5951abe7e9d7c0be0705b139ccbed5dad043270b5fab53cc175682e945d6c947a7726d9cadbf51c681bcb2d2d6adc9ac1631e2b42324c0371dba3087d694804d45c5bf34c235be5c07586e59716fcac91ba7d58a4f8e26914ad0ef62252a99dc237d6294078669da12c6312c3731e524f9b369d61180f8c849dd4f899870c53dace", 0xba}], 0x3, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000005c0)="ae91b326e49460c4a2fea323b8753128bec62407138f2ff774af342cca089f048f3b4035f5e26de5dda13e3bdb2605d7be83bcd8c8943cc9c0b839b922b41e018f0e6f3ea431e44f78136a8907aa1449cced37462f5f0abcd2b35913f0c4ea927ac1b3d27d95ff1ee39678c713f4ccd201bf516ca47de239", 0x78}, {&(0x7f0000000440)}, {&(0x7f0000001880)="f8ac59bd2144492dd54511b10b14c2c2d5fe8eb747d64667193798fb3859ede288e88516ea8490d777d862d158a3af01ac446eaf058e3bdffa988bf4a987633e54085facab68e58e5134c25b61a85b59342c85a0c9a8de57044f1cd901098500b6bd813f8db8694f36c34ffdc48bacacf885daf86ee2a6633140d146b395402223c71d", 0x83}, {&(0x7f0000001940)="3298321eaa0fa53d643a57b2b2d6d7a22aa5b2bbc2661bca9de8d38eb2c4009f041ac1eae01705bd996b7604eab9003249b423df68b922e7c3656c095967c29c331fee9a5fe9673dd700a890e09fff4c6ce9815f89e6100aad59804982c0e92632f4d67ceebad327f747d013ed533948610375e73caf766327ce8389093806578d66d755cd43364adb433ec896031d4db7b41cbac0cba596981f01eeec87a723f18f5d7f06bb3aefa462a48af55d0be93ec5bc7767df2424e0d785063f5dc80faf70e72de6f86a88b5e97c9cdf6f814082a30deeb1ce3cd2046ef5001ae24ecedb4f0cff05589a7671b494132916b9", 0xef}, {&(0x7f0000001a40)="1911b86b66df57d9da636274b9d100d2a6648cd4b88e38499f8c1021b2734b25e4567a90cf1bc349d16dae5e67921f834aab9e2b7bc8d8940a25374f8637762e5a3951", 0x43}, {&(0x7f0000001ac0)="21ab2ee9233d099b69e6163ceef53dbfbbbbfef416ad42915dc3737f301e719eb98379562293c6e4e0ccae245e2c09c97f", 0x31}], 0x6, &(0x7f0000001bc0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x100, 0x117, 0x2, 0xe9, "53897bea52892ca6420cc510cfebca2f980e07fd58fef944ced70642c27f9c0494ce2b55ac41ad69cedc24cdd683fb4b303360ce2ab38ff51e4ba930887f3ee39f0edfa73719acaa86c591c96d8d92a9817a4af0b70bad96d55a01b4ca6d58e91ea0bce2fe94da6c84b861b99535f486a5fa3db18858fa9c1a29149a49dd561b7ce3110e15e1031e48126803f5b1fb6a3158355c1ccd8d52ff38bb8a98019d5aa6b2db382b75f876570e780746e924d266849f3500c88f528c64c507f086adf1a937150a65de1a3109e1911fb0ff9b27e883a28a7ee1de821cd22d9d752990e21d8ed65bd5d811352b"}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0xc8, 0x117, 0x2, 0xb1, "536e33031046cd17774ccc6331e08009a69b36194f61d1e34fae520cab62adb7f63600aacf6144eeda648e827644d459a789246ed752aeac00fc8d7ade350306c1f6ec8fc64a00cb597839eb0788c67284a2e27184f1928cf526204f8442ce069d35b4bfcce857d364e877c4b094ccfa4a762dd8774f6b7f8a12a9ea45537b1e96c9580b5f85aa2493748d61352d56ebfd85927735fed90f99cd825b0735efed670a5ea5db77b3669929502ac3be110549"}], 0x228, 0x4000}, {0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="cdb2a6bb1f0a8b978370f2bdd8ef4dda341e633167489426dd476376f5c116f1abad2df4482e376b608643d4b42d8f73e3cc8a8e9bfe72f0239f4304df6ee4dcd6ebcc99716eef45d65a91e7f75d90876d6dd68142b9dfecdf143db9abea6848902e2b6561bb", 0x66}, {&(0x7f0000002e80)="701d2e97afa57367a7abd2b50efc87e780c4060aa185c871d85669eb1c8c47cdc04398d1c6fa5f23ba1b5671bc6c55e02a12976ae6757471e539152a973e122c2d0aaaca194f09537e8c6f6c4fd8cd91db6acd6d6acd49cb2a56598ad5b5ba23ec66fd66013c6001dc5f47ba57e78c84439f4ffe3e0aacdd9cef5588c6f4fab733a706a4c21d8668ae1c5094", 0x8c}], 0x3, &(0x7f0000002f80)=[@assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x80}, {0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000003000)="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", 0x1000}, {&(0x7f0000004000)="41308e8c79488c272244d1525643c0f6f83e76633e7cebc71c3953c11a4da8efb678b8e224ba46db35528d68ab49931c90ecfbb9d5bbb748622109dcdda7056a26041161399d9a82ba2140353813842dcb973b10c5e5286eb3c24133fc8097c7b6e4ab9973bdb761665b6a091b304cbd46872b5637845b740441d4f81b2fb2a31ec1237f2313429d632ecdcac39aabe858c06aa709a4b501e2a8f4", 0x9b}, {&(0x7f00000040c0)="ffa6c3d0b31654060b3cda6c485222e0a0efc03e68b77d9f911cd3330149c2dd1a54a984dbfa365c1c82fd30575fb2ed81727a033736dbd9de90606dfe33fd796248dd5bf1e2cb03ab7d6e7420cff952059be8ecdafda79ea178", 0x5a}, {&(0x7f0000004140)="6a6afd364c0d7a0d8ba5092f6ceab6aeeee0d3602355201b1d7e1e7b4db8f1f735ec602316ef4f88aba38b4a1b031f7c6d9d553f276219d8f8f3329819745109da5ec897a8456b39f1600bb9e1b1d68082c9f2ede6a3e7bdce641bf4f72cf3489065d8eff95678472ef5073aad5155de63a6ab367fc50b78726e194b0bea1a54eed1163332e4113110b1e14befac4fa1941a3fd1f3384c7af34150207b881e96a784ec57a76cfc1fff2e90e2fc681b07c67a", 0xb2}, {&(0x7f0000004200)="fb3fa65839dcdf9e5001d345710e59e4208e1ac72be4fc7bd3676488938f4a32f77014361de65a3bc802172b563be100d34e383d3916bde8cf669d082a53169bdc98b635e9e769a825886f8acf720dfd154a6cb0ff894cf2310dd9b668cd7304656a5152d11b99ad314df46af41f5a38a3f7734492ffe1fec94a1d1f7491e3e44d48b2067369174fa32c3f550b054c5f4cc70a73bb4ad794abf13450b67167e2b42f918e7567", 0xa6}, {&(0x7f00000042c0)="1c47ce6c908d2e1732733716f142163bfd469fd326cee738cddb86abe0ce56e6a416f9b14f9aedf77eee9d2cb4f5815d778300376533c31edfca06cc692aae10b62c7e3b20aaf8f749adb490dbd3db9dc953cebb091a223fa80de5e556fe95bfaa4f0446127fec8aa6d91916f03d45fabb0bee76bdcca06b4be5524c865801bca76080b8453268f41bf0384a6083bd6996cddac501", 0x95}], 0x6, &(0x7f0000004400)=[@assoc={0x18, 0x117, 0x4, 0xc8b}, @iv={0x88, 0x117, 0x2, 0x74, "622af9da6b8fae0a3cf42344146ddb926a6f62cd3c7d02ea5091a5202533579b9383211c88416588afee9e96de88aca6587692d53cda2d4f1e708f416bc87e1a99d7d9c1403e2b7e091ee686c3c4fb38a811a1344b27c5b2115cc22b945e5b9e4eedbe755cc2bb3797a5d49016440a28a1cdb4e2"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0xb8, 0x40000}, {0x0, 0x0, &(0x7f0000004900)=[{&(0x7f00000044c0)="3dbd37c1797e11f5fcd2766212b44ef077fc07d076e1cfc5ce6ad36752e1c8cf0e782e57d12a12864bdb849138f67029074de0b41812d085d2ffcfe559b9a7aa03709a86d703ec1f0350eb9d0df5af7d9145f70319473361fc27604ea9dc05a9efb0b19d5c9633987505505d3c7abf8a386ab56f0e31886adc0cdb003e52c71ca89036e03d25d1c4ea80bc988a192c97d0f41a11e8e8e61b927445e7b34ca1c454825c57452dce4c0c78888abcea2bddb6198d9d78836e09296699f5b303e13976652374186665dc595fa709d0a86db073b559f674146673c60c0f334ecbabb50fb67fb8d8c43b5e4ff4396e14c46cc1f124dfae148d", 0xf6}, {&(0x7f00000045c0)="05dd0aaeff47fc0557dac377e2f1379008452453a7c4e3db8a06eac7ece829459ffeb5b81eba9b4fc3c31143312ba759795b08b8095330b2c3a8c0e64792b7e5e1f8cc5fa586fe581e8054ec2e03129b0efd15", 0x53}, {&(0x7f0000004640)="76923c3e760c82e4ba75eaf50296be44496b89c3e6a045fc28e3599ee34ee142386c0e907ca428005d4686bb7ddc789b69832fb463249f0c5b4579d52fcff95be13fe73944c5227cd059a92a0b9cd12bac845b9bf32bfed924618c2f50d629096d64c0cd41a992b4274ec920e80a742f5e46aa357dd5c2e3f1c793fd66d07904057337a31ab5fa557e7dea23467e33d2678bde450801b00889b8db7aeac5b93b0e834b3382a32856e17e74279009a8488ede79654436c47bf1c7318e8ab10675d9d14132081296528178fcd1c43fed7f9da41bc93268d10acfaf0964faee602f", 0xe0}, {&(0x7f0000004740)="ea88c3558eeed3eed7b7a706f612a50e8563f77dec6647fc2503f401723be1a751cf4642c0420da342304884231d34c9fdb7f51e78e08ceb4c07b7e5afbb45725a39c7700bca92b6c0f1c517b151b19b6562a7b6af4b39ca18f4734da1a2b763e4cc75f424df5b145f2ee976a35f51da6e1047b1417f21454738014b4ebdf17b5eb43a5e60d54bc1dbd82ddbd3f81e165d2ad8dd2a292c9e275c", 0x9a}, {&(0x7f0000004800)="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", 0xff}], 0x5, &(0x7f0000004980)=[@op={0x18, 0x117, 0x3, 0x2}, @iv={0x30, 0x117, 0x2, 0x1b, "03d4fe3482977d5f3de3bbb97338d3d263351478d594d0eedc03bb"}, @iv={0x100, 0x117, 0x2, 0xea, "29461e7e8b574ffef7981b2cca0c2c282c4e995741d4e24f5e214c0b6499c32b7aef0959aa93cca9dde9eca0ab96953955c7f7bb9298b323e20f6b45c5f6f196036784d5401328d1980613ed4f58fdac55aa026c01a89a8a45d2f6eaa3e133520a9c6694c5a2a6629bcaf45e6c3b7672faafb8da7916ceb9c5c47d6004b9f24d1c18078257ab0d19716d1c96aeacf8c7e485906555cc5199699248f3f9e1eb531aa6657ff02aee7199bd52ca969fb59151358b790d352ca11307fe12bcbc1464308873697ee721ff984745990c0bf8a3b61efec2a601da2da1ee297005011af9efdb6a416bc1c6db6c10"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x81}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x11a8, 0x20000000}, {0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f0000005b40)="f7f47fd3af43c1cf7fbb6b110b7602e45d84746d293550171c59089034df8649d01155468ac766f70582d8a5d08e14b142aed3eb3de1fe6d48926cbd3c", 0x3d}, {&(0x7f0000005b80)="b22cc86a29a7b6e7c8d630ba4733126c825da0b940fadf7afaa607966c0ab7fcc7356fcc28b451777bf039cf3e5f5c7162bf7e89761675fc8a5843493771ca7581c4da73b8ff1bee4548aa37a8be2ebce89a9b50764658ff1e0e1d5673ca66f70b0f87d166a70736dec4634e4e8824f281b3732ad296a472fc43dc063bcb7ccd8d7f6747e984f0b2ac136048db2ccd93fb3d59a62b781485bb73ef91c8a4534f8936bb277a3eaf65656584f6f31418c19dd77958785792d11a590920bc120ca15d3bca663f3411d7ea0fbd5f84c75e2debd7319cedca", 0xd6}, {&(0x7f0000005c80)="5a4bb8c831b8c5f3ebeec316921c11c2942a3c944ffbd684ba7308d90fb08d64f0907783f16f", 0x26}, {&(0x7f0000005cc0)="5e6300ab40e9edcadeba", 0xa}, {&(0x7f0000005d00)="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", 0x1000}, {&(0x7f0000006d00)="50300b4e3f4f85cd65fdafc243702163463d84c9ab8bfd0d9e5931cd3cf6e4ae94d993bac21de70dd5c62417add032457106ab79580a226b504f1350fd92a26b4df19d9a18c2442f28e7592b714d2d65f05a5d74a3dcb9842dab7e054ce4", 0x5e}, {&(0x7f0000006d80)="ef4b7a90e78ad6c4507aeaf83dace74bb468af381049258555d6ba84f16e635c7763acebdaa825be7088673e3e30640bf385b3016d88ac60dde5c96e47518c8ce4b663cce57fb4c541079f9e008d8f06da1f3e33af12c3b45f92c7f99c95cdfc60612c4c490006911823ee2ec26a735db7257bdbe8c884", 0x77}], 0x7, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000007180)=[{&(0x7f0000006e80)="d5355a557c7611d5a34455a7bb402b5e19e4f91ed58aa796d893ced5f09112037c986f2034695f345a1267a935f5b90ed01b4ca48f7075b389ad28d7483dfb32c21a772b92d302d8fabe46598141e07db28c69dd1030518429d0924f9040df112cb23d302772fa35e79f1e263ba09f9e63b138a9e5fa4aca1755a647eafed08dea7a82e97e63bec1fda264fe50ee68949532fb19cd65231bdff1c4de8b96ef7540883387f2062eb705fab4f4774f0cf8251cadc411a378d129cb3808065ffb0c365669c7955743bfa077c7983956b9930cccddf961fb9b33a84c8096821110c710bf775f437b973fa9", 0xe9}, {&(0x7f0000006f80)="a32135916aa699409715edcbf5f06e46371dce0a847d441bdd00159ae992132a35dfdb58d40e3f6c8a9aea8a6ba55436daf856958d8ee765383435b2f1946b8478f6eafd1f717d13932c6b1006366706bba6a51d96f5690cdc1cb57339063656717e3e589bd18ba797c2c79e78119940c8a6ffe77669add860e2737be90995cef7f4f24de0ae1a6d62f6138949f8c67c776baceddeb336050ee3aa0c0e8777098d2782993975779088d7948bfdf48712932a822356b31908ef948a3bc9b023094f914269cd4aaa9fd842197fb4979d1f4168eca611e761ddedf9fd", 0xdb}, {&(0x7f0000007080)="f99df860bd70b0130fedf441d6480c8422be0f28a13323f456b4beb276852ce6f867e2367abfff20089ce5995252c49a4a60371b84e27c444ebffe079e54093321d3522ba3810bf105f07cbae5df0830e39fb619963f24ba8df432cca189286b33e33db51795c93ca1aa1998c7fdab8d2a3980d85717", 0x76}, {&(0x7f0000007100)="83a5ac505a3ec8a1da6473cc21f97ebdeea1a8258b9946b41ceea968138df626081da9976be2ceb95581f40418cc7088826308794c0fb8de855f09f76fe650cf4fd7c12b6e9bb1a1fb71307a7c092b58c676849633ba365fc046885a44b4b1a109638baf8f4a444d095473a834b0bf902a39", 0x72}], 0x4, &(0x7f00000071c0)=[@iv={0x18}, @iv={0x48, 0x117, 0x2, 0x2f, "a36e1c0a7ad211d278011fd3bed9c0e1075058499146d837c314fae8bde39bc9eea7eb33fd8e51b203d3eb708373ad"}, @assoc={0x18, 0x117, 0x4, 0x3f}, @iv={0xe8, 0x117, 0x2, 0xcd, "5577f0c484fed2abba4733a8fba31351574c788ec2af4413aafe29095f6377d8c720413c27324e37dad875b89b48bf798556d0c81df570aca20b02b3eff0cdff49d5a801b6f54d7d2854419ce526b1d770d9a769cd5bb669c1bde4a90a989277454bad0fd8f8327e509e3d9a9aeeb7430e1dac70e9fbc9023c22cd63b1a2073302113605944ed78a92a7b3d5c0b799ba6ae07b3c567c4a0716e06364627b43d231a402b85da2174e1072723734e22bf8cf3af08cd13f84e1f6163f5839cb2b2928a1e48415af535b1e9e5d98f1"}], 0x160, 0x400c000}, {0x0, 0x0, &(0x7f0000007580)=[{&(0x7f0000007340)="35456ccee6038f4f9f298244d19c71f14b0b1d62271d62c38565e53e00c77282179d2f9b14ea7f28fcb8a41c96069afa1316403b7904f2d2813ebd9305efea98d02a9ceb24925f07f658601b1b3e19", 0x4f}, {&(0x7f00000073c0)="f0bfe8ede862addd1e08850a788ed84596a3d09762b671a166532c2fce10e4ec6f0d7d485ddd817e78039c0a2407a0e9e098e6060ba3a81136e780796c8062039bb48a41a42e1655d4964b3f014b2703910926f6b0c1957d44915c6e441a4249666d53ce495eef587e9665f70ab4bd2fd361527f53e7090fcb9e11f945dd1cd06e38478f3061d9", 0x87}, {&(0x7f0000007480)="9115ee0c7b7ba7986eed3d4775e363960bf75a3a050ab46c278e26dffcf986faccba9c268a01a0ab63d5ec86509ef493f7729ae1c065bfe9d7115b55c524c0b6fe07fc3238d3656217d8bf6c271015758945157bd68a46634bd47aaa613dd05828f2064e4443b9af57837fc4e353b6beb2d9adc358b132ec436e23a6df2d1c751503fcfd7afd7598aa1bea76b460e0f2f3f68eeb3b5003ce0aefa486d0536ebbca1df3530eb6982955b0f1598195cfd0501599e6b7e5fc", 0xb7}, {&(0x7f0000007540)="0f6a071feafe08c2b594b3b03b768cff", 0x10}], 0x4, 0x0, 0x0, 0x4000000}], 0x9, 0x84082) 00:20:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x80d, 0x3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r7}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000140)={r7, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000000)={r7, @in={{0x2, 0x4e23, @multicast2}}, 0x5, 0x87e}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r8, @in={{0x2, 0x4e20, @remote}}, 0xcb6, 0x9}, 0x90) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) r9 = socket$inet(0x2, 0x80000, 0xff) setsockopt$inet_udp_encap(r9, 0x11, 0x64, &(0x7f00000001c0)=0x5, 0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:07 executing program 4: setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r5, 0x0, 0xedc0) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000000100)=""/6) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:07 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000340)={0x4, 0x0, 0x2080, {0x100000, 0x3000}, [], "9f758bb7c6a9cf3ce68bf1cddcb6c12c050b1575615c5544b54f90d58f8aa3e3dbdbe0012f439ddab5e3170ffced6fc4bf6ea988ef27a6f2d877a0870656c0d9bb94d0fc9bf6da4a4f878320f6dc9cedbebc0b932810bbbfac7c8efbde9d98fd963a60697ce45baff6382a015affe0f5a8b7ab1b99f1512a3be3830d97740db92862cbeb52954bd30dbbc4d371db3e9b8f50dd4a3f222604dbe7fe1b0afa535f334c137584df7c0c08df2b5639ec25f09224747db75c85609a9f48a29ba972403b44d991114d8da5cb6a17fa0adf4b9451904e07dc06833439dcf7012ba2d89574e5780c846f947d10a35fb2a9fa1c08481e0de33958bc1abcdfa86d5d40dfa4c1bed6747823962f481f99b8811e96fc6266e3a14e595253e601daa540b5c130ea4e766f67fef53d110fa18311ad3b90f27eb826d1065d32917f802461c71f83ec4ec8d93e99b101586372109db85e0ca22a47a886fc5c830a64574240e287dad5eff497cf9ee3db9039fd5cca210e93cc95f993b6c7ed59c65bcf85ec9225ed54eff688837230c77e3478b259c052258b51583bcbaad567f5efff4fbde62d176acd5b3dd2d859db929750ae517e7ca43bc6c4008c2f24e02b63d7a3fd3cf9f11ac689da7ebae9c6bd25fbd137ea9e3f67b8b6685a39811409451ad342244d576385c38c575cb9a9ec21b9b0e78f5b67cb5a687dcdb9375d009e0e5af2c254ea5a56d99d418db9e3ba82a9cadb7fd6df5ffbe6eddbc8c0bf4f5f694dc2ad04902c63907a691c28860729d5cd8f33b7a71d624d5d5af024b7e7d8347319f861918f1d54fd50c47261881f551666fb5e181bb2d013feff66b2d8309ebb937953fd812ee10d525638430ffb3234f8010f8de6eb6456f324e2982a210f8de66e04e96ead9628d754a1a33ddd6bcc725c56e55bfe77e5b02964083e1ebc7e0819990eba5c4df332a6f524ee780ff62b59d4ecd37560844e8e98055721932e4ce97c12df9b2f41e5e7df1a19566432a3dd32a2a8c6e122cbcfe424a94132934545a4c6a133a409fea50d8ecfcd198caf81bfdda840cf02af7e619490eb3cc3ab3aee8eb4decfed5d4ac6403d2cf4474617b2e70eced490fac6ee5483022544744dbf1124398df73a696e8b29675a732c0d4255207a6a6c80ec506163fe2b016f68c82b8d966ed2ccee6e355a468add6e3501a9b09d018d560cdf2e40318db35646a020d7f1264936942eaed271e820da2976b66465cf3066a5a91e45eaa172e9b932fadb5d5acc55e962f3a8cba5213a21fff76727d3672f35863322bd02cc9392df433424d8b67f612bbd6bb12e5a3767263c380104d4ef8f29ff8946bb50d8b334a9dcc80d2f223169293f557d5d4f5a7d49a7d82fe608d341a576e8db51c4c8cb86929f4e6595fc97625922f38b53986a2f18f96f6fb4d40c027dcf1dd672dd982aaa047ea2db0859f42ce09a8e4227de2a5478df5b1c812af1a415cff2844009cdad97a8534be38cab797fd45d2e128c27cadaa1e831bb7d78d1443b9c977a65a5dbe307c2c83a963d831caf1290cad09386f6133c8c044c6ed468a07d9fc3205b00893b421b0ff099b1eafb68322d25ff1cbdde0212f7537e0d3bbfaacddebaa219f4df394d8f2bb1481ab731a6a161505c29bab5bd7aa049ccdc3fbe199bb38f15bc25242ca2960f5278d469c8f2aafaf50537d6b5e51404ed0a6dc2d38a64a86a1a0f562b28d239fabc7bb451e7401a94401e015404ca934a4ee264cc5444ebf63e01073aaa767f83e1b44ead1bae27850985fe8ff904d68116a1fca5eda6248b66eda215a9f9fb7b8dc6492f47ca6ca00a88cc30730eb115bf0fe678be3abdc684b9c443fc9c4347094872d0b6e2b2938fba74232f0836edac121aa2d2d92e5b6ee3a08e3e4a4d46ead0eb1d57570ee6abe6b6402ace2728c0e05b4c7e59847155e3708752458a9bc8b0e69552aa2e2ad51a35090964749cd62f6fb6f23f4a39a9b4196b80837de667aeecb81034da1d846060259df08fb0741b279a6ecdefe6cbfc87a32baffb9057baaef41a45632c16497b300cd1d640df2b2baf691381ec1b4e6e6be394e675d52b47ec4a40c90d394b76fbd54717239c2f656d84e11c78ef0d74eab7f8735fef6f1d85cb4cac13caa5313cc0dd993d86ae48e08d5ee24b5ebf0460bab67088b070d863cc29df26903add313fa8824237dd9efc63f0a635ad3aaafe9a9d4e07931d5f41f607e296f56ac29785a1122b235a0c3b9b3c7451e2f45070bb916259e03866b30d02f128cade97749b41c71d63c143c8b6810112644ec1bf9a1efb08c34f23832ba9aefc51b100f1b144e99f6abb34269e1f58c6d329661996b5ddf371335e82431a0925da92e5d5e9f954c1210445661eb60fbe2447299abcdb74ab5f86acf26a0153e5fa08888bf09a836431d45a71147646ed6758658b21a682c13c485e58d5692f3ecb1e6066bf62a2213480f826a6ec5abded73980527869032daced506cfd43e4632a4caee8b00c44f9fae89b9395a616838eed2d4d2d0301111ef773a8a8753e8833574e974bea47bf6724463c87494fa36e765050478a33ebdeb2f863d7e85e754af8faec82de79ce9f7e9b386e2fe2198fda46c0e0524f4e0710828e9c2c27ed6e1834975921278fadddd535a328e57156cf4416e96bd55e3acf08a9322210c9a307f35cd4c33ba17a9c7e1bde96f32b615f5fc8ef58cf2e7dd8bea0950b3e781474d9521cda28a068bd6315b717578087b20241f363f3f910c229cbe2c9cbba5db875369e304358cbad32b4bee73a9c86b8fdbd17a354c141869ac1b43a01c089c626fef954259f0acfe51971fa2d9f3e48ae1e93c480acf2038095a8109df1e4e9936f6b637044e026843d4bebb0a42ba48f59e87911b0a4da2a4fe9c8677b2b41fdea5a9100f3d3c9ee04e0c746f36f1a1587e5b3479a63e5e8ea39182ce45ade33a4d1c9c3f6e2359b4685af674f4c89a46a63b8cd70c067cb50032f5c8c6ca3a6549a742aba228519586cc0d213ddb413e00e61ac2e8d240aa7d39591e92f39e33e9f0d9f43382a8547b3957cf47442f19d31b53c7d876ebbde9a080659d79ad7b9da021af4df41827277ea295dcd1b80826842683c26c3ee3334d994056a0f0bb65e754a200d4d5d81ec03e0009679a227165ebc784af3efed4faebc45bc85d411fbb1a9f08493e08cc740a74456eb5f824cd89b48d4e2e426ba1447d6cd9ba73da3efd6a0e158757bf693f2e2648e855116b62968afaf4d34528a4b513cb46399022ebc2f064beb61b458aedd0173f4084276a4c589c95734a7e4b3f8e975760bb207c69f99f64047bfe4e7041deb20ac1dd4f760e43292889a7a02918beb626476a8b2b8596c0b50f619a2db7999e0c3579b8549a1a63dc1ddab49057b2c5b6fda46210352d36081f11348f05f8f9a3ac8c2f97df6308e6d20020ab7fd6f2f846bab83dbec22a719fe8c1186242e5bb80c2940120561c02e9eafc79765f1b2d9a39fc2060a0bf9815c2a5afad4ae25e52223c374ef15f68fb40cdd931889d686fa51f03714c91fbe7432ca2da50c5eb37acae017d943348597f5b8cbb9203d7c5c7578f40637f8ab3e1194df98cfdd9aa1a7e8f7630b245835b25e40aae9b523815a0ef515e2540c2b9d26d20a2a617b3c56fffda5a10dafabc61938a32862fd6c7805bf857ed2d93ec583f241879419d042a4c8932a8be8585dd6dbeda14a9c1f8e19d787786fee744b2e3e361b454add8869579283abe5296d84de1d67743b64689f69038fab1e89149eb82f80b4311311e094f93bbd999a1df793ce93346bf48cc9dba38177140c9741474191d9934d392c5443b772ba495b088e39ca72f62c36d372972eba3cef70b3a54b89d1c13b4fbe5f3a14a3cd26ee137a24b7ecb4f2c166fbaf746daa2530f141d60a27084c36cf87a5c0a7b9c67a8ca1b87cc638b585bfbf695bb5ac6fb14385e739a2a5beb4b1afb7e46b3d84d2170eee94863c0febc7e644b09d005c25c2e4ca5d00db724dd249e8f5cf93aad7e2d357ee4c5d2cd6577481962dd4e0430a602402babfd5f7b0daa279959ced76ac418de8b54809a6e386211896828c5b403b5a72f2514238f6c986d4acc268cfac5ae299a4477989b76fa37df5503dd84a8652117fc6b2193e19226ac442f34d1d883da58c6638e9a17a8b39837d8e8122157eff3f4230ebfdae0e461a018e0f28dd32a3f6404bfff185b04f1868c3ec2682182a9dda91b1708528d4e097d838862ec196e9ac176c5301229a9694d06fee7309bef2a587fc3f6d2c3dd19dbc2ff8feb1058e92b3c002abaa5ceaa635d800b0c00434c25205a7c511298a545c3758a977aa13563580cacbabb175c767dfccebbd0489a85fd350b70c4b40411d39b8db7e90d3fb3d7274e71308b443d674f587efb691b7280cfe20b7c62bc5caa90ec380618f07354eebb712ab14d3ae825635016b8356efe2ae46914560dc34daabeb150f9683bb412e1cabdad0c85f8f91b6854414e09e69876d10b12d91165700edbeb51edc3ec7c8c3880533f318773f6f0fc1bf5ca8ddb244a51721dbcb555d0fb6c98b4ed05ac385167e249e5cac4d6ef877fec3d8a55794096c3431c658ca43e99c560243212a8414c3e369ac76e0b5af75d80ccdf7f15c4ce03430b2d803ad063e1ae73241c7e2fea341ee24fd773a809a98cbcbd01456631d0723f14e664a7b430a50f935884ee3db5669c50fdc9423596b5ea5f3e004d04f7eacb57b59f1a399c97c69c6cf002b69e565821e7b9ee595991031fcfa1ab7bab27ace5316be04a5ef474ce7cc578c6d728b870e2ef5fd33073dcbe6eea3ab8dd899a5c59144d987979332a7d8f3072e55cd0207cf663825eb18c18d9b17127b7e8ba03262f994c1a141c6f5de18f34e861dd420b724f06974e4c3ffa27b3d2da22179b4c8bd57b509c9038c63d35d4ba9ae370b90a782b92acd87d7244a59c3309d5df9073ff89cbf785d9014fb01fecc721a00df1c655953181b714a5ceed916e6b6c9ff2e5b3bec00f66f728c85c05dc2b1d4fd82ac35705bd33fffd63918a4dffd4ddaa9ee76eae4cbcd55c4a57b85cb1027c07e65191d9c1279baa113c4633ea25b3eae3b1d0572bb090502af66e45f1c93ee53a0964f4178a923fb3e0cf791957b0d3ca474384ce044a8a4779250e852cf03d6b24978415ce4aced8106b1cec2dfb7a69010894cce96b29a552145407972b14e49533ff766936ed53e577f62f6cad34e071c21189b4674ae1fd6bf44f095ca42a02688d95eb51695df1f0440c6e2e447867f70ba33bfa6b51651f150b3dff9ca28db1be9abb1d30518ce27ee88d2f6b5b7194cd61eb5e3c0253a8b802cefaf8c841d7d5dd1d4fd25ac3f8fe2c91afe9dd1743591dfe434d25212dc3f6de628fee01a9894eea8b417a3b7ac29281ee4b44c278450a6a6b516446da6f18c3abcc321ed4ac39a23515f30d9ad4c23da7baa1acb2b60cd3cfddf75073e1fa59300de240319c37abc5541f2d39797372040e481cb8d8183308c229e7feb2c9f0cb58dc74d4ff41cf49b0bb17ec65226b9198f19cc9a7176d52390b8e77086de9f73eafffb7f3f30ae9b82e9d3ce0abbc36454e802df99be25938a4f13bd01717269c8e3903c531585612c58c2417da80743cef88f7dc5b11b1ca30351aa8b4ee5d8e18a9dbd3ca122635232fefb97164514c351b07e5e9174a4ea337e9b29e658492edba2321e63a9dd064ba3b62bc28fd9345e255f4443bffdf074324d6403704", "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"}) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x6) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) bind$packet(r2, &(0x7f0000000140)={0x11, 0x7, r4, 0x1, 0x3, 0x6, @local}, 0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:07 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:07 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:07 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 539.066386] overlayfs: failed to resolve './file1': -2 [ 539.090569] overlayfs: failed to resolve './file1': -2 00:20:10 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:10 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:10 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2a1040, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='memory.swap.max\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 541.698062] overlayfs: failed to resolve './file1': -2 00:20:10 executing program 5: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:10 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x690dfae8bffb291a}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@deltfilter={0xe04, 0x2d, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, r1, {0x6, 0x10}, {0x3, 0x595946594ec99e0a}, {0x9, 0xe}}, [@TCA_RATE={0x8, 0x5, {0x2, 0x4}}, @filter_kind_options=@f_fw={{0x8, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_POLICE={0xc, 0x2, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x88, 0x2, [@TCA_FLOW_EMATCHES={0x84, 0xb, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4826}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2000}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, @TCF_EM_CONTAINER={0x40, 0xd2, {0x1f6, 0x0, 0x7, 0x0, "5c7f86726abfcb29fa624e92fcdc360e59d1744ef05e3ce4ac74917f63af84053a921022bad86a33bfc2555cf6f9"}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_U32={0x20, 0xce, {0xfffb, 0x3, 0x3, 0x0, {0x2, 0x5, 0x2, 0x60}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1b40000}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8}, @TCA_RATE={0x8, 0x5, {0x7f, 0x81}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0xce8, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x1b}}, @TCA_RSVP_ACT={0xcd0, 0x6, @m_police={0xccc, 0x1b, {{0xc, 0x1, 'police\x00'}, {0xc30, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x0, 0x4, 0x2, 0x0, 0xc6, 0x3, 0xab, 0xfffffffc, 0x4, 0x400, 0x3ff, 0x9, 0x1000, 0x0, 0xfffff001, 0x7fffffff, 0x1000, 0x6, 0x40, 0x83000000, 0x1, 0x5, 0x3, 0x0, 0x2, 0x1, 0x40, 0x3, 0x4c, 0x2, 0x3, 0x0, 0x10001, 0x0, 0x200, 0x40, 0x1, 0x8, 0x2, 0x4, 0xfff, 0x1, 0x8, 0x1f, 0x1, 0x7, 0xbba, 0xfff, 0xf87, 0xc1e, 0xffff, 0x1, 0x7f, 0x2, 0x6, 0x1bf8, 0xff, 0x7fff, 0xb8, 0x80000001, 0x101, 0x1f, 0x8, 0x80000000, 0x69, 0x1000, 0x4, 0x9, 0x3, 0x100, 0x2, 0x1930, 0x7, 0x7, 0x8, 0x7, 0x2, 0x8, 0x7, 0x3, 0x0, 0x6, 0x8, 0x8, 0xac4, 0x84a, 0x2, 0x20, 0x7f, 0x8, 0x6, 0x81, 0x7, 0x6, 0x101, 0x6, 0x8001, 0x0, 0x7fffffff, 0x20, 0x100, 0x7f, 0xcd00, 0xffff, 0x1000, 0x7, 0xffff8000, 0x8, 0x1, 0x6, 0x80000000, 0x5, 0x7, 0x0, 0x950, 0x3, 0xb5a, 0x613, 0x80, 0x6, 0x6, 0x0, 0x3, 0xd37f, 0x1, 0x555, 0x6, 0x1, 0xac6, 0x1, 0x7, 0x9, 0x7, 0x6, 0x7, 0x3, 0xd35, 0x1, 0xfff, 0xf9c, 0x0, 0x78f8, 0x0, 0x5, 0x1, 0x2, 0x8, 0x6, 0x8, 0xfffc0000, 0x6, 0x1, 0x0, 0x4603, 0xff, 0x20, 0xd2, 0x80000000, 0x6, 0x80, 0x8, 0xfffffff1, 0x6, 0x200, 0x40, 0x5, 0x2, 0x9, 0x4, 0x1, 0x8, 0x3ff, 0x3, 0x8, 0x8, 0x5, 0x597, 0x72, 0x7, 0x6, 0x4, 0x7fff, 0x101, 0x4, 0x1ff, 0x7fffffff, 0x7fffffff, 0xffff, 0x1, 0x800, 0x4, 0x5, 0x9, 0x7, 0x80000001, 0x3, 0x400, 0x7fff, 0x3, 0x0, 0x0, 0x401, 0x0, 0x40, 0x3508, 0x5, 0x8, 0x80, 0x1, 0x8, 0x0, 0x3, 0x7ff, 0x0, 0x80000000, 0x6ab, 0x983, 0x4, 0x7be1, 0x1, 0x0, 0x9, 0x7fff, 0x5, 0x4, 0x200, 0x5, 0x7, 0x4, 0x4, 0x3, 0x950, 0x9f49, 0x1bf, 0x0, 0x6, 0x0, 0x4d, 0x3, 0x401, 0x1f, 0x3ff, 0x0, 0x0, 0x7, 0x4, 0x0, 0x7, 0x10000, 0x2, 0x9, 0x39d830cd, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xaf60, 0x1f, 0xffffffff, 0xbf2, 0x6, 0x7fff, 0x101, 0x2e, 0x4, 0x4, 0x1, 0x9, 0x0, 0x27616f49, 0x7ff, 0x101, 0xf, 0xfffffffa, 0x4, 0x1, 0x6, 0x3, 0x36a, 0x2, 0x7, 0x9, 0x0, 0x4, 0x7fff, 0x11f, 0x20, 0x92, 0x9, 0x8, 0x3, 0x101, 0x8ae9, 0x1, 0x0, 0x5, 0xfffffe00, 0x1f, 0x6, 0x9614, 0x2, 0xffffffff, 0x5, 0x3, 0x3, 0x100, 0x40, 0x80, 0x5, 0xfffffff8, 0x2, 0x4, 0xff, 0xffff, 0xffffff01, 0x7fff, 0x80000000, 0x20, 0x6d3f325f, 0x8001, 0x5, 0xffff7fff, 0x0, 0x3ff8, 0x4, 0x5, 0x80000000, 0x3, 0x4, 0x4, 0x5, 0x80000000, 0xfffffff8, 0x815, 0xf5f2, 0x3f, 0x9, 0xe89, 0x8, 0x3, 0x27, 0x94, 0x8, 0x6, 0x4, 0x1, 0xfffffff9, 0x5, 0x20, 0x4fc51935, 0xfffffffa, 0x4, 0x80000001, 0x600000, 0x3f, 0x7f, 0x7, 0x9, 0x8, 0x3, 0xfffffff8, 0x0, 0x6, 0x6, 0x0, 0x7fff, 0xff, 0x2, 0x10000, 0x2, 0x1ff, 0x883f, 0x6, 0x3, 0x5, 0x3, 0x6, 0x7ff, 0xdf26, 0xffffffff, 0x1f1, 0x59, 0x8000, 0x800, 0xfe, 0x800, 0x80000000, 0x40000000, 0x0, 0xff, 0x78, 0x7, 0x2, 0x400, 0x3, 0x101, 0x0, 0x1fc, 0x64, 0x1f, 0x1, 0x7, 0x890, 0x8000, 0x6, 0xd4, 0x9, 0x7, 0xd1f, 0x4, 0x6e13, 0x695, 0x6, 0x5, 0x5, 0x5, 0x2, 0xfffffffd, 0xfffffff7, 0x34, 0x5, 0x6, 0xcd, 0x7a83, 0xffff, 0xfffffffa, 0x1, 0x57, 0x3, 0x8, 0x11c, 0x200, 0x2, 0x77a, 0x0, 0x7, 0xffff2e97, 0x81, 0xf4, 0xc79, 0x87, 0x4, 0x5, 0x0, 0xff, 0x7ff, 0x0, 0x6, 0x4, 0x4, 0x7, 0xb6c, 0x3, 0x2, 0x4, 0x4, 0x7, 0x5c02, 0x549ceaf8, 0xfffffffd, 0x4, 0x1, 0x6c, 0x4, 0xfca, 0xffff0b36, 0x7, 0x8, 0x7, 0x5, 0xc469, 0x800, 0x4, 0x26180, 0x0, 0x1, 0x3, 0x80000001, 0x20, 0x2, 0x400, 0x1ff, 0x9, 0x52f, 0x2, 0x1, 0x2bd, 0x1, 0x7, 0x3, 0xffff, 0x78, 0x4, 0x0, 0x5, 0x2, 0x5, 0xfffff8af, 0xfff, 0x46, 0x0, 0x6, 0x40, 0x2, 0x80000000, 0x5, 0x5, 0x8, 0xff, 0x0, 0x1ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6d6b6d1e}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0x2, 0x7fffffff, 0x9, 0x9, 0x0, 0x8, 0x9, 0x295d, 0x100, 0x0, 0x6, 0x9, 0x4, 0x7, 0x9, 0x0, 0x20, 0x9, 0x20, 0x5, 0x5, 0x7fff, 0x5, 0x40, 0x7, 0x1, 0x80000001, 0x1000, 0x80000001, 0x9, 0x400, 0x3ff, 0x3ff, 0x6, 0x100, 0x3, 0x3, 0xfffffbff, 0x3, 0x1ff, 0x64, 0x8, 0xffff, 0x49, 0x3ff, 0x0, 0x80, 0x101, 0x20, 0xff, 0x7a6, 0xfff, 0xf08, 0x6, 0xffffffe0, 0xfffffffe, 0xa2, 0x9, 0x10000, 0x400, 0xe3, 0x9, 0x0, 0xd15, 0xff, 0x101, 0x1, 0x2, 0xb5b, 0x800, 0x34, 0x7fffffff, 0x1ff, 0x8f64, 0x9, 0xffff, 0x1f, 0x5e0, 0x1, 0x8, 0x0, 0x4, 0xbaeb, 0x40, 0x7fff, 0x6, 0x6, 0x1, 0x5, 0x28000, 0x4, 0x7, 0x4, 0xfffffffb, 0x0, 0x7, 0x9, 0xf4b, 0x3, 0x4, 0x32c, 0x9, 0x4, 0x8, 0xfffffffb, 0x7, 0x8, 0x5, 0xd5, 0x3f, 0x7f, 0x4, 0x0, 0x4, 0x7, 0x7fffffff, 0xcc, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x7e88, 0x7fffffff, 0x0, 0x400, 0x4, 0x3, 0xff, 0x2, 0x10, 0x1, 0x101, 0x5, 0x5, 0x40, 0x7f, 0x9, 0x3, 0x2, 0x0, 0x80000000, 0xafdf, 0xfffffffd, 0x6, 0x7fffffff, 0x3, 0x6, 0x1, 0x3, 0x2, 0x1, 0x6, 0x0, 0x10000, 0x6268, 0x3, 0x2, 0x200, 0x9d, 0x9, 0x0, 0x9d, 0x401, 0x9, 0x2, 0x0, 0x4, 0x9, 0x3, 0x7f, 0xde8, 0x1, 0x2, 0x5, 0xf0e2, 0xf766, 0x81, 0x2, 0x20, 0x1, 0x7, 0x9, 0xffffffff, 0x2, 0x3, 0x3, 0xffff, 0xa3, 0xffffffff, 0x40000000, 0x10000, 0x7, 0x8, 0xb2, 0x3, 0x2, 0x932b, 0x4, 0x3ff, 0xfffffffe, 0x4, 0x0, 0x200, 0x6, 0x0, 0x795b, 0x7fff, 0x8, 0x7d, 0x8, 0x875, 0x1, 0x1f, 0x8, 0x0, 0x100, 0x5f9, 0x3, 0x2, 0x6, 0x6, 0x80000001, 0x1000, 0x2, 0x98e8, 0x3f, 0x7, 0x8, 0x10000, 0x7fff, 0x1, 0x80000000, 0x3, 0x7, 0x2, 0x1f, 0x40, 0x7, 0x9, 0x2, 0x6, 0x0, 0x200, 0x80, 0x8, 0xbf29, 0x66, 0x6, 0x1, 0x6, 0x4, 0x2, 0x2, 0x7]}]}, {0x88, 0x6, "0a367c749479586dd79a1a240b54c2243fe2d971d5808d3e90ce74f1c9b01be0ea4d5b7aeb64c420e968e63a5b8cbef134931057afa35bf66503c5fc89d63ca64be7f7cb1c54453ef509dbb29611601bf7893090d4ad3b323487d7b81e3bd0226f4bbdec8b6c3f73d6a2e7d4df503897afd69e88f0ad8bc7fc09ad9b0ef8858700"}}}}]}}, @TCA_RATE={0x8, 0x5, {0x5, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0xe04}, 0x1, 0x0, 0x0, 0x4000000}, 0xcc0c6fbe1a8b0c38) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:10 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, 0x0, 0xedc0) dup2(r5, r6) sendfile(r2, r3, 0x0, 0xedc0) setsockopt$inet6_buf(r3, 0x29, 0x2c, &(0x7f0000000340)="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", 0x1000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:10 executing program 5: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:10 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$unix(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:10 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x8000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0xc9, 0x9, 0xe66, "93aa1b3cd01417274ea089e47e2b724192cf0c975e89788f0ea8e19c3244f5bbddfb28059e8182d6b0cc54d685059ae405aa7b894f982976b66b5664f48696a9a90ac5daaa0895c768a917f8a9f85bd40ee3fad7f600f0ff1e50af65ab9fd91b308c77af77ce2971e4d7bdd4cb839de08efcb244b2c815a867fb371ed1b199e7cfc04ffc694129895edf1d7ef5928c3df370dc7fd928282d0206866f86a89c05adbe79f1166529b3c74efedc7eb842fca929fc7ada2f8340e18ea3e96e44f07c826f2b266daf3f8f26"}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xeb5, 0x58000) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:10 executing program 5: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:10 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:13 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4200, r0, 0x0, 0x6c) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'veth0_to_bridge\x00', 0xcae}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) prctl$PR_GET_THP_DISABLE(0x2a) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:13 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:13 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0xfffffffffffffea4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000080)={0xa, 0x3, 0x6, 0x1}, 0xa) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:13 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:13 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:13 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000040)={0x0, "20f29c22db1506bd17271451be165925cdb853f021e84a8218a56b584fb11a73", 0x3, 0x40, 0x873f, 0x81, 0x10, 0x1, 0x1, 0x9}) 00:20:13 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xc53, 0x94800) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0xe29, 0x1f, 0x3, 0x91a, 0x1b, 0x9, 0x7, 0x9, 0xb1f8, 0x3, 0x6, 0x9}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r2 = getpid() tkill(r2, 0x9) getpid() r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, 0x0, 0xedc0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='ekeyring]cgroupppp0md5sum{mime_type&selinux(\x00', r1}, 0x10) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r9, r10, 0x0, 0xedc0) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r11, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r11, r12, 0x0, 0xedc0) r13 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r13, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r14 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r13, r14, 0x0, 0xedc0) r15 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r15, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r16 = getpid() tkill(r16, 0x9) stat(0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1a8e7c16, 0x6, &(0x7f00000014c0)=[{&(0x7f00000000c0)="7489d74238a9b50f48b8cf2cf99260b20649185c166880e71bcba1ec70bb98ba1610939e56a2d8ef5b9599636e6c22a6e1c0262eede7dc77d72588f0f58ca8325f390a02a82409ed3f6fee3eb1b8b79ae95142a8ceeb5749a6de23fa", 0x5c, 0x9}, {&(0x7f0000000140)="b77bd318299e2449785a70f73925", 0xe, 0x4070826d}, {&(0x7f0000000180)="19330729c850bc0691d7", 0xa, 0xfffffffffffffff9}, {&(0x7f00000004c0)="38b87db6986cef2f2d1a4450d377b6e920dfe43c11bcb444e5a30178c04f37b5a32727c1608fedb5aa0c0dea554ade411cfd42a973b58281e1baf136bd9fc621a06c9fa7ea096395b2bf28e1df14413083a7bc9c32fb0820cd71a91a0b98e09d0f2f21fee9fbaf83999f14ddd4e7fcfa9352f66a2c2b7c0b978ada828dc07faaac9c7d321d33dae3bcd98aca8f1028638434607cbc8612137c5b830100f587915e5f036c2797dde5b47250d9b0d656ff185f35b3eded8ae7e6ac9766189895588d0efc9c7ee96bf7c565f8ec1ac424b472b5f51555dbb8659a093db427701c47f8d64b7cf2b4111a3fba0cc78c8beb8e6471ee742b6da3ac3683b88843b15b0f7c3d5c8ac216d837c4d0fb0f7ac75b3754b0e2c2dcab05297ee497e6cbd907668ae1bace5557dcefa4f20e0c8fe69506df75cb062d7d9cd29598d880867df33c5f55a339736dd6eb9c49ed78a997fdc8c6d4ad2f2f3dd99e96e5c315404657cfd90a0b7814fcf3cac67b408c3719a8efd1fb68fac80a9efe787a21fda74f30fa2f2785a9a9146dfd00117517e850e4b1637f1a4601c4b3d79c1dffbf58d44449f24d615ca3b17b36197d87da47002e27c067d54f674b247d4f29fb271be97f0b0f611704e0e77fea9aedf6b0c22f01153fa8d99e89eea404b1dc768c8b7167fca4ce4b8f78c448da0b7bca64e31458f8bfd0fcd36ce840b94c9ef317c935b0f57ba4e1ddb2dc255b471fd5fa30119db358221c7f846681aa466ad6b795e3df8703fe5d7a11862e663a36606afef5772caf023c2ac58f7d52901633b1dead97b8303384df206084c59be554de115d1d47dc842a41f2e4d3bbb62cbbecd99c783680448b459c1e6d06b8db35968df63078afbe461d34c841d86dc7f301db6fce4c16f9bcc88ab6bf490a8665774886904df872d1f85f2b964eb7f14733b6ae72851d0227044f65596597c5feded39a05c7f1afe99358abd149a8c2989372279d3d57e165be4a16cfbd1d6306d00f18e3135e05cb442f5df316757470837042d9aeb2bddbf7d263d160de3ca7059db4d5eb30044a08158ad7c5358e7dca596aa6b657c23d236a4acdf52c9d78a4ee1f35c854b158ceca3dc40c08de86ed93c56a2ac155bf9a69f05e470f3f56f17cb998523df813b256c9ebc97077ea87db1a3c7002fb7f2fdfd6a9bd0c9ddec03dc93bfc2a1fa7af4cc40dba49536d988f6d6c9985380eed57ca1b978bb13c35b435d4cde6630767f1a148ebeb50c1016f945dba59698c9c7510b8e5cb7cd483e77175aec1e2ffe946268954e1e306ebf43cc3f0a39cab456535163398a469f1cab3763959cb3257422903f04a5adb3e252b69dfd2fc28fd904b7697c5e84fd0ac1b166e38bfdc2dc8e91447383e61ae1f4012133ae3af75589c5bf327ea8b58d455f33d2dcd03ddbb853b6e7edefbffd9e1fdc7389261eeb991c1f143bd68c4ca8892671e2d11a46e8fc71d1e28c4938d6e2b442a6cb538b649275efafe8e481d95dba9d29bf448890df5102485cbe262e3b53c2088888c769ea4f7443bdbce9c3412fb41fecfec172090f65c00b5a7f6edbeb7a00bfc5a8c711f54da1e4e9eaa2c20c5bba1b79254d97462016269d11994bcd7cb43dd19ee1f0882224bbbbff6e7c00dbd9694512cf26349fcfe2eb2307e2aa5e246c2204acaeb243a35c1184912839f74cddd9d2938f1cd5f5491428e43eaf77ee410ce76af30bccb80f1683555a3199d19195cc6d124e45eb8e92b3f7a672d68f58866e487331fce9db6a934b08d0b850cdb0fa1efeb13e46f1e410747da114055d2534215ebd2347cbccf99dfa9ef772126ba998bdb69b3db50dbec68c6ea4983eb5cba3d4ce48025f8d3ab7081894af5b0e596a9609cd36a81ff8bf7438e67ae93c6ac5a6ed34ccb8a699638cfe6416b919d174e63da86c206353943eb6abe7e223936e515bc93d4a4a3c72cb61368f8dac797507e2733600ce2641456e21a7b3c2182b22184a15854e58bb1e6f9d0dff534e3dae879fa0dd397da3358c3083cc57328d6af70e6dabf6c7c6c7b55c489f50ee557853478a7ce5185b5ab08d782bb356844d07d7f9c8946776210d05b854c0170be9b1b0c8d8260fc9310fd822ab58e6d7eb7ef61323bd19db428291068dfce8d6ddc1403d489abe6f7a030a731514144b72284b84e61e9f57e8034dc72ac147c4605352c0fbae2fb03be7beb9f1fb6061022a05203abfcf603d7feaa25b1b446cf858523e1d31814be84bc6cfa6b0981f29c88875ec356547e34715c6b8b4e4be7c9ecb148cb644b94ff0879a3594b2fd93fa797ef86d0bdccaa0998d02291c9fd0233e458683211f270e07f1d319011bfaf7826c1a9297740be297d0fc3c52e77c245096d3ab7c940ed0781586c6cd287d22db4d5db70cbed2f99c2d729dc93b8cc0c709c81b55a3b231b60c1e4828005ab5f53c646787ea57a67aa8f14100fdca6d2e0e86da3da3439dc13389e3a217941bd67c74d7948bca0cd94167be281d1c8b3ee90e56c4fc85a0b6fd28829997891164ac4edd2bd699715fe85cf7b7a358582d84991ef2ddf76fe18ed4022c4ac03d1b61d77f0389e1c5c9405fce5882af581583c2feb775e303ff4328c953b79ef5323da8b07c9a1c909c848090cf86d0581f8a69fca9d2f9074c62ebfce6336b9fd686e186444f48376299f5df3d60a42f382e7ca733983b6f38c832cddcf16e28258dd2c13a2927bbbd62f02c839715b82e2a7c03520bbce25d711d66f209d4b0f1194d6d0ef98272f7313f683bb366258efba0b14b4b658ee18e4115fc1a97560e0153f49e1104e8c143b887cd3fe2ddec05fa9ab8cd48795e2e7b097c23060482a34cef854c12d09bc096c821509f23cca3b5e27aca080a90a5989a3b83141ae8dadfc61d8ca1d1f9565e06e801ead0abe1815728868726f97babb37c04ab3041e629008513eafd18465efb1e160c80f5e397e7383489c9e864a946a643f1956b3940dcc9fa08741a7d4011902188df228ad8571ff6ad2703a1a894ec41bf1bdcf598f95491e636de672433b14696ce50d2350136802706f1649566304f8aa95f62ee4c176108260193d3772ad549b05632cf640d1274ee8b6413884bad5fae3e1a6fe15b4542c2a91635f2156ea89fc57dcf92165efa0a0d2cd5e255cfaddf947768bc8e05fbff0be3b75da5dc4dc5ab94847503b52f1cdaa45cb9a3b837753a06a8820eb4bfe05a5a5acdf0f85766ab564ec973942c9af6228763f09e736a712a6ac2a15dc3a428133361d5c853db14a0f63569cfce67de079e861732c7e01d10491931803d01cfeaccaca14661c93ec8c056b3c8b1ac30a23a0102a231e2fd7abb2c730241630b4022c163b2cf308e799015d94faabf71330fd9a92942ed8b7157f43db977fd1f60a950384499eca076049bc75bf1d7c5a279508e8173a2303841489b2845f0574122edf8ef97903d126195c1fa7507693a5d373ec9da8bee0ef34bfe29b301730bf4e30f2c056f28981719b4444c9f2595031c35810e8f26b6f413d16e866ca402fc1342f9fee60e112e9c54b96534c73ea1944f13f463537e55ceae3b70ec8fcad0d050c97055afa619fa9dcba70d6167b15cd7c5a9487fe8c35db3061713cc258ac31756c3f26621dba60e06dca53269293f8c6d1e51ec78a584467ea88fab969f5bb60a00b3f607ab01e68a099b204af448dfb74af47c7bb855a2c6a95d7cd77a5b5191d5fe86b36d35e68b0cd218a3ea5e5477cda81b5e3fada27b119405cf49e7eb83f9eecf1cd8808ac4d06178cb141554e374dbc2c98699bfa2591a1e149d97668b027995c82f898d14e23e650097c921ea8502d98def2b9fca6e8f74a94bed58b7a8fd06b65613429b50c6b31ba0e124ce37d264b1816babaa7b1b0649c8c462cc5f5f516bc83a94087577c139692c52cda35e58ec6d360d5cdf76c89ab5dc6998c45aa622e262e11319fc40a3431c8db067ae600f97653fe08e50239769d6cb70657ec64f7ae9acbd1024309207d092c5365879ceee59bbfa05d888e9c6df0bca32b9e670fda949759b7323f8404313ed7f3aca9e99b9b6967a63e58b08f531272de65abb452be9df519f7ff43b6af9d50c5718f1760e83ba2f34e55c05b026a852e2590183a97d60e2ffaba445511aa37416ff18260a00b7c6a05c4567c55bc6bca3a493103a62615e89bc4825a039a86e0ff450e4929bce87ed7e87d1fb7be12b037c6993b87b3a89dfc27482e506aba5247e6eba83ccba9870275c7be925beaae858695d58b7ad7240cd7faa4745d67e9f9792b45352d9f8dcb8e427521bfa5dd060ba722f20726448a125d1f4a63414b259996ed08c94248d0845865248832f803677195bb98c7fa3e526a39f67c9ff9c25ca535c583319b4273ca54ada91ab3479986b3313112ecd173a7e05e3003d96384c4f9bd4ba621b4df4d8910c84431ee0d49937755da3dbdb96e7e0caea7f9ddf1e18f831f0e32db4fab752c1bdc76278e4977415605f619e1e8b922d350a4f6afe95da1815e08e864af00b5b1b676a2e9a1a0c940a52f6eb509e378ca6bb292f5ce8c2f10bbecb5126a377321f96f4b35186db2da8a0909168e6266349993651bc0746339cde8faf0c6c6e79008a643146ef3558ad1c113b4b61c0cc9a9a7da1ef030d0b10b780656b0700d258500467c72c317835085ddd50bd494c910d376e5fe611f99f01d8f1ed032abc4f311b68bfaca17bed5ad7a8a936bb1070658441b7e2b4f634a775fdbdeb066bc7294107edf4e754cdaaeafd906908088deff410e6ce789fe297f767dd16e79eb75ad3b91abf20befea6b2ce811156516422b32e7849d917f3bdc763357da361205945ed5a07b5b5421523cfbcdb4a17f8164131674e437e1b38e85b54fd975c5ffef0c058a7df5fa3991486d69e13e8da562208c853c0930e7e3871f445cf6eaa8d05e46488d292529b2ecf9c919d4c4e66bfe629601a855cdd85eca7290ccec63bf237e55584a7169c8a23e46d7711ed27897c6740effd1f5d7866a300cd97893e4f00c219656e59aa73d", 0xe00, 0x7}, {&(0x7f0000000240), 0x0, 0x8}, {&(0x7f0000000340)="6ecbd01a6dab74d28057706ef7cd24b848f39f314194f8333c09f547efc6454227a970d8224567c8babe1033519b504aaacba87f13e8ed14445c86903efd33b82972f9c5806e5c42536d0e00ab58b60fdc0148c2f91e1fe30854ddda267e2221f7e27705d9c742eef9faced5c757b7", 0x6f, 0xfff}], 0x2, &(0x7f00000026c0)=ANY=[@ANYRESDEC, @ANYBLOB=',euid', @ANYRESDEC=r17, @ANYBLOB="2cca2c861834b27d0436a3e831157cf5a14be10d15238079b500c3add79f116f2ad1066b174faa3cf95f1ed5f6398155af8af2de50bada511d331bd6846275bb364f8da2205f53bfe96b2de7753a1571664739302d538f9e379942147d67d33bbeac19e8ba2b28c9723fd02ed99e7245fa5a7ae6c7ef24ef09064d03e8e26739045e6791d3ab99bf7a796c0dd719b7ba55a41e85bacd9bab99d61d6fc9904ce34da8c3a9e16038e28847624637a8a6d271bcbc538e5ae3d336aebe7b3e767e80e052832f04fe97313a"]) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r18, 0x0) r19 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r19, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r19, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r20 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r19, r20, 0x0, 0xedc0) ioctl$TIOCGPGRP(r20, 0x540f, &(0x7f0000000940)=0x0) getresuid(&(0x7f0000000980)=0x0, &(0x7f00000009c0), &(0x7f0000000a00)) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r23, 0x0) r24 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r24, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r25 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r25, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r25, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r26 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r25, r26, 0x0, 0xedc0) r27 = accept$ax25(r1, &(0x7f0000000a40)={{0x3, @null}, [@rose, @netrom, @rose, @default, @null, @rose, @netrom, @netrom]}, &(0x7f0000000ac0)=0x48) r28 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r28, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r28, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r29 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r28, r29, 0x0, 0xedc0) sendmmsg$unix(r5, &(0x7f00000025c0)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="7a1448871c218f1746e6d2e49a75cb9aba563a6a0bf7a8d8480c6b90a67d68bc4e11b0500a0eb3af599ebc8dd553b8cc7a7f3117c70d8cdd6a3400f7e29c45ed542d0d77e5876b0892b74d441aa432d15c4d41f63f0cb21398655d2822e1a08b3c949b5c2e73dc0c787a6b76966c3b059309f74d84e62288fe9b70cf22ff9759c60e0a04ba4ede7d49e82103ed82dddca90dde4564e5dffab3d48e88015857e4a1faeee0a78d8f3ed9f24e5dab389b9cea75162dc6e92128b9949ea1425d8a", 0xbf}, {&(0x7f0000000200)="5d759c2a6ac31a47a85c041b6e882a93ddc614a7a9a621fed6710e0fff667c3f08469c09fcee2f8f69f1b122db6522b4579b374ae99b9eaba3528c96fa45303556b3ff7c7b823e6072cf9b224fa03f", 0x4f}], 0x2, 0x0, 0x0, 0x5}, {&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000480)="911edb8ee1b0a99eccca2b9f4e28cae721fefb99e10889fbe8f786afd68d69708d0e784397166c8e2d17341d103ae5850dd84d009219b3d0cf304171763c47c3d216228cc322966bcad63cc0c7773029793b44a59b69441acb9461fccd5c1fdcf9686f9b443bfd2878f3122d2b424718185957aac6b6c9bfd953d5cf1d19c001e7e5abc03be2f31cc049f9de866d08f45843f19aa706c2c8003138c798cb7b7ccf9122306528048b55906403bc78bc85ac2e1189cc04bb0387f095e602593ab2afe18375179a4a903ee170e07eab8499ce1c05344d3220", 0xd7}, {&(0x7f0000000580)="e8946da4beebba57d3521b7a447125f910ff4b8f67143550be69ee10a4f0429cba0aac717597d60646e227e14f04bafeb329f56bcb700657c56fb41fa2856062d9cc1929b329ff237f58c8fd5ca490c81533a337edad397631916af41b2c08425fbc3a31cafccbf3ab329b07e54d8b266aab7d6de41f0bde81b332418b52badb868ccad62adf8217f7d17bee2110944ac678c4dae8fd472e69677ee080ea7ca5018a12b3ae50abcfa69bc46be89b1c2694cb0f29cbd49a4d42d3e31c837f5854e4550dfa49146cd3ae67311341c85b0928854c7fed037b6a01f25365c0", 0xdd}, {&(0x7f00000003c0)="9b69bd0b563acf954f14774fe298ad95cfda4be8383566836f0c7670f12f3139d050880b3bc372c06b62df86cdbd0e28f3165b57c5e6a44ff674957905000f7457869b75f92b2f7cf91b6e097f2d1bd579801f531b1cb8d4ddb8f136e1b581f907f9c5", 0x63}, {&(0x7f0000000680)="a096c0b721d7fb07a814b9740363124fc7abc6d1e55ff7a1d4c51fc8331fb370eb9ae9012c8d43bc6b685ead9895c654eede6d476ffa13d7ad9ae929ce3344763ee76c6264dcdf571de67ad4b595be4cde7eb1d9da04e90a081bfa9d062e4a760cbf71007dea6fae02b1c311c4f838bb29f8cf38b5783cb8cb5e980b0757ed9eebbdda06f679884e559415accd3d23c350b1794ad0752e0c5cbc05f6e26c5be76ceb05462d508d39516491c6ac05236e93263f16cb400fbbeb", 0xb9}, {&(0x7f0000000740)="f40bea1f1a1144abef6a8cb2782b1757bd90009406635b1269a24ecdef47f08be2d6d39577c77f5b9d9a055a91747814fe58fba6594005c61f290d061eb0bc7cd95906cafd3c4af5523bc72097f1da85a5499836d6a5ca0ee941fbaee591a92719c14fcca69afee24c2ad01c9ae5c46b589b33e8c0aa03d712d17d865826730a1f0d2c9d5b35c19529bfffcdd661c3de949aa34bcd0357218206623fb9f6b294fe68bfbe6f5dd67ad636a87ad21e4e9dd5f3db84ec3d50dcf5991677f0626dfd438ef503aed42b6a409ac6c7de360a1578ec76f97c6c710d4781cc4229db21e083f71ca6da4782f438f286c3", 0xec}], 0x5, &(0x7f0000000b00)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x20, 0x1, 0x1, [r3, r8, r9, r11]}}, @rights={{0x18, 0x1, 0x1, [r14, r15]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x1c, 0x1, 0x1, [r24, r1, r25]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r27]}}], 0xe8, 0x4801}, {&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000c80)="002df4e1651f63a5fbe103", 0xb}, {&(0x7f0000000cc0)="6668f88963d5a2195dec3e5d885740fd7d6f14872df7dcbd93e63a7ff53a6ef65a2444b1a255ca13b91b6b965f1d96c1c2ed79012d2d5ad3b7db839631db35e1e83837f2fa2c7621b6bd79123502534ae9800d0b61aa9727a0c2f525c9c9aa42482813b512070e4b9ecfbd7b78", 0x6d}, {&(0x7f0000000d40)="86320e511f6ac02a5c9d9deb1fa197fa1a727000fdb6dd3cb4578d1a60bd762662e7c2389bbebb5590594dcee9bebecffd87ebfed8f24202fe257e5196f0b84469e240c080e0558f97b5d3338d36b45a10ae26d32003c22b92635d8b29fddc49020496ee292595d1e254fdcbe49f08e1cf5a62d1194bd40fa7d751c72448cc8132e48da3aba983d70b6fc077674fad5941cb20fb65daf33b20a10c614acda029e34c1475ae", 0xa5}, {&(0x7f0000000e00)="f1328456b68d1864542484b634327dcac33352840ec782ada950f1dec919c40c930643b819d8a4205fd1166f0d73341363321c3a4e3819538cc5ed430914ac2b88b49d9655a37df1c1889ef1315731ef4574b0a42e69c210116abf7ccd27cedb2066fa5329beb3af9a3531ac7a5935ac626ffd470df2d24b261fe3b92889b7a20ea83ad00e3e48f22212d38088d157b666bb6e53dc24d7b6affe317116aeefd44cd0199b58505e8f533830c7eb7d48f54a821d56ab5f539ceef8c88f9014f04b64a5f5af8272a38d86", 0xc9}], 0x4, &(0x7f0000000f40)=[@rights={{0x1c, 0x1, 0x1, [r28, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20, 0x4000001}, {&(0x7f0000000f80)=@file={0x690e670f7dd11d5f}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000001000)="e3dd0f3d7c760e95c48add4217303d7cf5dd0bbd82e2020df6ec9c70178e9ec8d2d83b22dcd9e2b942dae47b2898ad18e596f3d261ed92081e3507a9a7d48d7627570c385f0f6d32f2a30d4b912f1346be5af18bba0ad70ad891fa2c9241ad92cae3ee97356d03229c66d7edc4278e587d19248ca367acf05ecde18f0cbd1e14c8f0e71704815ce10c176233d2c79747b306fbf0a8976d99e02ff6fce76d45597bdb288aeb4ecf56f47293d930fcb0210e16c84b", 0xb4}, {&(0x7f00000010c0)="c24e46e66adf2206f3db670eea9d63d8990e1bc758c7f2a15718624565a6ecc3971542bbe898385269fed7e881dd9671881aa3a1de0cb78e883527046bd9ba416b0c46", 0x43}, {&(0x7f0000001140)="6313cb0544db77b18d189f869c4942a879e9ff6877d2df67335ddf469654f07703cdd1b3c8f5f933da60817c2baedb94c8a98bc90636efd33a0f3b21427597f5362ba2000311eb7ab4bf075b35fdf42c235f059edf89cb9eae6bb441e3c530e5c278f1aa539ff553f5b4e0635d4b7123b67b260409e9b3102f32650d5ea988bbab099299e1c474167a83731162bf25819ffca9ef680908953afcbbd3f4dd29f070ed76dcdd36e31045bd60cd580fac3c5311056b87899d3d7dc51d97221fb62eeea89b4ce0def7235dbdef508b44dba45b23299635ede5e22cc3aefada3ceef0217c2938", 0xe4}, {&(0x7f0000001240)="ccddd6af9f2fca408add4a618332fe4502c9ed4d22069e8b30a5c156cbec6f1455874c9baeaf535bc99c6086897a0334a85e40fe9ef0bdc4339f828249c4709fc073c4103273f11e096caa85dd6877970720dc08e7c035f9574f37ff249179ac9b4ca3873d34ed4f0a796f5ebe4f24eda7e4c45a87be3c498441d742e2ad1c0642ad43303e1e26dd61233e6eceb61021d75503abccffce6200c27f4dff3f2bc58cf2e97540f2dad12168c4ee288db32562a882a1a8190b67fa0e162401fba16817036dee5fe03f6e5804b7acd0ce69f1eee84f96f2c784a1ede9e5", 0xdb}, {&(0x7f0000001340)="1ebe0b419f62846f10e3ddbd4626b5706d825ed04e1bbd321a5099c26fec197d4df1663e0dd0c55c0d0eb58868303033233d723976b7df952cb1aecf37c63dacbde994d11fe1bfb6e0ce87e0c7d06d94378e0699499be2951933", 0x5a}, {&(0x7f00000013c0)="3bed9764a09880f84e1a654885b7d4f69be58e2a168c830ad952ed5b89565cd5a95cc5e9552d78a8f6ab899e41b1e5d86d2628fc5366dcb8afce4182d2b31e4574a399c6d57abf844af7d100e4c36e4140bab48d8339a08d8ac6930f9de12ef4f237c3af44fb37d77fd67bdb632ba94d4854352fff009b2e0ab8b58acf074c0ac4f13a782eda21afded7a50d378a59", 0x8f}, {&(0x7f0000001480)="8ac740", 0x3}, {&(0x7f00000014c0)}, {&(0x7f0000001500)="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", 0x1000}], 0x9, 0x0, 0x0, 0x800}], 0x4, 0x5192272cddd26f8d) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r30 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r30, 0x0, 0xedc0) fcntl$getownex(r30, 0x10, &(0x7f0000000080)) r31 = getpid() tkill(r31, 0x9) ptrace$cont(0x7, r31, 0x9, 0x7ff) 00:20:13 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) [ 544.853441] overlayfs: failed to resolve './file1': -2 00:20:13 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x2) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = getegid() setgid(r2) mkdir(&(0x7f0000000500)='./file0\x00', 0x1) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @thr={&(0x7f0000000180)="afc5e732a170cc765d6fff983fa766aee41102159472e0d29ab5ad3986977331583c30f316c95d0202bdf9a59e9dfb8dd04ec9f113c1ebe6aa0f37e103fcbaea09f381dd076922798e65f0f29ce8c817388f77e17762d76bb74dff36945b852a", &(0x7f0000000200)="3800eee2dc7a0ae7b459cad931d4afbcabfd9060c103c47fba43a299c2bc3392441530a9c42a1d33f0adce25777e4ce983cdb392c391f0092f702c4000f2afd857c5209c34a3611028d07bfc80d7e5322d9f80c02a52b710b1445a5359dabf0e505656fb34046dd31495b36f8f478594107ffdf3f6f84549268fbbb8fd42f21b4a19179a765141a47abf26d3e9a42a9beae61e3619cc7064725510119c"}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x7, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000440)={{r4, r5+30000000}, {r6, r7+30000000}}, &(0x7f0000000480)) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0xffffffff, 0x7, 0x3, 0xfffffffffffffff9, 0x0, 0x6, 0x9, 0x3ff}, &(0x7f0000000040)={0x0, 0x3, 0x400, 0x4, 0x0, 0x3, 0xadb7, 0x1}, &(0x7f0000000080)={0x9, 0x81, 0x3ff, 0x3533, 0x0, 0x1, 0x5, 0xff}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={0x75b}, 0x6}) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:13 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:13 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xda, 0x2) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) 00:20:13 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNOTTY(r1, 0x5422) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) r3 = getpid() tkill(r3, 0x9) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) r5 = getpid() tkill(r5, 0x9) sched_setattr(r5, &(0x7f0000000100)={0x30, 0x2, 0x1, 0xd349, 0x5, 0x3, 0x4, 0x2238}, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r6, 0x0, 0xedc0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r6, 0x0, 0x4, &(0x7f0000000080)='GPL\x00', 0xffffffffffffffff}, 0x30) ptrace$cont(0x9, r7, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r2, 0x0, 0x0) 00:20:13 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0xe) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000140)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000000240)='fdinfo/3\x00') sendfile(r4, r8, 0x0, 0xedc0) bind(r3, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x401, 0x0, 0x0, 0x1, {0xa, 0x4e22, 0x3, @loopback, 0x1c}}}, 0x80) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r9 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f00000001c0)={0x8, 0x10001, 0xf0, 0x4, 0x4, 0x5, 0x9, 0x1, 0x80000001, 0x4, 0x897, 0x2}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:13 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 545.008118] overlayfs: failed to resolve './file1': -2 [ 545.095993] overlayfs: failed to resolve './file1': -2 00:20:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:14 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:14 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = getpid() r3 = getpid() tkill(r3, 0x9) r4 = getpid() tkill(r4, 0x9) r5 = getpid() tkill(r5, 0x9) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, 0x0, 0xedc0) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f0000000140)={@empty, @dev={0xac, 0x14, 0x14, 0xd}, @rand_addr=0x3ff}, 0xc) tkill(r5, 0x9) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r8, r9, 0x0, 0xedc0) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r10, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r11 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r10, r11, 0x0, 0xedc0) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r13, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r14}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000000140)={r14, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r14, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000340)={r15, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x7, 0x8001, 0x1, 0x1, 0x5, 0x4, 0x4, 0x5, 0x6, 0x3829, 0x3, 0x3, 0x9, 0x100000000, 0x7]}, &(0x7f0000000200)=0x100) rt_sigqueueinfo(r2, 0x1f, &(0x7f0000000040)={0x3f, 0x8, 0xdaa}) r16 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0) setsockopt$packet_fanout(r16, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6, 0x2000}, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xf, r1, 0x7, &(0x7f0000000500)="001a8e8ab88adc0a0e60000000008ea000003d24fafc48767f75df87e4c3e03a8ef43cef1f87f03c62e6396bf062ba40a634ff976c2f04531810e82993de2cf7c45092752a8f9680607863009567bf8df67bbb7f9dc33ee1e23df92aec28e89c1d36e738c57cba30") ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:14 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0be9e47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) accept4$bt_l2cap(r6, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x800) sendfile(r4, r5, 0x0, 0xedc0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000080)=0x5, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r8, r9, 0x0, 0xedc0) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r10, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r11 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r10, r11, 0x0, 0xedc0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000240)=r11, 0x4) sendfile(r3, r7, 0x0, 0xedc0) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x11e}, 0x20001}], 0x1, 0xf5137640698f722f, 0x0) 00:20:14 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00\xbeHx\xc5\xb6\xdaNX\xd5\xdf\xdd!\xea\x06\x8f\x01\xe2\xddC\xa9H\x06\x00\x00\x00\x00\x00\x00\x00[\xf1\xfb\xd9\xff\xca\xce\xc8&y\x9bs\t\x98\x7f\xd1\x90\xca\xc6\xc21\x8aNS\x147\x1d\xe7\x00\xb9\xd5`=\x1a\x16{Yr\x16V\xfc\x04\xfd$\x020\x1e\xb0\xe3rl\xf30\x83=\x96\x1a\x867\x10\xd7\xdc\x02\t\x9f\x1a\x18\x9e.\xfa~\xda\x1cN\xc2\xa35\xa7@\xabU\x89\x19%\xedW\x9dg\x16\x84\xa4S\xa6Q_\xa0\xe5\xf2\x95\x03w*\xb6k\xc2^\nd\x7f\xc8Z\a\xd7,5\x11\x90\x02\xb5\x80OhP\x1f\x03\x85\xdd\xd8\xf2\x1ej\x0f\xbe\xdf[\x92^\xa3M\xbd\x8es\xde\xdb\xdf\x1b\xdc') sendfile(r2, r3, 0x0, 0xedc0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) r4 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f00000000c0)=""/17) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:14 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:16 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) 00:20:16 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) memfd_create(&(0x7f0000000080)='vmnet0em0eth0selfvmnet0\x00', 0x7) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x59) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={[], 0x0, 0xfffdfffd, 0x2, 0x40, 0x135}) ptrace$setregs(0xd, r1, 0x200000000000, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f0000000480), r6}}, 0x18) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f00000000c0)) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) msgget(0x1, 0x80) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r7, 0x0, 0xedc0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x9, {0x20, 0x1f, 0x81, 0xc0, 0x92, 0x3f}, 0x0, 0x1}, 0xe) 00:20:16 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:16 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)='hwsim0\x00', 0x44, 0x100000000, 0x40db}) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) socket$l2tp(0x18, 0x1, 0x1) 00:20:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r1, &(0x7f00000019c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9\x02\xab\xe3\xfare\x8bt\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r2, 0x203ffffd, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x400000000}, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000003c0)=0x17642c4) r4 = dup2(r3, r3) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000380)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x313040, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf, 0x1f, 0x1fe}, 0x20000357) socket(0x10, 0x80002, 0x0) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4080, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000040)=0x1, 0x4) tkill(r0, 0x38) 00:20:16 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:16 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlmomonitor\x00', 0x40480, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000000c0)=0x1) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x480081, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) 00:20:16 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = getpid() tkill(r1, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x1, 0x400000, 0x2, r1}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) write$rfkill(r5, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x1, 0x1}, 0x8) wait4(0x0, 0x0, 0x80000000, 0x0) r6 = getpid() r7 = getpid() tkill(r7, 0x9) ptrace$setopts(0x4200, r7, 0x5, 0x9) tkill(r6, 0x9) syz_open_procfs(r6, &(0x7f0000000000)='net/ipv6_route\x00') ptrace$setopts(0x4206, r3, 0x200, 0x0) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r3, 0x0, 0x0) 00:20:16 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:16 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4000, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x6000, 0x10000, 0xed09ffde83926348, 0x0, 0x4, 0x15, 0x7f, 0x80, 0x1, 0x0, 0x5, 0x4a}, {0x10000, 0x3000, 0x2, 0x2, 0x1, 0x20, 0x0, 0x1f, 0xc8, 0xfd, 0x6, 0x3}, {0x861144c7a148d218, 0x1000, 0xa, 0x6, 0x4, 0x1, 0x1f, 0x8, 0xf7, 0x2, 0x74, 0x5}, {0x5000, 0x9, 0x7bfcfa0a7bcaa760, 0x80, 0xf8, 0x3f, 0xf0, 0xfd, 0x6, 0x8, 0x4}, {0x5000, 0x4000, 0xb, 0x2, 0xd3, 0x7, 0x5, 0x40, 0x8, 0xbb, 0x2, 0x9}, {0x3000, 0x100000, 0xb, 0x81, 0x8, 0x1, 0x0, 0xe2, 0xff, 0x40, 0x3, 0x9}, {0x6002, 0x2001, 0x9, 0x8, 0x2, 0xd1, 0xff, 0xed, 0x0, 0x5, 0xff, 0x1}, {0x7800, 0x4, 0xf, 0x20, 0x7, 0x40, 0xbc, 0x48, 0x1, 0xe4, 0x5, 0x80}, {0x0, 0x3000}, {0x0, 0x2}, 0x53e86a230bcba5a2, 0x0, 0x10000, 0x28000, 0x0, 0x7c00, 0x5000, [0xffffffff, 0x6, 0x3, 0x10000]}) 00:20:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() tkill(r1, 0x9) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:19 executing program 4: r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x6, 0x1, 0x6, 0x7, 0x1d4, 0x3, 0x100}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4200, r2, 0xffffffffffffffff, 0x0) gettid() tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000280)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ptrace$cont(0x1f, r2, 0x0, 0x0) 00:20:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40200, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000000c0)=""/203) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:19 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:19 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x70960810}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x114, r3, 0x300, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/enforce\x00', 0x141100, 0x0) 00:20:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000080)={0x5, 0x3ff, 0x7e65, 0x7, 0x4, 0x4, 0x11, "37b065c2fa6084a95ddbcfb1a50b2b0251c60739", "ea710a8fa8e8b555bbbd89c3477c160dab0c43b2"}) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x3e51e328166f7952, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2000, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x80000001) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:19 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup(r2) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000005) r4 = dup3(r3, r2, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000100)={0x0, 0xfffffffffffffff9}) write$UHID_INPUT(r4, &(0x7f00000015c0)={0x8, "e52aac313baccb9b551156a2d7c12b7711c32a17d3c4c9ceef08c2046fe288a7036e513019e5e114cc4ae935d23a9990952824f5d0c1f52e2eb94e5301ba9dc9a02818038eaef46fc2c3ebbe46e4a6024c93823f66462ba3d68913fdeadd1087b06846aa3ddf6ed3dc2b61b4960f48c2edf5cdf23c7e8d3f2e6daa71e66b29bc19e377d7df4637d735194a52da503a0ac44383ba5b3da867e09ceae02a9bfc21e7f28814c2fab7da41344e207ca706dc37592abdb685e4b80eb6dc2b1dc550a1d16166d163a4a220a54d7844facbbb2648ee90aa05c3c0d0bf69e86a5f48d571b9337590d05e9947727c0d77d18a117f110252735ca6700a55fd26838935808cce7b7c222a75339e44230bdeb99bc39c0c1cc20de74fcb9744f4c4a988f3874a846d31abcf5504d78a3e14f35f6cbd123fcff22890cc17c730c3ea9f74616dfe60064552ec25568a6211bdc39483a28bed0df0afc7d7c6d1800000000c8846ea512a8ccae7a99da8dd3009feaf204d22e32c5ecc333e616159d55328d375e59194c5c9a0b3843afb283d1d26f59e03105e91aa552386468432a09be73220e942394f34c559797b74bfe7c5c2c639a40e4d2e81e1004b127540a0bdd6be3e95698e75e4f1203a47d61f506ac9364be9d98ae46536f74afe08c450ecb902e00f188c9f32aed0677455e10bbe82c763a464f10f64c403c35376b7a675546835209f0e2809e9c2bd191f784dda4b727bfac512497a07474e6d3e13234801df81abcdb6fbfb152483ec61baaee45a5d733c62107f63c55a046401a5ddef70cef8d52cb4784e3efc34de554c8ff48f7ae3d6dc1ed4eb70fe1e610355fd66ce1af81fb3dadfab8a9b0b1f26ca11f7287258ad4766e08340f8f2fd53e7e5f287bb73c186f0290f225687040c762776a02e5e65f1b9b713e8ef98ffe111b3e4e7b781dd3ed763ed8dafd67625fb300ac752c0ff9c0c04b75be292c3f0247bd0b3560f1c76aff38791037fcf2b812f1601934a8fc769f7198e0df685841489263a1495a8a8bab1a63cb12b302a6f0dbc4df2d0e8df4c6bcd47beefc179d85b70b42b319453e6efaff96a509420bec299f227c4b676c58038916897f15430ff52087dd97dd329c6b6e207378053accaa31843a333e4f69586103424f44bd67eb355c1fbe078e62f07ebaae46c3e335372127dc5fa70a4579af715e531bda52761dc206aded4678079720603a577ef7e5fb5a81a525b7c96a4047d9d6bb80d7e0ce55cc0a4f73256ae9c515307f13fe54126786de425d7a674b05116104176faac5b9365b33fd2f5a710a5159d342abecede83ad421bbb712cd5b006671a958cec907311719eb3e0b5dc4fb51054e06656a7a2a066c0aac65ceb434ca3f242cb2b1d7a22179a85cbbeeacc2f0135d8dd4d1363a98d2543fa4973e19eb359e956d27f142c75f62c7aecaf47090236b9791847725bc6fde15cd4a119a4976a3f0f2d622973ad9000aae56f88b396fa1881ec0b0a5de9955fc8f864b36eacd635b88826e0a64897d607fa4a14f7786b037cf308bef61c7f860e38f1ae67fe8cb7802dbe85f9c0c082eed1a13e645370d0c95d63bba215ac8a637b8f968aef06329d62ba131b56b46bfcfa6a5e82016d5eeb6e7db45595d1acaaa5ec9886315d3dced9d0a15c44c043ac91e4ae7077139774607b76cbc017f636145beb84c1829a6030f4a895a56b8d141f743c9189a71387993f785804f85927a23ccd79c432ab686b621ec91706ef082b4ea4fa608ce2daca0d2e2e07ff51e6a8fdc22f0c8ee5ae53720f93b4547704fae580e5560e3c7b1ac2a38ffc294d3c96635e3b919339394843c8a171c7d12ceb9c0a11be25783694b177b399e7a495538e293a59d3ab44b176afed6894aa0e501d9b98981be3f2057bf6c9869403a34cb83ad57150c674301f39524a026f3608a3414287bc4e507355823c6f8640bb803a392fb8847023d1db3c39753e72414682c617de9bd0d5b6a55d46004d49f20d2f8f53cdd8eb11402f7895cd7c01b4964fd005c564b0b0e156969ccde818dda3a7cae02d1d3af95081e6549f28976fa81b5e90fbb0a62fea850ffaf0220132189c11a74996261f6de6001c50364f08c4f48f01000080ec8ee4d003efeead64b87d64b43cd6868f365e72e26dd9f5f9f74d135f64464cb38dd62051ae70c58fdaabebe700eb9b290b8ed4142db0090219e6186f8f71fa8fe1ebe42f621b8eed182ee8ad0401f0a3530fd48e4d1eb2637f1fbd2a7032b0f85715203c12ab8ff48131bc4ff28272b57119a76bc0b30fef5294c23c0b2bcadfbba37a00502b5e43d72148d9acc7cb7cb39dc830cd6f30262a09eecf29d1055c2edc3926cfd5076a25f9f172ed145359fc974ca5ded652433d212607bed155df1aff269414548a39a644b6ce927de5de6e6750575c4fd7ea7fe10b1e51fde6975c0c23fc012a8b12fe3fa64e972e4e09eafea165ae5c1ffc9d761e1314a781959c223b96eefde0f4f45c7ac032a8d3f1bd304114c3329a3e4966eddcc8d44ae70bad2932f963100955e2d2d487347c2aa8356bc6bc3c84e418163c758f1372246884e6d80d87d7ab3fe660dda13ada65f200b4fb365223b93bbc29493ae6dbbbb1823edb8e9f045b60414edab955e1046b67a8d4908ab08ad90216125d2ffd8c8614a9a4940df0a653b1cf53cf456412228445ebc8e1584adfe13207ff24fe602e2a506218710483b5544347a3d515b7d2ddcaa1bb7ae3578841910600000059d5f260d23ae17a9ffc77f79758844586fe53517097838a92dde8873e8be1cd5934b1a4bfdd990b5725b811c4a2c121b7729946993a736bd195c55684ea680304af4844a1b2f74e2c2b2ccaeceb00b9c2c515b70912efb27643c5624025e358b44853cc0efddc103ee514471af902cd9b68f102c95a91d2b825b473ce842e6367b0b7305ce8be6f9c812abe860bb632e00b69a0370e5c8f9ba0cebbcbe1b9276949c303a4e9e3b6db37a0716520c07512192364abb58399fca973a1b32106096eda8bb85745562e8a35c5e917fdf858091a4c29d6549e10098d6b205fc5cad546fe07b3a70756cf7079c88f3708f0c8527002b99e80cbd584a3737fb37953cd6dccf21add4d4b6e65894490840c008578737d5e208649d1cd34beb403c2226300297853a29cf6c661b426c13306575d81f6fd21712e0ec4366013883b95a71d5094acbf156e42de11cb873744983ec1ff9cfbee2278053b8b4e523388bd41dfd3c2ecaacc5d9d2958bbfa94f4bd0ac1c61c98ab295dd5c69020f1329818df9a2aa88ced03f4e6a4d1f8cb020afcd2384e65511ddeb908ba0c13a03dd32e8d4ccf0246008f35ef5184f81b8fed73b4aae4998bd8c7d784210042247d39396ba881bf43555d0ec58deede7b4729e79d31b2a346527594ca3a47a1723a792a701dc18d0124365e2c4a4fefed48c29a9f2fc747b302eaf92a100b2da211c91de4ab79d4aede483d852635c6f14d3803005739d475c7aa67fdd54767a056eeb3098dfd8d1c21f32e76f024a2a622f5641b83f540a643e72dc15804b78bac475f39e23291798aa45a2c10aa5fef2d5e4d7b8f529a66535d11c6149e9797f2fcce2804f2a5370345e98b0c02c7dd27135d414fe72f0740423920d68b64f6b8c05788c6693ee1b9abb5d4593a970dc3ee2528765fb739964f4fed7200d7e796a9f3d0d60834e63cdd8c29d4e85011e4ba4f00000000954a5b5bb5d1cc69f2376599d5a3e8c30714893f763c06061072c10cb0eee17eb2a2514acc584b04e169d4a33a330367bb725ff9462f5d50282a2e393293eec8ea1eaab8217cc108798a4a57eccdb00647ab9f07318993f7c59c395a93cbd681d0a967a56e3f13c832c48dcc0d0096871b0d51b754e70b12a849b6f376923f7f7d909f64d64e1d6e338d39166b725265b96ed21e36b12057148d66e5df04b7b734e80957d47fde172be2473b9ac6fdb823abe3e11ec69a170a14511d5572d6c0d9f6b749acad7003f0567bb6f9381649e42d02764077330d5af3d93185968a9f8dfed16c4a7c768a2bb98304946a557182c0ce93e82b340074e384cc6bd6129483386c654a6ab3bb12fa8e86adafa93f218fdf5019c09292858acd8ef7aa6a78e3f846215856d630ae9c5fc4009693b2767ea55c469f9099693287b35d43ee0f7a5baf3328d37b2c536f2abd6e21e472c105ae982cdd26a5a20562122e71efb1486c28d9409c3114b608f297695958c5604cf0918c0c70c56c79170260d73bde297e47cae1c404cca0a96eed51a2dc8fce6ad862fe767ee5b5e68f231096825d935b809b3c1b5d9a2cd76cae22652bed7d263b42612ed717eba0aaf2a3989c4520c402d29428010000000000000062fb3fdd073b91d4e2f6895fba9639ee78bd8ccb5bc3ce442fbeb9a1521314b82804293159fd7df4db66b78a06fe93e705bbc4e0d294a787c3cbf271b2acd15e7b4998c822f77294dfb08063c9ff26a424884b46e26b5560d756c114ad1a7b92eee3f49dc2883b604ecc49c5ce92ce467778301326588a6577d44758e8d90710248d110dbf3d3d568779bd1c616369f84619dd089e38b5b6821986d2ac9f1547a342877815a3864ad70b68b196bde9d810512f411d5235633ef65088788dfa3f152df7cee3a0803f6ac7ae192301dec07ff870ff3d7cf1c09cc9093263b225d01222376531007af9e6fb96e5ccaa8274f77b56b9a03bfce15a1aacd78c4adf8bdf41de8aaf421684c27526088c54322b5eead7b43d1f3960dd283218cc6f5df233892d7d5b0b0649ffc5a1c4909f2967a8c1f15b419ecde0448f071fa71e553f4f12cfa5e35022e75ddc5509edddc3de82d9097759b27f7c24776702e0ff64559281f796f11c1a9c77a156f390d2d18d1759b6be0347eb5bb4df912e9cfafa0db3be3243bacb378ca0946cece695a8099d6d7a24fc8bcca4c09695e3208f17f00bf404f6eb7852dfe73c163a19fd4e890e0edd5c7a727984b6f47a952373b95200bba061756c699c218b52c265b22bcd5cb24fdf056621fdd2126cede171e435320ca34e56e4c82a2afc9a59d3bf4647877658b6f23a6484f37acd8e2e184926993b5d1bbe6cdba64f486b4fb41bb94a644140540894f8fc14e585bc8beae88eabf926add289c82eb8cea99743baed842d76eb5c5573f7a7f3f2693960d6bfed697b5619afd942f41689dbd281a35e32478ba3a388dada82a2f4164481aa6a8f3946a84ea6186b20ce388c202be42996ae90feec7258d4a4a276353df84c96b160ac003d81cf395c0e61b0f0a9e692c32fab307f754cae5de7716a00cb96160cd39c931f4885d612862cecf6ba76502c9d266f97e4cf6cf0a16f787788e5471458a0dc24d3f2a28caa0f7ee00cf8bb113bd9c2b086037d765b5ec9a849df6f482fc01b48261e44299b0bc88321d837b6e2d221ebf2996b4140cd82e531de27f8de445f31c64469a5a145b031cd2569d19e27369c31ec63a989f0c9aaba7cc9d36d652001d40004f83a90d6465854f31bf15d1ef6bff4c02d60b948a37e3f50d250d7f8c83b80c67014aae5a35908283168c034f654acbb9d0fc261671d612e3d74261653e69e5e9cf7c8fda298b4d6c879cbbb97eafe648ba70150599089d65c1fdc0d5af879a2d46a443ac6dd21b33f72510742db4faf7eeb1580580ffe26e2d5ff00", 0x1000}, 0x1006) ptrace$cont(0x18, r1, 0x0, 0x0) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040), 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:19 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:19 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:19 executing program 1: r0 = socket(0x20000000000000e, 0xee0a8206558c39e8, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e21, 0x40000000, @ipv4={[], [], @multicast1}, 0x7ffffb}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r7, 0x0, 0xedc0) ioctl(r7, 0x4002, &(0x7f0000000480)="11dca5055e0bcfe47bf0708ba6bbf01759f63da0300ad9b9c23c3543f3c07fd943f041b419a33635dbc02c304d85266eab2f1ed33aa6a8b0dd16356f1004ceabe052491634") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r8, r9, 0x0, 0xedc0) setxattr$security_evm(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='security.evm\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0000bad346b48b3a2e73ff6b0e363ed1f7"], 0x3, 0x2) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r12}, &(0x7f0000000100)=0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f00000003c0)=0x3, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000140)={r12, 0x7, 0x9}, &(0x7f0000000180)=0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x80080, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000001c0)={r12, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x99}}, 0x46, 0x11fe, 0x1f, 0x41, 0x10}, 0x98) 00:20:19 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:19 executing program 1: r0 = socket(0x10, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:19 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x80101, 0x0) sendfile(r1, r2, 0x0, 0xedc0) r3 = accept4$rose(r2, &(0x7f0000000080)=@short={0xb, @remote, @default}, &(0x7f00000000c0)=0x1c, 0x467817ad11ad7509) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={'ip6erspan0\x00', {0x2, 0x4e22, @remote}}) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000140)={'gre0\x00', 0x5}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:22 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008b12, &(0x7f0000000080)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:22 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x2, 0x7, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000000c0)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102101ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r3, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200000, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000080)={r5}) 00:20:22 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:22 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11180}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=@newtclass={0x968, 0x28, 0x8, 0x70bd27, 0x25dfdbfd, {0x0, r4, {0x8, 0xfff7}, {0x10, 0xf}, {0x8, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xb9cfe4d}]}}, @tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0x864, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x8, 0x6}, 0x80, 0x7}}, @TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x2, 0x80, 0xbd56, 0x9, 0xfff}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x3, 0xffff, 0x2, 0x7, 0x4, 0xa3, 0x6, 0x80000000, 0xa1, 0xffffff7f, 0x5, 0x5, 0x2, 0x2a6, 0x6, 0xd8a7, 0x7ff, 0x1, 0x7f, 0x8, 0x4, 0x7fff, 0x3, 0x65d, 0xbbb, 0x5, 0x401, 0x0, 0xfbd, 0x81, 0xc9, 0x3, 0x5, 0x6, 0x3f, 0x6, 0x4, 0x9, 0x46ba, 0x8, 0x9, 0x4, 0x4178cca3, 0x7ff, 0x9, 0x10001, 0x40, 0x3, 0x3ff, 0x1, 0xa4, 0x8, 0x2, 0x9, 0x10000, 0x0, 0x9, 0x6, 0x0, 0x101, 0x4, 0x2, 0x7fffffff, 0x92, 0xffffffe1, 0x7369, 0x3ff, 0x80000000, 0xfffffffb, 0x2fd0, 0x1f, 0x6, 0xf6, 0x3ff, 0x7, 0x2, 0x4, 0x81, 0x40, 0x71, 0x400, 0x3, 0x7, 0x8, 0x4, 0x18, 0x3, 0x4, 0x4, 0x100, 0x3d, 0x3f, 0x200, 0x4, 0x9, 0x0, 0xe774, 0x0, 0x7, 0xffffffff, 0x8, 0x5, 0x29, 0x3, 0x30000000, 0x9, 0x4, 0x0, 0x1, 0x4, 0x5, 0x3, 0x2, 0x80000000, 0x80, 0x9, 0x0, 0x6, 0x4, 0xfff, 0x7, 0x3f, 0x7fff, 0x100, 0x4c67, 0x1, 0xff, 0xf, 0x80000001, 0x40, 0x101, 0x8, 0x1bb04, 0x7, 0x81, 0x401, 0x6, 0xfffff7b6, 0x2, 0x80000001, 0x7f, 0x4, 0x5, 0x1, 0x8, 0x9, 0x0, 0x800, 0x5, 0x4, 0x0, 0x1, 0x8, 0x1ff, 0x0, 0x6, 0x6, 0x27b5, 0x10000, 0x101, 0x6, 0x5, 0x5, 0x7972, 0x2, 0x85, 0x8001, 0x4, 0x1, 0xb89b, 0x4, 0x4f, 0x5, 0x4, 0x3, 0x80000000, 0x200, 0xf21, 0x0, 0x800, 0x9, 0x1, 0xbe, 0x400, 0x1ff, 0x80000001, 0x4, 0xffff, 0x10000, 0x3, 0x9, 0x3, 0x3, 0x60, 0x1f, 0x1, 0xfffffe7d, 0x8, 0x20, 0x3, 0x7a, 0x2, 0x10001, 0x7, 0x4, 0x9, 0x8, 0x3, 0x8, 0x3, 0x8, 0xa0c, 0xbf7, 0xad2, 0x5, 0x9, 0x6, 0x8, 0x8, 0x5, 0x4, 0x4, 0x10001, 0x4, 0x4, 0x80000000, 0x10000, 0x4, 0x9cb7, 0xff, 0x7, 0xe16, 0x4, 0xffffffff, 0x3, 0x37ec, 0x7, 0x1, 0xdea, 0x6, 0x28fe, 0x4, 0x8, 0x5, 0x200, 0x80, 0x1ff, 0x5, 0xff, 0x7, 0x7ff, 0x6, 0x3c, 0x7, 0x9]}, @TCA_CBQ_RATE={0x10, 0x5, {0xf8, 0x1, 0x9, 0x4, 0x40, 0x8}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x39, 0x3, 0x3, 0x5f, 0x20, 0xc5, 0x0, 0x3}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x0, 0x4, 0x81, 0x2, 0xff}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffffffff, 0xf92, 0x1, 0x800, 0x0, 0x7, 0xfffff5c6, 0x71c9, 0xfff, 0x4, 0x4, 0x800, 0x80000001, 0xc5, 0x5b, 0x9, 0x3, 0x8, 0x6, 0xd7b, 0x40, 0x9, 0x7fffffff, 0x4, 0x1, 0x50, 0x400, 0x20, 0x9, 0x8001, 0x400, 0x6, 0x6, 0xf868, 0x0, 0x40000, 0x7ff, 0x7, 0x0, 0x7, 0x0, 0x2, 0x3f, 0x7ff, 0x4, 0x8, 0x9, 0x9, 0x4, 0x9, 0x7f, 0x80000001, 0x2, 0x5, 0x4, 0x2, 0x81, 0xdff8, 0x7c000, 0x3, 0x80, 0x6, 0x3, 0x0, 0x5, 0x7f, 0x401, 0x400, 0x1, 0x89e, 0x0, 0x0, 0x5, 0xe8d9, 0x2, 0x1, 0x9c, 0x37, 0xffffff81, 0x80000021, 0x7, 0x101, 0x8, 0x88, 0x66, 0x10000, 0x5, 0x4, 0x9, 0x7, 0x41, 0xf06, 0x3, 0x0, 0x9, 0x2, 0x4, 0x0, 0x8a8, 0x3, 0x4, 0xdd, 0x400, 0x2, 0x4, 0xa4, 0x10000, 0x7d, 0x0, 0xffffffff, 0x8, 0x101, 0x7, 0x2, 0x4, 0x81, 0x6, 0x90f1, 0xa6b, 0x8, 0xffffff00, 0x6, 0x9, 0x1c8, 0x4, 0x0, 0x3ff, 0xfff, 0x200, 0x8000, 0xffff, 0x200, 0x6, 0xffffffff, 0x1, 0x7, 0x2, 0x81, 0x2, 0x5, 0x8000, 0x8, 0xd8, 0x7, 0x8, 0x8, 0xfffffffe, 0x200, 0x292, 0x10001, 0x5, 0x300, 0x1, 0x6, 0x5, 0xfe00, 0x1, 0x4, 0x0, 0x51, 0xffffff65, 0x0, 0xff, 0x7, 0xb426, 0x9, 0x8000, 0x0, 0xc073, 0x69eb, 0x1, 0x4dd3, 0x1f, 0xfff, 0x40, 0x8, 0x7816, 0x8, 0x0, 0xa259, 0xd51a, 0x7, 0x0, 0x8001, 0x77b454b3, 0x0, 0x7fff, 0xa974, 0x7, 0x6, 0x4, 0x57, 0xfffff90f, 0x2, 0x10000, 0xffff213a, 0x0, 0x4523, 0x2, 0x9, 0xab, 0xfffffff8, 0x200, 0x0, 0x2, 0x4, 0x4, 0xfffffff8, 0x6, 0x1, 0x10000, 0x8, 0x80, 0x8001, 0x1, 0x100, 0x6d, 0x851, 0x3, 0x400, 0xd10c, 0x6, 0x1, 0x4, 0x9, 0x3ff, 0x15, 0x5, 0x0, 0xa7, 0x7f, 0x80, 0x7fffffff, 0x0, 0x3, 0x8, 0x4, 0x4, 0x1, 0x5, 0x8, 0x8, 0x0, 0xa2, 0x4e0, 0x527, 0x2, 0x5c46fb78, 0x7fffffff, 0x20, 0xff, 0x7fffffff, 0x7, 0x5aaf, 0x6, 0x3ff]}]}}, @TCA_RATE={0x8, 0x5, {0xf0, 0x9}}, @tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0x14, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x2, 0x0, 0x8, 0x0, 0x2}}]}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x90, 0x2, [@TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xf}}, @TCA_ATM_HDR={0x3c, 0x3, "c838da003295368fa03a1e4cebd2d9b24a0555477ddee412813140e3f3036cb6acc03687e8aee9d2be91dd7aee08869064170942e33e"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0xfff1}}, @TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x8, 0x3, "9c18857e"}, @TCA_ATM_HDR={0x28, 0x3, "17bd4b42e137ab2d108b151e025927b6331d4fe25a5ff021839e776cf669838615"}]}}, @TCA_RATE={0x8, 0x5, {0x9, 0x6}}]}, 0x968}}, 0x1) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:22 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:22 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r6, 0xf7e8f6cb5dcde06f, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x110, r6, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xeb4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x22}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x40}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x71}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:22 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:22 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:23 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:23 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r7}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000140)={r7, 0x7, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r7, 0x20}, 0x8) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:23 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x23, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:25 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x240200, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r9, r10, 0x0, 0xedc0) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x20500, 0x0) r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm_plock\x00', 0x69973bfe0ba5f25d, 0x0) r13 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x6, 0x180) r14 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000840)='/dev/cachefiles\x00', 0x10000, 0x0) r15 = getpid() tkill(r15, 0x9) r16 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r16, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r16, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r17 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r16, r17, 0x0, 0xedc0) r18 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r18, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) getsockname$packet(r18, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000940)=0x14) sendmsg$nl_route(r0, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)=@dellink={0x1e0, 0x11, 0x2, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x9804, 0x2110}, [@IFLA_LINK={0x8, 0x5, 0x6}, @IFLA_CARRIER={0x8, 0x21, 0x5}, @IFLA_IFALIASn={0x4}, @IFLA_ADDRESS={0xc, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_XDP={0x178, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x7, 0x4, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @exit, @map={0x18, 0x0, 0x1, 0x0, r3}], &(0x7f0000000280)='syzkaller\x00', 0x12, 0x5e, &(0x7f0000000340)=""/94, 0x41100, 0x7, [], r7, 0x3, r8, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x9, 0x1, 0x8}, 0x10}}, @IFLA_XDP_FD={0x74, 0x1, {0x15, 0xc, &(0x7f00000004c0)=@raw=[@call={0x85, 0x0, 0x0, 0x29}, @ldst={0x3, 0x0, 0x6, 0x1, 0x9, 0x6, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map={0x18, 0x0, 0x1, 0x0, r10}, @call={0x85, 0x0, 0x0, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0xfffffffc}, @generic={0xff, 0x2, 0x2, 0x7f, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @exit], &(0x7f0000000540)='GPL\x00', 0x6, 0x27, &(0x7f00000005c0)=""/39, 0x40f00, 0x0, [], 0x0, 0x3, r12, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x5, 0xff}, 0x10}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_FD={0x74, 0x1, {0x2d, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x0, 0x0, 0x5f923f516bdc6592, 0x3, 0x5, 0xffffffffffffffc0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x44}, @map_val={0x18, 0x1, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x1}, @generic={0x0, 0x4, 0xa, 0x7fff, 0xfff}]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xb3, &(0x7f0000000780)=""/179, 0x100, 0x6, [], 0x0, 0x1, r14, 0x8, &(0x7f0000000880)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x5, 0x1921, 0x7ff}, 0x10}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1c}]}, @IFLA_NET_NS_PID={0x8, 0x13, r15}, @IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x2}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r17}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8000}, @IFLA_MASTER={0x8, 0xa, r19}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r21, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r20}, 0x14) r22 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r22, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r22, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r23 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r22, r23, 0x0, 0xedc0) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000080)=0x65d0, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:25 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) 00:20:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:25 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="bb22cfcb36b5edc4822281ca6b") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) wait4(r1, &(0x7f0000000080), 0x2, &(0x7f00000000c0)) tkill(r0, 0x38) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000180)={0x81, {{0xa, 0x4e24, 0x4, @empty, 0xc774}}, 0x0, 0x1, [{{0xa, 0x4e24, 0xfffff71d, @mcast1, 0x101}}]}, 0x110) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x7, r0, 0x8001, 0x0) 00:20:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x10100, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000140)) times(&(0x7f0000000200)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:25 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000000)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 557.238355] overlayfs: missing 'lowerdir' 00:20:25 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) [ 557.270057] net_ratelimit: 6 callbacks suppressed [ 557.270062] protocol 88fb is buggy, dev hsr_slave_0 [ 557.280740] protocol 88fb is buggy, dev hsr_slave_1 00:20:25 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) [ 557.321924] overlayfs: missing 'lowerdir' 00:20:26 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [], 0xf603000000000500}) [ 557.379128] overlayfs: missing 'lowerdir' 00:20:26 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x800, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x35b1178163b77fb5) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000280)=0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x40805, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x5, 0x4, 0xf9, 0x7f, 0x0, 0x8, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x67, 0x2, @perf_config_ext={0x3, 0x4}, 0x4, 0x70f, 0x401, 0x8, 0x7, 0x0, 0x6}, r7, 0x4, r8, 0xc77d7a67c1019f4c) [ 557.468591] overlayfs: missing 'workdir' 00:20:26 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [], 0xf603000000000500}) [ 557.578687] overlayfs: missing 'workdir' 00:20:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$setopts(0x4206, r3, 0x9, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:28 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [], 0xf603000000000500}) 00:20:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:28 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40040, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x8001, 0x1, 0x11d3, 0xec}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0xfff, 0x4, 0x7, 0x0, r4}, 0x10) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x8000, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r8}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000140)={r8, 0x7, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={r8, @in6={{0xa, 0x4e23, 0x9, @empty, 0x5}}, 0x1, 0x800, 0x7ff, 0x8a}, 0x98) 00:20:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)="3c3160483885f60312492cf1a2b8f60ddaf9cd3663b68113ca82b6ebe1cea5555ad10038af512c93dcbac5561c3b6bf39ad550917c6c494e5fc9ff9a0e1e59820158253ccdd6e7f7356a3654eb28dc3597d97e6b699ddcef69f0a1bb7de2bde9ff72c21ea59444425e1d8922b1e025741933447ee4d283c14a8cb8000f6bff648eddbe685c227d6c8d3c43d33b668398ec8dc35a620e93c90e4ed7a22ebd8f8c67d5c1c6fd52c1b80e8c4811878f42ca28070fb89128de3eb77204b3f9010465f45916bd5574fd026f84588cd2cdc5424821df505a", 0x5a) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x400000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e2a, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/22}}], 0x700, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000380)={'gretap0\x00', {0x2, 0x4e22, @remote}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x200000000000018d, &(0x7f00000003c0)=[{0x4, 0x5, 0x0, 0x80000000}]}, 0xff44) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000480)=0x9, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r2) sendfile(r0, r0, &(0x7f0000000300), 0x4) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x100000000, 0x105082) unshare(0x40000) r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x80) pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xe1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x100000042800) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80003) [ 560.194903] overlayfs: missing 'workdir' 00:20:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:28 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:28 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ptrace(0x4208, r3) 00:20:29 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 560.314301] overlayfs: missing 'lowerdir' [ 560.318898] audit: type=1400 audit(1569457228.947:130): avc: denied { map } for pid=15902 comm="syz-executor.0" path="/dev/loop6" dev="devtmpfs" ino=216 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 00:20:29 executing program 1: r0 = socket(0x2, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101000, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r9}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000140)={r9, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000000c0)={r9, 0x20, "a0b57066827df912e3334190acf91db13c130dd446bcf8b60862403f10f915ec"}, &(0x7f0000000140)=0x28) sendfile(r3, r4, 0x0, 0xedc0) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0x2f) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:29 executing program 0: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x4000) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 560.439874] overlayfs: missing 'lowerdir' 00:20:29 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 560.532182] overlayfs: missing 'lowerdir' 00:20:29 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:29 executing program 0: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x4000) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 560.617448] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 560.632162] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 00:20:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:29 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x4, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000080)=0xf829, 0x2) 00:20:29 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 560.809439] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 560.818219] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 00:20:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) getsockname$unix(r2, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x10, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r3, 0x3, 0x80000001) 00:20:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_FWMARK={0x8}]]}}}]}, 0x40}}, 0x0) 00:20:32 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:32 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = socket$inet6(0xa, 0x9d935040e6b0aec9, 0x3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$cont(0x1f, r4, 0x7, 0x1ff) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="8335d2fe5c7fcf9575d8c3b97911c12fd11214591f15001568c79e81538d8e8341e1b48b2e92e060905296b2847dda75b7b5e51cc40bfcfb80340f711e5b5df3442505a6cea50f58e5c512456bf964e7755052bf1a1288b2fb6d5cab1546a56f561f9a551b95db3bd8657c097851a5a39c2236c60c562381204fb4d7d7dd00bb59be981651131f9fdd77c7961e2979333403d8", 0x93}, {&(0x7f00000000c0)="b476a68a1aa7384151f62e3fe72182e7d90932350791cc31a8c14615b440fa7f3134b04ef1f296d70f21242b5e111206008cbe82f84c3d57ced7b96cb518100ab552e3b6ad537697d42dc2f5c58dc5d92ebed947e3eafcc20b75cd57a3808f707c4c7f986326f9be55b49f2b7814c2122b8a9ebbe7d2b01daf927278cea19bcfbbfc8c9d9bc0edd2da86232e9f77d1d43cf2ab942dec6d02a74a266a126b6c3a8c1b9ccc0ef913c3952b6493fe853073b36e084cdd7a107a7f342579d24649e3122a275496e0ef904589caa2ca89ebeb8da62f1093b8320764b6efa32123c40975ff88a4d3de", 0xe6}], 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) fcntl$getownex(r5, 0x10, &(0x7f0000000280)={0x0, 0x0}) ptrace$cont(0x18, r6, 0x1f, 0xfec) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)=0x0) ptrace$poke(0x5, r7, &(0x7f0000000240), 0x6) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) flock(r8, 0xa) ptrace$cont(0x1f, r0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r9, r10, 0x0, 0xedc0) signalfd4(r9, &(0x7f0000000340)={0x7f}, 0x8, 0x80000) 00:20:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='[9\\:cgroupkeyring-\x00', &(0x7f0000000100)='cpuset\'}^%(+\x00', &(0x7f0000000140)=',mime_type\x00', &(0x7f0000000180)='security*\')cgroup\x0emime_type:\x00'], &(0x7f0000000280)=[&(0x7f0000000200)='[,&:\x00', &(0x7f0000000240)='wlan1proc\x00'], 0x100) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000340)=""/61) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r2, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x2) r3 = syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0xfe00000000000000, 0x4400) fstat(r3, &(0x7f00000003c0)) 00:20:32 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6004}}) [ 563.448261] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 563.457052] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 00:20:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x200, 0x24) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bond0\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:20:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) tkill(r0, 0x2f) [ 563.510025] protocol 88fb is buggy, dev hsr_slave_0 [ 563.515185] protocol 88fb is buggy, dev hsr_slave_1 00:20:32 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x20000, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x4}, 0x68) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000100)=0x3, 0xfffffffffffffd25) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000001c0)={0x6, {{0xa, 0x4e24, 0x9df, @mcast2, 0x100000ff}}, {{0xa, 0x6e22, 0x2007, @remote, 0x1000006a}}}, 0x108) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) mq_open(&(0x7f0000000080)='veth0_to_bond\x00', 0x1, 0x14a, &(0x7f00000000c0)={0x6, 0x3, 0x7f, 0x4, 0x81, 0x10001, 0xa7, 0x401}) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, 0x0, 0xedc0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r8, r9, 0x0, 0xedc0) ioctl$KVM_PPC_ALLOCATE_HTAB(r9, 0xc004aea7, &(0x7f0000000340)=0xc) ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f0000000140)) 00:20:32 executing program 5: r0 = socket(0x400000010, 0x803, 0x0) process_vm_writev(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002240)=""/224, 0xe0}], 0x1, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0x975}, {&(0x7f0000000fc0)=""/4096, 0x76}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x204}, {&(0x7f0000000340)=""/22, 0x15}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 00:20:32 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40200, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000000c0)=""/203) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:32 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:32 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2001, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:32 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) r9 = getpid() tkill(r9, 0x9) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100108}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=@bridge_dellink={0x15c, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r8, 0x80001, 0x1}, [@IFLA_PHYS_PORT_ID={0x24, 0x22, "c97e5d0e1c9a74d0fce03512183f27cba4d5ae42aaf677c2b8e15fd6a8"}, @IFLA_VFINFO_LIST={0xf4, 0x16, [{0x68, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0xc6d}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7f, 0x6e7, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0xfffffffd, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x8bd, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x2}}]}, {0x28, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xf7da, 0x401}}, @IFLA_VF_TRUST={0xc, 0x9, {0xab, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x2}}]}, {0x60, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xc00}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x401, 0x1f}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0xffffffff}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6e55, 0x301}}]}]}, @IFLA_NET_NS_PID={0x8, 0x13, r9}, @IFLA_PHYS_SWITCH_ID={0x18, 0x24, "eb8fe69190f3d79df492e779d355693f7205fdf9"}, @IFLA_IFALIASn={0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x100) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1a8, 0x2040, 0x0) 00:20:35 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0xa0000) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) ptrace$cont(0x7, r0, 0x100000000, 0x1) 00:20:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:35 executing program 0 (fault-call:5 fault-nth:0): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 566.445892] FAULT_INJECTION: forcing a failure. [ 566.445892] name failslab, interval 1, probability 0, space 0, times 0 [ 566.462185] CPU: 0 PID: 16031 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 566.469311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.478654] Call Trace: [ 566.481268] dump_stack+0x138/0x197 [ 566.484887] should_fail.cold+0x10f/0x159 [ 566.489037] should_failslab+0xdb/0x130 [ 566.493004] __kmalloc_track_caller+0x2ec/0x790 [ 566.497656] ? __sb_end_write+0xc1/0x100 [ 566.501701] ? strndup_user+0x62/0xf0 [ 566.505503] memdup_user+0x26/0xa0 [ 566.509052] strndup_user+0x62/0xf0 [ 566.512662] SyS_mount+0x3c/0x120 [ 566.516185] ? copy_mnt_ns+0x8c0/0x8c0 [ 566.520052] do_syscall_64+0x1e8/0x640 [ 566.523921] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 566.528774] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 566.533942] RIP: 0033:0x459a29 [ 566.537110] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:20:35 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) accept$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x15e) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = getpid() tkill(r4, 0x9) r5 = getpid() tkill(r5, 0x9) ptrace$setopts(0x4206, r5, 0x3, 0x100000) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x46, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r5, 0x3, &(0x7f00000005c0)="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") ptrace$cont(0x1f, r3, 0x0, 0x0) 00:20:35 executing program 0 (fault-call:5 fault-nth:1): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 566.544800] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 566.552049] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 566.559299] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 566.566568] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 566.573822] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:20:35 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x28182) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x100000, 0x44, 0x5, 0x4, 0x0, [{0xfc, 0x2, 0x0, [], 0x3f}, {0x5, 0x2, 0x7f, [], 0x7}, {0x0, 0x9, 0xaf, [], 0xde}, {0x9c, 0x8, 0x5, [], 0x3f}, {0x7, 0x5, 0x6, [], 0x6}, {0x40, 0x8, 0x3d}, {0x8, 0xc0, 0x6, [], 0x7}, {0x8, 0x6, 0x2, [], 0x5}, {0x3, 0x20, 0x0, [], 0x6}, {0x0, 0x1f, 0x7f, [], 0x8}, {0x3, 0x7f, 0xeb, [], 0x9}, {0x0, 0x7, 0x1}, {0x1, 0x0, 0x81, [], 0x6}, {0x80, 0x5, 0x5, [], 0x5}, {0x6, 0x80, 0x9, [], 0x1f}, {0x81, 0x1, 0x2}, {0x9, 0xa7, 0x19, [], 0x7f}, {0x1, 0x9, 0x0, [], 0x1}, {0xff, 0xc0, 0x1f, [], 0x63}, {0x0, 0x5, 0x1, [], 0x9}, {0xa2, 0x0, 0x8b, [], 0x4}, {0xaf, 0x1f, 0x9, [], 0x4}, {0x80, 0x4, 0xf8, [], 0x8}, {0x6, 0x5f, 0x8}]}}) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) rt_sigreturn() ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 566.658732] FAULT_INJECTION: forcing a failure. [ 566.658732] name failslab, interval 1, probability 0, space 0, times 0 [ 566.676212] CPU: 0 PID: 16046 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 566.683300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.692747] Call Trace: [ 566.695336] dump_stack+0x138/0x197 [ 566.698964] should_fail.cold+0x10f/0x159 [ 566.703101] should_failslab+0xdb/0x130 [ 566.707059] __kmalloc_track_caller+0x2ec/0x790 [ 566.711724] ? kasan_check_write+0x14/0x20 [ 566.715953] ? strndup_user+0x62/0xf0 [ 566.719733] memdup_user+0x26/0xa0 [ 566.723256] strndup_user+0x62/0xf0 [ 566.726865] SyS_mount+0x6b/0x120 [ 566.730311] ? copy_mnt_ns+0x8c0/0x8c0 [ 566.734442] do_syscall_64+0x1e8/0x640 [ 566.738308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 566.743144] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 566.748320] RIP: 0033:0x459a29 [ 566.751487] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 566.759196] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 566.766512] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 566.773774] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 566.781033] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 566.788302] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:20:35 executing program 0 (fault-call:5 fault-nth:2): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40200, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000000c0)=""/203) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:35 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x8, 0xff, 0x1, 0x2c, 0x0, 0x6e5c25ed, 0x11028, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040)}, 0x10202, 0x5, 0x3, 0x5, 0x23, 0xa, 0x5}, r0, 0xf, r2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) r5 = msgget$private(0x0, 0x200) msgctl$IPC_STAT(r5, 0x2, 0x0) msgctl$IPC_INFO(r5, 0x3, &(0x7f0000000100)=""/82) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r4, 0x0, 0x0) [ 567.010149] FAULT_INJECTION: forcing a failure. [ 567.010149] name failslab, interval 1, probability 0, space 0, times 0 [ 567.021703] CPU: 1 PID: 16061 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 567.028746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.038135] Call Trace: [ 567.040718] dump_stack+0x138/0x197 [ 567.044343] should_fail.cold+0x10f/0x159 [ 567.048484] should_failslab+0xdb/0x130 [ 567.052459] kmem_cache_alloc_trace+0x2e9/0x790 [ 567.057121] ? kasan_check_write+0x14/0x20 [ 567.061352] ? _copy_from_user+0x99/0x110 [ 567.065489] copy_mount_options+0x5c/0x2f0 [ 567.069714] SyS_mount+0x87/0x120 [ 567.073179] ? copy_mnt_ns+0x8c0/0x8c0 [ 567.077117] do_syscall_64+0x1e8/0x640 [ 567.081009] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 567.085840] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 567.091020] RIP: 0033:0x459a29 [ 567.094199] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 567.101907] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 00:20:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:35 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') socket$inet6(0xa, 0x3, 0x6c) sendfile(r2, r3, 0x0, 0xedc0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x3, 0xfffffffffffffffc, 0x8}}, 0x28) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x4, 0x0) [ 567.109175] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 567.116439] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 567.123708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 567.130972] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:20:38 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, &(0x7f0000000000), 0xe1000006, &(0x7f0000000040)) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={[], 0x0, 0x0, 0x0, 0x0, 0x135, r1}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:38 executing program 0 (fault-call:5 fault-nth:3): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 569.484130] FAULT_INJECTION: forcing a failure. [ 569.484130] name failslab, interval 1, probability 0, space 0, times 0 [ 569.496013] CPU: 0 PID: 16084 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 569.506791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.516142] Call Trace: [ 569.518747] dump_stack+0x138/0x197 [ 569.522363] should_fail.cold+0x10f/0x159 [ 569.526500] should_failslab+0xdb/0x130 [ 569.530468] kmem_cache_alloc+0x2d7/0x780 [ 569.534600] ? fs_reclaim_acquire+0x20/0x20 [ 569.538905] ? find_held_lock+0x35/0x130 [ 569.542950] getname_flags+0xcb/0x580 [ 569.546744] user_path_at_empty+0x2f/0x50 [ 569.550872] do_mount+0x12b/0x27d0 [ 569.554399] ? copy_mount_options+0x5c/0x2f0 [ 569.558801] ? rcu_read_lock_sched_held+0x110/0x130 [ 569.563829] ? copy_mount_string+0x40/0x40 [ 569.568053] ? _copy_from_user+0x99/0x110 [ 569.572182] ? copy_mount_options+0x1fe/0x2f0 [ 569.576673] SyS_mount+0xab/0x120 [ 569.580113] ? copy_mnt_ns+0x8c0/0x8c0 [ 569.584017] do_syscall_64+0x1e8/0x640 [ 569.587886] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 569.592733] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 569.597919] RIP: 0033:0x459a29 [ 569.601091] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 569.608792] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 569.616068] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 569.623337] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 00:20:38 executing program 0 (fault-call:5 fault-nth:4): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 569.630595] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 569.637844] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 569.686319] FAULT_INJECTION: forcing a failure. [ 569.686319] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 569.698175] CPU: 0 PID: 16099 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 569.705192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.714547] Call Trace: [ 569.717156] dump_stack+0x138/0x197 [ 569.720795] should_fail.cold+0x10f/0x159 [ 569.724950] __alloc_pages_nodemask+0x1d6/0x7a0 [ 569.729631] ? fs_reclaim_acquire+0x20/0x20 [ 569.733957] ? __alloc_pages_slowpath+0x2930/0x2930 [ 569.738997] cache_grow_begin+0x80/0x400 [ 569.743060] kmem_cache_alloc+0x6a6/0x780 [ 569.747281] ? fs_reclaim_acquire+0x20/0x20 [ 569.752048] getname_flags+0xcb/0x580 [ 569.755870] user_path_at_empty+0x2f/0x50 [ 569.760069] do_mount+0x12b/0x27d0 [ 569.763658] ? copy_mount_options+0x5c/0x2f0 [ 569.768175] ? rcu_read_lock_sched_held+0x110/0x130 [ 569.773202] ? copy_mount_string+0x40/0x40 [ 569.777435] ? _copy_from_user+0x99/0x110 [ 569.781592] ? copy_mount_options+0x1fe/0x2f0 [ 569.786090] SyS_mount+0xab/0x120 [ 569.789548] ? copy_mnt_ns+0x8c0/0x8c0 [ 569.793701] do_syscall_64+0x1e8/0x640 [ 569.797589] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 569.802526] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 569.807722] RIP: 0033:0x459a29 [ 569.810905] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 569.818781] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 569.826054] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a 00:20:38 executing program 0 (fault-call:5 fault-nth:5): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 569.833325] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 569.840768] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 569.848245] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:20:38 executing program 1: add_key(&(0x7f0000000180)='asymmetric\x00\x00\xbeM\x00\x00\x00\x00\x00\x00\x00\x16\xfe\xae\x12\x18\x93\x1b\x7fb\xf1\x98\x9ew\x9c\xb3\xe1\x99\x01^o\"M\xc7\x86\xb7\x8bidb\xc7\xde\xc5\x8c\xd0_\xa4\'s\xa4\xaf\np=c\xe1\x96 \xfd\x16[]\x86.&5\x05\x9c@\x11Rt`\x17\xa5\x1f\x9d\x03]\xcfA\x97\xd2e\xf6\xf5\xd2F\xb1B\x12\xdbi\xe7gWD \xfb\x11\xa70\x8e\xb2\x93\x96}\xbdZr\x9b\xb8\xc6\x83:\x85N 6\xd4\xe9\xbe\x85\xc8\\\xd9\'\x0f\xefL\xef\'\x068\xe5l\x14Bc\xec\xf6\x908\xc9l\x9d8\xf6\x86h\xc2\x15\x13\xe1\x9c\x13\x11\xee\xa8\xee\x94\xc5\x96\t\x98}\x03<\xa3\xc8\xadbM\xbc\\\x89X\xaa\xa4\xe9\x15\x8cXP\xc6\"\x8a\"\xd0\xad\xaa\xbe\x8b\xb5f\xc0i\xba\xba\xa6N0\xafm\x87\x8c', 0x0, &(0x7f00000000c0)="3080af78", 0x4, 0xfffffffffffffffd) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0xc) set_tid_address(&(0x7f0000000080)) 00:20:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40200, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000000c0)=""/203) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:38 executing program 1: add_key(&(0x7f0000000180)='asymmetric\x00\x00\xbeM\x00\x00\x00\x00\x00\x00\x00\x16\xfe\xae\x12\x18\x93\x1b\x7fb\xf1\x98\x9ew\x9c\xb3\xe1\x99\x01^o\"M\xc7\x86\xb7\x8bidb\xc7\xde\xc5\x8c\xd0_\xa4\'s\xa4\xaf\np=c\xe1\x96 \xfd\x16[]\x86.&5\x05\x9c@\x11Rt`\x17\xa5\x1f\x9d\x03]\xcfA\x97\xd2e\xf6\xf5\xd2F\xb1B\x12\xdbi\xe7gWD \xfb\x11\xa70\x8e\xb2\x93\x96}\xbdZr\x9b\xb8\xc6\x83:\x85N 6\xd4\xe9\xbe\x85\xc8\\\xd9\'\x0f\xefL\xef\'\x068\xe5l\x14Bc\xec\xf6\x908\xc9l\x9d8\xf6\x86h\xc2\x15\x13\xe1\x9c\x13\x11\xee\xa8\xee\x94\xc5\x96\t\x98}\x03<\xa3\xc8\xadbM\xbc\\\x89X\xaa\xa4\xe9\x15\x8cXP\xc6\"\x8a\"\xd0\xad\xaa\xbe\x8b\xb5f\xc0i\xba\xba\xa6N0\xafm\x87\x8c', 0x0, &(0x7f00000000c0)="3080af78", 0x4, 0xfffffffffffffffd) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0xc) set_tid_address(&(0x7f0000000080)) [ 570.094258] FAULT_INJECTION: forcing a failure. [ 570.094258] name failslab, interval 1, probability 0, space 0, times 0 [ 570.110382] CPU: 1 PID: 16109 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 570.117452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.126812] Call Trace: [ 570.129410] dump_stack+0x138/0x197 [ 570.133051] should_fail.cold+0x10f/0x159 [ 570.137214] should_failslab+0xdb/0x130 [ 570.141206] kmem_cache_alloc+0x2d7/0x780 [ 570.145361] ? lock_downgrade+0x6e0/0x6e0 [ 570.149512] alloc_vfsmnt+0x28/0x7d0 [ 570.153233] vfs_kern_mount.part.0+0x2a/0x3d0 [ 570.157737] do_mount+0x417/0x27d0 [ 570.161277] ? copy_mount_options+0x5c/0x2f0 [ 570.165684] ? rcu_read_lock_sched_held+0x110/0x130 [ 570.170794] ? copy_mount_string+0x40/0x40 [ 570.175034] ? copy_mount_options+0x1fe/0x2f0 [ 570.179528] SyS_mount+0xab/0x120 [ 570.182979] ? copy_mnt_ns+0x8c0/0x8c0 [ 570.186871] do_syscall_64+0x1e8/0x640 [ 570.190756] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 570.195629] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 570.200814] RIP: 0033:0x459a29 [ 570.204002] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 570.211709] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 570.219064] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 570.226326] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 570.233594] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 00:20:38 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4d, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) syz_read_part_table(0x0, 0xaaaaaaaaaaaac04, &(0x7f0000000080)=[{&(0x7f0000000000)="02000500000a00000000ff07000000000000000000000000000000000000000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0xc0c0583b, 0x0) ioctl(0xffffffffffffffff, 0x4d3b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r3 = getpid() tkill(r3, 0x9) syz_open_procfs(r3, &(0x7f00000000c0)='net/sco\x00') r4 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) socket$inet(0x10, 0x3, 0xc) 00:20:38 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) ioctl$TCSETX(r3, 0x5433, &(0x7f0000000040)={0x0, 0x1, [0xffff, 0x2, 0x5e, 0x1, 0x6], 0x9}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) exit_group(0x40) [ 570.240857] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:20:38 executing program 0 (fault-call:5 fault-nth:6): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 570.358042] FAULT_INJECTION: forcing a failure. [ 570.358042] name failslab, interval 1, probability 0, space 0, times 0 [ 570.369376] CPU: 1 PID: 16126 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 570.376397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.385753] Call Trace: [ 570.388360] dump_stack+0x138/0x197 [ 570.392262] should_fail.cold+0x10f/0x159 [ 570.396447] should_failslab+0xdb/0x130 [ 570.400432] __kmalloc_track_caller+0x2ec/0x790 [ 570.405106] ? kstrdup_const+0x48/0x60 [ 570.408994] kstrdup+0x3a/0x70 [ 570.412189] kstrdup_const+0x48/0x60 [ 570.415908] alloc_vfsmnt+0xe5/0x7d0 [ 570.419711] vfs_kern_mount.part.0+0x2a/0x3d0 [ 570.424207] do_mount+0x417/0x27d0 [ 570.427752] ? copy_mount_string+0x40/0x40 [ 570.431984] ? copy_mount_options+0x151/0x2f0 [ 570.436477] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 570.441319] ? copy_mount_options+0x1fe/0x2f0 [ 570.445810] SyS_mount+0xab/0x120 [ 570.449258] ? copy_mnt_ns+0x8c0/0x8c0 [ 570.453148] do_syscall_64+0x1e8/0x640 [ 570.457031] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 570.461874] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 570.467930] RIP: 0033:0x459a29 [ 570.471117] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 570.478821] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 570.486089] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 570.493355] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 570.500620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 570.507905] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:20:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xa25, 0x800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x80, 0x7fff, 0xee0b, 0x2, 0xfffffffffffffffb, r1}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r2, 0x0, 0x0) 00:20:41 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4d, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) syz_read_part_table(0x0, 0xaaaaaaaaaaaac04, &(0x7f0000000080)=[{&(0x7f0000000000)="02000500000a00000000ff07000000000000000000000000000000000000000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0xc0c0583b, 0x0) ioctl(0xffffffffffffffff, 0x4d3b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r3 = getpid() tkill(r3, 0x9) syz_open_procfs(r3, &(0x7f00000000c0)='net/sco\x00') r4 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) socket$inet(0x10, 0x3, 0xc) 00:20:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:41 executing program 0 (fault-call:5 fault-nth:7): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000280)=""/25, 0x19}, {&(0x7f0000001440)=""/31, 0x1f}], 0x5, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000280)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x680a40, 0x0) getdents(0xffffffffffffff9c, &(0x7f00000000c0)=""/159, 0x9f) ptrace$cont(0x1f, r2, 0x0, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x9, {0xb584, 0x99, 0xc16, 0x3ff}, {0x4, 0x5, 0x6, 0x8}, {0x401, 0x9}}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x3) [ 572.531482] FAULT_INJECTION: forcing a failure. [ 572.531482] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 572.552580] CPU: 1 PID: 16137 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 572.559644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.569004] Call Trace: [ 572.571600] dump_stack+0x138/0x197 [ 572.575242] should_fail.cold+0x10f/0x159 [ 572.579403] ? __might_sleep+0x93/0xb0 [ 572.583309] __alloc_pages_nodemask+0x1d6/0x7a0 [ 572.587991] ? __alloc_pages_slowpath+0x2930/0x2930 [ 572.593024] alloc_pages_current+0xec/0x1e0 [ 572.597354] __get_free_pages+0xf/0x40 [ 572.601249] get_zeroed_page+0x11/0x20 [ 572.605135] mount_fs+0x1cc/0x2a1 [ 572.608592] vfs_kern_mount.part.0+0x5e/0x3d0 [ 572.613094] do_mount+0x417/0x27d0 [ 572.616634] ? copy_mount_options+0x5c/0x2f0 [ 572.621079] ? rcu_read_lock_sched_held+0x110/0x130 [ 572.626117] ? copy_mount_string+0x40/0x40 [ 572.630354] ? copy_mount_options+0x1fe/0x2f0 [ 572.634853] SyS_mount+0xab/0x120 [ 572.638304] ? copy_mnt_ns+0x8c0/0x8c0 [ 572.642212] do_syscall_64+0x1e8/0x640 [ 572.646102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 572.650958] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 572.656146] RIP: 0033:0x459a29 [ 572.659334] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 572.667040] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 572.674307] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a 00:20:41 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, @perf_bp={0x0}, 0x4d304}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000140)={0x2d, 0xff}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000180)=0x8, 0x4) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)="580000001400192340834b80043f679a10ffff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0ff00ff050000000010000100090ac2d00b0ccbd8", 0x58}], 0x1) r4 = dup2(r0, r3) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f00000001c0)={0xffffffff, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) r5 = perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x0, 0x0}, 0x30) socket$alg(0x26, 0x5, 0x0) 00:20:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) fcntl$getown(r2, 0x9) ptrace$setopts(0x4200, r1, 0xffffffffffffffff, 0x100000) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x5, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 572.681578] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 572.688846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 572.696114] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 572.870036] protocol 88fb is buggy, dev hsr_slave_0 [ 572.875191] protocol 88fb is buggy, dev hsr_slave_1 00:20:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40200, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0xc000, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000180)=0x3) r2 = add_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="9f076553a4647d3371613314795c390df8aecccb434b8f0d24621fceb4c536b0b7abfd3ae523088772487a282f13fec2d205b68bea17460782f3536f828a7e0e3ee7d557e0fe395f60ffb65cb6a758c805e54b7978e78e245b22bbcc688261fec448c923be965572456216033197", 0x6e, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000001c0)="04", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r3, r4}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00'}}) r5 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="b53b26f6240ccaf15c4884ba60ccc80555cd5cbe46f1e10024f9176f2699a35fc6d4b2af233e3fad6aa0d07c8e6941f3d5972eee87a5f5fcd522ea0a2f5397d886b3253a5c82ddc742c8acdd623f42c58bf83dfa8b37d78de184701f3824806eddfea5c70936bc8da7c4c918ff4a3708224c1c4828d76ed25267ea1240865f0947f65344420152fdc9596eb904d1b4e37e6483a6055fb6e2b4c2b26069c09a869886cf51dee891c0d695b686463f760c864a79a6183cd9f28104cef9bddf70c82f652e7a0f951410aac627e5df4fcfcc96c60020f12b6de1cf0808ff26990efb8777d77697a5303b203e8945b5b5064700f02fba7d1a3c", 0xf7, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r2, r4, r5}, &(0x7f0000000500)=""/177, 0xb1, &(0x7f0000000700)={&(0x7f00000005c0)={'crc32c-intel\x00'}, &(0x7f0000000600)="703f2815720e0c554650c7ae60d919c462e045cace55f1455c609e88b5ca0ec3bfcb438a342e19435e564ddf5a452736f4fbb882063058d070f8a71479d3da30c86db1d3ceaeef2db6b97aeab906cbb38c445c116c95653a9de5814e569b09b1a2349805ee7e3f7698872c348bdb76d92f0a320a1e05aa84ba6cb32dd00c21de08416133edf97a21f6c04d68dbf835ba6048fe34ece0432f957704913a24818cbe011e0e6d33039e0407b0dbb8443f0164012e0e6e251caf330c46a9e021ed3dcf25f9672b293f0ec480334577d15cbfde6517bda4849e29b57d228cbbb22de0ab0c0b8f010b2c08d77a28db183e900be67736", 0xf3}) ptrace$cont(0x18, r0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4240, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f0000000080)=""/144) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x4, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x800000035263e8) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) read(r2, &(0x7f0000000040)=""/147, 0x93) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0xfffffffd, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:41 executing program 0 (fault-call:5 fault-nth:8): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\xd0\x0e\xa3[\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x5, 0xe, &(0x7f00000000c0)=0x200}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) getsockopt$inet_mreqn(r5, 0x0, 0x41f29929b31db57b, &(0x7f0000000100)={@dev, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000180)={@mcast2, 0x21, r6}) r7 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x301081) fcntl$setpipe(r7, 0x407, 0x5bb6) sendfile(r1, r0, 0x0, 0x100000000000002) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0xfffffff7, 0x3, [], &(0x7f0000000000)=0xff}) [ 573.136988] FAULT_INJECTION: forcing a failure. [ 573.136988] name failslab, interval 1, probability 0, space 0, times 0 [ 573.154258] CPU: 1 PID: 16170 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 573.161338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.170695] Call Trace: [ 573.173294] dump_stack+0x138/0x197 [ 573.176934] should_fail.cold+0x10f/0x159 [ 573.181092] should_failslab+0xdb/0x130 [ 573.185074] kmem_cache_alloc_trace+0x2e9/0x790 [ 573.189747] ? lock_downgrade+0x6e0/0x6e0 [ 573.193905] sget_userns+0xfe/0xc30 [ 573.197528] ? get_anon_bdev+0x1c0/0x1c0 [ 573.201587] ? get_anon_bdev+0x1c0/0x1c0 [ 573.205650] ? get_anon_bdev+0x1c0/0x1c0 [ 573.209710] sget+0xd6/0x120 [ 573.212735] ? selinux_sb_copy_data+0x21e/0x390 [ 573.217412] ? ovl_put_super+0x4b0/0x4b0 [ 573.221474] mount_nodev+0x31/0xf0 [ 573.225024] ovl_mount+0x2d/0x40 [ 573.228389] mount_fs+0x97/0x2a1 [ 573.231759] vfs_kern_mount.part.0+0x5e/0x3d0 [ 573.236255] do_mount+0x417/0x27d0 [ 573.239791] ? copy_mount_options+0x5c/0x2f0 [ 573.244185] ? rcu_read_lock_sched_held+0x110/0x130 [ 573.249185] ? copy_mount_string+0x40/0x40 [ 573.253407] ? copy_mount_options+0x1fe/0x2f0 [ 573.257887] SyS_mount+0xab/0x120 [ 573.261327] ? copy_mnt_ns+0x8c0/0x8c0 [ 573.265205] do_syscall_64+0x1e8/0x640 [ 573.269084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.273933] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 573.279156] RIP: 0033:0x459a29 00:20:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigprocmask(0x1, &(0x7f0000000140)={0xfff}, &(0x7f0000000180), 0x8) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000100)={0x30, 0x1, 0x0, 0x7fffffff, 0x8001, 0x9, 0x7fff, 0x600000000}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x102402, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000000c0)=0x8000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x1103c2) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000001c0)={'ip6tnl0\x00', {0x2, 0x4e21, @local}}) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000000)={0x3, 0xb7, "e65c2c90f12eabb5c50d9c053479f1d077edf205810a4a6c788074a821e85484559ddf48cccf8657bb51fc89768ee81ecf334afb85c6a6280a14c1350bb96647aa3b79f80bc7412566001e501a092a3ce326e361f2a0f5a71d53c6883d0759cfad3825e6d9858253fe8b007b3816e84d51a79ebb6d9ca2d13a58d7a3abb4ef673cf73f80aa58bf2e9958dd032f8cfc79475a4a2e27eda189fe0ce588114efe132e4ae86f558ba7c65a8c418f06e830ffcceed403d09ccd"}) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r2, 0x0, 0x0) [ 573.282332] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 573.293162] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 573.300411] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 573.307661] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 573.314920] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 573.322182] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:20:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x0, 0x258fa1b29bcdf6d0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:42 executing program 0 (fault-call:5 fault-nth:9): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 573.380123] audit: type=1400 audit(1569457242.007:131): avc: denied { map } for pid=16178 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 573.485726] FAULT_INJECTION: forcing a failure. [ 573.485726] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 573.497878] CPU: 0 PID: 16197 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 573.504898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.504903] Call Trace: [ 573.504919] dump_stack+0x138/0x197 [ 573.504936] should_fail.cold+0x10f/0x159 [ 573.524656] ? __might_sleep+0x93/0xb0 [ 573.528567] __alloc_pages_nodemask+0x1d6/0x7a0 [ 573.533224] ? check_preemption_disabled+0x3c/0x250 [ 573.538221] ? __alloc_pages_slowpath+0x2930/0x2930 [ 573.543229] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 573.548661] ? __alloc_pages_nodemask+0x639/0x7a0 [ 573.553491] alloc_pages_current+0xec/0x1e0 [ 573.557798] __get_free_pages+0xf/0x40 [ 573.561687] get_zeroed_page+0x11/0x20 [ 573.565556] selinux_sb_copy_data+0x2a/0x390 [ 573.569952] security_sb_copy_data+0x75/0xb0 [ 573.574351] mount_fs+0x1ec/0x2a1 [ 573.577788] vfs_kern_mount.part.0+0x5e/0x3d0 [ 573.582269] do_mount+0x417/0x27d0 [ 573.585810] ? copy_mount_options+0x5c/0x2f0 [ 573.590216] ? rcu_read_lock_sched_held+0x110/0x130 [ 573.595234] ? copy_mount_string+0x40/0x40 [ 573.599554] ? copy_mount_options+0x1fe/0x2f0 [ 573.604036] SyS_mount+0xab/0x120 [ 573.607471] ? copy_mnt_ns+0x8c0/0x8c0 [ 573.611345] do_syscall_64+0x1e8/0x640 [ 573.615229] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.620062] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 573.625320] RIP: 0033:0x459a29 [ 573.628498] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 573.637230] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 573.644570] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 573.651822] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 573.659071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 573.666328] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 573.680046] protocol 88fb is buggy, dev hsr_slave_0 [ 573.685184] protocol 88fb is buggy, dev hsr_slave_1 00:20:42 executing program 0 (fault-call:5 fault-nth:10): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 573.861608] audit: type=1400 audit(1569457242.497:132): avc: denied { map } for pid=16203 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 573.902151] FAULT_INJECTION: forcing a failure. [ 573.902151] name failslab, interval 1, probability 0, space 0, times 0 [ 573.929368] CPU: 0 PID: 16206 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 573.936438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.945804] Call Trace: [ 573.948409] dump_stack+0x138/0x197 [ 573.952061] should_fail.cold+0x10f/0x159 [ 573.956488] should_failslab+0xdb/0x130 [ 573.960483] __kmalloc+0x2f0/0x7a0 [ 573.964041] ? __list_lru_init+0x6b/0x660 [ 573.969248] __list_lru_init+0x6b/0x660 [ 573.973240] sget_userns+0x4e0/0xc30 [ 573.976966] ? get_anon_bdev+0x1c0/0x1c0 [ 573.981033] ? get_anon_bdev+0x1c0/0x1c0 [ 573.985098] sget+0xd6/0x120 [ 573.988138] ? selinux_sb_copy_data+0x21e/0x390 [ 573.992814] ? ovl_put_super+0x4b0/0x4b0 [ 573.996876] mount_nodev+0x31/0xf0 [ 574.000444] ovl_mount+0x2d/0x40 [ 574.003860] mount_fs+0x97/0x2a1 [ 574.007234] vfs_kern_mount.part.0+0x5e/0x3d0 [ 574.011738] do_mount+0x417/0x27d0 [ 574.015285] ? copy_mount_options+0x5c/0x2f0 [ 574.019708] ? rcu_read_lock_sched_held+0x110/0x130 [ 574.024732] ? copy_mount_string+0x40/0x40 [ 574.028981] ? copy_mount_options+0x1fe/0x2f0 [ 574.033490] SyS_mount+0xab/0x120 [ 574.036960] ? copy_mnt_ns+0x8c0/0x8c0 [ 574.040857] do_syscall_64+0x1e8/0x640 [ 574.044750] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 574.049603] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 574.054881] RIP: 0033:0x459a29 [ 574.058069] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 574.066561] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 574.073835] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 574.081195] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 574.088469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 574.095921] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 574.110102] protocol 88fb is buggy, dev hsr_slave_0 [ 574.115245] protocol 88fb is buggy, dev hsr_slave_1 [ 574.630070] protocol 88fb is buggy, dev hsr_slave_0 [ 574.630073] protocol 88fb is buggy, dev hsr_slave_0 [ 574.630116] protocol 88fb is buggy, dev hsr_slave_1 [ 574.635187] protocol 88fb is buggy, dev hsr_slave_1 00:20:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0xffe00000, @remote, 0x4}, 0xfffffffffffffc7f) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r7}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000140)={r7, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r7, 0xca12}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r8, 0x8000}, &(0x7f0000000200)=0x8) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\xd0\x0e\xa3[\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x5, 0xe, &(0x7f00000000c0)=0x200}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) getsockopt$inet_mreqn(r5, 0x0, 0x41f29929b31db57b, &(0x7f0000000100)={@dev, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000180)={@mcast2, 0x21, r6}) r7 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x301081) fcntl$setpipe(r7, 0x407, 0x5bb6) sendfile(r1, r0, 0x0, 0x100000000000002) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0xfffffff7, 0x3, [], &(0x7f0000000000)=0xff}) 00:20:44 executing program 0 (fault-call:5 fault-nth:11): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:44 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e71485a837578e2fa8b621f354e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d5"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r3}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='%\x00', r3}, 0x30) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x200, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x904, 0x0) kcmp(r4, r0, 0x5, r5, r6) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 576.146214] FAULT_INJECTION: forcing a failure. [ 576.146214] name failslab, interval 1, probability 0, space 0, times 0 [ 576.162456] audit: type=1400 audit(1569457244.797:133): avc: denied { module_load } for pid=16228 comm="syz-executor.4" path="/proc/16228/net/udp" dev="proc" ino=4026533418 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_net_t:s0 tclass=system permissive=1 [ 576.163759] CPU: 0 PID: 16226 Comm: syz-executor.0 Not tainted 4.14.146 #0 00:20:44 executing program 0 (fault-call:5 fault-nth:12): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 576.196389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.196394] Call Trace: [ 576.196411] dump_stack+0x138/0x197 [ 576.196427] should_fail.cold+0x10f/0x159 [ 576.196442] should_failslab+0xdb/0x130 [ 576.196454] __kmalloc+0x2f0/0x7a0 [ 576.196470] ? __list_lru_init+0x6b/0x660 [ 576.196482] __list_lru_init+0x6b/0x660 00:20:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x200000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 576.196495] sget_userns+0x4e0/0xc30 [ 576.196502] ? get_anon_bdev+0x1c0/0x1c0 [ 576.196514] ? get_anon_bdev+0x1c0/0x1c0 00:20:45 executing program 0 (fault-call:5 fault-nth:13): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 576.196521] sget+0xd6/0x120 00:20:45 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigprocmask(0x1, &(0x7f0000000140)={0xfff}, &(0x7f0000000180), 0x8) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000100)={0x30, 0x1, 0x0, 0x7fffffff, 0x8001, 0x9, 0x7fff, 0x600000000}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x102402, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000000c0)=0x8000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x1103c2) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000001c0)={'ip6tnl0\x00', {0x2, 0x4e21, @local}}) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 576.196531] ? selinux_sb_copy_data+0x21e/0x390 00:20:45 executing program 0 (fault-call:5 fault-nth:14): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:45 executing program 0 (fault-call:5 fault-nth:15): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 576.196542] ? ovl_put_super+0x4b0/0x4b0 [ 576.196550] mount_nodev+0x31/0xf0 [ 576.196560] ovl_mount+0x2d/0x40 [ 576.196568] mount_fs+0x97/0x2a1 [ 576.196583] vfs_kern_mount.part.0+0x5e/0x3d0 [ 576.196596] do_mount+0x417/0x27d0 [ 576.196605] ? copy_mount_options+0x5c/0x2f0 [ 576.196618] ? rcu_read_lock_sched_held+0x110/0x130 [ 576.196631] ? copy_mount_string+0x40/0x40 [ 576.196644] ? copy_mount_options+0x1fe/0x2f0 [ 576.196657] SyS_mount+0xab/0x120 [ 576.196665] ? copy_mnt_ns+0x8c0/0x8c0 [ 576.196680] do_syscall_64+0x1e8/0x640 [ 576.196689] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 576.196706] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 576.196714] RIP: 0033:0x459a29 [ 576.196720] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 576.196731] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 576.196737] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 576.196742] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 576.196748] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 576.196753] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 576.399625] audit: type=1400 audit(1569457244.927:134): avc: denied { map } for pid=16238 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 576.462396] FAULT_INJECTION: forcing a failure. [ 576.462396] name failslab, interval 1, probability 0, space 0, times 0 [ 576.462551] CPU: 0 PID: 16242 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 576.462559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.462562] Call Trace: [ 576.462579] dump_stack+0x138/0x197 [ 576.462598] should_fail.cold+0x10f/0x159 [ 576.462615] should_failslab+0xdb/0x130 [ 576.462628] __kmalloc+0x2f0/0x7a0 [ 576.462646] ? __list_lru_init+0x6b/0x660 [ 576.462661] __list_lru_init+0x6b/0x660 [ 576.462676] sget_userns+0x500/0xc30 [ 576.462684] ? get_anon_bdev+0x1c0/0x1c0 [ 576.462699] ? get_anon_bdev+0x1c0/0x1c0 [ 576.462706] sget+0xd6/0x120 [ 576.462717] ? selinux_sb_copy_data+0x21e/0x390 [ 576.462729] ? ovl_put_super+0x4b0/0x4b0 [ 576.462738] mount_nodev+0x31/0xf0 [ 576.462749] ovl_mount+0x2d/0x40 [ 576.462759] mount_fs+0x97/0x2a1 [ 576.462773] vfs_kern_mount.part.0+0x5e/0x3d0 [ 576.462786] do_mount+0x417/0x27d0 [ 576.462796] ? retint_kernel+0x2d/0x2d [ 576.462811] ? copy_mount_string+0x40/0x40 [ 576.462824] ? copy_mount_options+0x1f9/0x2f0 [ 576.462836] ? copy_mount_options+0x1fe/0x2f0 [ 576.462850] SyS_mount+0xab/0x120 [ 576.462859] ? copy_mnt_ns+0x8c0/0x8c0 [ 576.462871] do_syscall_64+0x1e8/0x640 [ 576.462880] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 576.462895] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 576.462903] RIP: 0033:0x459a29 [ 576.462908] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 576.462929] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 576.462935] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 576.462942] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 576.462948] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 576.462954] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 576.547102] FAULT_INJECTION: forcing a failure. [ 576.547102] name failslab, interval 1, probability 0, space 0, times 0 [ 576.547119] CPU: 1 PID: 16251 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 576.547125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.547129] Call Trace: [ 576.547143] dump_stack+0x138/0x197 [ 576.547160] should_fail.cold+0x10f/0x159 [ 576.547175] should_failslab+0xdb/0x130 [ 576.547187] __kmalloc+0x2f0/0x7a0 [ 576.547200] ? lock_downgrade+0x6e0/0x6e0 [ 576.547211] ? register_shrinker+0xbd/0x220 [ 576.547222] register_shrinker+0xbd/0x220 [ 576.547238] sget_userns+0x9bf/0xc30 [ 576.547245] ? get_anon_bdev+0x1c0/0x1c0 [ 576.547259] ? get_anon_bdev+0x1c0/0x1c0 [ 576.547267] sget+0xd6/0x120 [ 576.547278] ? selinux_sb_copy_data+0x21e/0x390 [ 576.547288] ? ovl_put_super+0x4b0/0x4b0 [ 576.547296] mount_nodev+0x31/0xf0 [ 576.547307] ovl_mount+0x2d/0x40 [ 576.547315] mount_fs+0x97/0x2a1 [ 576.547328] vfs_kern_mount.part.0+0x5e/0x3d0 [ 576.547338] do_mount+0x417/0x27d0 [ 576.547347] ? copy_mount_options+0x5c/0x2f0 [ 576.547356] ? rcu_read_lock_sched_held+0x110/0x130 [ 576.547368] ? copy_mount_string+0x40/0x40 [ 576.547380] ? copy_mount_options+0x1fe/0x2f0 [ 576.547393] SyS_mount+0xab/0x120 [ 576.547399] ? copy_mnt_ns+0x8c0/0x8c0 [ 576.547416] do_syscall_64+0x1e8/0x640 [ 576.547425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 576.547442] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 576.547448] RIP: 0033:0x459a29 [ 576.547453] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 576.547463] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 576.547469] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 576.547474] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 576.547481] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 576.547486] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 576.598018] FAULT_INJECTION: forcing a failure. [ 576.598018] name failslab, interval 1, probability 0, space 0, times 0 [ 576.598030] CPU: 1 PID: 16257 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 576.598036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.598040] Call Trace: [ 576.598064] dump_stack+0x138/0x197 [ 576.598084] should_fail.cold+0x10f/0x159 [ 576.598100] should_failslab+0xdb/0x130 [ 576.598112] __kmalloc+0x2f0/0x7a0 [ 576.598128] ? __list_lru_init+0x6b/0x660 [ 576.598140] __list_lru_init+0x6b/0x660 [ 576.598158] sget_userns+0x500/0xc30 [ 576.598166] ? get_anon_bdev+0x1c0/0x1c0 [ 576.598180] ? get_anon_bdev+0x1c0/0x1c0 [ 576.598187] sget+0xd6/0x120 [ 576.598197] ? selinux_sb_copy_data+0x21e/0x390 [ 576.598209] ? ovl_put_super+0x4b0/0x4b0 [ 576.598217] mount_nodev+0x31/0xf0 [ 576.598227] ovl_mount+0x2d/0x40 [ 576.598237] mount_fs+0x97/0x2a1 [ 576.598251] vfs_kern_mount.part.0+0x5e/0x3d0 [ 576.598264] do_mount+0x417/0x27d0 [ 576.598273] ? retint_kernel+0x2d/0x2d [ 576.598288] ? copy_mount_string+0x40/0x40 [ 576.598300] ? copy_mount_options+0x199/0x2f0 [ 576.598311] ? copy_mount_options+0x1fe/0x2f0 [ 576.598323] SyS_mount+0xab/0x120 [ 576.598331] ? copy_mnt_ns+0x8c0/0x8c0 [ 576.598344] do_syscall_64+0x1e8/0x640 [ 576.598351] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 576.598366] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 576.598373] RIP: 0033:0x459a29 [ 576.598378] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 576.598388] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 576.598393] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 576.598398] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 576.598404] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 576.598409] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 576.637066] FAULT_INJECTION: forcing a failure. [ 576.637066] name failslab, interval 1, probability 0, space 0, times 0 [ 576.637079] CPU: 1 PID: 16261 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 576.637085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.637088] Call Trace: [ 576.637102] dump_stack+0x138/0x197 [ 576.637119] should_fail.cold+0x10f/0x159 [ 576.637135] should_failslab+0xdb/0x130 [ 576.637147] kmem_cache_alloc_trace+0x2e9/0x790 [ 576.637157] ? register_shrinker+0x1a4/0x220 [ 576.637176] ovl_fill_super+0xdf/0x2660 [ 576.637190] ? up_write+0x1a/0x60 [ 576.637200] ? register_shrinker+0x1a9/0x220 [ 576.637210] ? ovl_put_super+0x4b0/0x4b0 [ 576.637218] ? sget_userns+0x76b/0xc30 [ 576.637225] ? get_anon_bdev+0x1c0/0x1c0 [ 576.637240] ? get_anon_bdev+0x1c0/0x1c0 [ 576.637253] ? sget+0xde/0x120 [ 576.637263] ? selinux_sb_copy_data+0x21e/0x390 [ 576.637274] ? ovl_put_super+0x4b0/0x4b0 [ 576.637283] mount_nodev+0x52/0xf0 [ 576.637294] ovl_mount+0x2d/0x40 [ 576.637304] mount_fs+0x97/0x2a1 [ 576.637318] vfs_kern_mount.part.0+0x5e/0x3d0 [ 576.637332] do_mount+0x417/0x27d0 [ 576.637341] ? copy_mount_options+0x5c/0x2f0 [ 576.637352] ? rcu_read_lock_sched_held+0x110/0x130 [ 576.637365] ? copy_mount_string+0x40/0x40 [ 576.637380] ? copy_mount_options+0x1fe/0x2f0 [ 576.637394] SyS_mount+0xab/0x120 [ 576.637403] ? copy_mnt_ns+0x8c0/0x8c0 [ 576.637415] do_syscall_64+0x1e8/0x640 [ 576.637424] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 576.637440] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 576.637448] RIP: 0033:0x459a29 [ 576.637453] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 576.637464] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 576.637470] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 576.637476] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 576.637482] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 576.637488] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 578.230037] net_ratelimit: 18 callbacks suppressed [ 578.230042] protocol 88fb is buggy, dev hsr_slave_0 [ 578.240114] protocol 88fb is buggy, dev hsr_slave_1 [ 578.790039] protocol 88fb is buggy, dev hsr_slave_0 [ 578.795124] protocol 88fb is buggy, dev hsr_slave_1 [ 578.800275] protocol 88fb is buggy, dev hsr_slave_0 [ 578.805324] protocol 88fb is buggy, dev hsr_slave_1 00:20:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:47 executing program 0 (fault-call:5 fault-nth:16): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:47 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigprocmask(0x1, &(0x7f0000000140)={0xfff}, &(0x7f0000000180), 0x8) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000100)={0x30, 0x1, 0x0, 0x7fffffff, 0x8001, 0x9, 0x7fff, 0x600000000}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x102402, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000000c0)=0x8000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x1103c2) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000001c0)={'ip6tnl0\x00', {0x2, 0x4e21, @local}}) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:20:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:47 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x10001, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="841e1527a81c8b74ea04cf21b6fa1957617c938f98ab1198aabf8af8ee0c170b2e06013dd65e923b283a2083898b8039f41a0bac6c905d89a9e647ffd3f4df0fc29ad6a2022a6c32a6a818358a7c77766fb243713d3b8df8c2d9e48982b60f1118513aa08623b446544ac993fd717d44d2c341452b45a366df796f16020a173f9e81abcfd03d3b14e6b33f49622e231c68434c937a6c96bafec2170fa5cb38e8aaed5c9080f596525edd76c4e0b3a3d41fcc93246205bca508e63811983743ce", 0xc0, 0xbbad}], 0x2, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x543, 0xfffffffffffffff9) [ 579.110040] protocol 88fb is buggy, dev hsr_slave_0 [ 579.115127] protocol 88fb is buggy, dev hsr_slave_1 00:20:47 executing program 0 (fault-call:5 fault-nth:17): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 579.175957] FAULT_INJECTION: forcing a failure. [ 579.175957] name failslab, interval 1, probability 0, space 0, times 0 [ 579.189543] CPU: 1 PID: 16275 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 579.189552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.189556] Call Trace: [ 579.189574] dump_stack+0x138/0x197 00:20:47 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigprocmask(0x1, &(0x7f0000000140)={0xfff}, &(0x7f0000000180), 0x8) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000100)={0x30, 0x1, 0x0, 0x7fffffff, 0x8001, 0x9, 0x7fff, 0x600000000}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x102402, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000000c0)=0x8000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x1103c2) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000001c0)={'ip6tnl0\x00', {0x2, 0x4e21, @local}}) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 579.189593] should_fail.cold+0x10f/0x159 [ 579.189611] should_failslab+0xdb/0x130 [ 579.189625] __kmalloc+0x2f0/0x7a0 [ 579.189641] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 579.189650] ? match_strdup+0x5f/0xa0 [ 579.189662] match_strdup+0x5f/0xa0 [ 579.189675] ovl_fill_super+0x71a/0x2660 [ 579.189704] ? ovl_put_super+0x4b0/0x4b0 [ 579.189713] ? sget_userns+0x76b/0xc30 [ 579.189723] ? get_anon_bdev+0x1c0/0x1c0 [ 579.189739] ? get_anon_bdev+0x1c0/0x1c0 [ 579.189749] ? sget+0xde/0x120 [ 579.189762] ? selinux_sb_copy_data+0x21e/0x390 [ 579.189774] ? ovl_put_super+0x4b0/0x4b0 [ 579.189784] mount_nodev+0x52/0xf0 [ 579.189798] ovl_mount+0x2d/0x40 [ 579.189809] mount_fs+0x97/0x2a1 [ 579.189823] vfs_kern_mount.part.0+0x5e/0x3d0 [ 579.189837] do_mount+0x417/0x27d0 [ 579.189848] ? copy_mount_options+0x5c/0x2f0 [ 579.189858] ? rcu_read_lock_sched_held+0x110/0x130 [ 579.189872] ? copy_mount_string+0x40/0x40 [ 579.189888] ? copy_mount_options+0x1fe/0x2f0 [ 579.189902] SyS_mount+0xab/0x120 [ 579.189911] ? copy_mnt_ns+0x8c0/0x8c0 [ 579.189929] do_syscall_64+0x1e8/0x640 [ 579.189937] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 579.189951] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 579.189959] RIP: 0033:0x459a29 [ 579.189964] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 579.189975] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 579.189980] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 579.189986] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 579.189992] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 579.189997] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 579.268797] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 579.281775] FAULT_INJECTION: forcing a failure. [ 579.281775] name failslab, interval 1, probability 0, space 0, times 0 [ 579.359102] CPU: 1 PID: 16284 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 579.372960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.372965] Call Trace: [ 579.372980] dump_stack+0x138/0x197 [ 579.372995] should_fail.cold+0x10f/0x159 [ 579.373010] should_failslab+0xdb/0x130 [ 579.373020] __kmalloc+0x2f0/0x7a0 [ 579.373033] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 579.387675] ? match_strdup+0x5f/0xa0 [ 579.387689] match_strdup+0x5f/0xa0 [ 579.387703] ovl_fill_super+0x633/0x2660 [ 579.387722] ? ovl_put_super+0x4b0/0x4b0 [ 579.387731] ? sget_userns+0x76b/0xc30 [ 579.387742] ? get_anon_bdev+0x1c0/0x1c0 [ 579.406097] ? get_anon_bdev+0x1c0/0x1c0 [ 579.406107] ? sget+0xde/0x120 [ 579.406120] ? selinux_sb_copy_data+0x21e/0x390 [ 579.406131] ? ovl_put_super+0x4b0/0x4b0 [ 579.406141] mount_nodev+0x52/0xf0 [ 579.406151] ovl_mount+0x2d/0x40 [ 579.406159] mount_fs+0x97/0x2a1 [ 579.406174] vfs_kern_mount.part.0+0x5e/0x3d0 [ 579.406186] do_mount+0x417/0x27d0 [ 579.406194] ? copy_mount_options+0x5c/0x2f0 [ 579.406209] ? rcu_read_lock_sched_held+0x110/0x130 [ 579.406222] ? copy_mount_string+0x40/0x40 [ 579.406236] ? copy_mount_options+0x1fe/0x2f0 [ 579.406248] SyS_mount+0xab/0x120 [ 579.406256] ? copy_mnt_ns+0x8c0/0x8c0 [ 579.406268] do_syscall_64+0x1e8/0x640 [ 579.406275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 579.406291] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 579.465308] RIP: 0033:0x459a29 [ 579.473423] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 579.473434] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 579.473438] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 579.473443] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 00:20:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) 00:20:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r0, r1, 0x0, 0x1) 00:20:48 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000040)) [ 579.473447] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 579.473452] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 579.520046] protocol 88fb is buggy, dev hsr_slave_0 [ 579.591001] protocol 88fb is buggy, dev hsr_slave_1 00:20:48 executing program 0 (fault-call:5 fault-nth:18): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 579.782859] FAULT_INJECTION: forcing a failure. [ 579.782859] name failslab, interval 1, probability 0, space 0, times 0 [ 579.794182] CPU: 0 PID: 16314 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 579.801214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.810595] Call Trace: [ 579.813189] dump_stack+0x138/0x197 [ 579.816817] should_fail.cold+0x10f/0x159 [ 579.820964] should_failslab+0xdb/0x130 [ 579.824932] __kmalloc_track_caller+0x2ec/0x790 [ 579.829676] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 579.835122] ? rcu_read_lock_sched_held+0x110/0x130 [ 579.840127] ? ovl_mount_dir+0x2a/0x1a0 [ 579.844084] kstrdup+0x3a/0x70 [ 579.847266] ovl_mount_dir+0x2a/0x1a0 [ 579.851057] ovl_fill_super+0x420/0x2660 [ 579.855117] ? ovl_put_super+0x4b0/0x4b0 [ 579.859176] ? sget_userns+0x76b/0xc30 [ 579.863051] ? get_anon_bdev+0x1c0/0x1c0 [ 579.867121] ? get_anon_bdev+0x1c0/0x1c0 [ 579.871205] ? sget+0xde/0x120 [ 579.874383] ? selinux_sb_copy_data+0x21e/0x390 [ 579.879032] ? ovl_put_super+0x4b0/0x4b0 [ 579.883082] mount_nodev+0x52/0xf0 [ 579.886612] ovl_mount+0x2d/0x40 [ 579.889965] mount_fs+0x97/0x2a1 [ 579.893315] vfs_kern_mount.part.0+0x5e/0x3d0 [ 579.897796] do_mount+0x417/0x27d0 [ 579.901317] ? copy_mount_options+0x5c/0x2f0 [ 579.905787] ? rcu_read_lock_sched_held+0x110/0x130 [ 579.910809] ? copy_mount_string+0x40/0x40 [ 579.915052] ? copy_mount_options+0x1fe/0x2f0 [ 579.920059] SyS_mount+0xab/0x120 [ 579.923499] ? copy_mnt_ns+0x8c0/0x8c0 [ 579.927373] do_syscall_64+0x1e8/0x640 [ 579.931241] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 579.936076] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 579.941258] RIP: 0033:0x459a29 [ 579.944427] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 579.952140] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 579.959402] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 579.966679] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 579.973975] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 579.981249] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:20:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:50 executing program 1: fchdir(0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x23801}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) pipe(0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(0xffffffffffffffff, 0x100000003, 0x0, 0x28120001) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x5, 0x19, 0xe7, 0x0, 0x1847, 0x8, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080), 0x2d30474c952a4c20}, 0xa40, 0x400, 0x7, 0x7, 0x8, 0x80000000, 0x93}, 0x0, 0xffffffffffffffff, r2, 0x13) socket(0x10, 0x80002, 0x0) 00:20:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x3, 0x0, [{0xae9, 0x0, 0x8001}, {0x10b6, 0x0, 0x8}, {0x235, 0x0, 0x6}]}) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:50 executing program 0 (fault-call:5 fault-nth:19): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 582.197312] audit: type=1400 audit(1569457250.827:135): avc: denied { create } for pid=16322 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 582.197503] FAULT_INJECTION: forcing a failure. [ 582.197503] name failslab, interval 1, probability 0, space 0, times 0 [ 582.237349] CPU: 0 PID: 16329 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 582.244385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.253735] Call Trace: [ 582.256327] dump_stack+0x138/0x197 [ 582.259953] should_fail.cold+0x10f/0x159 [ 582.264093] should_failslab+0xdb/0x130 [ 582.268050] kmem_cache_alloc+0x47/0x780 [ 582.272133] ? mark_held_locks+0xb1/0x100 [ 582.276287] avc_alloc_node+0x27/0x4d0 [ 582.280180] ? trace_hardirqs_on_caller+0x400/0x590 [ 582.285192] avc_compute_av+0x185/0x570 [ 582.289159] avc_has_perm+0x345/0x4b0 [ 582.292951] ? avc_has_perm_noaudit+0x420/0x420 [ 582.297612] ? save_stack+0xa9/0xd0 [ 582.301229] ? mount_nodev+0x52/0xf0 [ 582.304953] ? ovl_mount+0x2d/0x40 [ 582.308472] ? mount_fs+0x97/0x2a1 [ 582.311990] ? vfs_kern_mount.part.0+0x5e/0x3d0 [ 582.316640] ? do_mount+0x417/0x27d0 [ 582.320338] selinux_sb_statfs+0x1a4/0x210 [ 582.324558] ? selinux_umount+0x170/0x170 [ 582.328701] ? lock_downgrade+0x6e0/0x6e0 [ 582.332833] security_sb_statfs+0x6d/0xa0 [ 582.336963] ? memset+0x32/0x40 [ 582.340231] statfs_by_dentry+0xac/0x200 [ 582.344281] vfs_statfs+0x43/0x230 [ 582.347807] ovl_check_namelen.isra.0+0x7f/0xf0 [ 582.352463] ? ovl_inode_init_once+0x20/0x20 [ 582.356867] ? ovl_mount_dir+0x10c/0x1a0 [ 582.360919] ovl_fill_super+0x4b6/0x2660 [ 582.364976] ? ovl_put_super+0x4b0/0x4b0 [ 582.369023] ? sget_userns+0x76b/0xc30 [ 582.372897] ? get_anon_bdev+0x1c0/0x1c0 [ 582.376944] ? get_anon_bdev+0x1c0/0x1c0 [ 582.380985] ? sget+0xde/0x120 [ 582.384173] ? selinux_sb_copy_data+0x21e/0x390 [ 582.388821] ? ovl_put_super+0x4b0/0x4b0 [ 582.392861] mount_nodev+0x52/0xf0 [ 582.396383] ovl_mount+0x2d/0x40 [ 582.399827] mount_fs+0x97/0x2a1 [ 582.403178] vfs_kern_mount.part.0+0x5e/0x3d0 [ 582.407656] do_mount+0x417/0x27d0 [ 582.411174] ? copy_mount_options+0x5c/0x2f0 [ 582.415575] ? rcu_read_lock_sched_held+0x110/0x130 [ 582.420576] ? copy_mount_string+0x40/0x40 [ 582.424793] ? copy_mount_options+0x1fe/0x2f0 [ 582.429268] SyS_mount+0xab/0x120 [ 582.432701] ? copy_mnt_ns+0x8c0/0x8c0 [ 582.436569] do_syscall_64+0x1e8/0x640 [ 582.440448] ? trace_hardirqs_off_thunk+0x1a/0x1c 00:20:51 executing program 0 (fault-call:5 fault-nth:20): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 582.445275] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 582.450529] RIP: 0033:0x459a29 [ 582.453697] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 582.461396] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 582.468646] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 582.475896] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 582.483144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 582.490398] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:20:51 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x101, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 582.612070] FAULT_INJECTION: forcing a failure. [ 582.612070] name failslab, interval 1, probability 0, space 0, times 0 [ 582.644086] CPU: 0 PID: 16342 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 582.651178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.660528] Call Trace: [ 582.660549] dump_stack+0x138/0x197 [ 582.660568] should_fail.cold+0x10f/0x159 [ 582.660585] should_failslab+0xdb/0x130 [ 582.660597] __kmalloc_track_caller+0x2ec/0x790 [ 582.660606] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 582.660617] ? rcu_read_lock_sched_held+0x110/0x130 [ 582.660630] ? ovl_mount_dir+0x2a/0x1a0 [ 582.674954] kstrdup+0x3a/0x70 [ 582.674969] ovl_mount_dir+0x2a/0x1a0 [ 582.674983] ovl_fill_super+0x420/0x2660 [ 582.675003] ? ovl_put_super+0x4b0/0x4b0 [ 582.694061] ? sget_userns+0x76b/0xc30 [ 582.694074] ? get_anon_bdev+0x1c0/0x1c0 [ 582.694085] ? get_anon_bdev+0x1c0/0x1c0 [ 582.694091] ? sget+0xde/0x120 [ 582.694100] ? selinux_sb_copy_data+0x21e/0x390 [ 582.694110] ? ovl_put_super+0x4b0/0x4b0 [ 582.694118] mount_nodev+0x52/0xf0 [ 582.694126] ovl_mount+0x2d/0x40 [ 582.705282] mount_fs+0x97/0x2a1 [ 582.705299] vfs_kern_mount.part.0+0x5e/0x3d0 [ 582.705314] do_mount+0x417/0x27d0 [ 582.705325] ? retint_kernel+0x2d/0x2d [ 582.705340] ? copy_mount_string+0x40/0x40 [ 582.705355] ? __sanitizer_cov_trace_pc+0x9/0x60 [ 582.765711] ? copy_mount_options+0x1fe/0x2f0 [ 582.770205] SyS_mount+0xab/0x120 [ 582.773643] ? copy_mnt_ns+0x8c0/0x8c0 [ 582.777518] do_syscall_64+0x1e8/0x640 [ 582.781396] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 582.786223] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 582.791395] RIP: 0033:0x459a29 [ 582.794565] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 582.802254] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 00:20:51 executing program 0 (fault-call:5 fault-nth:21): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 582.809524] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 582.816780] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 582.824035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 582.831286] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:20:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="9b9c2bf9ef738e6e16c3749cedda57e4f60100a194839db4bcd2865e1500000300002776c902bce0e0e116226f5f10a7a2f4c38c7217edb546ef1bc2000000000000000000000000000042148f183d5c4104e6bd9fc31b24dce132f4526a9679a55c4df05af22002e7cfe89460aaf5177d560564ada9cc8dcfeca3a9c4194bbb7908dcc9798f7d3228a82dce80"], 0x8d) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0xedc0) fallocate(0xffffffffffffffff, 0x2b, 0x40000, 0x4) fallocate(r0, 0x0, 0x0, 0x110001) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xffff, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) write$P9_RSYMLINK(r4, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x12, 0x1, 0x2}}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000015, r1, 0x0, 0x8}) 00:20:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 583.019308] FAULT_INJECTION: forcing a failure. [ 583.019308] name failslab, interval 1, probability 0, space 0, times 0 [ 583.045503] CPU: 0 PID: 16356 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 583.052655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.064013] Call Trace: [ 583.066705] dump_stack+0x138/0x197 [ 583.070349] should_fail.cold+0x10f/0x159 [ 583.074513] should_failslab+0xdb/0x130 [ 583.078492] kmem_cache_alloc+0x2d7/0x780 [ 583.082651] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 583.088198] getname_kernel+0x53/0x350 [ 583.092351] kern_path+0x20/0x40 [ 583.095724] ovl_mount_dir_noesc+0x5f/0x140 [ 583.100049] ovl_mount_dir+0xf3/0x1a0 [ 583.103852] ovl_fill_super+0x87b/0x2660 [ 583.107929] ? ovl_put_super+0x4b0/0x4b0 [ 583.111987] ? sget_userns+0x76b/0xc30 00:20:51 executing program 1: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00\x90\x92\xb3\xe6L\xc9l`w_G-\x18p\xffMG\x1c~\xefC\xb9\xf6Vr\x11x\x1d\x1dh\xe1[\xfa\xb4Y\\\xe0\xd3\xb0\xbd[W\x06#\x836\xd9\r>R\x1c\xca!MR\xbf\x93\xcc,P\x90\xdf\x8d^\xd4\xecW\xab\xdc!\x029\x82\xc1\xba5o\xa0{r\xb5v\xea\xd8\x05\xb0IC\xa3\xfa\xf8\x87\x1d\x06\x1d\xd9\x9aR\xe3\x036\xa3\n\xcb\xec\xa7; \xa1\xe1w\x0f~\xebw\xb3\x1a\xf2\x00\xf2\x97\xb2l?\x10M\xfc\xa7\xd3\xa5#-=\xf5\xf8\x10\x1f\xb2\xfe\x80\xb5s\x05gI\x9a\x1do\x15\x1f\xd8\x93Wb\xe48M\xd9') r1 = mq_open(&(0x7f0000000100)='vmnet1\x00', 0x800, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl(r2, 0x1ff, &(0x7f0000000140)="2776b20a4e80a02433cfb0b9d19da47c268ad6e902b73eff8285079d50164e269aa84d75d1ad5842aadc75060592481c598fb5bcabfb7846271d2b0fdeb2cda88e9a75f4e8e819763dc15f42c36fafd60fa0482082c59314a5d009f4c3b80acad5") close(r1) setns(r0, 0x0) [ 583.115878] ? get_anon_bdev+0x1c0/0x1c0 [ 583.120120] ? get_anon_bdev+0x1c0/0x1c0 [ 583.124174] ? sget+0xde/0x120 [ 583.127364] ? selinux_sb_copy_data+0x21e/0x390 [ 583.132027] ? ovl_put_super+0x4b0/0x4b0 [ 583.136068] mount_nodev+0x52/0xf0 [ 583.139596] ovl_mount+0x2d/0x40 [ 583.142948] mount_fs+0x97/0x2a1 [ 583.146302] vfs_kern_mount.part.0+0x5e/0x3d0 [ 583.150781] do_mount+0x417/0x27d0 [ 583.154299] ? copy_mount_options+0x5c/0x2f0 [ 583.158700] ? rcu_read_lock_sched_held+0x110/0x130 [ 583.163715] ? copy_mount_string+0x40/0x40 [ 583.167932] ? copy_mount_options+0x1fe/0x2f0 [ 583.172421] SyS_mount+0xab/0x120 [ 583.175860] ? copy_mnt_ns+0x8c0/0x8c0 [ 583.179744] do_syscall_64+0x1e8/0x640 [ 583.183619] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 583.188458] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 583.193641] RIP: 0033:0x459a29 [ 583.196811] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 583.204507] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 583.211757] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 583.219034] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 583.226286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 583.233535] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 583.242194] overlayfs: failed to resolve './file1': -12 00:20:51 executing program 0 (fault-call:5 fault-nth:22): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 583.270038] net_ratelimit: 20 callbacks suppressed [ 583.270043] protocol 88fb is buggy, dev hsr_slave_0 [ 583.280098] protocol 88fb is buggy, dev hsr_slave_1 [ 583.380525] FAULT_INJECTION: forcing a failure. [ 583.380525] name failslab, interval 1, probability 0, space 0, times 0 [ 583.393198] CPU: 1 PID: 16369 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 583.400234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.409599] Call Trace: [ 583.412201] dump_stack+0x138/0x197 [ 583.415849] should_fail.cold+0x10f/0x159 [ 583.420180] should_failslab+0xdb/0x130 [ 583.424162] kmem_cache_alloc+0x2d7/0x780 [ 583.428313] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 583.433773] getname_kernel+0x53/0x350 [ 583.437681] kern_path+0x20/0x40 [ 583.441055] ovl_mount_dir_noesc+0x5f/0x140 [ 583.445381] ovl_mount_dir+0xf3/0x1a0 [ 583.449183] ovl_fill_super+0x87b/0x2660 [ 583.453252] ? ovl_put_super+0x4b0/0x4b0 [ 583.457312] ? sget_userns+0x76b/0xc30 [ 583.461197] ? get_anon_bdev+0x1c0/0x1c0 [ 583.465287] ? get_anon_bdev+0x1c0/0x1c0 [ 583.469343] ? sget+0xde/0x120 [ 583.472538] ? selinux_sb_copy_data+0x21e/0x390 [ 583.477207] ? ovl_put_super+0x4b0/0x4b0 [ 583.481266] mount_nodev+0x52/0xf0 [ 583.484816] ovl_mount+0x2d/0x40 [ 583.488209] mount_fs+0x97/0x2a1 [ 583.491581] vfs_kern_mount.part.0+0x5e/0x3d0 [ 583.496092] do_mount+0x417/0x27d0 [ 583.499635] ? retint_kernel+0x2d/0x2d [ 583.503619] ? copy_mount_string+0x40/0x40 [ 583.507854] ? copy_mount_options+0x1a0/0x2f0 [ 583.512361] ? copy_mount_options+0x1fe/0x2f0 [ 583.516861] SyS_mount+0xab/0x120 [ 583.520309] ? copy_mnt_ns+0x8c0/0x8c0 [ 583.524200] do_syscall_64+0x1e8/0x640 [ 583.528087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 583.532918] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 583.538095] RIP: 0033:0x459a29 [ 583.541266] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 583.548977] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 583.556238] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 583.563499] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 583.570755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 583.578007] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 583.587496] overlayfs: failed to resolve './file1': -12 [ 583.750057] protocol 88fb is buggy, dev hsr_slave_0 [ 583.755162] protocol 88fb is buggy, dev hsr_slave_1 [ 584.150034] protocol 88fb is buggy, dev hsr_slave_0 [ 584.155172] protocol 88fb is buggy, dev hsr_slave_1 [ 584.550048] protocol 88fb is buggy, dev hsr_slave_0 [ 584.555338] protocol 88fb is buggy, dev hsr_slave_1 [ 585.030045] protocol 88fb is buggy, dev hsr_slave_0 [ 585.035385] protocol 88fb is buggy, dev hsr_slave_1 00:20:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:53 executing program 0 (fault-call:5 fault-nth:23): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:53 executing program 1: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00\x90\x92\xb3\xe6L\xc9l`w_G-\x18p\xffMG\x1c~\xefC\xb9\xf6Vr\x11x\x1d\x1dh\xe1[\xfa\xb4Y\\\xe0\xd3\xb0\xbd[W\x06#\x836\xd9\r>R\x1c\xca!MR\xbf\x93\xcc,P\x90\xdf\x8d^\xd4\xecW\xab\xdc!\x029\x82\xc1\xba5o\xa0{r\xb5v\xea\xd8\x05\xb0IC\xa3\xfa\xf8\x87\x1d\x06\x1d\xd9\x9aR\xe3\x036\xa3\n\xcb\xec\xa7; \xa1\xe1w\x0f~\xebw\xb3\x1a\xf2\x00\xf2\x97\xb2l?\x10M\xfc\xa7\xd3\xa5#-=\xf5\xf8\x10\x1f\xb2\xfe\x80\xb5s\x05gI\x9a\x1do\x15\x1f\xd8\x93Wb\xe48M\xd9') r1 = mq_open(&(0x7f0000000100)='vmnet1\x00', 0x800, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl(r2, 0x1ff, &(0x7f0000000140)="2776b20a4e80a02433cfb0b9d19da47c268ad6e902b73eff8285079d50164e269aa84d75d1ad5842aadc75060592481c598fb5bcabfb7846271d2b0fdeb2cda88e9a75f4e8e819763dc15f42c36fafd60fa0482082c59314a5d009f4c3b80acad5") close(r1) setns(r0, 0x0) 00:20:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8000, 0x2) signalfd(r1, &(0x7f0000000040)={0xf480679}, 0x8) ptrace$setopts(0x4206, r0, 0x5, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 585.207355] FAULT_INJECTION: forcing a failure. [ 585.207355] name failslab, interval 1, probability 0, space 0, times 0 [ 585.231510] CPU: 1 PID: 16378 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 585.238602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.247973] Call Trace: [ 585.250590] dump_stack+0x138/0x197 00:20:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) wait4(r1, 0x0, 0x8, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) getpriority(0x1, r0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x143001, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="5fc298e0436b89c7be4e822415d32b4a"}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8004090}, 0x4000) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 585.250610] should_fail.cold+0x10f/0x159 [ 585.250627] should_failslab+0xdb/0x130 [ 585.250641] __kmalloc_track_caller+0x2ec/0x790 [ 585.250654] ? ovl_mount_dir+0x2a/0x1a0 [ 585.258444] kstrdup+0x3a/0x70 [ 585.258458] ovl_mount_dir+0x2a/0x1a0 [ 585.258472] ovl_fill_super+0x87b/0x2660 [ 585.258489] ? ovl_put_super+0x4b0/0x4b0 [ 585.287316] ? sget_userns+0x76b/0xc30 [ 585.287326] ? get_anon_bdev+0x1c0/0x1c0 [ 585.295291] ? get_anon_bdev+0x1c0/0x1c0 [ 585.299352] ? sget+0xde/0x120 [ 585.302649] ? selinux_sb_copy_data+0x21e/0x390 [ 585.307315] ? ovl_put_super+0x4b0/0x4b0 [ 585.311388] mount_nodev+0x52/0xf0 [ 585.314932] ovl_mount+0x2d/0x40 [ 585.318285] mount_fs+0x97/0x2a1 [ 585.321654] vfs_kern_mount.part.0+0x5e/0x3d0 [ 585.326154] do_mount+0x417/0x27d0 [ 585.329858] ? copy_mount_options+0x5c/0x2f0 [ 585.334691] ? rcu_read_lock_sched_held+0x110/0x130 [ 585.340332] ? copy_mount_string+0x40/0x40 [ 585.344564] ? copy_mount_options+0x1fe/0x2f0 [ 585.349052] SyS_mount+0xab/0x120 [ 585.352495] ? copy_mnt_ns+0x8c0/0x8c0 [ 585.356379] do_syscall_64+0x1e8/0x640 [ 585.360269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 585.365124] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 585.370496] RIP: 0033:0x459a29 [ 585.373688] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 585.381388] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 585.388663] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 585.396200] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 585.403464] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 585.410729] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:20:54 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:54 executing program 0 (fault-call:5 fault-nth:24): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:54 executing program 1: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00\x90\x92\xb3\xe6L\xc9l`w_G-\x18p\xffMG\x1c~\xefC\xb9\xf6Vr\x11x\x1d\x1dh\xe1[\xfa\xb4Y\\\xe0\xd3\xb0\xbd[W\x06#\x836\xd9\r>R\x1c\xca!MR\xbf\x93\xcc,P\x90\xdf\x8d^\xd4\xecW\xab\xdc!\x029\x82\xc1\xba5o\xa0{r\xb5v\xea\xd8\x05\xb0IC\xa3\xfa\xf8\x87\x1d\x06\x1d\xd9\x9aR\xe3\x036\xa3\n\xcb\xec\xa7; \xa1\xe1w\x0f~\xebw\xb3\x1a\xf2\x00\xf2\x97\xb2l?\x10M\xfc\xa7\xd3\xa5#-=\xf5\xf8\x10\x1f\xb2\xfe\x80\xb5s\x05gI\x9a\x1do\x15\x1f\xd8\x93Wb\xe48M\xd9') r1 = mq_open(&(0x7f0000000100)='vmnet1\x00', 0x800, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl(r2, 0x1ff, &(0x7f0000000140)="2776b20a4e80a02433cfb0b9d19da47c268ad6e902b73eff8285079d50164e269aa84d75d1ad5842aadc75060592481c598fb5bcabfb7846271d2b0fdeb2cda88e9a75f4e8e819763dc15f42c36fafd60fa0482082c59314a5d009f4c3b80acad5") close(r1) setns(r0, 0x0) 00:20:54 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in=@empty, 0x4e20, 0x0, 0x4e21, 0xa09, 0xa, 0x60, 0x80, 0x1ce2a9a5ba53f476}, {0x5, 0x9, 0x80000000, 0xfa, 0x100, 0xcb, 0x5, 0x7}, {0x2, 0x39e, 0xc4c, 0x2}, 0x5, 0x6e6bb8, 0x2, 0x0, 0x2, 0x1}, {{@in6=@remote, 0x4d2, 0xfc2879942dfecb67}, 0xa, @in=@remote, 0x3507, 0x2, 0x0, 0xc3, 0xfffffff7, 0xff, 0x2}}, 0xe8) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 585.742019] FAULT_INJECTION: forcing a failure. [ 585.742019] name failslab, interval 1, probability 0, space 0, times 0 [ 585.759138] CPU: 1 PID: 16406 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 585.766220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.775615] Call Trace: [ 585.778237] dump_stack+0x138/0x197 [ 585.781897] should_fail.cold+0x10f/0x159 [ 585.786081] should_failslab+0xdb/0x130 [ 585.790065] __kmalloc_track_caller+0x2ec/0x790 [ 585.794734] ? lock_downgrade+0x6e0/0x6e0 [ 585.798889] ? ovl_fill_super+0xa30/0x2660 [ 585.803136] kstrdup+0x3a/0x70 [ 585.806315] ovl_fill_super+0xa30/0x2660 [ 585.810832] ? ovl_put_super+0x4b0/0x4b0 [ 585.814901] ? sget_userns+0x76b/0xc30 [ 585.818809] ? get_anon_bdev+0x1c0/0x1c0 [ 585.822859] ? get_anon_bdev+0x1c0/0x1c0 [ 585.826921] ? sget+0xde/0x120 [ 585.830127] ? selinux_sb_copy_data+0x21e/0x390 [ 585.834800] ? ovl_put_super+0x4b0/0x4b0 [ 585.838877] mount_nodev+0x52/0xf0 [ 585.842422] ovl_mount+0x2d/0x40 [ 585.845783] mount_fs+0x97/0x2a1 [ 585.849157] vfs_kern_mount.part.0+0x5e/0x3d0 [ 585.853656] do_mount+0x417/0x27d0 [ 585.857207] ? copy_mount_options+0x5c/0x2f0 [ 585.861611] ? rcu_read_lock_sched_held+0x110/0x130 [ 585.866615] ? copy_mount_string+0x40/0x40 [ 585.870852] ? copy_mount_options+0x1fe/0x2f0 [ 585.875334] SyS_mount+0xab/0x120 [ 585.878772] ? copy_mnt_ns+0x8c0/0x8c0 [ 585.883145] do_syscall_64+0x1e8/0x640 [ 585.888256] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 585.893116] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 585.898398] RIP: 0033:0x459a29 [ 585.901607] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 585.909404] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 585.916673] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 585.923929] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 585.931216] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 00:20:54 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$setopts(0x4200, r1, 0x1000, 0x4) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0xab800eb8e43541f4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x1, 0x0, 0x135}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) write$P9_RFSYNC(r3, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r2, 0x0, 0x0) 00:20:54 executing program 0 (fault-call:5 fault-nth:25): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 585.938667] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 585.999364] FAULT_INJECTION: forcing a failure. [ 585.999364] name failslab, interval 1, probability 0, space 0, times 0 [ 586.011258] CPU: 1 PID: 16419 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 586.018285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.027786] Call Trace: [ 586.030379] dump_stack+0x138/0x197 [ 586.034031] should_fail.cold+0x10f/0x159 [ 586.038196] should_failslab+0xdb/0x130 [ 586.042193] __kmalloc+0x2f0/0x7a0 [ 586.045932] ? memcpy+0x46/0x50 [ 586.049571] ? ovl_fill_super+0xb96/0x2660 [ 586.053850] ovl_fill_super+0xb96/0x2660 [ 586.058004] ? ovl_put_super+0x4b0/0x4b0 [ 586.062056] ? sget_userns+0x76b/0xc30 [ 586.065941] ? get_anon_bdev+0x1c0/0x1c0 [ 586.070137] ? get_anon_bdev+0x1c0/0x1c0 [ 586.074186] ? sget+0xde/0x120 [ 586.078152] ? selinux_sb_copy_data+0x21e/0x390 [ 586.082901] ? ovl_put_super+0x4b0/0x4b0 [ 586.086948] mount_nodev+0x52/0xf0 [ 586.090476] ovl_mount+0x2d/0x40 [ 586.093918] mount_fs+0x97/0x2a1 [ 586.097284] vfs_kern_mount.part.0+0x5e/0x3d0 [ 586.101791] do_mount+0x417/0x27d0 [ 586.105415] ? copy_mount_options+0x5c/0x2f0 [ 586.109827] ? rcu_read_lock_sched_held+0x110/0x130 [ 586.115354] ? copy_mount_string+0x40/0x40 [ 586.119587] ? copy_mount_options+0x1fe/0x2f0 [ 586.124069] SyS_mount+0xab/0x120 [ 586.127504] ? copy_mnt_ns+0x8c0/0x8c0 [ 586.131413] do_syscall_64+0x1e8/0x640 [ 586.135285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 586.140127] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 586.145315] RIP: 0033:0x459a29 [ 586.148488] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 586.156360] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 586.163618] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 586.171054] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 586.178308] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 586.185573] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:20:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'n\x00\x00\bn\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10', 0x5702ec0b370249ba}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)=0x1) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) fsetxattr$security_smack_transmute(r4, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000001c0)={0xc, @raw_data="8ab72bb9da9593f595516a69b9b3e49eabf1ba2ccd9019288dff37ab6b9a932e35fc1c88b6449512b723f14659ed66c57a97161ff0974e1477861905642e41bc4b04f50beea03651b75e8591530c2e75e8351126ba6726441dda70047a9150d8213934e7202975b61e24f5ff974e93ebac6af4c64371d55ee81d2bb3e95b36a96b3b9c3bf2e7a15048147690c8ce7bd95af243d000be8704c0cf1f0997ffe12f35c0025e41e5ae7cca67f75aa1453a53fd43286da11820c572dbb8cb5160836ecca2d29fd9368d56"}) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) 00:20:56 executing program 0 (fault-call:5 fault-nth:26): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 588.254178] FAULT_INJECTION: forcing a failure. [ 588.254178] name failslab, interval 1, probability 0, space 0, times 0 [ 588.266918] CPU: 0 PID: 16432 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 588.274047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.276977] audit: type=1400 audit(1569457256.897:136): avc: denied { setattr } for pid=16429 comm="syz-executor.1" name="pagemap" dev="proc" ino=60551 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 588.283398] Call Trace: [ 588.283428] dump_stack+0x138/0x197 [ 588.283452] should_fail.cold+0x10f/0x159 [ 588.319641] should_failslab+0xdb/0x130 [ 588.323600] kmem_cache_alloc+0x2d7/0x780 [ 588.327728] ? __d_lookup+0x3a2/0x670 [ 588.331510] ? mark_held_locks+0xb1/0x100 [ 588.335640] ? d_lookup+0xe5/0x240 [ 588.339162] __d_alloc+0x2d/0x9f0 [ 588.342612] d_alloc+0x4d/0x270 [ 588.345927] __lookup_hash+0x58/0x180 [ 588.349720] lookup_one_len+0x27b/0x3a0 [ 588.353686] ? __lookup_hash+0x180/0x180 [ 588.357745] ovl_workdir_create+0x127/0x4e0 [ 588.362050] ? ovl_mount_dir+0x1a0/0x1a0 [ 588.366090] ? _raw_spin_unlock+0x2d/0x50 [ 588.370220] ? clone_mnt+0x65a/0xee0 [ 588.373921] ovl_fill_super+0x100c/0x2660 [ 588.378080] ? ovl_put_super+0x4b0/0x4b0 [ 588.382127] ? sget_userns+0x76b/0xc30 [ 588.385998] ? get_anon_bdev+0x1c0/0x1c0 [ 588.390045] ? get_anon_bdev+0x1c0/0x1c0 [ 588.394094] ? sget+0xde/0x120 [ 588.397269] ? selinux_sb_copy_data+0x21e/0x390 [ 588.401933] ? ovl_put_super+0x4b0/0x4b0 [ 588.405996] mount_nodev+0x52/0xf0 [ 588.409540] ovl_mount+0x2d/0x40 [ 588.412945] mount_fs+0x97/0x2a1 [ 588.416320] vfs_kern_mount.part.0+0x5e/0x3d0 [ 588.420821] do_mount+0x417/0x27d0 [ 588.424364] ? copy_mount_options+0x5c/0x2f0 [ 588.428774] ? rcu_read_lock_sched_held+0x110/0x130 [ 588.433974] ? copy_mount_string+0x40/0x40 [ 588.438218] ? copy_mount_options+0x1fe/0x2f0 [ 588.442715] SyS_mount+0xab/0x120 [ 588.446408] ? copy_mnt_ns+0x8c0/0x8c0 [ 588.450304] do_syscall_64+0x1e8/0x640 [ 588.454190] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 588.459045] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 588.464252] RIP: 0033:0x459a29 [ 588.467469] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 588.475179] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 588.482542] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 588.489814] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 588.497093] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 00:20:57 executing program 0 (fault-call:5 fault-nth:27): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 588.504657] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 588.512827] overlayfs: failed to create directory ./file1\/work (errno: 12); mounting read-only [ 588.520091] net_ratelimit: 18 callbacks suppressed [ 588.520097] protocol 88fb is buggy, dev hsr_slave_0 [ 588.531761] protocol 88fb is buggy, dev hsr_slave_1 [ 588.598955] FAULT_INJECTION: forcing a failure. [ 588.598955] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 588.611032] CPU: 0 PID: 16446 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 588.618032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.627550] Call Trace: [ 588.630136] dump_stack+0x138/0x197 [ 588.633763] should_fail.cold+0x10f/0x159 [ 588.637928] __alloc_pages_nodemask+0x1d6/0x7a0 [ 588.642586] ? __alloc_pages_slowpath+0x2930/0x2930 [ 588.647596] cache_grow_begin+0x80/0x400 [ 588.651645] kmem_cache_alloc+0x6a6/0x780 [ 588.655780] getname_kernel+0x53/0x350 [ 588.659650] kern_path+0x20/0x40 [ 588.663006] ovl_mount_dir_noesc+0x5f/0x140 [ 588.667309] ovl_fill_super+0xbfb/0x2660 [ 588.671356] ? ovl_put_super+0x4b0/0x4b0 [ 588.675396] ? sget_userns+0x76b/0xc30 [ 588.679266] ? get_anon_bdev+0x1c0/0x1c0 [ 588.683322] ? get_anon_bdev+0x1c0/0x1c0 [ 588.687374] ? sget+0xde/0x120 [ 588.690557] ? selinux_sb_copy_data+0x21e/0x390 [ 588.695307] ? ovl_put_super+0x4b0/0x4b0 [ 588.699369] mount_nodev+0x52/0xf0 [ 588.702909] ovl_mount+0x2d/0x40 [ 588.706285] mount_fs+0x97/0x2a1 [ 588.709658] vfs_kern_mount.part.0+0x5e/0x3d0 [ 588.714157] do_mount+0x417/0x27d0 [ 588.717712] ? copy_mount_string+0x40/0x40 [ 588.721955] ? copy_mount_options+0x18f/0x2f0 [ 588.726456] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 588.731309] ? copy_mount_options+0x1fe/0x2f0 [ 588.735821] SyS_mount+0xab/0x120 [ 588.739280] ? copy_mnt_ns+0x8c0/0x8c0 [ 588.743175] do_syscall_64+0x1e8/0x640 00:20:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r3, 0xf7e8f6cb5dcde06f, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000200)='&md5sumself.#]-$^\x00', &(0x7f0000000240)='IPVS\x00', &(0x7f0000000280)='/dev/dlm-control\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='IPVS\x00', &(0x7f00000003c0)='IPVS\x00', &(0x7f0000000400)='system)vmnet0\'\xe8,\x99selinux\'eth1/(\x00', &(0x7f0000000440)='/dev/dlm-control\x00'], &(0x7f00000005c0)=[&(0x7f00000004c0)='ppp0/userproc{.^\x02vmnet0wlan1\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='IPVS\x00', &(0x7f0000000580)='ppp0\x00']) [ 588.747073] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 588.750491] audit: type=1400 audit(1569457257.227:137): avc: denied { write } for pid=16450 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 588.751926] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 588.751935] RIP: 0033:0x459a29 [ 588.751942] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 00:20:57 executing program 0 (fault-call:5 fault-nth:28): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 588.778525] audit: type=1400 audit(1569457257.227:138): avc: denied { read } for pid=16450 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 588.781072] ORIG_RAX: 00000000000000a5 [ 588.781080] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 588.781086] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 588.781091] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 588.781096] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 588.781101] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 588.813907] protocol 88fb is buggy, dev hsr_slave_0 [ 588.813952] protocol 88fb is buggy, dev hsr_slave_1 [ 588.924942] FAULT_INJECTION: forcing a failure. [ 588.924942] name failslab, interval 1, probability 0, space 0, times 0 [ 588.941060] CPU: 1 PID: 16457 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 588.948121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.957475] Call Trace: [ 588.960071] dump_stack+0x138/0x197 [ 588.963710] should_fail.cold+0x10f/0x159 [ 588.967867] should_failslab+0xdb/0x130 [ 588.971853] kmem_cache_alloc+0x2d7/0x780 [ 588.976007] ? vfs_statfs+0x1db/0x230 [ 588.979818] alloc_vfsmnt+0x28/0x7d0 [ 588.983530] clone_mnt+0x70/0xee0 [ 588.986989] clone_private_mount+0x9f/0xe0 [ 588.991223] ovl_fill_super+0xf04/0x2660 [ 588.995290] ? ovl_put_super+0x4b0/0x4b0 [ 588.999343] ? sget_userns+0x76b/0xc30 [ 589.003224] ? get_anon_bdev+0x1c0/0x1c0 [ 589.007287] ? get_anon_bdev+0x1c0/0x1c0 [ 589.011342] ? sget+0xde/0x120 [ 589.014529] ? selinux_sb_copy_data+0x21e/0x390 [ 589.019197] ? ovl_put_super+0x4b0/0x4b0 [ 589.023256] mount_nodev+0x52/0xf0 [ 589.026794] ovl_mount+0x2d/0x40 [ 589.030157] mount_fs+0x97/0x2a1 [ 589.033525] vfs_kern_mount.part.0+0x5e/0x3d0 [ 589.038074] do_mount+0x417/0x27d0 [ 589.041623] ? copy_mount_options+0x5c/0x2f0 [ 589.046200] ? rcu_read_lock_sched_held+0x110/0x130 [ 589.051219] ? copy_mount_string+0x40/0x40 [ 589.055455] ? copy_mount_options+0x1fe/0x2f0 [ 589.059946] SyS_mount+0xab/0x120 [ 589.063401] ? copy_mnt_ns+0x8c0/0x8c0 [ 589.067290] do_syscall_64+0x1e8/0x640 [ 589.071868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.076699] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 589.081934] RIP: 0033:0x459a29 [ 589.085104] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 589.094938] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 589.103230] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 589.110742] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 589.117992] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 00:20:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0x20) ioctl$UFFDIO_REGISTER(r0, 0x80044dff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x48, &(0x7f0000000140)={@rand_addr="e994e5167c49270a208ee5bcc7bb3e60"}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x28060911}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x414, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000001100", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600041400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@delqdisc={0x100, 0x25, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, r8, {0x6, 0xa}, {0xab77fadbb0f3339c, 0xffe0}, {0x7, 0xf}}, [@TCA_STAB={0x30, 0x8, [{{0x1c, 0x1, {0x5, 0xff, 0x6, 0x4, 0x0, 0x7, 0x0, 0x5}}, {0x10, 0x2, [0xfffa, 0xf46c, 0x6, 0x20, 0x5]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1f}, @qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x3c, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xbf8}, @TCA_HHF_RESET_TIMEOUT={0xffffffffffffff43, 0x4, 0x8000}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9a4}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1f}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xba}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}, @TCA_STAB={0x50, 0x8, [{{0x1c, 0x1, {0x6, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x4, 0x3}}, {0xc, 0x2, [0x0, 0x8645, 0x2]}}, {{0x1c, 0x1, {0x3, 0x3, 0x47eb, 0xbf9, 0x0, 0xfffffff9, 0x3873, 0x1}}, {0x8, 0x2, [0x240, 0x86c]}}]}, @TCA_RATE={0x8, 0x5, {0x1, 0x61}}]}, 0x100}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000467dddb8c50cdb00ab00c57ccc2247c6b795867ed9b17e9418885b"]}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2a, 0xffffff1f}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="008b00f27787941e4df2195200d76fe4682e11d5782b14b137d90bfeded29eecf7774d31fdb7c140fe256c3d352a8b63806d1e94549da6c0368be67e6875c488646d2e835d33fc9e45dbbadd285a35b3ba3bc5186c1a72d0fc6b799ef2965e9d2d2c9b73e7dd107971e7f75393b7b642fc3441f6ab9d428b15d88fa9e017a3d3c8a50c382acc837616b8560c2e1a2756899511e35a7efbb5e8643932eb16aff8ab884918e2606e23a7255dc2ddfed81d8db799a4d15b0837339ecc8a16524556", @ANYRES32=0x0, @ANYBLOB='\x00'/12]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001e80)={'vcan0\x00', r14}) 00:20:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) sendmsg$alg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="64270160555fef056e8674ac6be9c0cee21f7aea8e1dcc2f", 0x18}, {&(0x7f0000000100)="2f51f8198c1aac29f7d60663eda775550b9403a0e5bff077a94c9cfbd751afc7507dd3229732afad489f2382746bc8648112f2", 0x33}, {&(0x7f0000000140)="f1da7c0f6c522af3fbd0fd86dd385c8394009cfae87e23e5f19b0ce6061f93bd3984789907da185f38f361da2fe9bbab80607ac4398ae4808731b45e146df431cb7e706369d273df85b798daf021546b445af3af3e55ff9f05cdf3da7c1233f7d720a321ad0592e86681d8c49c31067dc5a81e862269dd2eb7c92bec1bdf0f046c0654cc95f61ad0a185f2983891b5bdfbd8eafc781c8ee3a940ffc590c2f2e06f8d96c22d6cea63f9d397198982a37f5733d4d1be22d9ab5d6b5ad10cc69914a63f49d9d53571ccfa9a3d2facd65cda97f4f6bb02d5d59639f8f5b68a90d27eae45c3453b59fcdebcb47e75ed753d", 0xef}], 0x3, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x7dab1b0}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0xfffff582}], 0x48, 0xc0}, 0x10004088) semctl$GETALL(0x0, 0x0, 0xd, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) [ 589.125252] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 589.144880] overlayfs: failed to clone upperpath 00:20:57 executing program 0 (fault-call:5 fault-nth:29): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 589.190035] protocol 88fb is buggy, dev hsr_slave_0 [ 589.195158] protocol 88fb is buggy, dev hsr_slave_1 [ 589.200329] protocol 88fb is buggy, dev hsr_slave_0 [ 589.205416] protocol 88fb is buggy, dev hsr_slave_1 [ 589.237746] FAULT_INJECTION: forcing a failure. [ 589.237746] name failslab, interval 1, probability 0, space 0, times 0 [ 589.267771] CPU: 0 PID: 16466 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 589.274856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.284211] Call Trace: [ 589.286834] dump_stack+0x138/0x197 [ 589.290489] should_fail.cold+0x10f/0x159 [ 589.294628] should_failslab+0xdb/0x130 [ 589.298583] __kmalloc_track_caller+0x2ec/0x790 [ 589.303237] ? kstrdup_const+0x48/0x60 [ 589.307118] kstrdup+0x3a/0x70 [ 589.310300] kstrdup_const+0x48/0x60 [ 589.314026] alloc_vfsmnt+0xe5/0x7d0 [ 589.317723] clone_mnt+0x70/0xee0 [ 589.321179] clone_private_mount+0x9f/0xe0 [ 589.325396] ovl_fill_super+0xf04/0x2660 [ 589.329464] ? ovl_put_super+0x4b0/0x4b0 [ 589.333503] ? sget_userns+0x76b/0xc30 [ 589.337371] ? get_anon_bdev+0x1c0/0x1c0 [ 589.341436] ? get_anon_bdev+0x1c0/0x1c0 [ 589.345482] ? sget+0xde/0x120 [ 589.348657] ? selinux_sb_copy_data+0x21e/0x390 [ 589.353330] ? ovl_put_super+0x4b0/0x4b0 [ 589.357394] mount_nodev+0x52/0xf0 [ 589.360918] ovl_mount+0x2d/0x40 [ 589.364265] mount_fs+0x97/0x2a1 [ 589.367693] vfs_kern_mount.part.0+0x5e/0x3d0 [ 589.372192] do_mount+0x417/0x27d0 [ 589.375717] ? retint_kernel+0x2d/0x2d [ 589.379590] ? copy_mount_string+0x40/0x40 [ 589.383804] ? __sanitizer_cov_trace_pc+0xe/0x60 [ 589.388662] ? copy_mount_options+0x1fe/0x2f0 [ 589.393170] SyS_mount+0xab/0x120 [ 589.396609] ? copy_mnt_ns+0x8c0/0x8c0 [ 589.400485] do_syscall_64+0x1e8/0x640 [ 589.404361] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.409205] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 589.414391] RIP: 0033:0x459a29 [ 589.417579] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 589.425289] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 589.432558] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 589.439829] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 589.447098] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 589.454455] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 589.490696] overlayfs: failed to clone upperpath [ 589.510033] protocol 88fb is buggy, dev hsr_slave_0 [ 589.516502] protocol 88fb is buggy, dev hsr_slave_1 00:20:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:20:59 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:20:59 executing program 0 (fault-call:5 fault-nth:30): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:20:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) stat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$cont(0x1f, r1, 0x7ff, 0x8ba8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) 00:20:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100000, 0x0) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x20, 0x0, 0x7}, 0x6) sendfile(r1, r0, 0x0, 0x800000c1) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 591.285249] FAULT_INJECTION: forcing a failure. [ 591.285249] name failslab, interval 1, probability 0, space 0, times 0 [ 591.298873] CPU: 1 PID: 16490 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 591.305954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.315597] Call Trace: [ 591.315616] dump_stack+0x138/0x197 [ 591.315635] should_fail.cold+0x10f/0x159 [ 591.315653] should_failslab+0xdb/0x130 [ 591.315665] kmem_cache_alloc+0x2d7/0x780 [ 591.315677] ? __d_lookup+0x3a2/0x670 [ 591.315689] ? mark_held_locks+0xb1/0x100 [ 591.315698] ? d_lookup+0xe5/0x240 [ 591.315712] __d_alloc+0x2d/0x9f0 [ 591.315727] d_alloc+0x4d/0x270 [ 591.315742] __lookup_hash+0x58/0x180 [ 591.315755] lookup_one_len+0x27b/0x3a0 [ 591.315768] ? __lookup_hash+0x180/0x180 [ 591.315785] ovl_workdir_create+0x127/0x4e0 [ 591.315799] ? ovl_mount_dir+0x1a0/0x1a0 [ 591.315811] ? _raw_spin_unlock+0x2d/0x50 [ 591.315821] ? clone_mnt+0x65a/0xee0 [ 591.315842] ovl_fill_super+0x100c/0x2660 [ 591.315862] ? ovl_put_super+0x4b0/0x4b0 [ 591.315870] ? sget_userns+0x76b/0xc30 [ 591.315877] ? get_anon_bdev+0x1c0/0x1c0 [ 591.315891] ? get_anon_bdev+0x1c0/0x1c0 [ 591.315899] ? sget+0xde/0x120 [ 591.315909] ? selinux_sb_copy_data+0x21e/0x390 [ 591.315919] ? ovl_put_super+0x4b0/0x4b0 [ 591.315927] mount_nodev+0x52/0xf0 [ 591.315937] ovl_mount+0x2d/0x40 [ 591.322034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26998 sclass=netlink_route_socket pig=16493 comm=syz-executor.1 [ 591.322197] mount_fs+0x97/0x2a1 [ 591.437085] vfs_kern_mount.part.0+0x5e/0x3d0 [ 591.443252] do_mount+0x417/0x27d0 [ 591.446780] ? copy_mount_options+0x5c/0x2f0 [ 591.451176] ? rcu_read_lock_sched_held+0x110/0x130 [ 591.456193] ? copy_mount_string+0x40/0x40 [ 591.460420] ? copy_mount_options+0x1fe/0x2f0 [ 591.465118] SyS_mount+0xab/0x120 [ 591.468559] ? copy_mnt_ns+0x8c0/0x8c0 [ 591.472434] do_syscall_64+0x1e8/0x640 [ 591.476310] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 591.481147] entry_SYSCALL_64_after_hwframe+0x42/0xb7 00:21:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x7f, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x110000104e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0, 0x0, 0x0, 0x314}}], 0x400000000000440, 0x2, 0x0) pipe2(0x0, 0x0) [ 591.486429] RIP: 0033:0x459a29 [ 591.489607] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 591.497304] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 591.504573] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 591.511826] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 591.519079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 591.526333] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 591.554052] overlayfs: failed to create directory ./file1\/work (errno: 12); mounting read-only [ 591.589087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26998 sclass=netlink_route_socket pig=16501 comm=syz-executor.1 00:21:00 executing program 0 (fault-call:5 fault-nth:31): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x7f, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x110000104e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0, 0x0, 0x0, 0x314}}], 0x400000000000440, 0x2, 0x0) pipe2(0x0, 0x0) 00:21:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100000, 0x0) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x20, 0x0, 0x7}, 0x6) sendfile(r1, r0, 0x0, 0x800000c1) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:21:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x7, 0x800}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = getpgid(r2) wait4(r3, 0x0, 0x2, &(0x7f0000000000)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x7, 0x0, 0x512d, 0x6}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r2, 0x0, 0x0) [ 591.776743] FAULT_INJECTION: forcing a failure. [ 591.776743] name failslab, interval 1, probability 0, space 0, times 0 [ 591.789207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26998 sclass=netlink_route_socket pig=16511 comm=syz-executor.1 [ 591.803772] CPU: 1 PID: 16514 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 591.810823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.820183] Call Trace: [ 591.822782] dump_stack+0x138/0x197 [ 591.826427] should_fail.cold+0x10f/0x159 [ 591.830590] should_failslab+0xdb/0x130 [ 591.834573] kmem_cache_alloc+0x2d7/0x780 [ 591.838722] ? trace_hardirqs_on+0x10/0x10 [ 591.842968] ? ext4_sync_fs+0x800/0x800 [ 591.846947] ext4_alloc_inode+0x1d/0x610 [ 591.851022] alloc_inode+0x64/0x180 [ 591.854656] new_inode_pseudo+0x19/0xf0 [ 591.858632] new_inode+0x1f/0x40 [ 591.862007] __ext4_new_inode+0x32c/0x4860 [ 591.866258] ? avc_has_perm+0x2df/0x4b0 [ 591.870239] ? ext4_free_inode+0x1210/0x1210 00:21:00 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x15) mkdir(&(0x7f0000000500)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000001c0), 0x24, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000200)={0x2d, 0x35, 0x0, 0x1d, 0x3, 0x81, 0x4, 0x139, 0xfffffffffffffffe}) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) write$P9_RGETATTR(r1, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) listen(0xffffffffffffffff, 0x7ffc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x50, &(0x7f0000004d00)={0x0, 0x989680}) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x800, 0x12) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r4, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xb) [ 591.874663] ? dquot_get_next_dqblk+0x160/0x160 [ 591.879342] ext4_mkdir+0x331/0xc20 [ 591.879356] ? privileged_wrt_inode_uidgid+0x9d/0xc0 [ 591.879372] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 591.892764] ? security_inode_mkdir+0xd0/0x110 [ 591.892781] vfs_mkdir+0x3ca/0x610 [ 591.892796] ovl_create_real+0x1f5/0x250 [ 591.892809] ovl_workdir_create+0x323/0x4e0 [ 591.892825] ? ovl_mount_dir+0x1a0/0x1a0 [ 591.913533] ? _raw_spin_unlock+0x2d/0x50 [ 591.917961] ovl_fill_super+0x100c/0x2660 [ 591.922118] ? ovl_put_super+0x4b0/0x4b0 [ 591.926175] ? sget_userns+0x76b/0xc30 [ 591.930082] ? get_anon_bdev+0x1c0/0x1c0 [ 591.934141] ? get_anon_bdev+0x1c0/0x1c0 [ 591.938193] ? sget+0xde/0x120 [ 591.941374] ? selinux_sb_copy_data+0x21e/0x390 [ 591.946036] ? ovl_put_super+0x4b0/0x4b0 [ 591.950123] mount_nodev+0x52/0xf0 [ 591.953656] ovl_mount+0x2d/0x40 [ 591.957064] mount_fs+0x97/0x2a1 [ 591.960424] vfs_kern_mount.part.0+0x5e/0x3d0 [ 591.964908] do_mount+0x417/0x27d0 [ 591.968434] ? copy_mount_options+0x5c/0x2f0 [ 591.972832] ? rcu_read_lock_sched_held+0x110/0x130 [ 591.977838] ? copy_mount_string+0x40/0x40 [ 591.982066] ? copy_mount_options+0x1fe/0x2f0 [ 591.986554] SyS_mount+0xab/0x120 [ 591.989999] ? copy_mnt_ns+0x8c0/0x8c0 [ 591.993878] do_syscall_64+0x1e8/0x640 [ 591.997749] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 592.002596] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 592.007772] RIP: 0033:0x459a29 [ 592.010945] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 592.018652] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 00:21:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, 0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)="6feea3d0205822f05633faf207e02f3c050cbddcb3f046a2a17e3a062e3d2c33e6b64423c096b8bec38f372b2560015a47140654e3012f69192370714a6947e43997c91c038d5ac679b574c192fea753fbf2b211f0a098a53208f2a6b501f8658513a1") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = dup(r1) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000080)={0x1f, 0x2, 0xfff, 0x1, 0xfffffffffffffffa, 0xffffffff}) ptrace$cont(0x20, r0, 0x0, 0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 592.025909] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 592.033166] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 592.040428] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 592.047696] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:21:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 592.194776] overlayfs: filesystem on './file0' not supported as upperdir [ 592.199815] overlayfs: failed to create directory ./file1\/work (errno: 12); mounting read-only [ 593.670061] net_ratelimit: 22 callbacks suppressed [ 593.670065] protocol 88fb is buggy, dev hsr_slave_0 [ 593.680130] protocol 88fb is buggy, dev hsr_slave_1 00:21:02 executing program 1: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) socket$tipc(0x1e, 0x2, 0x0) inotify_init() pipe(&(0x7f0000000000)={0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10d, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 00:21:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:02 executing program 0 (fault-call:5 fault-nth:32): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:02 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x15) mkdir(&(0x7f0000000500)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000001c0), 0x24, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000200)={0x2d, 0x35, 0x0, 0x1d, 0x3, 0x81, 0x4, 0x139, 0xfffffffffffffffe}) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) write$P9_RGETATTR(r1, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) listen(0xffffffffffffffff, 0x7ffc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x50, &(0x7f0000004d00)={0x0, 0x989680}) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x800, 0x12) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r4, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xb) 00:21:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 594.230055] protocol 88fb is buggy, dev hsr_slave_0 [ 594.235275] protocol 88fb is buggy, dev hsr_slave_1 [ 594.315896] FAULT_INJECTION: forcing a failure. [ 594.315896] name failslab, interval 1, probability 0, space 0, times 0 [ 594.333964] CPU: 1 PID: 16548 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 594.341027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.350388] Call Trace: [ 594.352986] dump_stack+0x138/0x197 [ 594.356624] should_fail.cold+0x10f/0x159 [ 594.360786] should_failslab+0xdb/0x130 [ 594.364769] __kmalloc+0x2f0/0x7a0 [ 594.368320] ? ext4_find_extent+0x709/0x960 [ 594.372646] ext4_find_extent+0x709/0x960 [ 594.376798] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 594.382263] ext4_ext_map_blocks+0x1a3/0x4fa0 [ 594.386757] ? save_trace+0x290/0x290 [ 594.390565] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 594.395584] ? __lock_is_held+0xb6/0x140 [ 594.399671] ? lock_acquire+0x16f/0x430 [ 594.403647] ? ext4_map_blocks+0x829/0x17c0 [ 594.407981] ext4_map_blocks+0x881/0x17c0 [ 594.412133] ? ext4_issue_zeroout+0x160/0x160 [ 594.416629] ? __brelse+0x50/0x60 [ 594.420089] ext4_getblk+0xac/0x450 [ 594.423715] ? ext4_iomap_begin+0x8a0/0x8a0 [ 594.428035] ? ext4_free_inode+0x1210/0x1210 [ 594.432469] ext4_bread+0x6e/0x1a0 [ 594.436009] ? ext4_getblk+0x450/0x450 [ 594.441385] ext4_append+0x14b/0x360 [ 594.445114] ext4_mkdir+0x531/0xc20 [ 594.448752] ? privileged_wrt_inode_uidgid+0x9d/0xc0 [ 594.453863] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 594.458541] ? security_inode_mkdir+0xd0/0x110 [ 594.463132] vfs_mkdir+0x3ca/0x610 [ 594.466677] ovl_create_real+0x1f5/0x250 [ 594.470745] ovl_workdir_create+0x323/0x4e0 [ 594.475072] ? ovl_mount_dir+0x1a0/0x1a0 [ 594.479137] ? _raw_spin_unlock+0x2d/0x50 [ 594.483303] ovl_fill_super+0x100c/0x2660 [ 594.484823] 9pnet: Insufficient options for proto=fd [ 594.487464] ? ovl_put_super+0x4b0/0x4b0 [ 594.496693] ? sget_userns+0x76b/0xc30 [ 594.500603] ? get_anon_bdev+0x1c0/0x1c0 [ 594.504667] ? get_anon_bdev+0x1c0/0x1c0 [ 594.508726] ? sget+0xde/0x120 [ 594.512814] ? selinux_sb_copy_data+0x21e/0x390 00:21:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") preadv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000140)=""/3, 0x3}, {&(0x7f0000000180)=""/162, 0xa2}], 0x3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2440a2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000080)={r3, 0x1f}) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x8d0, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, 0x0, 0x0) [ 594.517495] ? ovl_put_super+0x4b0/0x4b0 [ 594.521572] mount_nodev+0x52/0xf0 [ 594.521586] ovl_mount+0x2d/0x40 [ 594.521597] mount_fs+0x97/0x2a1 [ 594.528485] vfs_kern_mount.part.0+0x5e/0x3d0 [ 594.536312] do_mount+0x417/0x27d0 [ 594.539864] ? copy_mount_string+0x40/0x40 [ 594.544102] ? copy_mount_options+0x151/0x2f0 [ 594.548604] ? __sanitizer_cov_trace_pc+0x4e/0x60 [ 594.553457] ? copy_mount_options+0x1fe/0x2f0 [ 594.557959] SyS_mount+0xab/0x120 [ 594.561508] ? copy_mnt_ns+0x8c0/0x8c0 [ 594.565410] do_syscall_64+0x1e8/0x640 [ 594.569294] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 594.574141] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 594.579327] RIP: 0033:0x459a29 [ 594.582502] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 594.590313] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 594.597577] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 594.604832] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 00:21:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x200201, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 00:21:03 executing program 0 (fault-call:5 fault-nth:33): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:03 executing program 1: r0 = socket$packet(0x11, 0x8000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0xd4fa8b543cd10e13, 0x8de7d8f023d06bd7}, 0x48e279c972447b69) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4b000, 0x2101) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) dup3(r3, 0xffffffffffffffff, 0x80000) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x800, 0x2, 0x8de7d8f023d033d7}, 0xffffff7c) r6 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) socket$inet(0x2, 0x0, 0x0) close(0xffffffffffffffff) r7 = dup(r6) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x24000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) ftruncate(r8, 0x10099b7) sendfile(r7, r8, 0x0, 0x88000fbfffffc) connect$unix(r7, &(0x7f0000000080)=@abs, 0x6e) [ 594.612113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 594.619382] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 594.630470] overlayfs: failed to create directory ./file1\/work (errno: 12); mounting read-only [ 594.720154] protocol 88fb is buggy, dev hsr_slave_0 [ 594.725273] protocol 88fb is buggy, dev hsr_slave_1 [ 594.726716] FAULT_INJECTION: forcing a failure. [ 594.726716] name failslab, interval 1, probability 0, space 0, times 0 [ 594.743568] CPU: 0 PID: 16566 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 594.750607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.759964] Call Trace: [ 594.762565] dump_stack+0x138/0x197 [ 594.766209] should_fail.cold+0x10f/0x159 [ 594.770371] should_failslab+0xdb/0x130 [ 594.774354] kmem_cache_alloc+0x2d7/0x780 [ 594.778504] ? trace_hardirqs_on+0x10/0x10 [ 594.782751] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 594.788212] ? ext4_sync_fs+0x800/0x800 [ 594.792196] ext4_alloc_inode+0x1d/0x610 [ 594.796256] alloc_inode+0x64/0x180 [ 594.799879] new_inode_pseudo+0x19/0xf0 [ 594.804000] new_inode+0x1f/0x40 [ 594.807383] __ext4_new_inode+0x32c/0x4860 [ 594.811622] ? avc_has_perm+0x2df/0x4b0 [ 594.815632] ? ext4_free_inode+0x1210/0x1210 [ 594.820030] ? dquot_get_next_dqblk+0x160/0x160 [ 594.824691] ext4_mkdir+0x331/0xc20 [ 594.828320] ? privileged_wrt_inode_uidgid+0x9d/0xc0 [ 594.833443] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 594.838190] ? security_inode_mkdir+0xd0/0x110 [ 594.842778] vfs_mkdir+0x3ca/0x610 [ 594.846302] ovl_create_real+0x1f5/0x250 [ 594.850347] ovl_workdir_create+0x323/0x4e0 [ 594.854655] ? ovl_mount_dir+0x1a0/0x1a0 [ 594.858697] ? _raw_spin_unlock+0x2d/0x50 [ 594.862837] ovl_fill_super+0x100c/0x2660 [ 594.866984] ? ovl_put_super+0x4b0/0x4b0 [ 594.871148] ? sget_userns+0x76b/0xc30 [ 594.875034] ? get_anon_bdev+0x1c0/0x1c0 [ 594.879082] ? get_anon_bdev+0x1c0/0x1c0 [ 594.883995] ? sget+0xde/0x120 [ 594.887173] ? selinux_sb_copy_data+0x21e/0x390 [ 594.891846] ? ovl_put_super+0x4b0/0x4b0 [ 594.895924] mount_nodev+0x52/0xf0 [ 594.899455] ovl_mount+0x2d/0x40 [ 594.902819] mount_fs+0x97/0x2a1 [ 594.906194] vfs_kern_mount.part.0+0x5e/0x3d0 [ 594.910679] do_mount+0x417/0x27d0 [ 594.914201] ? copy_mount_options+0x5c/0x2f0 [ 594.918591] ? rcu_read_lock_sched_held+0x110/0x130 [ 594.923591] ? copy_mount_string+0x40/0x40 [ 594.927808] ? copy_mount_options+0x1fe/0x2f0 [ 594.932302] SyS_mount+0xab/0x120 [ 594.935750] ? copy_mnt_ns+0x8c0/0x8c0 [ 594.939637] do_syscall_64+0x1e8/0x640 [ 594.943511] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 594.948350] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 594.953519] RIP: 0033:0x459a29 [ 594.956706] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 594.964411] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 00:21:03 executing program 4: socket$kcm(0x10, 0x2, 0x10) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x43, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f008061fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3993be17dd8da1924425181aa5f7", 0x0, 0x100}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 594.971678] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 594.978943] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 594.986194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 594.993443] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 595.010685] overlayfs: failed to create directory ./file1\/work (errno: 12); mounting read-only [ 595.030047] protocol 88fb is buggy, dev hsr_slave_0 [ 595.035189] protocol 88fb is buggy, dev hsr_slave_1 00:21:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) 00:21:03 executing program 0 (fault-call:5 fault-nth:34): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="483c1a0000e0ff1e4c00006ba158a303670200ab"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r3, &(0x7f0000000480), 0x10000000000001e2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 've\xach\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000280)='security.SMACK64\x00', &(0x7f00000002c0)='+(selinuxposix_acl_accessem1trustedppp1{\x00', 0x29, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600"/534], 0x3}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', r5}) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000340)={0x1}, 0x8) [ 595.189195] audit: type=1800 audit(1569457263.817:139): pid=16561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.1" name="file0" dev="sda1" ino=16643 res=0 [ 595.230816] FAULT_INJECTION: forcing a failure. [ 595.230816] name failslab, interval 1, probability 0, space 0, times 0 [ 595.265529] CPU: 0 PID: 16588 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 595.272706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.282067] Call Trace: [ 595.284692] dump_stack+0x138/0x197 [ 595.288333] should_fail.cold+0x10f/0x159 [ 595.292493] should_failslab+0xdb/0x130 [ 595.296474] __kmalloc+0x2f0/0x7a0 [ 595.300027] ? ext4_find_extent+0x709/0x960 [ 595.304375] ext4_find_extent+0x709/0x960 [ 595.308532] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 595.313988] ext4_ext_map_blocks+0x1a3/0x4fa0 [ 595.319009] ? save_trace+0x290/0x290 [ 595.322817] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 595.327849] ? __lock_is_held+0xb6/0x140 [ 595.331920] ? lock_acquire+0x16f/0x430 [ 595.335981] ? ext4_map_blocks+0x402/0x17c0 [ 595.340308] ext4_map_blocks+0xd3c/0x17c0 [ 595.340318] ? __lock_is_held+0xb6/0x140 [ 595.340329] ? check_preemption_disabled+0x3c/0x250 [ 595.340344] ? ext4_issue_zeroout+0x160/0x160 [ 595.348534] ? __brelse+0x50/0x60 [ 595.348550] ext4_getblk+0xac/0x450 [ 595.348561] ? ext4_iomap_begin+0x8a0/0x8a0 [ 595.369650] ? ext4_free_inode+0x1210/0x1210 [ 595.374044] ext4_bread+0x6e/0x1a0 [ 595.377565] ? ext4_getblk+0x450/0x450 [ 595.381441] ext4_append+0x14b/0x360 [ 595.385140] ext4_mkdir+0x531/0xc20 [ 595.388748] ? privileged_wrt_inode_uidgid+0x9d/0xc0 [ 595.393842] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 595.398497] ? security_inode_mkdir+0xd0/0x110 [ 595.403062] vfs_mkdir+0x3ca/0x610 [ 595.406588] ovl_create_real+0x1f5/0x250 [ 595.410633] ovl_workdir_create+0x323/0x4e0 [ 595.414942] ? ovl_mount_dir+0x1a0/0x1a0 [ 595.418985] ? _raw_spin_unlock+0x2d/0x50 [ 595.423134] ovl_fill_super+0x100c/0x2660 [ 595.427268] ? ovl_put_super+0x4b0/0x4b0 [ 595.431483] ? sget_userns+0x76b/0xc30 [ 595.435372] ? get_anon_bdev+0x1c0/0x1c0 [ 595.439418] ? get_anon_bdev+0x1c0/0x1c0 [ 595.443487] ? sget+0xde/0x120 [ 595.446662] ? selinux_sb_copy_data+0x21e/0x390 [ 595.451333] ? ovl_put_super+0x4b0/0x4b0 [ 595.455385] mount_nodev+0x52/0xf0 [ 595.458920] ovl_mount+0x2d/0x40 [ 595.462265] mount_fs+0x97/0x2a1 [ 595.465630] vfs_kern_mount.part.0+0x5e/0x3d0 [ 595.470108] do_mount+0x417/0x27d0 [ 595.473635] ? copy_mount_string+0x40/0x40 [ 595.477851] ? copy_mount_options+0x151/0x2f0 [ 595.482341] ? __sanitizer_cov_trace_pc+0x38/0x60 [ 595.487168] ? copy_mount_options+0x1fe/0x2f0 [ 595.491660] SyS_mount+0xab/0x120 [ 595.495096] ? copy_mnt_ns+0x8c0/0x8c0 [ 595.498967] do_syscall_64+0x1e8/0x640 [ 595.502842] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 595.507671] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 595.512852] RIP: 0033:0x459a29 [ 595.516022] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 595.523721] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 595.530972] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 595.538224] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 595.545489] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 595.552832] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 595.560346] protocol 88fb is buggy, dev hsr_slave_0 [ 595.565423] protocol 88fb is buggy, dev hsr_slave_1 00:21:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:05 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) sysfs$2(0x2, 0x6, &(0x7f0000000340)=""/140) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) r2 = socket(0xa, 0x2, 0x7) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = fcntl$getown(r1, 0x9) r5 = syz_open_procfs(r4, &(0x7f00000001c0)='net?ip6_tables_matches\x00') finit_module(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r6}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r6, 0x7, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r6, 0x7}, &(0x7f0000000180)=0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000080)={0x0, @reserved}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x1ff, 0x0) 00:21:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x8, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}]]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004008}, 0x28804) syz_open_dev$char_usb(0xc, 0xb4, 0x6) 00:21:05 executing program 0 (fault-call:5 fault-nth:35): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:05 executing program 4: sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x2) dup2(r1, r2) sendfile(r1, r0, 0x0, 0x101) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') 00:21:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) [ 597.367070] FAULT_INJECTION: forcing a failure. [ 597.367070] name failslab, interval 1, probability 0, space 0, times 0 [ 597.392668] CPU: 1 PID: 16606 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 597.399771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.409132] Call Trace: [ 597.411737] dump_stack+0x138/0x197 [ 597.415431] should_fail.cold+0x10f/0x159 [ 597.419627] should_failslab+0xdb/0x130 [ 597.423608] kmem_cache_alloc+0x2d7/0x780 [ 597.427758] ? lock_downgrade+0x6e0/0x6e0 [ 597.431899] get_empty_filp+0x8c/0x3f0 [ 597.435778] dentry_open+0x5f/0x220 [ 597.439416] ovl_path_open+0x56/0x70 [ 597.443134] ovl_check_d_type_supported+0x85/0x1c0 [ 597.448052] ? ovl_cleanup_whiteouts+0x220/0x220 [ 597.452790] ? ovl_dir_fsync+0x370/0x370 [ 597.456880] ovl_fill_super+0x1057/0x2660 [ 597.461036] ? ovl_put_super+0x4b0/0x4b0 [ 597.465085] ? sget_userns+0x76b/0xc30 [ 597.468961] ? get_anon_bdev+0x1c0/0x1c0 [ 597.473021] ? get_anon_bdev+0x1c0/0x1c0 [ 597.477065] ? sget+0xde/0x120 [ 597.480252] ? selinux_sb_copy_data+0x21e/0x390 [ 597.484932] ? ovl_put_super+0x4b0/0x4b0 [ 597.488976] mount_nodev+0x52/0xf0 [ 597.492527] ovl_mount+0x2d/0x40 [ 597.495880] mount_fs+0x97/0x2a1 [ 597.499280] vfs_kern_mount.part.0+0x5e/0x3d0 [ 597.503780] do_mount+0x417/0x27d0 [ 597.507400] ? copy_mount_options+0x5c/0x2f0 [ 597.511795] ? rcu_read_lock_sched_held+0x110/0x130 [ 597.516823] ? copy_mount_string+0x40/0x40 [ 597.521062] ? copy_mount_options+0x1fe/0x2f0 [ 597.525561] SyS_mount+0xab/0x120 [ 597.529100] ? copy_mnt_ns+0x8c0/0x8c0 [ 597.532983] do_syscall_64+0x1e8/0x640 [ 597.536854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 597.541695] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 597.546875] RIP: 0033:0x459a29 [ 597.550137] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 597.557838] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 00:21:06 executing program 0 (fault-call:5 fault-nth:36): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 597.565089] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 597.572530] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 597.579811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 597.587133] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 597.634066] FAULT_INJECTION: forcing a failure. [ 597.634066] name failslab, interval 1, probability 0, space 0, times 0 [ 597.647917] CPU: 0 PID: 16621 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 597.654942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.664306] Call Trace: [ 597.666884] dump_stack+0x138/0x197 [ 597.670497] should_fail.cold+0x10f/0x159 [ 597.674633] should_failslab+0xdb/0x130 [ 597.678591] __kmalloc+0x2f0/0x7a0 [ 597.682118] ? ext4_find_extent+0x709/0x960 [ 597.686421] ext4_find_extent+0x709/0x960 [ 597.690565] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 597.696021] ext4_ext_map_blocks+0x1a3/0x4fa0 [ 597.700503] ? save_trace+0x290/0x290 [ 597.704296] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 597.709309] ? __lock_is_held+0xb6/0x140 [ 597.713360] ? lock_acquire+0x16f/0x430 [ 597.717319] ? ext4_map_blocks+0x829/0x17c0 [ 597.721630] ext4_map_blocks+0x881/0x17c0 [ 597.725765] ? ext4_issue_zeroout+0x160/0x160 [ 597.730239] ? __brelse+0x50/0x60 [ 597.733676] ext4_getblk+0xac/0x450 [ 597.737296] ? ext4_iomap_begin+0x8a0/0x8a0 [ 597.741604] ? ext4_free_inode+0x1210/0x1210 [ 597.745996] ext4_bread+0x6e/0x1a0 [ 597.749515] ? ext4_getblk+0x450/0x450 [ 597.753387] ext4_append+0x14b/0x360 [ 597.757199] ext4_mkdir+0x531/0xc20 [ 597.760814] ? privileged_wrt_inode_uidgid+0x9d/0xc0 [ 597.765924] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 597.770673] ? security_inode_mkdir+0xd0/0x110 [ 597.775248] vfs_mkdir+0x3ca/0x610 [ 597.778776] ovl_create_real+0x1f5/0x250 [ 597.782855] ovl_workdir_create+0x323/0x4e0 [ 597.787179] ? ovl_mount_dir+0x1a0/0x1a0 [ 597.791244] ? _raw_spin_unlock+0x2d/0x50 [ 597.795389] ovl_fill_super+0x100c/0x2660 [ 597.799528] ? ovl_put_super+0x4b0/0x4b0 [ 597.803575] ? sget_userns+0x76b/0xc30 [ 597.807443] ? get_anon_bdev+0x1c0/0x1c0 [ 597.811490] ? get_anon_bdev+0x1c0/0x1c0 [ 597.815532] ? sget+0xde/0x120 [ 597.818713] ? selinux_sb_copy_data+0x21e/0x390 [ 597.823364] ? ovl_put_super+0x4b0/0x4b0 [ 597.827404] mount_nodev+0x52/0xf0 [ 597.830924] ovl_mount+0x2d/0x40 [ 597.834272] mount_fs+0x97/0x2a1 [ 597.837621] vfs_kern_mount.part.0+0x5e/0x3d0 [ 597.842194] do_mount+0x417/0x27d0 [ 597.845714] ? copy_mount_options+0x5c/0x2f0 [ 597.850120] ? rcu_read_lock_sched_held+0x110/0x130 [ 597.855119] ? copy_mount_string+0x40/0x40 [ 597.859345] ? copy_mount_options+0x1fe/0x2f0 [ 597.863821] SyS_mount+0xab/0x120 [ 597.867253] ? copy_mnt_ns+0x8c0/0x8c0 [ 597.871121] do_syscall_64+0x1e8/0x640 [ 597.874989] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 597.879816] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 597.884986] RIP: 0033:0x459a29 [ 597.888242] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 597.895929] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 597.903194] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 597.910442] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 597.917693] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 597.924941] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:21:06 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2a4, 0xf4, 0x0, 0x0, 0xf4, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, &(0x7f0000000180), {[{{@uncond, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x1, 0x8, [0x20, 0x3b, 0x21, 0xf, 0x2a, 0x2f, 0x23, 0x5, 0x7, 0x2, 0x9, 0x0, 0x27, 0x22, 0x40, 0x29], 0x4834dc6e31f6c205, 0x1, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x28}, @broadcast, 0xffffff00, 0x0, 'team0\x00', 'vcan0\x00', {0xff}, {}, 0xff, 0x3, 0x4}, 0x0, 0xbc, 0x11c, 0x0, {}, [@inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0xc}}]}, @unspec=@CT2={0x60, 'CT\x00', 0x2, {0x0, 0x3, 0x0, 0x6, 'pptp\x00', 'syz0\x00', 0x9}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000080)=""/218, 0xda}], 0x5}}], 0x2, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\xa4h\x04\x00', 0x43732e5398416f1a}) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000200)=""/39, 0xfdef, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) dup2(r0, r1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000000)={0x580000, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3800000]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@loopback, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000240)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 00:21:06 executing program 0 (fault-call:5 fault-nth:37): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 597.939296] overlayfs: failed to create directory ./file1\/work (errno: 12); mounting read-only 00:21:06 executing program 4: sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x2) dup2(r1, r2) sendfile(r1, r0, 0x0, 0x101) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') [ 598.062552] FAULT_INJECTION: forcing a failure. [ 598.062552] name failslab, interval 1, probability 0, space 0, times 0 [ 598.074892] CPU: 0 PID: 16628 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 598.081919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.091266] Call Trace: [ 598.093861] dump_stack+0x138/0x197 [ 598.097488] should_fail.cold+0x10f/0x159 [ 598.101632] ? __es_tree_search.isra.0+0x15f/0x1c0 [ 598.106587] should_failslab+0xdb/0x130 [ 598.110557] kmem_cache_alloc+0x47/0x780 [ 598.114624] __es_insert_extent+0x26c/0xe60 [ 598.118940] ext4_es_insert_extent+0x1f0/0x590 [ 598.123513] ? check_preemption_disabled+0x3c/0x250 [ 598.128520] ? ext4_es_find_delayed_extent_range+0x960/0x960 [ 598.134306] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 598.139776] ? ext4_es_find_delayed_extent_range+0x31d/0x960 [ 598.145570] ext4_ext_put_gap_in_cache+0xcb/0x110 [ 598.150402] ? ext4_zeroout_es+0x170/0x170 [ 598.154628] ? ext4_find_extent+0x64c/0x960 [ 598.158943] ext4_ext_map_blocks+0x1d4b/0x4fa0 [ 598.163517] ? save_trace+0x290/0x290 [ 598.167346] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 598.172352] ? __lock_is_held+0xb6/0x140 [ 598.176423] ? lock_acquire+0x16f/0x430 [ 598.180387] ? ext4_map_blocks+0x402/0x17c0 [ 598.184707] ext4_map_blocks+0xd3c/0x17c0 [ 598.188844] ? __lock_is_held+0xb6/0x140 [ 598.192897] ? check_preemption_disabled+0x3c/0x250 [ 598.197905] ? ext4_issue_zeroout+0x160/0x160 [ 598.202403] ? __brelse+0x50/0x60 [ 598.205853] ext4_getblk+0xac/0x450 [ 598.209471] ? ext4_iomap_begin+0x8a0/0x8a0 [ 598.213800] ? ext4_free_inode+0x1210/0x1210 [ 598.218215] ext4_bread+0x6e/0x1a0 [ 598.221761] ? ext4_getblk+0x450/0x450 [ 598.225649] ext4_append+0x14b/0x360 [ 598.229363] ext4_mkdir+0x531/0xc20 [ 598.232985] ? privileged_wrt_inode_uidgid+0x9d/0xc0 [ 598.238089] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 598.242753] ? security_inode_mkdir+0xd0/0x110 [ 598.247343] vfs_mkdir+0x3ca/0x610 [ 598.250877] ovl_create_real+0x1f5/0x250 [ 598.254929] ovl_workdir_create+0x323/0x4e0 [ 598.259246] ? ovl_mount_dir+0x1a0/0x1a0 [ 598.263301] ? _raw_spin_unlock+0x2d/0x50 [ 598.267451] ovl_fill_super+0x100c/0x2660 [ 598.271610] ? ovl_put_super+0x4b0/0x4b0 [ 598.275658] ? sget_userns+0x76b/0xc30 [ 598.279532] ? get_anon_bdev+0x1c0/0x1c0 [ 598.283604] ? get_anon_bdev+0x1c0/0x1c0 [ 598.287657] ? sget+0xde/0x120 [ 598.290839] ? selinux_sb_copy_data+0x21e/0x390 [ 598.295498] ? ovl_put_super+0x4b0/0x4b0 [ 598.299561] mount_nodev+0x52/0xf0 [ 598.303096] ovl_mount+0x2d/0x40 [ 598.306453] mount_fs+0x97/0x2a1 [ 598.309812] vfs_kern_mount.part.0+0x5e/0x3d0 [ 598.314308] do_mount+0x417/0x27d0 [ 598.317839] ? retint_kernel+0x2d/0x2d [ 598.321728] ? copy_mount_string+0x40/0x40 [ 598.326041] ? copy_mount_options+0x199/0x2f0 [ 598.330530] ? copy_mount_options+0x1fe/0x2f0 [ 598.335020] SyS_mount+0xab/0x120 [ 598.338469] ? copy_mnt_ns+0x8c0/0x8c0 [ 598.342369] do_syscall_64+0x1e8/0x640 [ 598.346243] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 598.351083] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 598.356260] RIP: 0033:0x459a29 [ 598.359436] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 598.367134] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 598.374407] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 598.381666] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 598.388925] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 598.396184] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:21:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) 00:21:07 executing program 0 (fault-call:5 fault-nth:38): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 598.416984] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 598.424427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 598.545167] FAULT_INJECTION: forcing a failure. [ 598.545167] name failslab, interval 1, probability 0, space 0, times 0 [ 598.557153] CPU: 0 PID: 16641 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 598.564174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.573535] Call Trace: [ 598.576113] dump_stack+0x138/0x197 [ 598.579757] should_fail.cold+0x10f/0x159 [ 598.586521] ? __es_tree_search.isra.0+0x15f/0x1c0 [ 598.591451] should_failslab+0xdb/0x130 [ 598.595423] kmem_cache_alloc+0x47/0x780 [ 598.599476] ? ext4_es_can_be_merged+0x16e/0x230 [ 598.604233] __es_insert_extent+0x26c/0xe60 [ 598.608565] ext4_es_insert_extent+0x1f0/0x590 [ 598.613163] ? ext4_es_find_delayed_extent_range+0x960/0x960 [ 598.618972] ext4_map_blocks+0xab1/0x17c0 [ 598.623116] ? ext4_issue_zeroout+0x160/0x160 [ 598.627594] ? __brelse+0x50/0x60 [ 598.631044] ext4_getblk+0xac/0x450 [ 598.634672] ? ext4_iomap_begin+0x8a0/0x8a0 [ 598.638984] ? ext4_free_inode+0x1210/0x1210 [ 598.643386] ext4_bread+0x6e/0x1a0 [ 598.646924] ? ext4_getblk+0x450/0x450 [ 598.650797] ext4_append+0x14b/0x360 [ 598.654501] ext4_mkdir+0x531/0xc20 [ 598.658112] ? privileged_wrt_inode_uidgid+0x9d/0xc0 [ 598.663201] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 598.667858] ? security_inode_mkdir+0xd0/0x110 [ 598.672427] vfs_mkdir+0x3ca/0x610 [ 598.675951] ovl_create_real+0x1f5/0x250 [ 598.680006] ovl_workdir_create+0x323/0x4e0 [ 598.684324] ? ovl_mount_dir+0x1a0/0x1a0 [ 598.688397] ? _raw_spin_unlock+0x2d/0x50 [ 598.692567] ovl_fill_super+0x100c/0x2660 [ 598.697143] ? ovl_put_super+0x4b0/0x4b0 [ 598.701185] ? sget_userns+0x76b/0xc30 [ 598.705060] ? get_anon_bdev+0x1c0/0x1c0 [ 598.709114] ? get_anon_bdev+0x1c0/0x1c0 [ 598.713172] ? sget+0xde/0x120 [ 598.716357] ? selinux_sb_copy_data+0x21e/0x390 [ 598.721039] ? ovl_put_super+0x4b0/0x4b0 [ 598.725096] mount_nodev+0x52/0xf0 [ 598.728634] ovl_mount+0x2d/0x40 [ 598.731989] mount_fs+0x97/0x2a1 [ 598.735521] vfs_kern_mount.part.0+0x5e/0x3d0 [ 598.740005] do_mount+0x417/0x27d0 [ 598.743533] ? retint_kernel+0x2d/0x2d [ 598.747442] ? copy_mount_string+0x40/0x40 [ 598.751683] ? copy_mount_options+0x199/0x2f0 [ 598.756185] ? copy_mount_options+0x1fe/0x2f0 [ 598.760688] SyS_mount+0xab/0x120 [ 598.764138] ? copy_mnt_ns+0x8c0/0x8c0 [ 598.768016] do_syscall_64+0x1e8/0x640 [ 598.771889] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 598.776728] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 598.781915] RIP: 0033:0x459a29 [ 598.785088] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 598.792781] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 598.800036] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 598.807325] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 598.814579] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 598.821841] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 598.880057] net_ratelimit: 19 callbacks suppressed [ 598.880062] protocol 88fb is buggy, dev hsr_slave_0 [ 598.890691] protocol 88fb is buggy, dev hsr_slave_1 [ 598.927180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 598.963300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 599.190027] protocol 88fb is buggy, dev hsr_slave_0 [ 599.195168] protocol 88fb is buggy, dev hsr_slave_1 [ 599.670193] protocol 88fb is buggy, dev hsr_slave_0 [ 599.675295] protocol 88fb is buggy, dev hsr_slave_1 [ 599.680575] protocol 88fb is buggy, dev hsr_slave_0 [ 599.685720] protocol 88fb is buggy, dev hsr_slave_1 [ 599.990070] protocol 88fb is buggy, dev hsr_slave_0 00:21:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:09 executing program 0 (fault-call:5 fault-nth:39): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:09 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) dup2(r1, r3) 00:21:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) 00:21:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) 00:21:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() tkill(r1, 0x9) wait4(0x0, 0x0, 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r2 = getpid() tkill(r2, 0x9) ptrace$cont(0x18, r2, 0x48000000000000, 0x401) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xf, r2, 0x3ff, &(0x7f0000000140)="107f15d14058253ccf51d73c2953a84e87815debf19cbcda5a125b2561d4704ad45dc7aabdb53001777a240d853b8bfdf06093d55e66e51cc52030d1406440ef04c11bd441f7046dcc055a5d9251c0b941c55b09beeb51d5aea91ca58f943918f4541801b17048e79f1f0e6a3774cae133c5fea26c506a7f3b5fcf6645a23ae91532bf3d821e99ce3a214eff52be8f0a40c896d966924113efc5fd5460191349d84780427a8558d085") r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={[], 0x0, 0x400, 0x4, 0xa4, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) timer_create(0x70efa58e74419072, &(0x7f0000000280)={0x0, 0x2d, 0x6, @thr={&(0x7f0000000000)="517fc1d2c957a00ee68d8b1bdb710a6d7a6625d670c4b91b6f67de8ad4827e00d4c3455ff2b31f11bdbdb9e715e0d617a430fd4db4d0404d3a7bdcae4ab612478d154c8a44b63f32d125", &(0x7f0000000080)="af62815cc4f79a521629da8bc014166ac0e6d542ddf53ee79833c0722b71a08d7903115bb1d9fcf4467adcfce5b79f9d135afa0ad74603867af3dec2b0c961e9"}}, &(0x7f0000000100)) ptrace$cont(0x1f, r0, 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x88000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r4, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x7, 0xff, 0x8, 0x5, 0x9, 0xc0, 0x5, 0x8, 0x8, 0x3b, 0x8}, 0xb) fstatfs(r6, &(0x7f00000003c0)=""/255) [ 600.395204] FAULT_INJECTION: forcing a failure. [ 600.395204] name failslab, interval 1, probability 0, space 0, times 0 [ 600.425318] CPU: 0 PID: 16653 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 600.432570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.442103] Call Trace: 00:21:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$SO_COOKIE(r0, 0x1, 0x15, 0x0, &(0x7f0000000100)) 00:21:09 executing program 1: socket$inet6(0xa, 0x3, 0x0) [ 600.444708] dump_stack+0x138/0x197 [ 600.448346] should_fail.cold+0x10f/0x159 [ 600.452519] should_failslab+0xdb/0x130 [ 600.456507] kmem_cache_alloc+0x2d7/0x780 [ 600.461090] ? rcu_read_lock_sched_held+0x110/0x130 [ 600.461103] ? __mark_inode_dirty+0x2b7/0x1040 [ 600.461120] ext4_mb_new_blocks+0x509/0x3990 [ 600.461134] ? ext4_find_extent+0x709/0x960 [ 600.461156] ext4_ext_map_blocks+0x26cd/0x4fa0 [ 600.461174] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 600.461184] ? __lock_is_held+0xb6/0x140 [ 600.461201] ? lock_acquire+0x16f/0x430 [ 600.461221] ext4_map_blocks+0x881/0x17c0 [ 600.461238] ? ext4_issue_zeroout+0x160/0x160 [ 600.461249] ? __brelse+0x50/0x60 [ 600.461265] ext4_getblk+0xac/0x450 00:21:09 executing program 4: r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) [ 600.461277] ? ext4_iomap_begin+0x8a0/0x8a0 [ 600.461287] ? ext4_free_inode+0x1210/0x1210 [ 600.461301] ext4_bread+0x6e/0x1a0 [ 600.461310] ? ext4_getblk+0x450/0x450 [ 600.461326] ext4_append+0x14b/0x360 [ 600.461339] ext4_mkdir+0x531/0xc20 [ 600.461348] ? privileged_wrt_inode_uidgid+0x9d/0xc0 [ 600.461364] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 600.461378] ? security_inode_mkdir+0xd0/0x110 [ 600.461391] vfs_mkdir+0x3ca/0x610 [ 600.461405] ovl_create_real+0x1f5/0x250 [ 600.461419] ovl_workdir_create+0x323/0x4e0 00:21:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setfsgid(0xee01) 00:21:09 executing program 0 (fault-call:5 fault-nth:40): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 600.461435] ? ovl_mount_dir+0x1a0/0x1a0 [ 600.461446] ? _raw_spin_unlock+0x2d/0x50 [ 600.461474] ovl_fill_super+0x100c/0x2660 [ 600.461496] ? ovl_put_super+0x4b0/0x4b0 [ 600.461504] ? sget_userns+0x76b/0xc30 [ 600.461511] ? get_anon_bdev+0x1c0/0x1c0 [ 600.461526] ? get_anon_bdev+0x1c0/0x1c0 [ 600.461538] ? sget+0xde/0x120 [ 600.461549] ? selinux_sb_copy_data+0x21e/0x390 [ 600.461559] ? ovl_put_super+0x4b0/0x4b0 [ 600.461568] mount_nodev+0x52/0xf0 [ 600.461579] ovl_mount+0x2d/0x40 [ 600.461588] mount_fs+0x97/0x2a1 [ 600.461603] vfs_kern_mount.part.0+0x5e/0x3d0 [ 600.461618] do_mount+0x417/0x27d0 [ 600.461627] ? copy_mount_options+0x5c/0x2f0 [ 600.461637] ? rcu_read_lock_sched_held+0x110/0x130 [ 600.461651] ? copy_mount_string+0x40/0x40 [ 600.461666] ? copy_mount_options+0x1fe/0x2f0 [ 600.461679] SyS_mount+0xab/0x120 [ 600.461688] ? copy_mnt_ns+0x8c0/0x8c0 [ 600.461701] do_syscall_64+0x1e8/0x640 [ 600.461713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 600.461729] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 600.461737] RIP: 0033:0x459a29 [ 600.461742] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 600.461753] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 600.461759] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 600.461765] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 600.461770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 600.461776] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 600.527576] overlayfs: failed to create directory ./file1\/work (errno: 12); mounting read-only [ 600.823281] FAULT_INJECTION: forcing a failure. [ 600.823281] name failslab, interval 1, probability 0, space 0, times 0 [ 600.834985] CPU: 1 PID: 16698 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 600.842099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.851450] Call Trace: [ 600.851472] dump_stack+0x138/0x197 [ 600.851490] should_fail.cold+0x10f/0x159 [ 600.851506] should_failslab+0xdb/0x130 [ 600.851518] kmem_cache_alloc+0x2d7/0x780 [ 600.851529] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 600.851540] ? check_preemption_disabled+0x3c/0x250 [ 600.851555] selinux_file_alloc_security+0xb4/0x190 [ 600.851566] security_file_alloc+0x6d/0xa0 [ 600.851578] get_empty_filp+0x162/0x3f0 [ 600.851588] dentry_open+0x5f/0x220 [ 600.851601] ovl_path_open+0x56/0x70 [ 600.851611] ovl_check_d_type_supported+0x85/0x1c0 [ 600.851621] ? ovl_cleanup_whiteouts+0x220/0x220 [ 600.851629] ? ovl_dir_fsync+0x370/0x370 [ 600.851647] ovl_fill_super+0x1057/0x2660 [ 600.857863] ? ovl_put_super+0x4b0/0x4b0 [ 600.857872] ? sget_userns+0x76b/0xc30 [ 600.857880] ? get_anon_bdev+0x1c0/0x1c0 [ 600.857893] ? get_anon_bdev+0x1c0/0x1c0 [ 600.934903] ? sget+0xde/0x120 [ 600.938105] ? selinux_sb_copy_data+0x21e/0x390 [ 600.942791] ? ovl_put_super+0x4b0/0x4b0 [ 600.946834] mount_nodev+0x52/0xf0 [ 600.956442] ovl_mount+0x2d/0x40 [ 600.959803] mount_fs+0x97/0x2a1 [ 600.963211] vfs_kern_mount.part.0+0x5e/0x3d0 [ 600.967755] do_mount+0x417/0x27d0 [ 600.971287] ? copy_mount_options+0x5c/0x2f0 [ 600.976416] ? rcu_read_lock_sched_held+0x110/0x130 [ 600.981421] ? copy_mount_string+0x40/0x40 [ 600.985642] ? copy_mount_options+0x1fe/0x2f0 [ 600.990128] SyS_mount+0xab/0x120 [ 600.993585] ? copy_mnt_ns+0x8c0/0x8c0 [ 600.997466] do_syscall_64+0x1e8/0x640 [ 601.001358] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 601.006196] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 601.011378] RIP: 0033:0x459a29 [ 601.014549] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 601.022249] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 601.029678] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 601.037103] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 601.044356] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 601.051608] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:21:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe07bf070") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\b', 0x1, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) 00:21:12 executing program 1: 00:21:12 executing program 0 (fault-call:5 fault-nth:41): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) 00:21:12 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x20, 0x0, 0x0, 0x135}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x3, {0x92, 0x0, "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", 0xf6, 0x0, 0x7, 0xfa, 0x80, 0x28, 0xdd, 0x1}, r4}}, 0x128) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x7, 0x0) 00:21:12 executing program 4: [ 603.422204] audit: type=1400 audit(1569457272.047:140): avc: denied { create } for pid=16702 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 603.433403] FAULT_INJECTION: forcing a failure. [ 603.433403] name failslab, interval 1, probability 0, space 0, times 0 00:21:12 executing program 1: 00:21:12 executing program 4: 00:21:12 executing program 4: [ 603.553191] CPU: 1 PID: 16708 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 603.560276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.569646] Call Trace: [ 603.572359] dump_stack+0x138/0x197 [ 603.576001] should_fail.cold+0x10f/0x159 [ 603.580172] should_failslab+0xdb/0x130 [ 603.584169] kmem_cache_alloc_trace+0x2e9/0x790 [ 603.588862] ? trace_hardirqs_on+0x10/0x10 [ 603.593108] ? __lock_is_held+0xb6/0x140 [ 603.597182] ext4_readdir+0x18d9/0x2a40 00:21:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000300)={'nat\x00'}, &(0x7f00000003c0)=0x78) [ 603.601347] ? cmos_read_alarm+0x68/0x820 [ 603.605507] ? __ext4_check_dir_entry+0x310/0x310 [ 603.610437] ? iterate_dir+0xc3/0x5f0 [ 603.614250] iterate_dir+0x1a2/0x5f0 [ 603.617974] ovl_check_d_type_supported+0xe4/0x1c0 [ 603.622909] ? ovl_cleanup_whiteouts+0x220/0x220 [ 603.627671] ? ovl_dir_fsync+0x370/0x370 [ 603.631750] ovl_fill_super+0x1057/0x2660 [ 603.635913] ? ovl_put_super+0x4b0/0x4b0 [ 603.639982] ? sget_userns+0x76b/0xc30 [ 603.643875] ? get_anon_bdev+0x1c0/0x1c0 [ 603.647943] ? get_anon_bdev+0x1c0/0x1c0 00:21:12 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ee6000}, 0x200000}) [ 603.652006] ? sget+0xde/0x120 [ 603.655230] ? selinux_sb_copy_data+0x21e/0x390 [ 603.659921] ? ovl_put_super+0x4b0/0x4b0 [ 603.660343] audit: type=1400 audit(1569457272.257:141): avc: denied { map } for pid=16729 comm="syz-executor.4" path=2F726F6F742F73797A6B616C6C65722D746573746469723434303237363339352F73797A6B616C6C65722E574B356463632F3331332F7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17164 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 603.663996] mount_nodev+0x52/0xf0 [ 603.713272] ovl_mount+0x2d/0x40 [ 603.716646] mount_fs+0x97/0x2a1 [ 603.720049] vfs_kern_mount.part.0+0x5e/0x3d0 [ 603.724563] do_mount+0x417/0x27d0 [ 603.728112] ? copy_mount_options+0x5c/0x2f0 [ 603.732526] ? rcu_read_lock_sched_held+0x110/0x130 [ 603.737550] ? copy_mount_string+0x40/0x40 [ 603.737566] ? copy_mount_options+0x1fe/0x2f0 [ 603.737578] SyS_mount+0xab/0x120 [ 603.746323] ? copy_mnt_ns+0x8c0/0x8c0 [ 603.746338] do_syscall_64+0x1e8/0x640 [ 603.746347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 603.746364] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 603.746375] RIP: 0033:0x459a29 [ 603.770735] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 603.779034] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 603.786479] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 603.793742] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 603.801001] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 603.808258] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 604.150128] net_ratelimit: 23 callbacks suppressed [ 604.150133] protocol 88fb is buggy, dev hsr_slave_0 [ 604.160189] protocol 88fb is buggy, dev hsr_slave_1 [ 604.630052] protocol 88fb is buggy, dev hsr_slave_0 [ 604.635192] protocol 88fb is buggy, dev hsr_slave_1 [ 605.190064] protocol 88fb is buggy, dev hsr_slave_0 [ 605.195246] protocol 88fb is buggy, dev hsr_slave_1 [ 605.430040] protocol 88fb is buggy, dev hsr_slave_0 [ 605.435137] protocol 88fb is buggy, dev hsr_slave_1 [ 605.910073] protocol 88fb is buggy, dev hsr_slave_0 [ 605.915211] protocol 88fb is buggy, dev hsr_slave_1 00:21:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) tkill(r0, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:15 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x1003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8941, &(0x7f0000000240)=0x1) 00:21:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffde2, 0x0, 0x0, 0xa90956fd5e75c1f9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x8}]}}}]}, 0x44}}, 0x0) 00:21:15 executing program 0 (fault-call:5 fault-nth:42): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) 00:21:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpid() tkill(r2, 0x9) ioprio_set$pid(0x2, r2, 0xffff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r3, 0x0, 0xedc0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000080)={0xe, 0x6d, &(0x7f0000000000)="ebf0a078b0cbf28359933ed1d78909cff357fffea02e6a5b4209e21c295440778db0a69bbc9c970de93027766d9c38c1eb25f0d8564352ae0cea235e9545fb5a9db185fcfead9abae23bea39be5a7adc9ef0110f9786ebcc2275facdfe19279bfa20773435422988e248e8bd03"}) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 606.536944] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 606.556111] FAULT_INJECTION: forcing a failure. [ 606.556111] name failslab, interval 1, probability 0, space 0, times 0 [ 606.572183] CPU: 1 PID: 16748 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 606.579269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.588631] Call Trace: [ 606.591233] dump_stack+0x138/0x197 [ 606.594861] should_fail.cold+0x10f/0x159 [ 606.599005] should_failslab+0xdb/0x130 [ 606.602974] kmem_cache_alloc+0x2d7/0x780 [ 606.607107] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 606.612544] ? check_preemption_disabled+0x3c/0x250 [ 606.617736] selinux_file_alloc_security+0xb4/0x190 [ 606.622826] security_file_alloc+0x6d/0xa0 [ 606.627070] get_empty_filp+0x162/0x3f0 [ 606.631032] dentry_open+0x5f/0x220 [ 606.634644] ovl_path_open+0x56/0x70 [ 606.638340] ovl_check_d_type_supported+0x85/0x1c0 [ 606.643250] ? ovl_cleanup_whiteouts+0x220/0x220 [ 606.647995] ? ovl_dir_fsync+0x370/0x370 [ 606.652058] ovl_fill_super+0x1057/0x2660 [ 606.656200] ? ovl_put_super+0x4b0/0x4b0 [ 606.660244] ? sget_userns+0x76b/0xc30 [ 606.667604] ? get_anon_bdev+0x1c0/0x1c0 [ 606.671651] ? get_anon_bdev+0x1c0/0x1c0 [ 606.675698] ? sget+0xde/0x120 [ 606.678875] ? selinux_sb_copy_data+0x21e/0x390 [ 606.683531] ? ovl_put_super+0x4b0/0x4b0 [ 606.687662] mount_nodev+0x52/0xf0 [ 606.691186] ovl_mount+0x2d/0x40 [ 606.694630] mount_fs+0x97/0x2a1 [ 606.697983] vfs_kern_mount.part.0+0x5e/0x3d0 [ 606.702492] do_mount+0x417/0x27d0 [ 606.706026] ? copy_mount_options+0x5c/0x2f0 [ 606.710440] ? rcu_read_lock_sched_held+0x110/0x130 [ 606.715458] ? copy_mount_string+0x40/0x40 [ 606.719689] ? copy_mount_options+0x1fe/0x2f0 [ 606.724956] SyS_mount+0xab/0x120 [ 606.728394] ? copy_mnt_ns+0x8c0/0x8c0 [ 606.732442] do_syscall_64+0x1e8/0x640 [ 606.736660] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 606.741676] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 606.746875] RIP: 0033:0x459a29 [ 606.750054] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 606.757750] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 606.765354] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 606.772627] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 606.779881] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 00:21:15 executing program 0 (fault-call:5 fault-nth:43): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r2}) sendfile(r1, r2, 0x0, 0xedc0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0xffff) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0xe040, 0x0) getsockopt$packet_int(r4, 0x107, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f00000001c0)={0x3, 0x1ff, 0x200, 0x400, r8}) ioctl$FICLONE(r1, 0x40049409, r9) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 606.787932] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:21:15 executing program 4: 00:21:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffde2, 0x0, 0x0, 0xa90956fd5e75c1f9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x8}]}}}]}, 0x44}}, 0x0) 00:21:15 executing program 4: 00:21:15 executing program 4: [ 606.898693] FAULT_INJECTION: forcing a failure. [ 606.898693] name failslab, interval 1, probability 0, space 0, times 0 [ 606.925697] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 606.943921] CPU: 0 PID: 16772 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 606.950990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.960348] Call Trace: [ 606.963073] dump_stack+0x138/0x197 [ 606.966725] should_fail.cold+0x10f/0x159 [ 606.970882] should_failslab+0xdb/0x130 [ 606.974857] __kmalloc+0x2f0/0x7a0 [ 606.978590] ? ext4_htree_store_dirent+0x8a/0x5d0 [ 606.983701] ext4_htree_store_dirent+0x8a/0x5d0 [ 606.988380] htree_dirblock_to_tree+0x259/0x560 [ 606.993066] ? dx_probe+0x1080/0x1080 [ 606.996891] ext4_htree_fill_tree+0x215/0x910 [ 607.001393] ? save_trace+0x290/0x290 [ 607.005202] ? do_split+0x1d00/0x1d00 [ 607.008999] ? __lock_is_held+0xb6/0x140 [ 607.013060] ? check_preemption_disabled+0x3c/0x250 [ 607.018089] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 607.023564] ? ext4_readdir+0x18d9/0x2a40 [ 607.027708] ? rcu_read_lock_sched_held+0x110/0x130 [ 607.032713] ? kmem_cache_alloc_trace+0x623/0x790 [ 607.037560] ? free_rb_tree_fname+0xa0/0xe0 [ 607.042041] ext4_readdir+0x130c/0x2a40 [ 607.046005] ? __ext4_check_dir_entry+0x310/0x310 [ 607.050852] ? iterate_dir+0xc3/0x5f0 [ 607.054653] iterate_dir+0x1a2/0x5f0 [ 607.059221] ovl_check_d_type_supported+0xe4/0x1c0 [ 607.064135] ? ovl_cleanup_whiteouts+0x220/0x220 [ 607.068887] ? ovl_dir_fsync+0x370/0x370 [ 607.073027] ovl_fill_super+0x1057/0x2660 [ 607.077170] ? ovl_put_super+0x4b0/0x4b0 [ 607.081227] ? sget_userns+0x76b/0xc30 [ 607.085108] ? get_anon_bdev+0x1c0/0x1c0 [ 607.089162] ? get_anon_bdev+0x1c0/0x1c0 [ 607.093209] ? sget+0xde/0x120 [ 607.096473] ? selinux_sb_copy_data+0x21e/0x390 [ 607.101124] ? ovl_put_super+0x4b0/0x4b0 [ 607.105173] mount_nodev+0x52/0xf0 [ 607.108694] ovl_mount+0x2d/0x40 [ 607.112062] mount_fs+0x97/0x2a1 [ 607.115781] vfs_kern_mount.part.0+0x5e/0x3d0 [ 607.120280] do_mount+0x417/0x27d0 [ 607.123841] ? retint_kernel+0x2d/0x2d [ 607.127717] ? copy_mount_string+0x40/0x40 [ 607.131941] ? copy_mount_options+0x17c/0x2f0 [ 607.136689] ? copy_mount_options+0x1fe/0x2f0 [ 607.141185] SyS_mount+0xab/0x120 [ 607.144640] ? copy_mnt_ns+0x8c0/0x8c0 [ 607.148514] do_syscall_64+0x1e8/0x640 [ 607.152470] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 607.157312] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 607.162484] RIP: 0033:0x459a29 [ 607.165655] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 607.173354] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 607.180619] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 607.187876] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 607.195146] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 607.202403] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 609.350038] net_ratelimit: 18 callbacks suppressed [ 609.350044] protocol 88fb is buggy, dev hsr_slave_0 [ 609.360210] protocol 88fb is buggy, dev hsr_slave_1 00:21:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:18 executing program 4: 00:21:18 executing program 1: 00:21:18 executing program 0 (fault-call:5 fault-nth:44): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 00:21:18 executing program 4: 00:21:18 executing program 1: [ 609.590034] protocol 88fb is buggy, dev hsr_slave_0 [ 609.595177] protocol 88fb is buggy, dev hsr_slave_1 [ 609.605756] FAULT_INJECTION: forcing a failure. [ 609.605756] name failslab, interval 1, probability 0, space 0, times 0 [ 609.638143] CPU: 0 PID: 16792 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 609.645206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.654567] Call Trace: [ 609.657163] dump_stack+0x138/0x197 [ 609.660799] should_fail.cold+0x10f/0x159 [ 609.664955] should_failslab+0xdb/0x130 [ 609.668932] __kmalloc+0x2f0/0x7a0 [ 609.668947] ? ext4_htree_store_dirent+0x8a/0x5d0 [ 609.668958] ext4_htree_store_dirent+0x8a/0x5d0 [ 609.677763] htree_dirblock_to_tree+0x259/0x560 [ 609.677782] ? dx_probe+0x1080/0x1080 [ 609.677795] ext4_htree_fill_tree+0x215/0x910 [ 609.677807] ? save_trace+0x290/0x290 [ 609.699334] ? do_split+0x1d00/0x1d00 [ 609.703118] ? __lock_is_held+0xb6/0x140 [ 609.707173] ? check_preemption_disabled+0x3c/0x250 [ 609.712206] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 609.717651] ? ext4_readdir+0x18d9/0x2a40 [ 609.721877] ? rcu_read_lock_sched_held+0x110/0x130 [ 609.726891] ? kmem_cache_alloc_trace+0x623/0x790 [ 609.731728] ? free_rb_tree_fname+0xa0/0xe0 [ 609.736039] ext4_readdir+0x130c/0x2a40 [ 609.740025] ? __ext4_check_dir_entry+0x310/0x310 [ 609.744867] ? iterate_dir+0xc3/0x5f0 [ 609.748659] iterate_dir+0x1a2/0x5f0 [ 609.752362] ovl_check_d_type_supported+0xe4/0x1c0 [ 609.757295] ? ovl_cleanup_whiteouts+0x220/0x220 [ 609.762040] ? ovl_dir_fsync+0x370/0x370 [ 609.766105] ovl_fill_super+0x1057/0x2660 [ 609.770240] ? ovl_put_super+0x4b0/0x4b0 [ 609.774286] ? sget_userns+0x76b/0xc30 [ 609.778155] ? get_anon_bdev+0x1c0/0x1c0 [ 609.782203] ? get_anon_bdev+0x1c0/0x1c0 [ 609.786245] ? sget+0xde/0x120 [ 609.789422] ? selinux_sb_copy_data+0x21e/0x390 [ 609.794074] ? ovl_put_super+0x4b0/0x4b0 [ 609.798137] mount_nodev+0x52/0xf0 [ 609.801673] ovl_mount+0x2d/0x40 [ 609.805107] mount_fs+0x97/0x2a1 [ 609.808459] vfs_kern_mount.part.0+0x5e/0x3d0 [ 609.812941] do_mount+0x417/0x27d0 [ 609.816467] ? copy_mount_string+0x40/0x40 [ 609.820683] ? copy_mount_options+0x151/0x2f0 [ 609.825161] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 609.830033] ? copy_mount_options+0x1fe/0x2f0 [ 609.834531] SyS_mount+0xab/0x120 00:21:18 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = getpid() tkill(r0, 0x9) ptrace$getenv(0x4201, r0, 0x25, &(0x7f0000000000)) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) tkill(r1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:21:18 executing program 4: [ 609.837990] ? copy_mnt_ns+0x8c0/0x8c0 [ 609.841887] do_syscall_64+0x1e8/0x640 [ 609.845773] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 609.850616] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 609.850624] RIP: 0033:0x459a29 [ 609.850629] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 609.850639] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 609.850644] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 609.850648] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 00:21:18 executing program 0 (fault-call:5 fault-nth:45): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:18 executing program 1: 00:21:18 executing program 4: [ 609.850654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 609.850659] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 609.908556] FAULT_INJECTION: forcing a failure. [ 609.908556] name failslab, interval 1, probability 0, space 0, times 0 [ 609.936959] CPU: 0 PID: 16805 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 609.944057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.953428] Call Trace: [ 609.953449] dump_stack+0x138/0x197 [ 609.953465] should_fail.cold+0x10f/0x159 [ 609.953480] should_failslab+0xdb/0x130 [ 609.953495] kmem_cache_alloc+0x2d7/0x780 [ 609.959712] ? privileged_wrt_inode_uidgid+0x9d/0xc0 [ 609.959729] __d_alloc+0x2d/0x9f0 [ 609.959741] d_alloc+0x4d/0x270 [ 609.968021] vfs_tmpfile+0xc7/0x280 [ 609.968035] ovl_fill_super+0x10a2/0x2660 [ 609.977272] ? ovl_put_super+0x4b0/0x4b0 [ 609.977281] ? sget_userns+0x76b/0xc30 [ 609.999674] ? get_anon_bdev+0x1c0/0x1c0 [ 610.003751] ? get_anon_bdev+0x1c0/0x1c0 [ 610.007830] ? sget+0xde/0x120 [ 610.011032] ? selinux_sb_copy_data+0x21e/0x390 [ 610.015709] ? ovl_put_super+0x4b0/0x4b0 [ 610.019766] mount_nodev+0x52/0xf0 [ 610.023292] ovl_mount+0x2d/0x40 [ 610.026663] mount_fs+0x97/0x2a1 [ 610.030067] vfs_kern_mount.part.0+0x5e/0x3d0 [ 610.034545] do_mount+0x417/0x27d0 [ 610.038070] ? copy_mount_options+0x5c/0x2f0 [ 610.042486] ? rcu_read_lock_sched_held+0x110/0x130 [ 610.047501] ? copy_mount_string+0x40/0x40 [ 610.051720] ? copy_mount_options+0x1fe/0x2f0 [ 610.056206] SyS_mount+0xab/0x120 [ 610.059641] ? copy_mnt_ns+0x8c0/0x8c0 [ 610.063511] do_syscall_64+0x1e8/0x640 [ 610.067380] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 610.072210] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 610.077381] RIP: 0033:0x459a29 [ 610.080551] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 610.088241] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 610.095507] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 610.102760] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 610.110038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 610.117377] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 610.124900] protocol 88fb is buggy, dev hsr_slave_0 [ 610.131217] protocol 88fb is buggy, dev hsr_slave_1 [ 610.136361] protocol 88fb is buggy, dev hsr_slave_0 [ 610.141486] protocol 88fb is buggy, dev hsr_slave_1 [ 610.153251] overlayfs: upper fs does not support tmpfile. [ 610.390079] protocol 88fb is buggy, dev hsr_slave_0 [ 610.395174] protocol 88fb is buggy, dev hsr_slave_1 00:21:21 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0xfffffffc, 0x9, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:21 executing program 1: 00:21:21 executing program 4: 00:21:21 executing program 0 (fault-call:5 fault-nth:46): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 00:21:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 612.632093] FAULT_INJECTION: forcing a failure. [ 612.632093] name failslab, interval 1, probability 0, space 0, times 0 [ 612.645007] CPU: 0 PID: 16825 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 612.652062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.661418] Call Trace: [ 612.661436] dump_stack+0x138/0x197 [ 612.661455] should_fail.cold+0x10f/0x159 [ 612.661471] should_failslab+0xdb/0x130 [ 612.661482] __kmalloc+0x2f0/0x7a0 [ 612.661495] ? ext4_htree_store_dirent+0x8a/0x5d0 [ 612.661506] ext4_htree_store_dirent+0x8a/0x5d0 [ 612.667736] htree_dirblock_to_tree+0x259/0x560 [ 612.667755] ? dx_probe+0x1080/0x1080 [ 612.667768] ext4_htree_fill_tree+0x215/0x910 [ 612.667781] ? save_trace+0x290/0x290 [ 612.705772] ? do_split+0x1d00/0x1d00 [ 612.705784] ? __lock_is_held+0xb6/0x140 [ 612.713631] ? check_preemption_disabled+0x3c/0x250 [ 612.718644] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 612.718656] ? ext4_readdir+0x18d9/0x2a40 [ 612.718668] ? rcu_read_lock_sched_held+0x110/0x130 [ 612.733597] ? kmem_cache_alloc_trace+0x623/0x790 [ 612.738451] ? free_rb_tree_fname+0xa0/0xe0 [ 612.742784] ext4_readdir+0x130c/0x2a40 [ 612.746909] ? __ext4_check_dir_entry+0x310/0x310 [ 612.751789] ? iterate_dir+0xc3/0x5f0 [ 612.755617] iterate_dir+0x1a2/0x5f0 [ 612.759485] ovl_check_d_type_supported+0xe4/0x1c0 [ 612.764420] ? ovl_cleanup_whiteouts+0x220/0x220 [ 612.769187] ? ovl_dir_fsync+0x370/0x370 [ 612.773277] ovl_fill_super+0x1057/0x2660 [ 612.777455] ? ovl_put_super+0x4b0/0x4b0 [ 612.781541] ? sget_userns+0x76b/0xc30 [ 612.785524] ? get_anon_bdev+0x1c0/0x1c0 [ 612.789601] ? get_anon_bdev+0x1c0/0x1c0 [ 612.793668] ? sget+0xde/0x120 [ 612.796878] ? selinux_sb_copy_data+0x21e/0x390 [ 612.801560] ? ovl_put_super+0x4b0/0x4b0 [ 612.805720] mount_nodev+0x52/0xf0 [ 612.809373] ovl_mount+0x2d/0x40 [ 612.812840] mount_fs+0x97/0x2a1 [ 612.816228] vfs_kern_mount.part.0+0x5e/0x3d0 [ 612.820737] do_mount+0x417/0x27d0 [ 612.824286] ? copy_mount_string+0x40/0x40 [ 612.828526] ? copy_mount_options+0x151/0x2f0 00:21:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00caffffffffffff07000a00", @ANYRES32=0x6, @ANYBLOB="180012000c000100697036746e6c00000800020004001300"], 0x40}, 0x1, 0x0, 0x0, 0x4004008}, 0x28804) 00:21:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0x17642c4) r3 = dup2(r2, r2) preadv(r3, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x313040, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) socket(0x10, 0xa, 0xfc) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 00:21:21 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x80, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000140)={0x8, 0x0, 0x9, 0xffffffff, 0x11, 0xce, 0x0, 0x80, 0x3, 0x6, 0x20, 0x9}) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, 0x0, 0xedc0) ioctl$TIOCSCTTY(r3, 0x540e, 0x2) [ 612.833023] ? __sanitizer_cov_trace_pc+0x4e/0x60 [ 612.838140] ? copy_mount_options+0x1fe/0x2f0 [ 612.842840] SyS_mount+0xab/0x120 [ 612.846382] ? copy_mnt_ns+0x8c0/0x8c0 [ 612.851233] do_syscall_64+0x1e8/0x640 [ 612.855127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 612.860238] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 612.865516] RIP: 0033:0x459a29 [ 612.868704] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:21:21 executing program 0 (fault-call:5 fault-nth:47): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 612.876423] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 612.876429] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 612.876434] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 612.876440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 612.876444] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 612.958045] FAULT_INJECTION: forcing a failure. [ 612.958045] name failslab, interval 1, probability 0, space 0, times 0 [ 612.969538] CPU: 0 PID: 16857 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 612.976580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.985683] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 612.985933] Call Trace: [ 612.997535] dump_stack+0x138/0x197 [ 613.000464] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 613.001164] should_fail.cold+0x10f/0x159 [ 613.001183] should_failslab+0xdb/0x130 [ 613.001194] kmem_cache_alloc+0x2d7/0x780 [ 613.001204] ? __debug_object_init+0x171/0x8e0 [ 613.010409] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 613.014349] ? ext4_alloc_inode+0x1d/0x610 [ 613.014367] selinux_inode_alloc_security+0xb6/0x2a0 [ 613.014381] security_inode_alloc+0x94/0xd0 [ 613.014393] inode_init_always+0x552/0xaf0 [ 613.014402] alloc_inode+0x81/0x180 [ 613.014412] new_inode_pseudo+0x19/0xf0 [ 613.035983] new_inode+0x1f/0x40 [ 613.035995] __ext4_new_inode+0x32c/0x4860 [ 613.036005] ? __lock_acquire+0x5f7/0x4620 [ 613.036020] ? save_trace+0x290/0x290 [ 613.047484] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 613.049660] ? ext4_free_inode+0x1210/0x1210 [ 613.049675] ? save_trace+0x290/0x290 [ 613.049690] ? dquot_get_next_dqblk+0x160/0x160 [ 613.049699] ? find_held_lock+0x35/0x130 [ 613.049712] ? d_alloc+0x1e4/0x270 00:21:21 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x80, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000140)={0x8, 0x0, 0x9, 0xffffffff, 0x11, 0xce, 0x0, 0x80, 0x3, 0x6, 0x20, 0x9}) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, 0x0, 0xedc0) ioctl$TIOCSCTTY(r3, 0x540e, 0x2) [ 613.105633] ext4_tmpfile+0x1c8/0x430 [ 613.109447] ? ext4_orphan_add+0xb20/0xb20 [ 613.113685] ? _raw_spin_unlock+0x2d/0x50 [ 613.117835] ? d_alloc+0x1e9/0x270 [ 613.121554] vfs_tmpfile+0x129/0x280 [ 613.125274] ovl_fill_super+0x10a2/0x2660 [ 613.129436] ? ovl_put_super+0x4b0/0x4b0 [ 613.133504] ? sget_userns+0x76b/0xc30 [ 613.137488] ? get_anon_bdev+0x1c0/0x1c0 [ 613.141558] ? get_anon_bdev+0x1c0/0x1c0 [ 613.145620] ? sget+0xde/0x120 [ 613.148819] ? selinux_sb_copy_data+0x21e/0x390 [ 613.153496] ? ovl_put_super+0x4b0/0x4b0 [ 613.157566] mount_nodev+0x52/0xf0 [ 613.161094] ovl_mount+0x2d/0x40 [ 613.164442] mount_fs+0x97/0x2a1 [ 613.167797] vfs_kern_mount.part.0+0x5e/0x3d0 [ 613.172278] do_mount+0x417/0x27d0 [ 613.175809] ? copy_mount_options+0x5c/0x2f0 [ 613.180213] ? rcu_read_lock_sched_held+0x110/0x130 [ 613.185220] ? copy_mount_string+0x40/0x40 [ 613.189465] ? copy_mount_options+0x1fe/0x2f0 [ 613.193959] SyS_mount+0xab/0x120 [ 613.197410] ? copy_mnt_ns+0x8c0/0x8c0 [ 613.201298] do_syscall_64+0x1e8/0x640 [ 613.205176] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 613.210009] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 613.215180] RIP: 0033:0x459a29 [ 613.218354] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 613.226043] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 613.233306] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 613.240574] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 613.247848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 613.255111] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 613.263589] overlayfs: upper fs does not support tmpfile. [ 613.436853] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 613.466505] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 613.475793] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 613.495960] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 614.550032] net_ratelimit: 22 callbacks suppressed [ 614.550038] protocol 88fb is buggy, dev hsr_slave_0 [ 614.560066] protocol 88fb is buggy, dev hsr_slave_1 [ 615.350054] protocol 88fb is buggy, dev hsr_slave_0 [ 615.355167] protocol 88fb is buggy, dev hsr_slave_1 00:21:24 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:24 executing program 0 (fault-call:5 fault-nth:48): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 00:21:24 executing program 1: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7374617466735f70657263656e743d3007000000303030303030303030376607d3461f"]) 00:21:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 615.590059] protocol 88fb is buggy, dev hsr_slave_0 [ 615.595232] protocol 88fb is buggy, dev hsr_slave_1 00:21:24 executing program 4: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r1 = socket$inet6(0xa, 0x401000000801, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) close(r1) r2 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000000)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000200)) sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x2007fff) r6 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x2, 0x2) getpeername$netlink(r6, 0x0, 0x0) mq_getsetattr(r6, &(0x7f00000002c0)={0x1, 0x3, 0x7, 0x0, 0x8001, 0x1, 0x7, 0x7}, &(0x7f0000000300)) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x2, 0x8, 0x0, 0xffffffff}, 0xab4, 0x9, 'id1\x00', 'timer1\x00', 0x0, 0x6, 0x2, 0x9b, 0x8}) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x6, 0x5, &(0x7f0000000700)=[{&(0x7f0000000100)}, {&(0x7f0000000400)="ee81b331470d92fd13305587afe25d1647c509dde72d7dac6efca545b638325f4f0992032162f80bff67f07b33f5e9b14b0b2a6b2e8f80fe070ed1bc4c76454ab5b7b3c518487c70a4539e3fd4a3937e4c9e20fd7513b258d3e176509ef966590288be22e74b0de10e", 0x69, 0x4}, {&(0x7f0000000180)="f3c66849aa52daf66605f0b2ac7a3f367158ca625c2335afe00185d30b1fe9b756e4a116dbbf0cb319ce73c7f8e8a5b0e868a99aeeb8b9409717e831026c", 0x3e, 0x3}, {&(0x7f0000000240)="8dea90eaeb6911a0d95fbe66351ee7b49d35d48cc09c96822ef2b046bdf3a7f8", 0x20, 0x4a}, {0x0}], 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r9, r10, 0x0, 0xedc0) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r13}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000000140)={r13, 0x7, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000340)={r13, 0xc7f}, 0x8) 00:21:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4) [ 615.673812] gfs2: invalid mount option: statfs_percent=0 [ 615.681702] gfs2: can't parse mount arguments [ 615.712054] FAULT_INJECTION: forcing a failure. [ 615.712054] name failslab, interval 1, probability 0, space 0, times 0 [ 615.727024] CPU: 0 PID: 16892 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 615.734166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.734173] Call Trace: [ 615.734192] dump_stack+0x138/0x197 [ 615.734208] should_fail.cold+0x10f/0x159 [ 615.746185] should_failslab+0xdb/0x130 [ 615.746199] __kmalloc+0x2f0/0x7a0 [ 615.746210] ? up_write+0x1a/0x60 [ 615.746223] ? vfs_removexattr+0x5b/0x1d0 [ 615.769622] ? ovl_fill_super+0x1213/0x2660 [ 615.769638] ovl_fill_super+0x1213/0x2660 [ 615.769655] ? ovl_put_super+0x4b0/0x4b0 [ 615.778104] ? sget_userns+0x76b/0xc30 [ 615.778115] ? get_anon_bdev+0x1c0/0x1c0 [ 615.778130] ? get_anon_bdev+0x1c0/0x1c0 [ 615.778139] ? sget+0xde/0x120 [ 615.792315] gfs2: invalid mount option: statfs_percent=0 [ 615.794168] ? selinux_sb_copy_data+0x21e/0x390 [ 615.794183] ? ovl_put_super+0x4b0/0x4b0 [ 615.794192] mount_nodev+0x52/0xf0 [ 615.794202] ovl_mount+0x2d/0x40 [ 615.797452] gfs2: can't parse mount arguments [ 615.802913] mount_fs+0x97/0x2a1 [ 615.802930] vfs_kern_mount.part.0+0x5e/0x3d0 [ 615.802942] do_mount+0x417/0x27d0 [ 615.802949] ? copy_mount_options+0x5c/0x2f0 [ 615.802960] ? rcu_read_lock_sched_held+0x110/0x130 [ 615.802971] ? copy_mount_string+0x40/0x40 [ 615.802985] ? copy_mount_options+0x1fe/0x2f0 [ 615.802995] SyS_mount+0xab/0x120 [ 615.803003] ? copy_mnt_ns+0x8c0/0x8c0 [ 615.803018] do_syscall_64+0x1e8/0x640 [ 615.830022] protocol 88fb is buggy, dev hsr_slave_0 [ 615.831090] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 615.831112] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 615.834668] protocol 88fb is buggy, dev hsr_slave_1 [ 615.839025] RIP: 0033:0x459a29 [ 615.887544] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 615.895261] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 615.902533] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 615.909804] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 615.917079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 00:21:24 executing program 0 (fault-call:5 fault-nth:49): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 615.924375] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:21:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x3, 0x8001, 0x4fcec665, 0x8}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getpgid(0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff48f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8120}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x28, r2, 0x31b, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000010}, 0x800) [ 615.986761] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000) [ 616.037997] FAULT_INJECTION: forcing a failure. [ 616.037997] name failslab, interval 1, probability 0, space 0, times 0 [ 616.056297] CPU: 0 PID: 16917 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 616.063364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.073015] Call Trace: [ 616.075613] dump_stack+0x138/0x197 [ 616.079266] should_fail.cold+0x10f/0x159 [ 616.083434] should_failslab+0xdb/0x130 [ 616.087421] kmem_cache_alloc+0x2d7/0x780 [ 616.091577] ? wake_atomic_t_function+0x1a0/0x1a0 [ 616.095101] audit: type=1400 audit(1569457284.727:142): avc: denied { module_load } for pid=16897 comm="syz-executor.4" path="/proc/16897/net/udp" dev="proc" ino=4026533418 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_net_t:s0 tclass=system permissive=1 [ 616.096429] mb_cache_entry_create+0x9f/0x850 [ 616.127519] ext4_xattr_block_set+0x13ad/0x2b00 [ 616.132229] ? ext4_xattr_inode_get+0x6c0/0x6c0 [ 616.137085] ? ext4_xattr_check_entries+0x2b7/0x330 [ 616.142092] ? xattr_find_entry+0x216/0x2d0 [ 616.146432] ? ext4_xattr_ibody_set+0x1c7/0x2a0 [ 616.151963] ext4_xattr_set_handle+0x85a/0xda0 [ 616.156542] ? ext4_xattr_ibody_inline_set+0x2a0/0x2a0 [ 616.161814] ? __might_sleep+0x93/0xb0 [ 616.165744] ? __ext4_journal_start_sb+0x105/0x450 [ 616.170663] ext4_xattr_set+0x1ac/0x320 [ 616.174650] ? ext4_xattr_set_credits+0x130/0x130 [ 616.179488] ? save_trace+0x290/0x290 [ 616.183301] ? ext4_xattr_inode_update_ref.cold+0x121/0x121 [ 616.189080] ext4_xattr_trusted_set+0x36/0x40 [ 616.193562] __vfs_setxattr+0xd8/0x130 [ 616.197433] ? xattr_resolve_name+0x360/0x360 [ 616.201910] ? evm_protect_xattr.isra.0+0x74/0x360 [ 616.206825] __vfs_setxattr_noperm+0x102/0x3c0 [ 616.211401] vfs_setxattr+0xc5/0xf0 [ 616.215020] ovl_fill_super+0x1130/0x2660 [ 616.220369] ? ovl_put_super+0x4b0/0x4b0 [ 616.224443] ? sget_userns+0x76b/0xc30 [ 616.228334] ? get_anon_bdev+0x1c0/0x1c0 [ 616.232392] ? get_anon_bdev+0x1c0/0x1c0 [ 616.236439] ? sget+0xde/0x120 [ 616.239612] ? selinux_sb_copy_data+0x21e/0x390 [ 616.244279] ? ovl_put_super+0x4b0/0x4b0 [ 616.248338] mount_nodev+0x52/0xf0 [ 616.251896] ovl_mount+0x2d/0x40 [ 616.255273] mount_fs+0x97/0x2a1 [ 616.258624] vfs_kern_mount.part.0+0x5e/0x3d0 [ 616.263106] do_mount+0x417/0x27d0 [ 616.266627] ? copy_mount_options+0x5c/0x2f0 [ 616.271050] ? rcu_read_lock_sched_held+0x110/0x130 [ 616.276056] ? copy_mount_string+0x40/0x40 [ 616.280288] ? copy_mount_options+0x1fe/0x2f0 [ 616.284818] SyS_mount+0xab/0x120 [ 616.288263] ? copy_mnt_ns+0x8c0/0x8c0 [ 616.292135] do_syscall_64+0x1e8/0x640 [ 616.296015] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 616.300846] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 616.306013] RIP: 0033:0x459a29 [ 616.309201] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 616.316897] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 616.324147] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 616.331398] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 00:21:25 executing program 0 (fault-call:5 fault-nth:50): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 616.338656] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 616.347662] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 616.355266] protocol 88fb is buggy, dev hsr_slave_0 [ 616.360373] protocol 88fb is buggy, dev hsr_slave_1 00:21:25 executing program 2 (fault-call:14 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 616.558407] FAULT_INJECTION: forcing a failure. [ 616.558407] name failslab, interval 1, probability 0, space 0, times 0 [ 616.570064] CPU: 1 PID: 16935 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 616.577120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.586487] Call Trace: [ 616.589084] dump_stack+0x138/0x197 [ 616.592706] should_fail.cold+0x10f/0x159 [ 616.593125] audit: type=1800 audit(1569457285.207:143): pid=16911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.4" name="bus" dev="sda1" ino=17073 res=0 [ 616.596856] should_failslab+0xdb/0x130 [ 616.596871] kmem_cache_alloc+0x2d7/0x780 [ 616.596883] ? rcu_read_lock_sched_held+0x110/0x130 [ 616.596896] ? __mark_inode_dirty+0x2b7/0x1040 [ 616.636491] ext4_mb_new_blocks+0x509/0x3990 [ 616.640930] ? save_trace+0x290/0x290 [ 616.644858] ext4_new_meta_blocks+0x1c5/0x340 [ 616.649345] ? ext4_should_retry_alloc+0x200/0x200 [ 616.654275] ? __entry_find+0x231/0x330 [ 616.658257] ? dquot_initialize_needed+0x16d/0x250 [ 616.663183] ext4_xattr_block_set+0xf2d/0x2b00 [ 616.667761] ? ext4_xattr_inode_get+0x6c0/0x6c0 [ 616.672416] ? ext4_xattr_check_entries+0x2b7/0x330 [ 616.677424] ? xattr_find_entry+0x216/0x2d0 [ 616.681746] ? ext4_xattr_ibody_set+0x1c7/0x2a0 [ 616.686415] ext4_xattr_set_handle+0x85a/0xda0 [ 616.691012] ? ext4_xattr_ibody_inline_set+0x2a0/0x2a0 [ 616.696290] ? __might_sleep+0x93/0xb0 [ 616.700170] ? __ext4_journal_start_sb+0x105/0x450 [ 616.705096] ext4_xattr_set+0x1ac/0x320 [ 616.709063] ? ext4_xattr_set_credits+0x130/0x130 [ 616.713893] ? save_trace+0x290/0x290 [ 616.717705] ? ext4_xattr_inode_update_ref.cold+0x121/0x121 [ 616.723403] ext4_xattr_trusted_set+0x36/0x40 [ 616.727899] __vfs_setxattr+0xd8/0x130 [ 616.731799] ? xattr_resolve_name+0x360/0x360 [ 616.736301] ? evm_protect_xattr.isra.0+0x74/0x360 [ 616.741243] __vfs_setxattr_noperm+0x102/0x3c0 [ 616.745902] vfs_setxattr+0xc5/0xf0 [ 616.749537] ovl_fill_super+0x1130/0x2660 [ 616.753696] ? ovl_put_super+0x4b0/0x4b0 [ 616.757742] ? sget_userns+0x76b/0xc30 [ 616.761700] ? get_anon_bdev+0x1c0/0x1c0 [ 616.765747] ? get_anon_bdev+0x1c0/0x1c0 [ 616.769808] ? sget+0xde/0x120 [ 616.772987] ? selinux_sb_copy_data+0x21e/0x390 [ 616.777640] ? ovl_put_super+0x4b0/0x4b0 [ 616.781710] mount_nodev+0x52/0xf0 [ 616.785251] ovl_mount+0x2d/0x40 [ 616.788603] mount_fs+0x97/0x2a1 [ 616.791954] vfs_kern_mount.part.0+0x5e/0x3d0 [ 616.796446] do_mount+0x417/0x27d0 [ 616.799987] ? copy_mount_options+0x5c/0x2f0 [ 616.804377] ? rcu_read_lock_sched_held+0x110/0x130 [ 616.809379] ? copy_mount_string+0x40/0x40 [ 616.813598] ? copy_mount_options+0x1fe/0x2f0 [ 616.818078] SyS_mount+0xab/0x120 [ 616.821529] ? copy_mnt_ns+0x8c0/0x8c0 [ 616.825410] do_syscall_64+0x1e8/0x640 [ 616.829280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 616.834124] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 616.839307] RIP: 0033:0x459a29 [ 616.842479] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 616.850168] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 00:21:25 executing program 0 (fault-call:5 fault-nth:51): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 616.857436] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 616.864696] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 616.871965] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 616.879325] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 616.888592] overlayfs: upper fs does not support xattr. [ 617.125183] FAULT_INJECTION: forcing a failure. [ 617.125183] name failslab, interval 1, probability 0, space 0, times 0 [ 617.136707] CPU: 0 PID: 16944 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 617.143786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.153211] Call Trace: [ 617.155789] dump_stack+0x138/0x197 [ 617.159436] should_fail.cold+0x10f/0x159 [ 617.163591] should_failslab+0xdb/0x130 [ 617.167647] kmem_cache_alloc+0x2d7/0x780 [ 617.171785] ? wake_atomic_t_function+0x1a0/0x1a0 [ 617.176704] mb_cache_entry_create+0x9f/0x850 [ 617.181207] ext4_xattr_block_set+0x13ad/0x2b00 [ 617.185871] ? ext4_xattr_inode_get+0x6c0/0x6c0 [ 617.190530] ? ext4_xattr_check_entries+0x2b7/0x330 [ 617.195537] ? xattr_find_entry+0x216/0x2d0 [ 617.199856] ? ext4_xattr_ibody_set+0x1c7/0x2a0 [ 617.205901] ext4_xattr_set_handle+0x85a/0xda0 [ 617.210477] ? ext4_xattr_ibody_inline_set+0x2a0/0x2a0 [ 617.215773] ? __might_sleep+0x93/0xb0 [ 617.219661] ? __ext4_journal_start_sb+0x105/0x450 [ 617.224573] ext4_xattr_set+0x1ac/0x320 [ 617.228553] ? ext4_xattr_set_credits+0x130/0x130 [ 617.233377] ? save_trace+0x290/0x290 [ 617.237170] ? ext4_xattr_inode_update_ref.cold+0x121/0x121 [ 617.242882] ext4_xattr_trusted_set+0x36/0x40 [ 617.248165] __vfs_setxattr+0xd8/0x130 [ 617.252044] ? xattr_resolve_name+0x360/0x360 [ 617.256635] ? evm_protect_xattr.isra.0+0x74/0x360 [ 617.261564] __vfs_setxattr_noperm+0x102/0x3c0 [ 617.266151] vfs_setxattr+0xc5/0xf0 [ 617.269772] ovl_fill_super+0x1130/0x2660 [ 617.273918] ? ovl_put_super+0x4b0/0x4b0 [ 617.277971] ? sget_userns+0x76b/0xc30 [ 617.281855] ? get_anon_bdev+0x1c0/0x1c0 [ 617.285909] ? get_anon_bdev+0x1c0/0x1c0 [ 617.289955] ? sget+0xde/0x120 [ 617.293153] ? selinux_sb_copy_data+0x21e/0x390 [ 617.297901] ? ovl_put_super+0x4b0/0x4b0 [ 617.301949] mount_nodev+0x52/0xf0 [ 617.305486] ovl_mount+0x2d/0x40 [ 617.308836] mount_fs+0x97/0x2a1 [ 617.312188] vfs_kern_mount.part.0+0x5e/0x3d0 [ 617.316667] do_mount+0x417/0x27d0 [ 617.320196] ? copy_mount_options+0x5c/0x2f0 [ 617.324596] ? rcu_read_lock_sched_held+0x110/0x130 [ 617.329616] ? copy_mount_string+0x40/0x40 [ 617.333840] ? copy_mount_options+0x1fe/0x2f0 [ 617.338328] SyS_mount+0xab/0x120 [ 617.341782] ? copy_mnt_ns+0x8c0/0x8c0 [ 617.346467] do_syscall_64+0x1e8/0x640 [ 617.350341] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 617.355176] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 617.360352] RIP: 0033:0x459a29 [ 617.363529] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 617.371224] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 617.378491] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 617.385832] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 617.393084] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 617.400349] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 617.410236] FAULT_INJECTION: forcing a failure. [ 617.410236] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 617.422591] CPU: 1 PID: 16934 Comm: syz-executor.2 Not tainted 4.14.146 #0 [ 617.429620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.438983] Call Trace: [ 617.441603] dump_stack+0x138/0x197 [ 617.445221] should_fail.cold+0x10f/0x159 [ 617.449358] ? save_trace+0x290/0x290 [ 617.453156] __alloc_pages_nodemask+0x1d6/0x7a0 [ 617.457815] ? find_held_lock+0x35/0x130 [ 617.461957] ? __alloc_pages_slowpath+0x2930/0x2930 [ 617.466967] ? lock_downgrade+0x6e0/0x6e0 [ 617.471137] alloc_pages_current+0xec/0x1e0 [ 617.475464] __get_free_pages+0xf/0x40 [ 617.479331] __tlb_remove_page_size+0x2c5/0x4f0 [ 617.483977] unmap_page_range+0xacd/0x1770 [ 617.488198] ? vm_normal_page_pmd+0x360/0x360 [ 617.492672] ? uprobe_munmap+0x94/0x210 [ 617.496627] unmap_single_vma+0x15d/0x2c0 [ 617.500778] unmap_vmas+0xac/0x170 [ 617.504307] exit_mmap+0x285/0x4e0 [ 617.507828] ? SyS_munmap+0x30/0x30 [ 617.511446] ? kmem_cache_free+0x244/0x2b0 [ 617.515657] ? __khugepaged_exit+0xcf/0x3d0 [ 617.519972] ? mm_update_next_owner+0x450/0x5d0 [ 617.524621] mmput+0x114/0x440 [ 617.527795] do_exit+0x71d/0x2c10 [ 617.531229] ? find_held_lock+0x35/0x130 [ 617.535268] ? mm_update_next_owner+0x5d0/0x5d0 [ 617.539936] do_group_exit+0x111/0x330 [ 617.543956] get_signal+0x381/0x1cd0 [ 617.547661] ? lock_downgrade+0x6e0/0x6e0 [ 617.551799] do_signal+0x86/0x19a0 [ 617.555321] ? _copy_to_user+0x87/0xd0 [ 617.559204] ? poll_select_copy_remaining+0x22c/0x300 [ 617.564409] ? setup_sigcontext+0x7d0/0x7d0 [ 617.568748] ? SyS_pselect6+0x365/0x460 [ 617.572708] ? SyS_select+0x180/0x180 [ 617.576491] ? fput+0xd4/0x150 [ 617.579679] ? exit_to_usermode_loop+0x3d/0x220 [ 617.584330] exit_to_usermode_loop+0x15c/0x220 [ 617.589502] do_syscall_64+0x4bc/0x640 [ 617.593371] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 617.598463] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 617.603638] RIP: 0033:0x459a29 [ 617.606814] RSP: 002b:00007f2e8a864c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 617.614507] RAX: fffffffffffffdfe RBX: 00007f2e8a864c90 RCX: 0000000000459a29 [ 617.621757] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 617.629101] RBP: 000000000075bf20 R08: 0000000020000200 R09: 0000000000000000 [ 617.636360] R10: 0000000020000140 R11: 0000000000000246 R12: 00007f2e8a8656d4 [ 617.643612] R13: 00000000004c6d71 R14: 00000000004dc118 R15: 0000000000000009 00:21:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x3, 0x8001, 0x4fcec665, 0x8}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getpgid(0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff48f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8120}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x28, r2, 0x31b, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000010}, 0x800) 00:21:27 executing program 4: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r1 = socket$inet6(0xa, 0x401000000801, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) close(r1) r2 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000000)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000200)) sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x2007fff) r6 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x2, 0x2) getpeername$netlink(r6, 0x0, 0x0) mq_getsetattr(r6, &(0x7f00000002c0)={0x1, 0x3, 0x7, 0x0, 0x8001, 0x1, 0x7, 0x7}, &(0x7f0000000300)) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x2, 0x8, 0x0, 0xffffffff}, 0xab4, 0x9, 'id1\x00', 'timer1\x00', 0x0, 0x6, 0x2, 0x9b, 0x8}) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x6, 0x5, &(0x7f0000000700)=[{&(0x7f0000000100)}, {&(0x7f0000000400)="ee81b331470d92fd13305587afe25d1647c509dde72d7dac6efca545b638325f4f0992032162f80bff67f07b33f5e9b14b0b2a6b2e8f80fe070ed1bc4c76454ab5b7b3c518487c70a4539e3fd4a3937e4c9e20fd7513b258d3e176509ef966590288be22e74b0de10e", 0x69, 0x4}, {&(0x7f0000000180)="f3c66849aa52daf66605f0b2ac7a3f367158ca625c2335afe00185d30b1fe9b756e4a116dbbf0cb319ce73c7f8e8a5b0e868a99aeeb8b9409717e831026c", 0x3e, 0x3}, {&(0x7f0000000240)="8dea90eaeb6911a0d95fbe66351ee7b49d35d48cc09c96822ef2b046bdf3a7f8", 0x20, 0x4a}, {0x0}], 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r9, r10, 0x0, 0xedc0) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp\x00') finit_module(r12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100, 0x3e0, 0x3, 0x0, 0xfff, r13}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000000140)={r13, 0x7, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000340)={r13, 0xc7f}, 0x8) 00:21:27 executing program 0 (fault-call:5 fault-nth:52): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = epoll_create1(0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x48, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="006340400300000000000000000000000000000000000000d994cad0000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r4, @ANYBLOB="000000000000000000000000852a747001000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="001000000000000000000000000000002300000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000001540)=ANY=[@ANYBLOB="000000000000000018001183906ffca2ad3e000000000000402a97c5b93d0ffacc6bfc541aa19f3d868cb266a76b236c99b7961e9bc372c83896a5fb156697121e4a5431692df8a6125fbc984324a4a5fde01b68f2c5cafa34493f9258e4774ab52e6c672cd0289a90d548758d648d26f09b98f82170b31f616eae07543c5754f7a938d6bd2371c8e6eb48313d76da37564e"], @ANYBLOB='\rc\x00\x00'], 0xda, 0x0, &(0x7f0000001440)="4cf77e6c841a47699f827f089d0aa3199be2048a16a8c2107312d2a16684efa8cf06a446e38140db9c142c9f179336ae8a3a82c033b96eea87a7218ce6355fcedcf9d71a279bf7704bd7f2b2aa2c96782273f35b775cd4d72e22aa628b8721369a9e2a4fed398568d0ee21aca55124d233cf59e8534856e2774d77be3528d724049cb1c4213be8205c2bc98c8ee53b68bfa52500a969312410d7052b4fcf63896fbae00e57d7e9499901587016974e3315ff79e56e47a231a4c8531edca5803215bb8355aff5ce124d64bc9673c18a6bf4b62e7fcbc0f30a9657"}) r5 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r9, r10, 0x0, 0xedc0) ioctl$sock_bt_hci(r10, 0x800448f0, &(0x7f0000000100)="88fa64") pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:21:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r1 = fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x8619122ae3c2b6e1, &(0x7f0000000000)={0x0, 0x40, 0x0, @tid=r1}, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 618.699523] FAULT_INJECTION: forcing a failure. [ 618.699523] name failslab, interval 1, probability 0, space 0, times 0 00:21:27 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r0, r1) r2 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="dfadc5d68b498897f12797da5540a61a443efb176806fb642d3cdfe7f6a509ab5034d51ec6292bb997b38a62c0434aca3db39eee352c5f69759c05071e22601ef9d6faae44a3d58dc62a06a20f91fb2a4c3f02bf6f847f8b9842aa473d139191e39ba7b9bf138203ff9f05af5bb4006527ee9ef002f3de8d4c75df6e3cabc5358d052b18cb1022d717fd20a249be19a80e5d18ae89d6ce15c7c79606d449a8f78167077f26fcfcbfe0575cbc03832ec6a0f98bb78d0180eb3a8487e2b8b5ca33069c9b41ece964e68ad49f0eda3761e449c743e174bec8e017117c1718a2", 0xde, r0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r3, r4) keyctl$unlink(0x9, r2, r3) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, 0x0, 0xedc0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000080)=""/111, &(0x7f0000000100)=0x6f) tkill(r5, 0x38) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r8, r9, 0x0, 0xedc0) ioctl$VIDIOC_QUERYMENU(r9, 0xc02c5625, &(0x7f0000000000)={0x2, 0x8, @value=0x9}) ptrace$cont(0x18, r5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r5, 0x0, 0x0) [ 618.760193] CPU: 1 PID: 16951 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 618.767282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:21:27 executing program 0 (fault-call:5 fault-nth:53): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 618.767288] Call Trace: [ 618.767305] dump_stack+0x138/0x197 [ 618.767323] should_fail.cold+0x10f/0x159 [ 618.767340] should_failslab+0xdb/0x130 [ 618.767352] __kmalloc+0x2f0/0x7a0 [ 618.767364] ? up_write+0x1a/0x60 [ 618.767375] ? vfs_removexattr+0x5b/0x1d0 [ 618.767385] ? ovl_fill_super+0x1213/0x2660 [ 618.767399] ovl_fill_super+0x1213/0x2660 [ 618.767417] ? ovl_put_super+0x4b0/0x4b0 [ 618.767425] ? sget_userns+0x76b/0xc30 [ 618.767434] ? get_anon_bdev+0x1c0/0x1c0 [ 618.767448] ? get_anon_bdev+0x1c0/0x1c0 [ 618.767457] ? sget+0xde/0x120 [ 618.767466] ? selinux_sb_copy_data+0x21e/0x390 [ 618.767477] ? ovl_put_super+0x4b0/0x4b0 [ 618.767487] mount_nodev+0x52/0xf0 [ 618.767498] ovl_mount+0x2d/0x40 [ 618.767508] mount_fs+0x97/0x2a1 [ 618.767522] vfs_kern_mount.part.0+0x5e/0x3d0 00:21:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x3, 0x8001, 0x4fcec665, 0x8}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getpgid(0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff48f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8120}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x28, r2, 0x31b, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000010}, 0x800) 00:21:27 executing program 0 (fault-call:5 fault-nth:54): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 618.767537] do_mount+0x417/0x27d0 [ 618.767546] ? copy_mount_options+0x5c/0x2f0 00:21:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r2, 0x40001) sendmsg(r1, &(0x7f00003f6000)={0x0, 0x0, &(0x7f0000f39fc0)=[{&(0x7f0000c44000)='2', 0x1}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) sendfile(r1, r2, 0x0, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) openat$cgroup_type(r4, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) [ 618.767557] ? rcu_read_lock_sched_held+0x110/0x130 [ 618.767571] ? copy_mount_string+0x40/0x40 [ 618.767587] ? copy_mount_options+0x1fe/0x2f0 00:21:27 executing program 0 (fault-call:5 fault-nth:55): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 618.767600] SyS_mount+0xab/0x120 [ 618.767610] ? copy_mnt_ns+0x8c0/0x8c0 [ 618.767623] do_syscall_64+0x1e8/0x640 [ 618.767633] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 618.767649] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 618.767657] RIP: 0033:0x459a29 [ 618.767663] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 618.767674] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 618.767680] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 618.767686] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 618.767692] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 618.767698] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 619.023738] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000) [ 619.092326] FAULT_INJECTION: forcing a failure. [ 619.092326] name failslab, interval 1, probability 0, space 0, times 0 [ 619.092342] CPU: 0 PID: 16978 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 619.092348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.092353] Call Trace: [ 619.092369] dump_stack+0x138/0x197 [ 619.092386] should_fail.cold+0x10f/0x159 [ 619.092403] should_failslab+0xdb/0x130 [ 619.092416] __kmalloc+0x2f0/0x7a0 [ 619.092426] ? kmem_cache_alloc_trace+0x623/0x790 [ 619.092438] ? exportfs_encode_inode_fh+0xae/0x460 [ 619.092449] ? dput+0x25/0x30 [ 619.092458] ? ovl_encode_fh+0x12d/0x450 [ 619.092469] ovl_encode_fh+0x12d/0x450 [ 619.092480] ? ovl_set_attr+0x220/0x220 [ 619.092489] ? clone_mnt+0x65a/0xee0 [ 619.092504] ovl_verify_origin+0x2a/0x130 [ 619.092517] ovl_fill_super+0x1d48/0x2660 [ 619.092536] ? ovl_put_super+0x4b0/0x4b0 [ 619.092544] ? sget_userns+0x76b/0xc30 [ 619.092553] ? get_anon_bdev+0x1c0/0x1c0 [ 619.092568] ? get_anon_bdev+0x1c0/0x1c0 [ 619.092577] ? sget+0xde/0x120 [ 619.092587] ? selinux_sb_copy_data+0x21e/0x390 [ 619.092598] ? ovl_put_super+0x4b0/0x4b0 [ 619.092607] mount_nodev+0x52/0xf0 [ 619.092619] ovl_mount+0x2d/0x40 [ 619.092629] mount_fs+0x97/0x2a1 [ 619.092644] vfs_kern_mount.part.0+0x5e/0x3d0 [ 619.092657] do_mount+0x417/0x27d0 [ 619.092667] ? copy_mount_options+0x5c/0x2f0 [ 619.092677] ? rcu_read_lock_sched_held+0x110/0x130 [ 619.092690] ? copy_mount_string+0x40/0x40 [ 619.092705] ? copy_mount_options+0x1fe/0x2f0 [ 619.092718] SyS_mount+0xab/0x120 [ 619.092726] ? copy_mnt_ns+0x8c0/0x8c0 [ 619.092738] do_syscall_64+0x1e8/0x640 [ 619.092747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 619.092763] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 619.092772] RIP: 0033:0x459a29 [ 619.092777] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 619.092789] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 619.092796] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 619.092803] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 619.092812] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 619.092818] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 619.093113] overlayfs: failed to verify origin (326/file0, ino=16995, err=-12) [ 619.093119] overlayfs: failed to verify upper root origin [ 619.128617] IPVS: length: 111 != 8 [ 619.167537] IPVS: length: 111 != 8 [ 619.273321] FAULT_INJECTION: forcing a failure. [ 619.273321] name failslab, interval 1, probability 0, space 0, times 0 [ 619.273369] CPU: 0 PID: 16997 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 619.273376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.273380] Call Trace: [ 619.273395] dump_stack+0x138/0x197 [ 619.273414] should_fail.cold+0x10f/0x159 [ 619.273431] should_failslab+0xdb/0x130 [ 619.273447] kmem_cache_alloc+0x2d7/0x780 [ 619.273461] ? wake_atomic_t_function+0x1a0/0x1a0 [ 619.273474] mb_cache_entry_create+0x9f/0x850 [ 619.273491] ext4_xattr_block_set+0x13ad/0x2b00 [ 619.273516] ? ext4_xattr_inode_get+0x6c0/0x6c0 [ 619.273529] ? ext4_xattr_check_entries+0x2b7/0x330 [ 619.273541] ? xattr_find_entry+0x216/0x2d0 [ 619.273560] ? ext4_xattr_ibody_set+0x1c7/0x2a0 [ 619.273574] ext4_xattr_set_handle+0x85a/0xda0 [ 619.273590] ? ext4_xattr_ibody_inline_set+0x2a0/0x2a0 [ 619.273611] ? __might_sleep+0x93/0xb0 [ 619.273628] ? __ext4_journal_start_sb+0x105/0x450 [ 619.273641] ext4_xattr_set+0x1ac/0x320 [ 619.273658] ? ext4_xattr_set_credits+0x130/0x130 [ 619.273670] ? save_trace+0x290/0x290 [ 619.273685] ? ext4_xattr_inode_update_ref.cold+0x121/0x121 [ 619.273695] ext4_xattr_trusted_set+0x36/0x40 [ 619.273707] __vfs_setxattr+0xd8/0x130 [ 619.273719] ? xattr_resolve_name+0x360/0x360 [ 619.273728] ? evm_protect_xattr.isra.0+0x74/0x360 [ 619.273743] __vfs_setxattr_noperm+0x102/0x3c0 [ 619.273756] vfs_setxattr+0xc5/0xf0 [ 619.273771] ovl_fill_super+0x1130/0x2660 [ 619.273791] ? ovl_put_super+0x4b0/0x4b0 [ 619.273799] ? sget_userns+0x76b/0xc30 [ 619.273808] ? get_anon_bdev+0x1c0/0x1c0 [ 619.273823] ? get_anon_bdev+0x1c0/0x1c0 [ 619.273841] ? sget+0xde/0x120 [ 619.273853] ? selinux_sb_copy_data+0x21e/0x390 [ 619.273865] ? ovl_put_super+0x4b0/0x4b0 [ 619.273877] mount_nodev+0x52/0xf0 [ 619.273890] ovl_mount+0x2d/0x40 [ 619.273901] mount_fs+0x97/0x2a1 [ 619.273918] vfs_kern_mount.part.0+0x5e/0x3d0 [ 619.273933] do_mount+0x417/0x27d0 [ 619.273943] ? copy_mount_options+0x5c/0x2f0 [ 619.273953] ? rcu_read_lock_sched_held+0x110/0x130 [ 619.273967] ? copy_mount_string+0x40/0x40 [ 619.273983] ? copy_mount_options+0x1fe/0x2f0 [ 619.273997] SyS_mount+0xab/0x120 [ 619.274006] ? copy_mnt_ns+0x8c0/0x8c0 [ 619.274020] do_syscall_64+0x1e8/0x640 [ 619.274029] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 619.274045] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 619.274053] RIP: 0033:0x459a29 [ 619.274058] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 619.274070] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 619.274076] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 619.274082] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 619.274088] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 619.274094] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 619.914705] net_ratelimit: 16 callbacks suppressed [ 619.914710] protocol 88fb is buggy, dev hsr_slave_0 [ 619.925439] protocol 88fb is buggy, dev hsr_slave_1 [ 619.930574] protocol 88fb is buggy, dev hsr_slave_0 [ 619.930611] protocol 88fb is buggy, dev hsr_slave_1 [ 619.990044] protocol 88fb is buggy, dev hsr_slave_0 [ 619.995199] protocol 88fb is buggy, dev hsr_slave_1 [ 620.101481] FAULT_INJECTION: forcing a failure. [ 620.101481] name failslab, interval 1, probability 0, space 0, times 0 [ 620.135585] CPU: 0 PID: 17005 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 620.142660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.152029] Call Trace: [ 620.154679] dump_stack+0x138/0x197 [ 620.158298] should_fail.cold+0x10f/0x159 [ 620.162439] should_failslab+0xdb/0x130 [ 620.166408] __kmalloc+0x2f0/0x7a0 [ 620.170142] ? up_write+0x1a/0x60 [ 620.173592] ? vfs_removexattr+0x5b/0x1d0 [ 620.177726] ? ovl_fill_super+0x1213/0x2660 [ 620.182043] ovl_fill_super+0x1213/0x2660 [ 620.186192] ? ovl_put_super+0x4b0/0x4b0 [ 620.190246] ? sget_userns+0x76b/0xc30 [ 620.194122] ? get_anon_bdev+0x1c0/0x1c0 [ 620.198169] ? get_anon_bdev+0x1c0/0x1c0 [ 620.202222] ? sget+0xde/0x120 [ 620.205405] ? selinux_sb_copy_data+0x21e/0x390 [ 620.210073] ? ovl_put_super+0x4b0/0x4b0 [ 620.214134] mount_nodev+0x52/0xf0 [ 620.217656] ovl_mount+0x2d/0x40 [ 620.221026] mount_fs+0x97/0x2a1 [ 620.224402] vfs_kern_mount.part.0+0x5e/0x3d0 [ 620.228885] do_mount+0x417/0x27d0 [ 620.232422] ? copy_mount_options+0x5c/0x2f0 [ 620.236925] ? rcu_read_lock_sched_held+0x110/0x130 [ 620.242125] ? copy_mount_string+0x40/0x40 [ 620.246358] ? copy_mount_options+0x1fe/0x2f0 [ 620.250847] SyS_mount+0xab/0x120 [ 620.254286] ? copy_mnt_ns+0x8c0/0x8c0 [ 620.258173] do_syscall_64+0x1e8/0x640 [ 620.262039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 620.266865] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 620.272031] RIP: 0033:0x459a29 [ 620.275200] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 620.282899] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 620.290413] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 620.297676] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 620.304927] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 620.312281] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 620.470069] protocol 88fb is buggy, dev hsr_slave_0 [ 620.475211] protocol 88fb is buggy, dev hsr_slave_1 [ 620.480340] protocol 88fb is buggy, dev hsr_slave_0 [ 620.485494] protocol 88fb is buggy, dev hsr_slave_1 00:21:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r2, 0x40001) sendmsg(r1, &(0x7f00003f6000)={0x0, 0x0, &(0x7f0000f39fc0)=[{&(0x7f0000c44000)='2', 0x1}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) sendfile(r1, r2, 0x0, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) openat$cgroup_type(r4, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 00:21:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x3, 0x8001, 0x4fcec665, 0x8}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getpgid(0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff48f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8120}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x28, r2, 0x31b, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000010}, 0x800) 00:21:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = epoll_create1(0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) write$P9_RMKDIR(r2, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x4, 0x4, 0x3}}, 0x14) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0xd9) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) getsockname(r4, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000240)=0x4, 0x4) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:21:30 executing program 0 (fault-call:5 fault-nth:56): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 621.735928] FAULT_INJECTION: forcing a failure. [ 621.735928] name failslab, interval 1, probability 0, space 0, times 0 [ 621.752045] CPU: 0 PID: 17012 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 621.759106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.768469] Call Trace: [ 621.771067] dump_stack+0x138/0x197 [ 621.774793] should_fail.cold+0x10f/0x159 [ 621.778966] should_failslab+0xdb/0x130 00:21:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r2, 0x40001) sendmsg(r1, &(0x7f00003f6000)={0x0, 0x0, &(0x7f0000f39fc0)=[{&(0x7f0000c44000)='2', 0x1}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) sendfile(r1, r2, 0x0, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) openat$cgroup_type(r4, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) [ 621.782951] __kmalloc+0x2f0/0x7a0 [ 621.786533] ? kmem_cache_alloc_trace+0x623/0x790 [ 621.791383] ? exportfs_encode_inode_fh+0xae/0x460 [ 621.796319] ? dput+0x25/0x30 [ 621.799455] ? ovl_encode_fh+0x12d/0x450 [ 621.799468] ovl_encode_fh+0x12d/0x450 [ 621.799477] ? ovl_set_attr+0x220/0x220 [ 621.811472] ? clone_mnt+0x65a/0xee0 [ 621.811492] ovl_verify_origin+0x2a/0x130 [ 621.811505] ovl_fill_super+0x1d48/0x2660 [ 621.811521] ? ovl_put_super+0x4b0/0x4b0 [ 621.811529] ? sget_userns+0x76b/0xc30 [ 621.811536] ? get_anon_bdev+0x1c0/0x1c0 [ 621.811548] ? get_anon_bdev+0x1c0/0x1c0 [ 621.811556] ? sget+0xde/0x120 [ 621.842941] ? selinux_sb_copy_data+0x21e/0x390 [ 621.847623] ? ovl_put_super+0x4b0/0x4b0 [ 621.851696] mount_nodev+0x52/0xf0 [ 621.855334] ovl_mount+0x2d/0x40 [ 621.858724] mount_fs+0x97/0x2a1 [ 621.858741] vfs_kern_mount.part.0+0x5e/0x3d0 [ 621.858755] do_mount+0x417/0x27d0 [ 621.858764] ? copy_mount_options+0x5c/0x2f0 [ 621.858776] ? rcu_read_lock_sched_held+0x110/0x130 [ 621.858788] ? copy_mount_string+0x40/0x40 [ 621.858810] ? copy_mount_options+0x1fe/0x2f0 [ 621.858823] SyS_mount+0xab/0x120 [ 621.858831] ? copy_mnt_ns+0x8c0/0x8c0 [ 621.858843] do_syscall_64+0x1e8/0x640 [ 621.858854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 621.908503] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 621.913689] RIP: 0033:0x459a29 [ 621.916861] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 621.924558] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 00:21:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x18080400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r4, &(0x7f0000000040)=0x100060, 0xa808) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) write$UHID_CREATE(r6, &(0x7f0000000140)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/75, 0x4b, 0x63cd, 0x400, 0x4, 0xbc, 0x40}, 0x120) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000080)={0x5, {0x4, 0x7, 0xf5, 0xa4}}) 00:21:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x700, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:30 executing program 0 (fault-call:5 fault-nth:57): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 621.931901] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 621.939151] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 621.946412] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 621.953668] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 621.970126] overlayfs: failed to verify origin (329/file0, ino=17073, err=-12) [ 621.977579] overlayfs: failed to verify upper root origin [ 622.359324] FAULT_INJECTION: forcing a failure. [ 622.359324] name failslab, interval 1, probability 0, space 0, times 0 [ 622.376623] CPU: 1 PID: 17041 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 622.383666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.391796] audit: type=1400 audit(1569457291.027:144): avc: denied { sys_admin } for pid=17038 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 622.393007] Call Trace: [ 622.393025] dump_stack+0x138/0x197 [ 622.393042] should_fail.cold+0x10f/0x159 [ 622.393057] should_failslab+0xdb/0x130 [ 622.431999] __kmalloc+0x2f0/0x7a0 [ 622.435549] ? kmem_cache_alloc_trace+0x623/0x790 [ 622.440482] ? exportfs_encode_inode_fh+0xae/0x460 [ 622.445423] ? dput+0x25/0x30 [ 622.448538] ? ovl_encode_fh+0x12d/0x450 [ 622.452695] ovl_encode_fh+0x12d/0x450 [ 622.456596] ? ovl_set_attr+0x220/0x220 [ 622.460571] ? clone_mnt+0x65a/0xee0 [ 622.464292] ovl_verify_origin+0x2a/0x130 [ 622.468446] ovl_fill_super+0x1d48/0x2660 [ 622.472603] ? ovl_put_super+0x4b0/0x4b0 [ 622.476673] ? sget_userns+0x76b/0xc30 [ 622.480559] ? get_anon_bdev+0x1c0/0x1c0 [ 622.484627] ? get_anon_bdev+0x1c0/0x1c0 [ 622.488685] ? sget+0xde/0x120 [ 622.491876] ? selinux_sb_copy_data+0x21e/0x390 [ 622.496538] ? ovl_put_super+0x4b0/0x4b0 [ 622.500713] mount_nodev+0x52/0xf0 [ 622.504278] ovl_mount+0x2d/0x40 [ 622.507628] mount_fs+0x97/0x2a1 [ 622.510975] vfs_kern_mount.part.0+0x5e/0x3d0 [ 622.515452] do_mount+0x417/0x27d0 [ 622.518978] ? retint_kernel+0x2d/0x2d [ 622.522859] ? copy_mount_string+0x40/0x40 [ 622.527102] ? copy_mount_options+0x148/0x2f0 [ 622.531585] ? copy_mount_options+0x1fe/0x2f0 [ 622.536061] SyS_mount+0xab/0x120 [ 622.539492] ? copy_mnt_ns+0x8c0/0x8c0 [ 622.543371] do_syscall_64+0x1e8/0x640 [ 622.547265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 622.552097] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 622.557264] RIP: 0033:0x459a29 00:21:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a7c", 0xfcd1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x3daec2be7c88e121, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x3, 0x0, [{0xc1f, 0x2, 0x0, 0x0, @adapter={0xfffffffffffff636, 0x7f, 0x3, 0x1ff, 0x7fff}}, {0x50000000, 0x4, 0x0, 0x0, @irqchip={0x240, 0x8}}, {0xa8e, 0x4, 0x0, 0x0, @adapter={0x3, 0x200, 0x800, 0x8000, 0x1}}]}) 00:21:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(0x0, 0x80) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x2, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@md5={0x1, "5d5a4b31b199a0e84bd7b514af502198"}, 0x11, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="25bca274769e620aa734fa0095e0612687463915e3a702a9d8aea872943afd874e2f98b579a7186270146d0e02c06cffa8c63cd7dc46760253ef0b2a20a602210318f8104a27ea57b012d31c34951dc119dac04eab9c68842086234a45fbe202000400000010", 0x66, 0x400}], 0x0, 0x0) [ 622.560431] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 622.568124] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 622.575729] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 622.582992] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 622.590258] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 622.597535] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:21:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:21:31 executing program 0 (fault-call:5 fault-nth:58): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 622.633118] overlayfs: failed to verify origin (330/file0, ino=17073, err=-12) [ 622.651848] overlayfs: failed to verify upper root origin 00:21:31 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$inet6(0xa, 0x3, 0xd9) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r0) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = epoll_create1(0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) write$P9_RMKDIR(r2, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x4, 0x4, 0x3}}, 0x14) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0xd9) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) getsockname(r4, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000240)=0x4, 0x4) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 622.767155] FAULT_INJECTION: forcing a failure. [ 622.767155] name failslab, interval 1, probability 0, space 0, times 0 [ 623.077708] EXT4-fs (loop4): filesystem is read-only [ 623.083181] EXT4-fs (loop4): Unsupported filesystem blocksize 0 (1923657432 log_block_size) [ 623.141262] CPU: 1 PID: 17064 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 623.148584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.158403] Call Trace: [ 623.161003] dump_stack+0x138/0x197 [ 623.164641] should_fail.cold+0x10f/0x159 [ 623.168887] should_failslab+0xdb/0x130 [ 623.172864] kmem_cache_alloc_trace+0x2e9/0x790 [ 623.177546] ? lock_downgrade+0x6e0/0x6e0 [ 623.181701] ovl_encode_fh+0xb5/0x450 [ 623.185509] ? ovl_set_attr+0x220/0x220 [ 623.189500] ? clone_mnt+0x65a/0xee0 [ 623.193220] ovl_verify_origin+0x2a/0x130 [ 623.197377] ovl_fill_super+0x1d48/0x2660 [ 623.201551] ? ovl_put_super+0x4b0/0x4b0 [ 623.205613] ? sget_userns+0x76b/0xc30 [ 623.209495] ? get_anon_bdev+0x1c0/0x1c0 [ 623.213548] ? get_anon_bdev+0x1c0/0x1c0 [ 623.217596] ? sget+0xde/0x120 [ 623.220782] ? selinux_sb_copy_data+0x21e/0x390 [ 623.225445] ? ovl_put_super+0x4b0/0x4b0 [ 623.229542] mount_nodev+0x52/0xf0 [ 623.233079] ovl_mount+0x2d/0x40 [ 623.236433] mount_fs+0x97/0x2a1 [ 623.239833] vfs_kern_mount.part.0+0x5e/0x3d0 [ 623.244363] do_mount+0x417/0x27d0 [ 623.247903] ? copy_mount_options+0x5c/0x2f0 [ 623.252303] ? rcu_read_lock_sched_held+0x110/0x130 [ 623.257671] ? copy_mount_string+0x40/0x40 [ 623.261900] ? copy_mount_options+0x1fe/0x2f0 [ 623.266388] SyS_mount+0xab/0x120 [ 623.269841] ? copy_mnt_ns+0x8c0/0x8c0 [ 623.273720] do_syscall_64+0x1e8/0x640 [ 623.277609] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 623.282699] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 623.287873] RIP: 0033:0x459a29 [ 623.291046] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 623.298751] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 623.306012] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 623.313270] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 623.320530] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 623.327967] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:21:32 executing program 0 (fault-call:5 fault-nth:59): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) 00:21:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x180000) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 623.340204] overlayfs: failed to verify origin (331/file0, ino=16962, err=-12) [ 623.347766] overlayfs: failed to verify upper root origin [ 623.403013] FAULT_INJECTION: forcing a failure. [ 623.403013] name failslab, interval 1, probability 0, space 0, times 0 [ 623.415497] CPU: 1 PID: 17088 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 623.422545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.431909] Call Trace: [ 623.434518] dump_stack+0x138/0x197 [ 623.438162] should_fail.cold+0x10f/0x159 [ 623.442318] should_failslab+0xdb/0x130 [ 623.446300] __kmalloc+0x2f0/0x7a0 [ 623.449836] ? kmem_cache_alloc_trace+0x623/0x790 [ 623.454667] ? exportfs_encode_inode_fh+0xae/0x460 [ 623.459583] ? dput+0x25/0x30 [ 623.462674] ? ovl_encode_fh+0x12d/0x450 [ 623.466722] ovl_encode_fh+0x12d/0x450 [ 623.470603] ? ovl_set_attr+0x220/0x220 [ 623.474559] ? clone_mnt+0x65a/0xee0 [ 623.478259] ovl_verify_origin+0x2a/0x130 [ 623.482390] ovl_fill_super+0x1d48/0x2660 [ 623.486528] ? ovl_put_super+0x4b0/0x4b0 [ 623.490659] ? sget_userns+0x76b/0xc30 [ 623.494526] ? get_anon_bdev+0x1c0/0x1c0 [ 623.498574] ? get_anon_bdev+0x1c0/0x1c0 [ 623.502617] ? sget+0xde/0x120 [ 623.505800] ? selinux_sb_copy_data+0x21e/0x390 [ 623.510454] ? ovl_put_super+0x4b0/0x4b0 [ 623.514540] mount_nodev+0x52/0xf0 [ 623.518072] ovl_mount+0x2d/0x40 [ 623.521684] mount_fs+0x97/0x2a1 [ 623.525043] vfs_kern_mount.part.0+0x5e/0x3d0 [ 623.529532] do_mount+0x417/0x27d0 [ 623.533143] ? copy_mount_options+0x5c/0x2f0 [ 623.537799] ? rcu_read_lock_sched_held+0x110/0x130 [ 623.542801] ? copy_mount_string+0x40/0x40 [ 623.547376] ? copy_mount_options+0x1fe/0x2f0 [ 623.552038] SyS_mount+0xab/0x120 [ 623.555587] ? copy_mnt_ns+0x8c0/0x8c0 [ 623.559509] do_syscall_64+0x1e8/0x640 [ 623.563395] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 623.568335] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 623.573865] RIP: 0033:0x459a29 [ 623.577043] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 623.585979] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 623.593352] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a 00:21:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0)=""/193, 0xc1, 0x12140, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000abb000/0x3000)=nil, 0x3000, 0x8, 0x80000032, r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000abaff9)={0x77359400}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) r4 = getpid() tkill(r4, 0x9) fcntl$setown(r3, 0x8, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r5, 0x0, 0xedc0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000001c0)) [ 623.600621] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 623.607876] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 623.615302] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 623.640719] overlayfs: failed to verify origin (332/file0, ino=17175, err=-12) [ 623.669678] overlayfs: failed to verify upper root origin 00:21:32 executing program 0 (fault-call:5 fault-nth:60): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 623.772480] EXT4-fs (loop4): filesystem is read-only [ 623.777651] EXT4-fs (loop4): Unsupported filesystem blocksize 0 (1923657432 log_block_size) [ 623.919116] FAULT_INJECTION: forcing a failure. [ 623.919116] name failslab, interval 1, probability 0, space 0, times 0 [ 623.930888] CPU: 1 PID: 17104 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 623.937944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.947301] Call Trace: [ 623.949894] dump_stack+0x138/0x197 [ 623.953526] should_fail.cold+0x10f/0x159 [ 623.957680] should_failslab+0xdb/0x130 [ 623.961660] __kmalloc+0x2f0/0x7a0 [ 623.965200] ? ext4_find_extent+0x709/0x960 [ 623.969521] ext4_find_extent+0x709/0x960 [ 623.973676] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 623.979128] ext4_ext_map_blocks+0x1a3/0x4fa0 [ 623.983631] ? save_trace+0x290/0x290 [ 623.987787] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 623.992798] ? __lock_is_held+0xb6/0x140 [ 623.996883] ? lock_acquire+0x16f/0x430 [ 624.000869] ? ext4_map_blocks+0x402/0x17c0 [ 624.005196] ext4_map_blocks+0xd3c/0x17c0 [ 624.009343] ? __lock_is_held+0xb6/0x140 [ 624.013408] ? check_preemption_disabled+0x3c/0x250 [ 624.018454] ? ext4_issue_zeroout+0x160/0x160 [ 624.022956] ? __brelse+0x50/0x60 [ 624.026424] ext4_getblk+0xac/0x450 [ 624.030055] ? ext4_iomap_begin+0x8a0/0x8a0 [ 624.034376] ? ext4_free_inode+0x1210/0x1210 [ 624.039376] ext4_bread+0x6e/0x1a0 [ 624.042897] ? ext4_getblk+0x450/0x450 [ 624.046766] ext4_append+0x14b/0x360 [ 624.050469] ext4_mkdir+0x531/0xc20 [ 624.054083] ? privileged_wrt_inode_uidgid+0x9d/0xc0 [ 624.060316] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 624.064989] ? security_inode_mkdir+0xd0/0x110 [ 624.069562] vfs_mkdir+0x3ca/0x610 [ 624.073089] ovl_create_real+0x1f5/0x250 [ 624.077134] ovl_workdir_create+0x323/0x4e0 [ 624.083348] ? ovl_mount_dir+0x1a0/0x1a0 [ 624.087390] ? ovl_verify_origin+0x6b/0x130 [ 624.091707] ? ovl_verify_origin+0x6b/0x130 [ 624.096020] ovl_fill_super+0x1d7e/0x2660 [ 624.100165] ? ovl_put_super+0x4b0/0x4b0 [ 624.104212] ? sget_userns+0x76b/0xc30 [ 624.108077] ? get_anon_bdev+0x1c0/0x1c0 [ 624.112130] ? get_anon_bdev+0x1c0/0x1c0 [ 624.116265] ? sget+0xde/0x120 [ 624.119439] ? selinux_sb_copy_data+0x21e/0x390 [ 624.124102] ? ovl_put_super+0x4b0/0x4b0 [ 624.128144] mount_nodev+0x52/0xf0 [ 624.131689] ovl_mount+0x2d/0x40 [ 624.135045] mount_fs+0x97/0x2a1 [ 624.138394] vfs_kern_mount.part.0+0x5e/0x3d0 [ 624.142872] do_mount+0x417/0x27d0 [ 624.146913] ? copy_mount_options+0x5c/0x2f0 [ 624.151917] ? rcu_read_lock_sched_held+0x110/0x130 [ 624.156935] ? copy_mount_string+0x40/0x40 [ 624.161162] ? copy_mount_options+0x1fe/0x2f0 [ 624.166166] SyS_mount+0xab/0x120 [ 624.169613] ? copy_mnt_ns+0x8c0/0x8c0 [ 624.173508] do_syscall_64+0x1e8/0x640 [ 624.177375] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 624.182208] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 624.187394] RIP: 0033:0x459a29 [ 624.190567] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 624.198268] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 624.205517] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 624.212767] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 624.220022] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 624.227278] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 [ 625.190056] net_ratelimit: 24 callbacks suppressed [ 625.190061] protocol 88fb is buggy, dev hsr_slave_0 [ 625.200293] protocol 88fb is buggy, dev hsr_slave_1 00:21:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xea, 0x0, 0x1, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:21:33 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r3, &(0x7f0000000940), 0x0, 0x600) write$P9_RVERSION(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030300900fc9cd866b42938ab0142624904b40d651a9b3672476a814ac42843aa88e1db60ba47b6bb30407402000000349f062e4624400100000000000000e03a80b9374275d0f7b100237209ffe467ab1296c3c5085a515cf18151210b8615d54f1c7f3e9ef2ec1577c935216a586171a0aca40d531e7d4986fe59ec1406936a1b561565ffefd7652e6c949d9a7f95f42d36d892d4b30cc1fc50434686595553e6f3381cf655df317fe9ca3533e7afb1ced5c006e691b4999cf6c0aae1178e256baacb07e6f80b9f8e6bc4f3b57d528930399f5c7903c06e4298f2d6774ba4d327c8c4c783340d84b8252dc0961fdc1816a67772058c027c491d1761cd867b446e1d09fc35834cb3e8e0ed7bde47964dc091ec1ce2dd7bfa8c430600000000000000ce550d9645db0c58453350fa101f5aae17559fcfd2bd00000000c2621a68a28ccc39235cdf20d22060d3c8f352e341635ee4aab0aad9d953e0a7dd37de2bfc4fc5d81bfa4264c89a612bf74868309f840cc82f1cb476a4eaa8728c3425a50c9ffb680f44aff1e913a7f5b3158696196345a4caebc08e692861bbd2304b31f7c58fe55f668b9420ea754930458873cec2e3869c70cc78c2a06f70c33a4c09e6195262ae96eec759aae838435429bd039f8ffde4c529d7dc83c298a16cd17d01d46e41ebfeef9fc6f935e8f745bd1208d4d5b226eff70000000000000000"], 0x15) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000640)={{0x3, 0x20}, 'port0\x00', 0x2b, 0x100000, 0x3, 0x100, 0x81, 0x400, 0xce, 0x0, 0x2, 0x401}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240)=0x2, 0x4) request_key(&(0x7f0000000400)='trusted\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xb) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x300, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x2174) 00:21:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x04_\xac\xde\x9b9\xc0\xe5\x01$\xabuY(\x9d\x98filter\x00M\x82\t\x1fu\x1a\xacTI\xa8\x87\x03u\x13\x10eo\x9d\xfa\x16\xb5#T\xf0\x1a\nP\x12L\xa2\xd1\xca\xcd\x9b\x9fN\xef\xa84\xf1a\x9d\x00\v\xbe\xea\x17\xb38^\xd7-\x1eY\x05\b\x96\x9dq\xe2\x1a&\xf4\xb0\v\x06\xe125x?\x16\xab\x92&\x9fu_.,^R\xba\xb8\x9ao\xcd\xf9\xb8%\xaaI\x11\"\x13\n\x88\xd9\xb2\xb6=\xbdE\xf7)\x1d\xc6\x15\x15\xc1\xe3\xe8Iu\xda\xef\xe3\xe89\xe5Y\xad\xaf3\xdck') ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)='H', 0x1}], 0x1) 00:21:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x28, r6, 0x31b, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="82020080", @ANYRES16=r6, @ANYBLOB="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"], 0x278}, 0x1, 0x0, 0x0, 0x40880}, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:21:33 executing program 0 (fault-call:5 fault-nth:61): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 625.367111] FAULT_INJECTION: forcing a failure. [ 625.367111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 625.378992] CPU: 1 PID: 17118 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 625.386020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.395391] Call Trace: [ 625.395411] dump_stack+0x138/0x197 [ 625.395428] should_fail.cold+0x10f/0x159 [ 625.395443] __alloc_pages_nodemask+0x1d6/0x7a0 [ 625.395462] ? __alloc_pages_slowpath+0x2930/0x2930 [ 625.401827] cache_grow_begin+0x80/0x400 [ 625.401842] __kmalloc+0x6bf/0x7a0 [ 625.401856] ? ext4_xattr_block_set+0x660/0x2b00 [ 625.401868] ext4_xattr_block_set+0x660/0x2b00 [ 625.401884] ? ext4_xattr_inode_read+0x3d0/0x3d0 [ 625.401896] ? ext4_xattr_inode_get+0x6c0/0x6c0 [ 625.410714] ? ext4_xattr_check_entries+0x2b7/0x330 [ 625.410725] ? xattr_find_entry+0x216/0x2d0 [ 625.410742] ? ext4_xattr_ibody_set+0x1c7/0x2a0 [ 625.410754] ext4_xattr_set_handle+0x85a/0xda0 [ 625.410768] ? ext4_xattr_ibody_inline_set+0x2a0/0x2a0 [ 625.466244] ? __might_sleep+0x93/0xb0 [ 625.470147] ? __ext4_journal_start_sb+0x105/0x450 [ 625.475080] ext4_xattr_set+0x1ac/0x320 [ 625.479050] ? ext4_xattr_set_credits+0x130/0x130 [ 625.483903] ? save_trace+0x290/0x290 [ 625.487687] ? ext4_xattr_ibody_get+0x4a0/0x4a0 [ 625.492343] ? ext4_xattr_inode_update_ref.cold+0x121/0x121 [ 625.498035] ext4_xattr_trusted_set+0x36/0x40 [ 625.502535] __vfs_setxattr+0xd8/0x130 [ 625.506421] ? xattr_resolve_name+0x360/0x360 [ 625.510898] ? evm_protect_xattr.isra.0+0x74/0x360 [ 625.515991] __vfs_setxattr_noperm+0x102/0x3c0 [ 625.520572] vfs_setxattr+0xc5/0xf0 [ 625.524185] ovl_verify_origin+0xd1/0x130 [ 625.528420] ovl_fill_super+0x1d48/0x2660 [ 625.532915] ? ovl_put_super+0x4b0/0x4b0 [ 625.536956] ? sget_userns+0x76b/0xc30 [ 625.540824] ? get_anon_bdev+0x1c0/0x1c0 [ 625.544869] ? get_anon_bdev+0x1c0/0x1c0 [ 625.548908] ? sget+0xde/0x120 [ 625.552081] ? selinux_sb_copy_data+0x21e/0x390 [ 625.556732] ? ovl_put_super+0x4b0/0x4b0 [ 625.560776] mount_nodev+0x52/0xf0 [ 625.564310] ovl_mount+0x2d/0x40 [ 625.567687] mount_fs+0x97/0x2a1 [ 625.571061] vfs_kern_mount.part.0+0x5e/0x3d0 [ 625.575570] do_mount+0x417/0x27d0 [ 625.579117] ? copy_mount_options+0x5c/0x2f0 [ 625.583533] ? rcu_read_lock_sched_held+0x110/0x130 [ 625.588560] ? copy_mount_string+0x40/0x40 [ 625.592808] ? copy_mount_options+0x1fe/0x2f0 [ 625.597324] SyS_mount+0xab/0x120 [ 625.600787] ? copy_mnt_ns+0x8c0/0x8c0 [ 625.604777] do_syscall_64+0x1e8/0x640 [ 625.608665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 625.613544] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 625.618728] RIP: 0033:0x459a29 [ 625.621935] RSP: 002b:00007fbe58552c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 625.630428] RAX: ffffffffffffffda RBX: 00007fbe58552c90 RCX: 0000000000459a29 [ 625.637698] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 625.644965] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 625.652261] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe585536d4 [ 625.659539] R13: 00000000004c6049 R14: 00000000004dad38 R15: 0000000000000005 00:21:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x180000) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:21:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0xffff, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpid() tkill(r2, 0x9) ptrace$setregs(0xd, r2, 0x100000001, &(0x7f0000000080)="352cc50a7036f9b8f7c7bddf7a3ec905969e395d0f61792a7a3af43e396526bd39c5b2b9ef4a3c20547e88ab38a6203bf3dd1fa97c3822de03e3e6359c57c5f65f65605b38040c307ea361435bf7807e607602695a7fc7dfcfa53150c846b89f227b165be76a1efb48ae9e3c62b22337ef5a6b09195b7fb4bb96f7b4ddc9d0ae486f090694625e8b826550e51c8723ce288c0094ff629ecfac56d000923d95ded513bbfcc86c591d4145558673687bb4a02d8d58409d22bc5befd6bdc881999a5f2e32a377a0fb54e3d25e988af909f16444e10ceb72bfd81745a95d4752f5bd34f15593") connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r3, 0x0, 0xedc0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x8, 0x4) 00:21:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffc, @rand_addr, 0x2}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = accept4$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c, 0x80000) connect$inet6(r8, &(0x7f0000000040)={0xa, 0xfffd, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r9, 0x0, 0xedc0) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f00000001c0)={0x2000, 0xd000, 0x2, 0x0, 0x7}) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r10, 0x0, 0xedc0) setsockopt$IP_VS_SO_SET_ZERO(r10, 0x0, 0x48f, &(0x7f0000000100)={0x0, @multicast2, 0x4e21, 0x4, 'sed\x00', 0x28, 0x4, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000002}, 0x0, &(0x7f0000000140)={0x1b7, 0x3}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000480)={0x2, 0xfffffee0, 0xfa00, {0x0, {0xa, 0x4e20, 0x9d99, @rand_addr="33ab1b457e33e41611e55eca158acf8d", 0x5dbd}, r11}}, 0x30) 00:21:34 executing program 0 (fault-call:5 fault-nth:62): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 625.839607] list_add double add: new=ffff8880514610d8, prev=ffff8880514610d8, next=ffff8880920d7880. [ 625.849648] ------------[ cut here ]------------ [ 625.854453] kernel BUG at lib/list_debug.c:29! [ 625.859133] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 625.864518] Modules linked in: [ 625.867722] CPU: 1 PID: 17126 Comm: syz-executor.4 Not tainted 4.14.146 #0 [ 625.874755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:21:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') recvfrom$rose(r2, &(0x7f0000000580)=""/163, 0xa3, 0x40020024, &(0x7f0000000400)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) sendfile(r1, r2, 0x0, 0xedc0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000000)="00a405fc63f1032a3a6963c52bcf", &(0x7f0000000040)="1e800a048d8b6eed0d4ad11a71a1e119c85e4a3d92f3a9dfb0d67536f05b393eb6c13eb2b24d", 0x1}, 0x20) tkill(r0, 0x2b) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x119081, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$KIOCSOUND(r6, 0x4b2f, 0x40d) sendfile(r4, r5, 0x0, 0xedc0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000140)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast1, @in6=@mcast1, 0xfffa, 0xf7, 0x4e20, 0x0, 0xa, 0x100, 0xc0, 0x87, r7, r8}, {0x101, 0x8, 0x1, 0xffffffffffff9528, 0x8000, 0x3f, 0x7fffffff, 0x1000}, {0xa3, 0x65b512b1, 0x4, 0x9}, 0x9, 0x6e6bba, 0x0, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x33}, 0x2, @in=@local, 0x0, 0x0, 0x3, 0xfd, 0x1, 0x3, 0x3}}, 0xe8) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) write$eventfd(r2, &(0x7f00000000c0)=0xffff, 0x8) [ 625.880196] kobject: 'loop3' (ffff8880a4ace0e0): kobject_uevent_env [ 625.884102] task: ffff88805d15e040 task.stack: ffff88807a5a8000 [ 625.896566] RIP: 0010:__list_add_valid.cold+0x26/0x3c [ 625.897122] kobject: 'loop3' (ffff8880a4ace0e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 625.901763] RSP: 0018:ffff88807a5afa00 EFLAGS: 00010282 [ 625.901772] RAX: 0000000000000058 RBX: ffff8880920d7840 RCX: 0000000000000000 [ 625.901778] RDX: 000000000000e943 RSI: ffffffff814b2e55 RDI: ffffed100f4b5f36 [ 625.901783] RBP: ffff88807a5afa18 R08: 0000000000000058 R09: ffff88805d15e908 [ 625.901787] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880920d7880 [ 625.901791] R13: ffff8880514610d8 R14: ffff8880514610d8 R15: ffff8880514610d8 [ 625.901797] FS: 00007f6509d9c700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 625.901802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 625.901809] CR2: 00000000007126b4 CR3: 000000008ceed000 CR4: 00000000001406e0 [ 625.974678] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 625.981949] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 00:21:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) waitid(0x7, r0, &(0x7f0000000000), 0x2, &(0x7f0000000080)) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 625.989235] Call Trace: [ 625.991311] kobject: 'loop3' (ffff8880a4ace0e0): kobject_uevent_env [ 625.991820] ? _raw_spin_lock+0x37/0x40 [ 625.998236] kobject: 'loop3' (ffff8880a4ace0e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 626.002185] p9_fd_request+0xe3/0x2b0 [ 626.002194] p9_client_rpc+0x21b/0x1180 [ 626.002203] ? p9_client_prepare_req.part.0+0xa90/0xa90 [ 626.002212] ? trace_hardirqs_on_caller+0x400/0x590 [ 626.002222] ? trace_hardirqs_on+0xd/0x10 [ 626.033908] ? finish_wait+0x260/0x260 [ 626.037809] ? destroy_inode+0xc7/0x120 [ 626.041781] ? evict+0x3e6/0x630 [ 626.045143] p9_client_clunk+0x89/0x150 [ 626.049099] v9fs_dentry_release+0x6d/0xd0 [ 626.053333] ? v9fs_cached_dentry_delete+0x40/0x40 [ 626.058261] __dentry_kill+0x39a/0x580 [ 626.062140] ? dput.part.0+0x2a/0x750 [ 626.065950] ? dput.part.0+0x2a/0x750 [ 626.069758] dput.part.0+0x59f/0x750 [ 626.073489] do_one_tree+0x44/0x50 [ 626.077121] shrink_dcache_for_umount+0x67/0x140 [ 626.081911] generic_shutdown_super+0x6d/0x370 [ 626.086503] kill_anon_super+0x3f/0x60 [ 626.090389] v9fs_kill_super+0x3e/0xa0 [ 626.094265] deactivate_locked_super+0x74/0xe0 [ 626.098837] deactivate_super+0x85/0xa0 [ 626.102805] cleanup_mnt+0xb2/0x150 [ 626.106423] __cleanup_mnt+0x16/0x20 [ 626.110123] task_work_run+0x114/0x190 [ 626.113996] exit_to_usermode_loop+0x1da/0x220 [ 626.118562] do_syscall_64+0x4bc/0x640 [ 626.122490] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 626.127342] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 626.132954] RIP: 0033:0x459a29 [ 626.136132] RSP: 002b:00007f6509d9bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 626.143835] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000459a29 [ 626.151085] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000020000140 [ 626.158343] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 626.165616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6509d9c6d4 [ 626.172954] R13: 00000000004c91d1 R14: 00000000004e04e0 R15: 00000000ffffffff [ 626.180219] Code: e9 56 ff ff ff 4c 89 e1 48 c7 c7 80 30 9d 86 e8 4f a8 72 fe 0f 0b 48 89 f2 4c 89 e1 4c 89 ee 48 c7 c7 c0 31 9d 86 e8 38 a8 72 fe <0f> 0b 48 89 f1 48 c7 c7 40 31 9d 86 4c 89 e6 e8 24 a8 72 fe 0f [ 626.199336] RIP: __list_add_valid.cold+0x26/0x3c RSP: ffff88807a5afa00 [ 626.206052] ---[ end trace f6709538bfc4a389 ]--- [ 626.210848] Kernel panic - not syncing: Fatal exception [ 626.217650] Kernel Offset: disabled [ 626.221302] Rebooting in 86400 seconds..