up2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048804) 09:38:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:38:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sysfs$1(0x1, &(0x7f0000000100)=']#.{-]\xde(])-]\x9a]:(\\\x00') vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x8000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x10, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4, [@multicast2]}]}}}], 0x18}}], 0x136, 0xbb8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0xca, "e188fca163e7510a0aa32c176ced65b17667ad929c0c1b3197136b9acdcedfaecac6254b3497e0c277ad5d9cd10d3ea2f7d5305ae10a65655de485aefd0849f8228a875a88fef92799635ae814c90bfeaddd8a70f700ab266ebd5cbb8d58f0b918e7d850e7657c6007b19295d13d6f5d60766bd08fbc45bc385922c5cfc7269de2dee75623ec9abb9371a5cd694cf73711b978e730a1bb16a307d838b1cd76a8ba3f5c7a1abfc9fc2ea0c6038c9ca671c5502355684a45a07a59286a5094dbf3b5e887e7548e3ae5a687"}, &(0x7f0000000140)=0xd2) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000001c0)={r5, 0xfff}, 0x8) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') 09:38:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:38:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') 09:38:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:29 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:29 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') 09:38:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, 0x0, 0x0, 0x0) 09:38:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:29 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="a1331d4c8dadc19f198f2cf1b79e0ee6e389c0e679a6c2452ee2793dd579710a76745f9547988561a9a2cdc0b94d0ebda5143daae1aca79272c240c1bb58971cdc486a659f1659ef7c6bf83311e1b600ffc292a78caf9975f22e88d1037a200e16bef85d07b256", 0x67}], 0x1, 0x5) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x4}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000100)) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:38:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:38:29 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:38:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, 0x0, 0x0, 0x0) 09:38:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:30 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:38:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:30 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, 0x0, 0x0, 0x0) 09:38:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:38:30 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:30 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') 09:38:31 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:38:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:31 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:38:31 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:31 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:31 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:38:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:33 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r3, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:33 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:33 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r3, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:33 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:33 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:33 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) recvmmsg(r1, &(0x7f00000019c0)=[{{&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/66, 0x42}, {&(0x7f0000001340)=""/127, 0x7f}, {&(0x7f00000013c0)=""/125, 0x7d}], 0x4}, 0xfff}, {{&(0x7f0000001440)=@pppol2tpv3, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/52, 0x34}], 0x1, &(0x7f0000001500)=""/75, 0x4b}, 0x50000000}, {{&(0x7f0000001580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001600)=""/168, 0xa8}, {&(0x7f00000016c0)=""/15, 0xf}], 0x2, &(0x7f0000001740)=""/80, 0x50}, 0x3ff}, {{&(0x7f00000017c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/229, 0xe5}], 0x1, &(0x7f0000001980)}, 0x5}], 0x4, 0x40002040, &(0x7f0000001ac0)={0x0, 0x3938700}) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000001b00)=0x3) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000001980)='/dev/audio\x00', 0x82100, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') 09:38:34 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r3, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:34 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:34 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:34 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)}}], 0x1, 0xbb8) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "654bc4661b357471", "2ab74bb4e1762d40e9da5d01d27ce341ed7398225f2980d891c64e16c315d6db", "bbd2871a", "7b08e537f946ac35"}, 0x38) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:34 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:34 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:34 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:36 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1ac, r4, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @local, 0x180}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @loopback, 0xff}}, {0x20, 0x2, @in6={0xa, 0x0, 0x80, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffff1a1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff2a37}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x24004810}, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:36 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1ac, r4, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @local, 0x180}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @loopback, 0xff}}, {0x20, 0x2, @in6={0xa, 0x0, 0x80, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffff1a1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff2a37}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x24004810}, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:38:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:38:37 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1ac, r4, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @local, 0x180}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @loopback, 0xff}}, {0x20, 0x2, @in6={0xa, 0x0, 0x80, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffff1a1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff2a37}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x24004810}, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:38:37 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0)=""/224) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:38:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:37 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0)=""/224) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:38 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0)=""/224) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:38:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000740)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) [ 701.853098] NOHZ: local_softirq_pending 08 09:38:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000740)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000740)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:41 executing program 0: prctl$PR_GET_KEEPCAPS(0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="29e8832b7f91bf42e2830b01b89330c8a5f342cc4c64a75c8badd270d40df295d6a803689c93d9eeff6e06bb06b06c346ba908e4cfa465377841a9150f7d44e2d06954fccbd7987f31e39b626b328b7d5238b6e81e294f712db47571bf563e87364ea4eed3f685ea8bef688cb6f8bf9b4498c670c8b8295ff2d1226d062a281963ac98f58e831a2183dbc2125bf36ad31832bc2b533b99c5a3797effc1d1ffef473b65e747ce296bf2085e54ab465b526bc0b6923beb9b79f72e49c5b3c692f971bc3641f052a6b146fe392048d6de424b38bc4a12a0281e217b2b7d6d90d84b5c86c12d3136b97e2966d7cf5cc0ed08df1b", 0xf2, 0x40080, &(0x7f0000000100)={0xa, 0x4e20, 0x6716, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1000}, 0x1c) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(r0, 0xd, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:41 executing program 0: prctl$PR_GET_KEEPCAPS(0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="29e8832b7f91bf42e2830b01b89330c8a5f342cc4c64a75c8badd270d40df295d6a803689c93d9eeff6e06bb06b06c346ba908e4cfa465377841a9150f7d44e2d06954fccbd7987f31e39b626b328b7d5238b6e81e294f712db47571bf563e87364ea4eed3f685ea8bef688cb6f8bf9b4498c670c8b8295ff2d1226d062a281963ac98f58e831a2183dbc2125bf36ad31832bc2b533b99c5a3797effc1d1ffef473b65e747ce296bf2085e54ab465b526bc0b6923beb9b79f72e49c5b3c692f971bc3641f052a6b146fe392048d6de424b38bc4a12a0281e217b2b7d6d90d84b5c86c12d3136b97e2966d7cf5cc0ed08df1b", 0xf2, 0x40080, &(0x7f0000000100)={0xa, 0x4e20, 0x6716, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1000}, 0x1c) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(r0, 0xd, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:42 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000740)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:43 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000740)=0x1, 0x4) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:38:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:43 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:43 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000740)=0x1, 0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 4: dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000740)=0x1, 0x4) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 4: dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 4: dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:38:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) socket$inet6(0xa, 0xc, 0xfffff6b3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000740)=0x1, 0x4) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:38:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:45 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:45 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0xfffffec9}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x3ff, @mcast2, 0x80000001}}, 0xffff, 0x1000, 0x5414ffde, 0x7, 0x43, 0x83b, 0x5}, &(0x7f00000002c0)=0x9c) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) socket$inet6(0xa, 0xc, 0xfffff6b3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:45 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:46 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:46 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x2, 0x0, 0x20000}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:46 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) socket$inet6(0xa, 0xc, 0xfffff6b3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:46 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:47 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:47 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mq_unlink(&(0x7f0000000140)='\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:38:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:48 executing program 1: dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:48 executing program 1: dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:48 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r4}}, 0x4) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r4, 0x2}}, 0x18) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/193, 0xc1}, {&(0x7f00000001c0)=""/87, 0x57}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000680)=""/96, 0x60}], 0x5, 0x8080000000) 09:38:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:49 executing program 1: dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:38:49 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:49 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:49 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:49 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:50 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) getpid() r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:38:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@private0, @private1, @remote, 0x3, 0x0, 0x7, 0x0, 0xf9, 0x20050, r5}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) getpid() r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) getpid() r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) getpid() r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) getpid() r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:52 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:38:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:53 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f00000006c0)=[{&(0x7f0000000780)="b3afa9bc6c607c50a3d4ccad301d3ad838083f733bee07733073016245667c3ca52135738b3a6a63909cca4dac803996683feb0ab0a0d43cf7519191b39bafd3bd1b2a272000d0e90a08869320ce9588de3d9797e3d7686a372879046356bfa0ba339006abf9e91ea213abb078715011f3027dfc6f581f020556edda85f6efb78dc88c52a6fd01d608624f1227172939a79eb636ec76d81ef50e66f07ffb0032e2d0f9beb8cfce94f380c18a1b0ae702f493370b7d279df85d5622eba38ad2eb4796aee03c861cfbb23dad3bf46acf63f68166", 0xd3}, {&(0x7f0000000100)="003663fe8c11ca2031d572c84d5c9a8bd08ed81ab029372741030a8729ddcea2a714c775aa640c3d93b7c644d3e65380c61dfec2885e2eb0ffd92e97628c4594ceecd72e84d5273a2cd761a7c5a0d40132fc54d4aade2f540364080ba003f41a3f868cf5bc0a8110918f70112ad7917ca3c747dfd8edbac6c3b44958d29a206c", 0x80}, {&(0x7f00000001c0)="516c2fd05c8a13c6f8007e5d300915768f0898c414172b663f07649d335ccb5612eed17eec6550b5e4a202197ad5880a0e8b2ed7485d398bdc0f215ac2fd6c64e29e8f0b8e71185f8a0be6e6f0614c1d2779b1479558f44627c67dcf0f01af980d5faaa39b9adfa72095efbb4dfac33152c0fd7abfc5b17cacd4a2038ace46cae5993e6779d68bab72066917d18bfb0f233ba05c", 0x94}, {&(0x7f00000003c0)="c0ce088b58324d4d24519212e5fc9d5829aa7de2", 0x14}, {&(0x7f0000000400)="769eaabdd2af832b22c9a85cc7d74049357e8a86a10fe017252a1942257d5253087015e5ed409f29db17a10673ae7c350aaedd379c998c1c1660e9a5b282507148058ce9458dbe0f20ad6bb5952b85f4eb953a004d26944404a724de21fca4693410a2a99a7663f2153efb9cbcf66bb98fdc4d0a35c31b066c3b6c65a33a8977f14eff4151bc4d91b3929e0796ec67205f9a51b883ce", 0x96}, {&(0x7f00000004c0)="55b60330212aab0874eb75bf5ea1165056f621efbe4e5b987497", 0x1a}, {&(0x7f0000000500)="07351328d62d7276", 0x8}, {&(0x7f0000000540)="c243bed81cf4ad8de1241c0548da4f00191e2c45f46976527a08fe7aa00460d7a919f7c05591b27e2961a8f3dff0f080097614ba9b5daa16e4b98dc15b26c741cee6dcae1dccff92ec61b6fb0ac8b8f3cdc195615c816e72b87888984df43cfc732cc67b0cde440da6911207a67e89b706fd26b00e72749ba365fea1ff7e0b0d255e066fc3db8f279d8ac7744f12ca5da12f58f7d3cdb8136b682b5727eafc1fbf2dc7", 0xa3}, {&(0x7f0000000600)="82c90ec67e5ad3c9899324273625d77ae2976be1a6403d9e61f80e345621a203a559c8ed9fa7acdd8e23e2242be1abe347f3dfba787fcf46b5feacb2885b058d3b65732750249c74f84059e11b451ce9b4dd4856747f20c764d1287c2ff0f11f329c522f3bcaa5d38484b6b0143cc5814462728427367f1e62590fa54d048d51a3022f892a593c9d71c5b947a9034ec7aa110835488ee3413c0ea883285b50f452f1", 0xa2}], 0x9, 0x5) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)=0x3) 09:38:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:53 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f00000006c0)=[{&(0x7f0000000780)="b3afa9bc6c607c50a3d4ccad301d3ad838083f733bee07733073016245667c3ca52135738b3a6a63909cca4dac803996683feb0ab0a0d43cf7519191b39bafd3bd1b2a272000d0e90a08869320ce9588de3d9797e3d7686a372879046356bfa0ba339006abf9e91ea213abb078715011f3027dfc6f581f020556edda85f6efb78dc88c52a6fd01d608624f1227172939a79eb636ec76d81ef50e66f07ffb0032e2d0f9beb8cfce94f380c18a1b0ae702f493370b7d279df85d5622eba38ad2eb4796aee03c861cfbb23dad3bf46acf63f68166", 0xd3}, {&(0x7f0000000100)="003663fe8c11ca2031d572c84d5c9a8bd08ed81ab029372741030a8729ddcea2a714c775aa640c3d93b7c644d3e65380c61dfec2885e2eb0ffd92e97628c4594ceecd72e84d5273a2cd761a7c5a0d40132fc54d4aade2f540364080ba003f41a3f868cf5bc0a8110918f70112ad7917ca3c747dfd8edbac6c3b44958d29a206c", 0x80}, {&(0x7f00000001c0)="516c2fd05c8a13c6f8007e5d300915768f0898c414172b663f07649d335ccb5612eed17eec6550b5e4a202197ad5880a0e8b2ed7485d398bdc0f215ac2fd6c64e29e8f0b8e71185f8a0be6e6f0614c1d2779b1479558f44627c67dcf0f01af980d5faaa39b9adfa72095efbb4dfac33152c0fd7abfc5b17cacd4a2038ace46cae5993e6779d68bab72066917d18bfb0f233ba05c", 0x94}, {&(0x7f00000003c0)="c0ce088b58324d4d24519212e5fc9d5829aa7de2", 0x14}, {&(0x7f0000000400)="769eaabdd2af832b22c9a85cc7d74049357e8a86a10fe017252a1942257d5253087015e5ed409f29db17a10673ae7c350aaedd379c998c1c1660e9a5b282507148058ce9458dbe0f20ad6bb5952b85f4eb953a004d26944404a724de21fca4693410a2a99a7663f2153efb9cbcf66bb98fdc4d0a35c31b066c3b6c65a33a8977f14eff4151bc4d91b3929e0796ec67205f9a51b883ce", 0x96}, {&(0x7f00000004c0)="55b60330212aab0874eb75bf5ea1165056f621efbe4e5b987497", 0x1a}, {&(0x7f0000000500)="07351328d62d7276", 0x8}, {&(0x7f0000000540)="c243bed81cf4ad8de1241c0548da4f00191e2c45f46976527a08fe7aa00460d7a919f7c05591b27e2961a8f3dff0f080097614ba9b5daa16e4b98dc15b26c741cee6dcae1dccff92ec61b6fb0ac8b8f3cdc195615c816e72b87888984df43cfc732cc67b0cde440da6911207a67e89b706fd26b00e72749ba365fea1ff7e0b0d255e066fc3db8f279d8ac7744f12ca5da12f58f7d3cdb8136b682b5727eafc1fbf2dc7", 0xa3}, {&(0x7f0000000600)="82c90ec67e5ad3c9899324273625d77ae2976be1a6403d9e61f80e345621a203a559c8ed9fa7acdd8e23e2242be1abe347f3dfba787fcf46b5feacb2885b058d3b65732750249c74f84059e11b451ce9b4dd4856747f20c764d1287c2ff0f11f329c522f3bcaa5d38484b6b0143cc5814462728427367f1e62590fa54d048d51a3022f892a593c9d71c5b947a9034ec7aa110835488ee3413c0ea883285b50f452f1", 0xa2}], 0x9, 0x5) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)=0x3) 09:38:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:53 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f00000006c0)=[{&(0x7f0000000780)="b3afa9bc6c607c50a3d4ccad301d3ad838083f733bee07733073016245667c3ca52135738b3a6a63909cca4dac803996683feb0ab0a0d43cf7519191b39bafd3bd1b2a272000d0e90a08869320ce9588de3d9797e3d7686a372879046356bfa0ba339006abf9e91ea213abb078715011f3027dfc6f581f020556edda85f6efb78dc88c52a6fd01d608624f1227172939a79eb636ec76d81ef50e66f07ffb0032e2d0f9beb8cfce94f380c18a1b0ae702f493370b7d279df85d5622eba38ad2eb4796aee03c861cfbb23dad3bf46acf63f68166", 0xd3}, {&(0x7f0000000100)="003663fe8c11ca2031d572c84d5c9a8bd08ed81ab029372741030a8729ddcea2a714c775aa640c3d93b7c644d3e65380c61dfec2885e2eb0ffd92e97628c4594ceecd72e84d5273a2cd761a7c5a0d40132fc54d4aade2f540364080ba003f41a3f868cf5bc0a8110918f70112ad7917ca3c747dfd8edbac6c3b44958d29a206c", 0x80}, {&(0x7f00000001c0)="516c2fd05c8a13c6f8007e5d300915768f0898c414172b663f07649d335ccb5612eed17eec6550b5e4a202197ad5880a0e8b2ed7485d398bdc0f215ac2fd6c64e29e8f0b8e71185f8a0be6e6f0614c1d2779b1479558f44627c67dcf0f01af980d5faaa39b9adfa72095efbb4dfac33152c0fd7abfc5b17cacd4a2038ace46cae5993e6779d68bab72066917d18bfb0f233ba05c", 0x94}, {&(0x7f00000003c0)="c0ce088b58324d4d24519212e5fc9d5829aa7de2", 0x14}, {&(0x7f0000000400)="769eaabdd2af832b22c9a85cc7d74049357e8a86a10fe017252a1942257d5253087015e5ed409f29db17a10673ae7c350aaedd379c998c1c1660e9a5b282507148058ce9458dbe0f20ad6bb5952b85f4eb953a004d26944404a724de21fca4693410a2a99a7663f2153efb9cbcf66bb98fdc4d0a35c31b066c3b6c65a33a8977f14eff4151bc4d91b3929e0796ec67205f9a51b883ce", 0x96}, {&(0x7f00000004c0)="55b60330212aab0874eb75bf5ea1165056f621efbe4e5b987497", 0x1a}, {&(0x7f0000000500)="07351328d62d7276", 0x8}, {&(0x7f0000000540)="c243bed81cf4ad8de1241c0548da4f00191e2c45f46976527a08fe7aa00460d7a919f7c05591b27e2961a8f3dff0f080097614ba9b5daa16e4b98dc15b26c741cee6dcae1dccff92ec61b6fb0ac8b8f3cdc195615c816e72b87888984df43cfc732cc67b0cde440da6911207a67e89b706fd26b00e72749ba365fea1ff7e0b0d255e066fc3db8f279d8ac7744f12ca5da12f58f7d3cdb8136b682b5727eafc1fbf2dc7", 0xa3}, {&(0x7f0000000600)="82c90ec67e5ad3c9899324273625d77ae2976be1a6403d9e61f80e345621a203a559c8ed9fa7acdd8e23e2242be1abe347f3dfba787fcf46b5feacb2885b058d3b65732750249c74f84059e11b451ce9b4dd4856747f20c764d1287c2ff0f11f329c522f3bcaa5d38484b6b0143cc5814462728427367f1e62590fa54d048d51a3022f892a593c9d71c5b947a9034ec7aa110835488ee3413c0ea883285b50f452f1", 0xa2}], 0x9, 0x5) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)=0x3) 09:38:53 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:38:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f00000006c0)=[{&(0x7f0000000780)="b3afa9bc6c607c50a3d4ccad301d3ad838083f733bee07733073016245667c3ca52135738b3a6a63909cca4dac803996683feb0ab0a0d43cf7519191b39bafd3bd1b2a272000d0e90a08869320ce9588de3d9797e3d7686a372879046356bfa0ba339006abf9e91ea213abb078715011f3027dfc6f581f020556edda85f6efb78dc88c52a6fd01d608624f1227172939a79eb636ec76d81ef50e66f07ffb0032e2d0f9beb8cfce94f380c18a1b0ae702f493370b7d279df85d5622eba38ad2eb4796aee03c861cfbb23dad3bf46acf63f68166", 0xd3}, {&(0x7f0000000100)="003663fe8c11ca2031d572c84d5c9a8bd08ed81ab029372741030a8729ddcea2a714c775aa640c3d93b7c644d3e65380c61dfec2885e2eb0ffd92e97628c4594ceecd72e84d5273a2cd761a7c5a0d40132fc54d4aade2f540364080ba003f41a3f868cf5bc0a8110918f70112ad7917ca3c747dfd8edbac6c3b44958d29a206c", 0x80}, {&(0x7f00000001c0)="516c2fd05c8a13c6f8007e5d300915768f0898c414172b663f07649d335ccb5612eed17eec6550b5e4a202197ad5880a0e8b2ed7485d398bdc0f215ac2fd6c64e29e8f0b8e71185f8a0be6e6f0614c1d2779b1479558f44627c67dcf0f01af980d5faaa39b9adfa72095efbb4dfac33152c0fd7abfc5b17cacd4a2038ace46cae5993e6779d68bab72066917d18bfb0f233ba05c", 0x94}, {&(0x7f00000003c0)="c0ce088b58324d4d24519212e5fc9d5829aa7de2", 0x14}, {&(0x7f0000000400)="769eaabdd2af832b22c9a85cc7d74049357e8a86a10fe017252a1942257d5253087015e5ed409f29db17a10673ae7c350aaedd379c998c1c1660e9a5b282507148058ce9458dbe0f20ad6bb5952b85f4eb953a004d26944404a724de21fca4693410a2a99a7663f2153efb9cbcf66bb98fdc4d0a35c31b066c3b6c65a33a8977f14eff4151bc4d91b3929e0796ec67205f9a51b883ce", 0x96}, {&(0x7f00000004c0)="55b60330212aab0874eb75bf5ea1165056f621efbe4e5b987497", 0x1a}, {&(0x7f0000000500)="07351328d62d7276", 0x8}, {&(0x7f0000000540)="c243bed81cf4ad8de1241c0548da4f00191e2c45f46976527a08fe7aa00460d7a919f7c05591b27e2961a8f3dff0f080097614ba9b5daa16e4b98dc15b26c741cee6dcae1dccff92ec61b6fb0ac8b8f3cdc195615c816e72b87888984df43cfc732cc67b0cde440da6911207a67e89b706fd26b00e72749ba365fea1ff7e0b0d255e066fc3db8f279d8ac7744f12ca5da12f58f7d3cdb8136b682b5727eafc1fbf2dc7", 0xa3}, {&(0x7f0000000600)="82c90ec67e5ad3c9899324273625d77ae2976be1a6403d9e61f80e345621a203a559c8ed9fa7acdd8e23e2242be1abe347f3dfba787fcf46b5feacb2885b058d3b65732750249c74f84059e11b451ce9b4dd4856747f20c764d1287c2ff0f11f329c522f3bcaa5d38484b6b0143cc5814462728427367f1e62590fa54d048d51a3022f892a593c9d71c5b947a9034ec7aa110835488ee3413c0ea883285b50f452f1", 0xa2}], 0x9, 0x5) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)=0x3) 09:38:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x3, 0x10000008, 0x5, 0x9, 0x0, 0x0, 0x0, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x3, 0x3, 0x0, 0xb, 0x0, 0x36, 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000002c0)="01580ed084e51893362b15b5602218a447982bc50fbb905583d6da39d072873a7f2541336b29cad998e17a3083b8d5f2947f92b8bdcfb129a4f2414c705ee54fee4e4158ee6badefaef0dc2c6b55205f52ff2d900a2a81531d0a7a779c1292c3e2857e0d2baa6b426a6524878599fefffc397514fb84eb1bd43e17596b5160156ea337231891a0efabb345d5094145e4524b7a2471c525b2bc11", 0x9a, 0x0) keyctl$get_keyring_id(0x0, r5, 0x80000001) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x3, 0x10000008, 0x5, 0x9, 0x0, 0x0, 0x0, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x3, 0x3, 0x0, 0xb, 0x0, 0x36, 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000002c0)="01580ed084e51893362b15b5602218a447982bc50fbb905583d6da39d072873a7f2541336b29cad998e17a3083b8d5f2947f92b8bdcfb129a4f2414c705ee54fee4e4158ee6badefaef0dc2c6b55205f52ff2d900a2a81531d0a7a779c1292c3e2857e0d2baa6b426a6524878599fefffc397514fb84eb1bd43e17596b5160156ea337231891a0efabb345d5094145e4524b7a2471c525b2bc11", 0x9a, 0x0) keyctl$get_keyring_id(0x0, r5, 0x80000001) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x3, 0x10000008, 0x5, 0x9, 0x0, 0x0, 0x0, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x3, 0x3, 0x0, 0xb, 0x0, 0x36, 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000002c0)="01580ed084e51893362b15b5602218a447982bc50fbb905583d6da39d072873a7f2541336b29cad998e17a3083b8d5f2947f92b8bdcfb129a4f2414c705ee54fee4e4158ee6badefaef0dc2c6b55205f52ff2d900a2a81531d0a7a779c1292c3e2857e0d2baa6b426a6524878599fefffc397514fb84eb1bd43e17596b5160156ea337231891a0efabb345d5094145e4524b7a2471c525b2bc11", 0x9a, 0x0) keyctl$get_keyring_id(0x0, r5, 0x80000001) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4, [@multicast2]}]}}}], 0x18}}], 0x136, 0xbb8) 09:38:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvfrom$inet(0xffffffffffffffff, &(0x7f00000001c0)=""/140, 0x8c, 0x0, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:55 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:38:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:57 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:57 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:58 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:59 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:38:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:38:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:38:59 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:38:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 1: dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 1: dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') 09:39:01 executing program 1: dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4, [@multicast2]}]}}}], 0x18}}], 0x136, 0xbb8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 09:39:01 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') 09:39:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:02 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') 09:39:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4, [@multicast2]}]}}}], 0x18}}], 0x136, 0xbb8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000000)=0x80) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 09:39:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) setresuid(0x0, r2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./file0\x00', r2, r3) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r7, &(0x7f00000017c0), 0x375, 0x0) 09:39:02 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') 09:39:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r3, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:02 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:02 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) setresuid(0x0, r2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./file0\x00', r2, r3) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r7, &(0x7f00000017c0), 0x375, 0x0) 09:39:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r3, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r3, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:03 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) setresuid(0x0, r2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./file0\x00', r2, r3) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r7, &(0x7f00000017c0), 0x375, 0x0) 09:39:03 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:03 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:03 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:03 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:03 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:03 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:04 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:04 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:04 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:04 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:04 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:04 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:04 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:05 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:39:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:05 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:05 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:06 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:06 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:39:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:06 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:06 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:07 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:39:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:07 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:39:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x0, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x0, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:08 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:08 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:08 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, 0x0, 0x0, 0x0) 09:39:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x0, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:08 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:08 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:08 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:09 executing program 5: dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:09 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, 0x0, 0x0, 0x0) 09:39:09 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:09 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:10 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:10 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getpgid(0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:10 executing program 5: dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:10 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, 0x0, 0x0, 0x0) 09:39:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:10 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getpgid(0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:10 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:10 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getpgid(0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, 0x0) openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x0, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:10 executing program 5: dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:11 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, 0x0) openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x0, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x0, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, 0x0) openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:11 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:11 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x0, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:11 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x0, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:13 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:13 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/240, 0xf0}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') 09:39:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:13 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:14 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r4, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:14 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:14 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x77a2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:15 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:15 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10100, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r3, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}}], 0x1, 0x0) 09:39:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(r4, r2, &(0x7f0000000140)=0x4b3, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:16 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(r4, r2, &(0x7f0000000140)=0x4b3, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:16 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:16 executing program 2 (fault-call:10 fault-nth:0): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:16 executing program 1 (fault-call:3 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 738.519521] FAULT_INJECTION: forcing a failure. [ 738.519521] name failslab, interval 1, probability 0, space 0, times 0 [ 738.531575] CPU: 1 PID: 21489 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 738.539469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.548816] Call Trace: [ 738.551389] dump_stack+0x1b2/0x283 [ 738.555001] should_fail.cold+0x10a/0x154 [ 738.559132] should_failslab+0xd6/0x130 [ 738.563094] kmem_cache_alloc_node+0x25f/0x400 [ 738.567665] copy_process.part.0+0x17d5/0x6fa0 [ 738.572235] ? get_pid_task+0xb8/0x130 [ 738.576107] ? proc_fail_nth_write+0x7b/0x180 [ 738.580585] ? proc_tid_io_accounting+0x20/0x20 [ 738.585244] ? __fdget_pos+0xa6/0xc0 [ 738.588958] ? fsnotify+0x897/0x1110 [ 738.592662] ? __vfs_write+0xec/0x630 [ 738.596451] ? proc_tid_io_accounting+0x20/0x20 [ 738.601114] ? __cleanup_sighand+0x40/0x40 [ 738.605341] ? lock_downgrade+0x6e0/0x6e0 [ 738.609488] _do_fork+0x180/0xc80 [ 738.612942] ? fork_idle+0x270/0x270 [ 738.616672] ? fput+0xb/0x140 [ 738.619760] ? SyS_write+0x14d/0x210 [ 738.623463] ? SyS_read+0x210/0x210 [ 738.627074] ? SyS_clock_settime+0x1a0/0x1a0 [ 738.631582] ? do_syscall_64+0x4c/0x640 [ 738.635537] ? sys_vfork+0x20/0x20 [ 738.639056] do_syscall_64+0x1d5/0x640 [ 738.642930] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 738.648099] RIP: 0033:0x45cba9 [ 738.651271] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 738.658973] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 738.666239] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 738.673494] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 738.680747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 738.688002] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 738.709878] FAULT_INJECTION: forcing a failure. [ 738.709878] name failslab, interval 1, probability 0, space 0, times 0 [ 738.726205] CPU: 1 PID: 21500 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 738.734090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.743433] Call Trace: [ 738.746024] dump_stack+0x1b2/0x283 [ 738.749668] should_fail.cold+0x10a/0x154 [ 738.753816] should_failslab+0xd6/0x130 [ 738.757786] __kmalloc+0x2c1/0x400 [ 738.761321] ? rw_copy_check_uvector+0x1d4/0x290 [ 738.766073] rw_copy_check_uvector+0x1d4/0x290 [ 738.770663] ? check_preemption_disabled+0x35/0x240 [ 738.775682] import_iovec+0x94/0x360 [ 738.779389] ? dup_iter+0x240/0x240 [ 738.783013] ? proc_fail_nth_write+0x7b/0x180 [ 738.787499] ? proc_tid_io_accounting+0x20/0x20 [ 738.792164] vfs_readv+0xb3/0x130 [ 738.795615] ? compat_rw_copy_check_uvector+0x320/0x320 [ 738.801080] ? __fget+0x1ff/0x360 [ 738.804537] ? lock_acquire+0x170/0x3f0 [ 738.808509] ? lock_downgrade+0x6e0/0x6e0 [ 738.812659] ? __fget+0x226/0x360 [ 738.816111] do_preadv+0x161/0x200 09:39:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) [ 738.819644] ? do_readv+0x2c0/0x2c0 [ 738.823259] ? SyS_clock_settime+0x1a0/0x1a0 [ 738.827647] ? do_syscall_64+0x4c/0x640 [ 738.831602] ? SyS_writev+0x30/0x30 [ 738.835220] do_syscall_64+0x1d5/0x640 [ 738.839109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 738.844292] RIP: 0033:0x45cba9 [ 738.847476] RSP: 002b:00007f4aaa4cfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 738.855174] RAX: ffffffffffffffda RBX: 00000000004fba20 RCX: 000000000045cba9 [ 738.862423] RDX: 0000000000000375 RSI: 00000000200017c0 RDI: 0000000000000008 09:39:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:17 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:17 executing program 1 (fault-call:3 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r2 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) [ 738.869668] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 738.876917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 738.884172] R13: 0000000000000889 R14: 00000000004cb8c0 R15: 00007f4aaa4d06d4 [ 738.933932] FAULT_INJECTION: forcing a failure. [ 738.933932] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 738.946575] CPU: 1 PID: 21510 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 738.954463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.963816] Call Trace: [ 738.966387] dump_stack+0x1b2/0x283 [ 738.969998] should_fail.cold+0x10a/0x154 [ 738.974128] __alloc_pages_nodemask+0x22b/0x2730 [ 738.978868] ? trace_hardirqs_on+0x10/0x10 [ 738.983097] ? lock_downgrade+0x6e0/0x6e0 [ 738.987224] ? _parse_integer+0xe5/0x130 [ 738.991265] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 738.996084] ? fs_reclaim_acquire+0x10/0x10 [ 739.000388] ? copy_process.part.0+0x17d5/0x6fa0 [ 739.005135] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 739.010575] ? rcu_read_lock_sched_held+0x10a/0x130 [ 739.015576] ? kmem_cache_alloc_node+0x387/0x400 [ 739.020317] copy_process.part.0+0x26a/0x6fa0 [ 739.024893] ? get_pid_task+0xb8/0x130 [ 739.028769] ? proc_fail_nth_write+0x7b/0x180 [ 739.033252] ? proc_tid_io_accounting+0x20/0x20 [ 739.037913] ? __fdget_pos+0xa6/0xc0 [ 739.041620] ? fsnotify+0x897/0x1110 [ 739.045323] ? __vfs_write+0xec/0x630 [ 739.049111] ? proc_tid_io_accounting+0x20/0x20 [ 739.053761] ? __cleanup_sighand+0x40/0x40 [ 739.057974] ? lock_downgrade+0x6e0/0x6e0 [ 739.062114] _do_fork+0x180/0xc80 [ 739.065573] ? fork_idle+0x270/0x270 [ 739.069272] ? fput+0xb/0x140 [ 739.072357] ? SyS_write+0x14d/0x210 [ 739.076047] ? SyS_read+0x210/0x210 [ 739.079652] ? SyS_clock_settime+0x1a0/0x1a0 [ 739.084047] ? do_syscall_64+0x4c/0x640 [ 739.088006] ? sys_vfork+0x20/0x20 [ 739.091525] do_syscall_64+0x1d5/0x640 [ 739.095397] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 739.100590] RIP: 0033:0x45cba9 [ 739.103765] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 739.111464] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 739.118717] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 739.126082] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 739.133328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 739.140575] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:17 executing program 1 (fault-call:3 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) [ 739.222644] FAULT_INJECTION: forcing a failure. [ 739.222644] name failslab, interval 1, probability 0, space 0, times 0 [ 739.239202] CPU: 0 PID: 21520 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 739.247089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.256434] Call Trace: [ 739.259022] dump_stack+0x1b2/0x283 [ 739.262653] should_fail.cold+0x10a/0x154 [ 739.266805] should_failslab+0xd6/0x130 [ 739.270777] kmem_cache_alloc+0x28e/0x3c0 [ 739.274921] prepare_creds+0x37/0x380 [ 739.278718] copy_creds+0x72/0x4d0 [ 739.282255] copy_process.part.0+0x868/0x6fa0 [ 739.286751] ? get_pid_task+0xb8/0x130 [ 739.290635] ? proc_fail_nth_write+0x7b/0x180 [ 739.295125] ? proc_tid_io_accounting+0x20/0x20 [ 739.299791] ? __fdget_pos+0xa6/0xc0 [ 739.303498] ? __vfs_write+0xec/0x630 [ 739.307292] ? proc_tid_io_accounting+0x20/0x20 [ 739.311960] ? __cleanup_sighand+0x40/0x40 [ 739.316193] ? lock_downgrade+0x6e0/0x6e0 [ 739.320341] _do_fork+0x180/0xc80 [ 739.323789] ? fork_idle+0x270/0x270 [ 739.327502] ? fput+0xb/0x140 [ 739.330603] ? SyS_write+0x14d/0x210 [ 739.334327] ? SyS_read+0x210/0x210 [ 739.337947] ? SyS_clock_settime+0x1a0/0x1a0 [ 739.342349] ? do_syscall_64+0x4c/0x640 [ 739.346314] ? sys_vfork+0x20/0x20 [ 739.349849] do_syscall_64+0x1d5/0x640 [ 739.353737] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 739.358917] RIP: 0033:0x45cba9 [ 739.362095] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:39:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:17 executing program 2 (fault-call:10 fault-nth:1): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 739.369796] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 739.377172] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 739.384677] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 739.391939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 739.399204] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:17 executing program 1 (fault-call:3 fault-nth:3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 739.511670] FAULT_INJECTION: forcing a failure. [ 739.511670] name failslab, interval 1, probability 0, space 0, times 0 [ 739.527859] CPU: 0 PID: 21536 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 739.535756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.545103] Call Trace: [ 739.547690] dump_stack+0x1b2/0x283 [ 739.551316] should_fail.cold+0x10a/0x154 [ 739.555461] should_failslab+0xd6/0x130 [ 739.559441] __kmalloc_track_caller+0x2bc/0x400 [ 739.564110] ? selinux_cred_prepare+0x44/0xa0 [ 739.568599] kmemdup+0x23/0x50 [ 739.571792] selinux_cred_prepare+0x44/0xa0 [ 739.576095] security_prepare_creds+0x76/0xb0 [ 739.580568] prepare_creds+0x2cc/0x380 [ 739.584432] copy_creds+0x72/0x4d0 [ 739.587948] copy_process.part.0+0x868/0x6fa0 [ 739.592423] ? get_pid_task+0xb8/0x130 [ 739.596286] ? proc_fail_nth_write+0x7b/0x180 [ 739.600756] ? proc_tid_io_accounting+0x20/0x20 [ 739.605405] ? __fdget_pos+0xa6/0xc0 [ 739.609095] ? __vfs_write+0xec/0x630 [ 739.612867] ? proc_tid_io_accounting+0x20/0x20 [ 739.617513] ? __cleanup_sighand+0x40/0x40 [ 739.620346] FAULT_INJECTION: forcing a failure. [ 739.620346] name failslab, interval 1, probability 0, space 0, times 0 [ 739.621740] ? lock_downgrade+0x6e0/0x6e0 [ 739.637036] _do_fork+0x180/0xc80 [ 739.640478] ? fork_idle+0x270/0x270 [ 739.644179] ? fput+0xb/0x140 [ 739.647286] ? SyS_write+0x14d/0x210 [ 739.650996] ? SyS_read+0x210/0x210 [ 739.654611] ? SyS_clock_settime+0x1a0/0x1a0 [ 739.658998] ? do_syscall_64+0x4c/0x640 [ 739.662972] ? sys_vfork+0x20/0x20 [ 739.666507] do_syscall_64+0x1d5/0x640 [ 739.670387] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 739.675557] RIP: 0033:0x45cba9 [ 739.678728] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 739.686422] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 739.693672] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 739.700924] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:18 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 739.708173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 739.715423] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 739.722702] CPU: 1 PID: 21538 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 739.730589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.740035] Call Trace: [ 739.742622] dump_stack+0x1b2/0x283 [ 739.746259] should_fail.cold+0x10a/0x154 [ 739.750411] should_failslab+0xd6/0x130 [ 739.754386] kmem_cache_alloc_node_trace+0x25a/0x400 09:39:18 executing program 1 (fault-call:3 fault-nth:4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 739.759492] __kmalloc_node+0x38/0x70 [ 739.763292] kvmalloc_node+0x46/0xd0 [ 739.767003] seq_read+0x886/0x1130 [ 739.770542] ? __fsnotify_inode_delete+0x20/0x20 [ 739.775406] ? seq_lseek+0x3d0/0x3d0 [ 739.779117] ? avc_policy_seqno+0x5/0x10 [ 739.783175] ? selinux_file_permission+0x7a/0x440 [ 739.788016] ? seq_lseek+0x3d0/0x3d0 [ 739.791726] proc_reg_read+0xf2/0x160 [ 739.795527] do_iter_read+0x3e3/0x5a0 [ 739.799332] ? proc_tid_io_accounting+0x20/0x20 [ 739.799496] FAULT_INJECTION: forcing a failure. [ 739.799496] name failslab, interval 1, probability 0, space 0, times 0 [ 739.803992] vfs_readv+0xd3/0x130 [ 739.804005] ? compat_rw_copy_check_uvector+0x320/0x320 [ 739.804017] ? __fget+0x1ff/0x360 [ 739.804031] ? lock_acquire+0x170/0x3f0 [ 739.804039] ? lock_downgrade+0x6e0/0x6e0 [ 739.804052] ? __fget+0x226/0x360 [ 739.804067] do_preadv+0x161/0x200 [ 739.842483] ? do_readv+0x2c0/0x2c0 [ 739.846120] ? SyS_clock_settime+0x1a0/0x1a0 [ 739.850519] ? do_syscall_64+0x4c/0x640 [ 739.854479] ? SyS_writev+0x30/0x30 [ 739.858092] do_syscall_64+0x1d5/0x640 [ 739.861975] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 739.867149] RIP: 0033:0x45cba9 [ 739.870328] RSP: 002b:00007f4aaa4f0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 739.878041] RAX: ffffffffffffffda RBX: 00000000004fba20 RCX: 000000000045cba9 [ 739.885295] RDX: 0000000000000375 RSI: 00000000200017c0 RDI: 0000000000000008 [ 739.892654] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 739.899928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 739.907187] R13: 0000000000000889 R14: 00000000004cb8c0 R15: 00007f4aaa4f16d4 [ 739.914456] CPU: 0 PID: 21547 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 739.922341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.931689] Call Trace: [ 739.934275] dump_stack+0x1b2/0x283 [ 739.937903] should_fail.cold+0x10a/0x154 [ 739.942053] should_failslab+0xd6/0x130 [ 739.946019] kmem_cache_alloc+0x28e/0x3c0 [ 739.950160] create_user_ns+0x3cd/0xca0 [ 739.954131] copy_creds+0x3c1/0x4d0 [ 739.957749] copy_process.part.0+0x868/0x6fa0 [ 739.962236] ? get_pid_task+0xb8/0x130 [ 739.966116] ? proc_fail_nth_write+0x7b/0x180 [ 739.970599] ? proc_tid_io_accounting+0x20/0x20 [ 739.975260] ? __fdget_pos+0xa6/0xc0 [ 739.978963] ? __vfs_write+0xec/0x630 [ 739.982754] ? proc_tid_io_accounting+0x20/0x20 [ 739.987421] ? __cleanup_sighand+0x40/0x40 [ 739.991650] ? lock_downgrade+0x6e0/0x6e0 [ 739.995796] _do_fork+0x180/0xc80 [ 739.999245] ? fork_idle+0x270/0x270 [ 740.002948] ? fput+0xb/0x140 [ 740.006044] ? SyS_write+0x14d/0x210 [ 740.009749] ? SyS_read+0x210/0x210 [ 740.013469] ? SyS_clock_settime+0x1a0/0x1a0 [ 740.017870] ? do_syscall_64+0x4c/0x640 [ 740.021845] ? sys_vfork+0x20/0x20 [ 740.025366] do_syscall_64+0x1d5/0x640 [ 740.029235] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 740.034398] RIP: 0033:0x45cba9 [ 740.037567] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 740.045252] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 740.052497] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 09:39:18 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:18 executing program 1 (fault-call:3 fault-nth:5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 740.059745] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 740.066989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 740.074320] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 740.137068] FAULT_INJECTION: forcing a failure. [ 740.137068] name failslab, interval 1, probability 0, space 0, times 0 [ 740.148523] CPU: 0 PID: 21562 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 740.156399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.165750] Call Trace: [ 740.168340] dump_stack+0x1b2/0x283 [ 740.171958] should_fail.cold+0x10a/0x154 [ 740.176101] should_failslab+0xd6/0x130 [ 740.180072] __kmalloc_track_caller+0x2bc/0x400 [ 740.184727] ? setup_userns_sysctls+0x4d/0x170 [ 740.189305] kmemdup+0x23/0x50 [ 740.192485] setup_userns_sysctls+0x4d/0x170 [ 740.196876] create_user_ns+0x76c/0xca0 [ 740.200831] copy_creds+0x3c1/0x4d0 [ 740.204453] copy_process.part.0+0x868/0x6fa0 [ 740.208988] ? get_pid_task+0xb8/0x130 [ 740.212857] ? proc_fail_nth_write+0x7b/0x180 [ 740.217331] ? proc_tid_io_accounting+0x20/0x20 [ 740.221986] ? __fdget_pos+0xa6/0xc0 [ 740.225699] ? __vfs_write+0xec/0x630 [ 740.229496] ? proc_tid_io_accounting+0x20/0x20 [ 740.234168] ? __cleanup_sighand+0x40/0x40 [ 740.238397] ? lock_downgrade+0x6e0/0x6e0 [ 740.242551] _do_fork+0x180/0xc80 [ 740.246017] ? fork_idle+0x270/0x270 [ 740.249725] ? fput+0xb/0x140 [ 740.252827] ? SyS_write+0x14d/0x210 [ 740.256538] ? SyS_read+0x210/0x210 [ 740.260157] ? SyS_clock_settime+0x1a0/0x1a0 [ 740.264563] ? do_syscall_64+0x4c/0x640 [ 740.268529] ? sys_vfork+0x20/0x20 [ 740.272063] do_syscall_64+0x1d5/0x640 [ 740.275955] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 740.281135] RIP: 0033:0x45cba9 09:39:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:18 executing program 2 (fault-call:10 fault-nth:2): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 740.284316] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 740.292016] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 740.299278] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 740.306537] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 740.313799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 740.321059] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:18 executing program 1 (fault-call:3 fault-nth:6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 740.402637] FAULT_INJECTION: forcing a failure. [ 740.402637] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 740.414465] CPU: 1 PID: 21575 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 740.422347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.431695] Call Trace: [ 740.434284] dump_stack+0x1b2/0x283 [ 740.437919] should_fail.cold+0x10a/0x154 [ 740.442066] __alloc_pages_nodemask+0x22b/0x2730 [ 740.446814] ? __lock_acquire+0x655/0x42a0 09:39:18 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 740.451056] ? trace_hardirqs_on+0x10/0x10 [ 740.455287] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 740.460123] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 740.464957] ? trace_hardirqs_on+0x10/0x10 [ 740.469191] ? lock_acquire+0x170/0x3f0 [ 740.473162] ? ____cache_alloc_node+0x153/0x1c0 [ 740.477830] ? lock_acquire+0x170/0x3f0 [ 740.481804] cache_grow_begin+0x91/0x410 [ 740.485864] ? do_raw_spin_unlock+0x164/0x250 [ 740.490360] ____cache_alloc_node+0x16d/0x1c0 [ 740.494834] ? check_preemption_disabled+0x35/0x240 [ 740.499840] kmem_cache_alloc+0x1e5/0x3c0 [ 740.503973] create_user_ns+0x3cd/0xca0 [ 740.507928] copy_creds+0x3c1/0x4d0 [ 740.511533] copy_process.part.0+0x868/0x6fa0 [ 740.516009] ? get_pid_task+0xb8/0x130 [ 740.519885] ? proc_fail_nth_write+0x7b/0x180 [ 740.524380] ? proc_tid_io_accounting+0x20/0x20 [ 740.529040] ? __fdget_pos+0xa6/0xc0 [ 740.533878] ? __vfs_write+0xec/0x630 [ 740.537680] ? proc_tid_io_accounting+0x20/0x20 [ 740.542331] ? __cleanup_sighand+0x40/0x40 [ 740.546542] ? lock_downgrade+0x6e0/0x6e0 [ 740.550720] _do_fork+0x180/0xc80 [ 740.554152] ? fork_idle+0x270/0x270 [ 740.557851] ? fput+0xb/0x140 [ 740.560942] ? SyS_write+0x14d/0x210 [ 740.564632] ? SyS_read+0x210/0x210 [ 740.568242] ? SyS_clock_settime+0x1a0/0x1a0 [ 740.572645] ? do_syscall_64+0x4c/0x640 [ 740.576606] ? sys_vfork+0x20/0x20 [ 740.580393] do_syscall_64+0x1d5/0x640 [ 740.584288] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 740.589471] RIP: 0033:0x45cba9 [ 740.592656] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:39:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 740.600357] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 740.607622] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 740.614894] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 740.622151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 740.629415] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:19 executing program 1 (fault-call:3 fault-nth:7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:19 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 740.754475] FAULT_INJECTION: forcing a failure. [ 740.754475] name failslab, interval 1, probability 0, space 0, times 0 [ 740.766085] CPU: 1 PID: 21594 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 740.773964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.783298] Call Trace: [ 740.785872] dump_stack+0x1b2/0x283 [ 740.789497] should_fail.cold+0x10a/0x154 [ 740.794948] should_failslab+0xd6/0x130 [ 740.798908] __kmalloc_track_caller+0x2bc/0x400 [ 740.803563] ? setup_userns_sysctls+0x4d/0x170 [ 740.808127] kmemdup+0x23/0x50 [ 740.811308] setup_userns_sysctls+0x4d/0x170 [ 740.815708] create_user_ns+0x76c/0xca0 [ 740.819673] copy_creds+0x3c1/0x4d0 [ 740.823301] copy_process.part.0+0x868/0x6fa0 [ 740.827789] ? get_pid_task+0xb8/0x130 [ 740.831770] ? proc_fail_nth_write+0x7b/0x180 [ 740.836244] ? proc_tid_io_accounting+0x20/0x20 [ 740.840895] ? __fdget_pos+0xa6/0xc0 [ 740.844597] ? __vfs_write+0xec/0x630 [ 740.848507] ? proc_tid_io_accounting+0x20/0x20 [ 740.853164] ? __cleanup_sighand+0x40/0x40 [ 740.857385] ? lock_downgrade+0x6e0/0x6e0 [ 740.861541] _do_fork+0x180/0xc80 [ 740.864991] ? fork_idle+0x270/0x270 [ 740.868694] ? fput+0xb/0x140 [ 740.871777] ? SyS_write+0x14d/0x210 [ 740.875475] ? SyS_read+0x210/0x210 [ 740.879103] ? SyS_clock_settime+0x1a0/0x1a0 [ 740.883507] ? do_syscall_64+0x4c/0x640 [ 740.887475] ? sys_vfork+0x20/0x20 [ 740.891012] do_syscall_64+0x1d5/0x640 [ 740.894904] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 740.900082] RIP: 0033:0x45cba9 09:39:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 740.903265] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 740.910966] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 740.918228] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 740.925489] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 740.932749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 740.940012] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:19 executing program 1 (fault-call:3 fault-nth:8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 741.033120] FAULT_INJECTION: forcing a failure. [ 741.033120] name failslab, interval 1, probability 0, space 0, times 0 [ 741.049538] CPU: 1 PID: 21613 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 741.057429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 741.066777] Call Trace: [ 741.069367] dump_stack+0x1b2/0x283 [ 741.072998] should_fail.cold+0x10a/0x154 [ 741.077144] should_failslab+0xd6/0x130 [ 741.081112] __kmalloc+0x2c1/0x400 [ 741.084765] ? __register_sysctl_table+0xc3/0xe50 [ 741.089607] __register_sysctl_table+0xc3/0xe50 [ 741.094263] ? __kmalloc_track_caller+0x39f/0x400 [ 741.099090] ? memcpy+0x35/0x50 [ 741.102364] setup_userns_sysctls+0xb3/0x170 [ 741.106772] create_user_ns+0x76c/0xca0 [ 741.110732] copy_creds+0x3c1/0x4d0 [ 741.114337] copy_process.part.0+0x868/0x6fa0 [ 741.118829] ? get_pid_task+0xb8/0x130 [ 741.122696] ? proc_fail_nth_write+0x7b/0x180 [ 741.127170] ? proc_tid_io_accounting+0x20/0x20 [ 741.131815] ? __fdget_pos+0xa6/0xc0 [ 741.135508] ? __vfs_write+0xec/0x630 [ 741.139282] ? proc_tid_io_accounting+0x20/0x20 [ 741.143940] ? __cleanup_sighand+0x40/0x40 [ 741.148160] ? lock_downgrade+0x6e0/0x6e0 [ 741.152292] _do_fork+0x180/0xc80 [ 741.155727] ? fork_idle+0x270/0x270 [ 741.159419] ? fput+0xb/0x140 [ 741.162499] ? SyS_write+0x14d/0x210 [ 741.166187] ? SyS_read+0x210/0x210 [ 741.169789] ? SyS_clock_settime+0x1a0/0x1a0 [ 741.174261] ? do_syscall_64+0x4c/0x640 [ 741.178212] ? sys_vfork+0x20/0x20 [ 741.181740] do_syscall_64+0x1d5/0x640 [ 741.186061] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 741.191287] RIP: 0033:0x45cba9 [ 741.194455] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 741.202144] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 741.209388] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 741.216632] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 741.223876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:19 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 741.231120] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:19 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x14000, 0xa4) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0x47d4, 0x7, r1, 0x0, &(0x7f0000000100)={0x9c0906, 0x800, [], @p_u8=&(0x7f0000000080)=0x9}}) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x5) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000200)="34334e51017e580db98a373f3eb63559e7429e56fc3cc6ac7fada8ea5a3a99fe4e7846807d", 0xfffffffffffffe10) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) setsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f00000002c0)=0x6, 0x4) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:19 executing program 1 (fault-call:3 fault-nth:9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) [ 741.335780] FAULT_INJECTION: forcing a failure. [ 741.335780] name failslab, interval 1, probability 0, space 0, times 0 [ 741.350179] CPU: 0 PID: 21630 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 741.358067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 741.367414] Call Trace: [ 741.370003] dump_stack+0x1b2/0x283 [ 741.373630] should_fail.cold+0x10a/0x154 [ 741.377777] should_failslab+0xd6/0x130 [ 741.381744] __kmalloc+0x2c1/0x400 [ 741.385266] ? __register_sysctl_table+0x783/0xe50 [ 741.390174] __register_sysctl_table+0x783/0xe50 [ 741.394909] ? memcpy+0x35/0x50 [ 741.398166] setup_userns_sysctls+0xb3/0x170 [ 741.402554] create_user_ns+0x76c/0xca0 [ 741.406507] copy_creds+0x3c1/0x4d0 [ 741.410112] copy_process.part.0+0x868/0x6fa0 [ 741.414680] ? get_pid_task+0xb8/0x130 [ 741.418563] ? proc_fail_nth_write+0x7b/0x180 [ 741.423044] ? proc_tid_io_accounting+0x20/0x20 [ 741.427709] ? __fdget_pos+0xa6/0xc0 [ 741.431418] ? __vfs_write+0xec/0x630 [ 741.435228] ? proc_tid_io_accounting+0x20/0x20 [ 741.439891] ? __cleanup_sighand+0x40/0x40 [ 741.444125] ? lock_downgrade+0x6e0/0x6e0 [ 741.448277] _do_fork+0x180/0xc80 [ 741.451729] ? fork_idle+0x270/0x270 [ 741.455451] ? fput+0xb/0x140 [ 741.458548] ? SyS_write+0x14d/0x210 [ 741.462260] ? SyS_read+0x210/0x210 [ 741.465883] ? SyS_clock_settime+0x1a0/0x1a0 [ 741.470288] ? do_syscall_64+0x4c/0x640 [ 741.474256] ? sys_vfork+0x20/0x20 [ 741.477795] do_syscall_64+0x1d5/0x640 [ 741.481681] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 741.486860] RIP: 0033:0x45cba9 [ 741.490040] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 741.497738] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 741.505001] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 741.512268] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 741.519616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 741.526878] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 741.538699] sysctl could not get directory: //user -12 [ 741.562976] CPU: 0 PID: 21630 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 741.570866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 741.580212] Call Trace: [ 741.582799] dump_stack+0x1b2/0x283 [ 741.586429] __register_sysctl_table+0xb61/0xe50 [ 741.591183] ? memcpy+0x35/0x50 [ 741.594457] setup_userns_sysctls+0xb3/0x170 [ 741.598865] create_user_ns+0x76c/0xca0 [ 741.602838] copy_creds+0x3c1/0x4d0 [ 741.606464] copy_process.part.0+0x868/0x6fa0 09:39:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000009070783af4eac5d2ce4733d5235cbe657268f020000000000"], 0x18}}, {{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000240)="69f27eb00d9285e304326274f107472e5a40142417a5a28401f399f6a0260ea6c7dc75e260f5946ef74079f7fbe85319a33584c550582d2a460883ad55e60e3a699fba1917695a1315a3d9eb5164c6b5d9a3c72b704f706626ea77371f2dbfaae6cddaeaf0b180a89731a344c25f", 0x6e}], 0x1, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @remote}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x4e, [@empty, @empty, @empty]}, @timestamp_addr={0x44, 0x2c, 0xda, 0x1, 0x2, [{@private=0xa010101, 0x3}, {@remote, 0x334}, {@private=0xa010102}, {@rand_addr=0x64010100, 0x8}, {@private=0xa010100, 0x7e}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x53, [@dev={0xac, 0x14, 0x14, 0xb}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, @remote, @private=0xa010102, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x148}}], 0x2, 0x483fc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{}, {r1, 0x4000}, {0xffffffffffffffff, 0x1184}, {r1, 0x4619}, {0xffffffffffffffff, 0xc408}, {r5}, {}, {r6, 0x999}], 0x8, &(0x7f0000000080)={r7, r8+60000000}, &(0x7f0000000100)={[0x80]}, 0x8) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) [ 741.610964] ? get_pid_task+0xb8/0x130 [ 741.614850] ? proc_fail_nth_write+0x7b/0x180 [ 741.619344] ? proc_tid_io_accounting+0x20/0x20 [ 741.624008] ? __fdget_pos+0xa6/0xc0 [ 741.627711] ? __vfs_write+0xec/0x630 [ 741.631491] ? proc_tid_io_accounting+0x20/0x20 [ 741.636165] ? __cleanup_sighand+0x40/0x40 [ 741.640387] ? lock_downgrade+0x6e0/0x6e0 [ 741.644533] _do_fork+0x180/0xc80 [ 741.647967] ? fork_idle+0x270/0x270 [ 741.651705] ? fput+0xb/0x140 [ 741.654791] ? SyS_write+0x14d/0x210 [ 741.658596] ? SyS_read+0x210/0x210 [ 741.662210] ? SyS_clock_settime+0x1a0/0x1a0 [ 741.666696] ? do_syscall_64+0x4c/0x640 [ 741.670658] ? sys_vfork+0x20/0x20 [ 741.674178] do_syscall_64+0x1d5/0x640 [ 741.678052] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 741.683217] RIP: 0033:0x45cba9 [ 741.686384] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 741.694128] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 741.701386] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 09:39:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:20 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:20 executing program 1 (fault-call:3 fault-nth:10): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 741.708694] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 741.715952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 741.723214] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 741.784063] FAULT_INJECTION: forcing a failure. [ 741.784063] name failslab, interval 1, probability 0, space 0, times 0 [ 741.796369] CPU: 0 PID: 21652 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 741.804252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 741.813594] Call Trace: [ 741.816173] dump_stack+0x1b2/0x283 [ 741.819791] should_fail.cold+0x10a/0x154 [ 741.823920] should_failslab+0xd6/0x130 [ 741.827881] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 741.832551] alloc_fdtable+0x78/0x270 [ 741.836350] dup_fd+0x683/0xa40 [ 741.839646] copy_process.part.0+0x1b58/0x6fa0 [ 741.844219] ? get_pid_task+0xb8/0x130 [ 741.848094] ? proc_fail_nth_write+0x7b/0x180 [ 741.852567] ? proc_tid_io_accounting+0x20/0x20 [ 741.857367] ? __cleanup_sighand+0x40/0x40 [ 741.861588] ? lock_downgrade+0x6e0/0x6e0 [ 741.865722] _do_fork+0x180/0xc80 [ 741.869212] ? fork_idle+0x270/0x270 [ 741.872906] ? fput+0xb/0x140 [ 741.876002] ? SyS_write+0x14d/0x210 [ 741.879710] ? SyS_read+0x210/0x210 [ 741.883333] ? SyS_clock_settime+0x1a0/0x1a0 [ 741.887739] ? do_syscall_64+0x4c/0x640 [ 741.891706] ? sys_vfork+0x20/0x20 [ 741.895241] do_syscall_64+0x1d5/0x640 [ 741.899132] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 741.904314] RIP: 0033:0x45cba9 [ 741.907492] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 741.915210] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 741.922473] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 09:39:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 741.929736] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 741.937692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 741.944953] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:20 executing program 1 (fault-call:3 fault-nth:11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 742.024542] FAULT_INJECTION: forcing a failure. [ 742.024542] name failslab, interval 1, probability 0, space 0, times 0 [ 742.037041] CPU: 1 PID: 21663 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 742.044927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 742.054269] Call Trace: [ 742.056858] dump_stack+0x1b2/0x283 [ 742.060488] should_fail.cold+0x10a/0x154 [ 742.064638] should_failslab+0xd6/0x130 [ 742.068626] kmem_cache_alloc+0x28e/0x3c0 09:39:20 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 742.072768] dup_fd+0x81/0xa40 [ 742.075951] ? perf_event_init_task+0xfc/0x790 [ 742.080520] ? audit_alloc+0x86/0x630 [ 742.084319] copy_process.part.0+0x1b58/0x6fa0 [ 742.088900] ? get_pid_task+0xb8/0x130 [ 742.092788] ? proc_fail_nth_write+0x7b/0x180 [ 742.097282] ? proc_tid_io_accounting+0x20/0x20 [ 742.101958] ? __cleanup_sighand+0x40/0x40 [ 742.106185] ? lock_downgrade+0x6e0/0x6e0 [ 742.110331] _do_fork+0x180/0xc80 [ 742.113785] ? fork_idle+0x270/0x270 [ 742.117502] ? fput+0xb/0x140 [ 742.120607] ? SyS_write+0x14d/0x210 [ 742.124325] ? SyS_read+0x210/0x210 [ 742.127948] ? SyS_clock_settime+0x1a0/0x1a0 [ 742.132347] ? do_syscall_64+0x4c/0x640 [ 742.136299] ? sys_vfork+0x20/0x20 [ 742.139864] do_syscall_64+0x1d5/0x640 [ 742.143733] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 742.148897] RIP: 0033:0x45cba9 [ 742.152061] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 742.159742] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 742.166991] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 09:39:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:20 executing program 1 (fault-call:3 fault-nth:12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 742.174358] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 742.181614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 742.188861] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 742.225422] FAULT_INJECTION: forcing a failure. [ 742.225422] name failslab, interval 1, probability 0, space 0, times 0 [ 742.240505] CPU: 1 PID: 21671 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 742.248650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 742.257996] Call Trace: [ 742.260585] dump_stack+0x1b2/0x283 [ 742.264216] should_fail.cold+0x10a/0x154 [ 742.268364] should_failslab+0xd6/0x130 [ 742.272333] kmem_cache_alloc+0x28e/0x3c0 [ 742.276473] dup_fd+0x81/0xa40 [ 742.279665] ? perf_event_init_task+0xfc/0x790 [ 742.284237] ? audit_alloc+0x86/0x630 [ 742.288039] copy_process.part.0+0x1b58/0x6fa0 [ 742.292619] ? get_pid_task+0xb8/0x130 [ 742.296504] ? proc_fail_nth_write+0x7b/0x180 [ 742.300992] ? proc_tid_io_accounting+0x20/0x20 [ 742.305665] ? __cleanup_sighand+0x40/0x40 [ 742.309889] ? lock_downgrade+0x6e0/0x6e0 [ 742.314036] _do_fork+0x180/0xc80 [ 742.317485] ? fork_idle+0x270/0x270 [ 742.321194] ? fput+0xb/0x140 [ 742.324292] ? SyS_write+0x14d/0x210 [ 742.327998] ? SyS_read+0x210/0x210 [ 742.331619] ? SyS_clock_settime+0x1a0/0x1a0 [ 742.336023] ? do_syscall_64+0x4c/0x640 [ 742.339989] ? sys_vfork+0x20/0x20 [ 742.343528] do_syscall_64+0x1d5/0x640 [ 742.347416] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 742.352596] RIP: 0033:0x45cba9 [ 742.355777] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 742.363475] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 09:39:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) [ 742.370741] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 742.378004] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 742.385269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 742.392531] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:20 executing program 1 (fault-call:3 fault-nth:13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf948dc020e22ac98}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000f0dbdf25010000007e00000273787a30000000000000000000000030faffffff0800030073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x20000090) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 742.492939] FAULT_INJECTION: forcing a failure. [ 742.492939] name failslab, interval 1, probability 0, space 0, times 0 [ 742.504828] CPU: 1 PID: 21686 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 742.512731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 742.522074] Call Trace: [ 742.524656] dump_stack+0x1b2/0x283 [ 742.528284] should_fail.cold+0x10a/0x154 [ 742.532428] should_failslab+0xd6/0x130 [ 742.536394] kmem_cache_alloc_node_trace+0x25a/0x400 [ 742.541489] __kmalloc_node+0x38/0x70 [ 742.545280] kvmalloc_node+0x46/0xd0 [ 742.548987] alloc_fdtable+0x133/0x270 [ 742.552877] dup_fd+0x683/0xa40 [ 742.556258] copy_process.part.0+0x1b58/0x6fa0 [ 742.560817] ? get_pid_task+0xb8/0x130 [ 742.564680] ? proc_fail_nth_write+0x7b/0x180 [ 742.569148] ? proc_tid_io_accounting+0x20/0x20 [ 742.573794] ? __cleanup_sighand+0x40/0x40 [ 742.578012] ? lock_downgrade+0x6e0/0x6e0 [ 742.582147] _do_fork+0x180/0xc80 [ 742.585583] ? fork_idle+0x270/0x270 [ 742.589321] ? fput+0xb/0x140 [ 742.592402] ? SyS_write+0x14d/0x210 [ 742.596090] ? SyS_read+0x210/0x210 [ 742.599728] ? SyS_clock_settime+0x1a0/0x1a0 [ 742.604117] ? do_syscall_64+0x4c/0x640 [ 742.608065] ? sys_vfork+0x20/0x20 [ 742.611581] do_syscall_64+0x1d5/0x640 [ 742.615536] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 742.620714] RIP: 0033:0x45cba9 [ 742.623880] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 742.631566] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 09:39:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:21 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 742.638812] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 742.646059] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 742.653305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 742.660555] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:21 executing program 1 (fault-call:3 fault-nth:14): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 742.723696] FAULT_INJECTION: forcing a failure. [ 742.723696] name failslab, interval 1, probability 0, space 0, times 0 [ 742.735055] CPU: 1 PID: 21695 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 742.743066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 742.752411] Call Trace: [ 742.754989] dump_stack+0x1b2/0x283 [ 742.758607] should_fail.cold+0x10a/0x154 [ 742.762750] should_failslab+0xd6/0x130 [ 742.766723] kmem_cache_alloc+0x28e/0x3c0 [ 742.770869] copy_process.part.0+0x1cd3/0x6fa0 [ 742.775443] ? get_pid_task+0xb8/0x130 [ 742.779311] ? proc_fail_nth_write+0x7b/0x180 [ 742.783784] ? proc_tid_io_accounting+0x20/0x20 [ 742.788436] ? __cleanup_sighand+0x40/0x40 [ 742.792665] ? lock_downgrade+0x6e0/0x6e0 [ 742.796803] _do_fork+0x180/0xc80 [ 742.800245] ? fork_idle+0x270/0x270 [ 742.803944] ? fput+0xb/0x140 [ 742.807035] ? SyS_write+0x14d/0x210 [ 742.810733] ? SyS_read+0x210/0x210 [ 742.814347] ? SyS_clock_settime+0x1a0/0x1a0 [ 742.818737] ? do_syscall_64+0x4c/0x640 [ 742.822698] ? sys_vfork+0x20/0x20 [ 742.826225] do_syscall_64+0x1d5/0x640 [ 742.830107] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 742.835304] RIP: 0033:0x45cba9 [ 742.838472] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 742.846156] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 742.853408] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 742.860664] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 742.867920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 742.875178] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:21 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:21 executing program 1 (fault-call:3 fault-nth:15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 742.961578] FAULT_INJECTION: forcing a failure. [ 742.961578] name failslab, interval 1, probability 0, space 0, times 0 [ 742.974489] CPU: 0 PID: 21711 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 742.982368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 742.991704] Call Trace: [ 742.994285] dump_stack+0x1b2/0x283 [ 742.997905] should_fail.cold+0x10a/0x154 [ 743.002037] should_failslab+0xd6/0x130 [ 743.006009] kmem_cache_alloc+0x28e/0x3c0 [ 743.010238] create_new_namespaces+0x30/0x730 [ 743.014724] ? security_capable+0x88/0xb0 [ 743.018866] copy_namespaces+0x27b/0x310 [ 743.022919] copy_process.part.0+0x2616/0x6fa0 [ 743.027482] ? get_pid_task+0xb8/0x130 [ 743.031350] ? proc_tid_io_accounting+0x20/0x20 [ 743.036018] ? __cleanup_sighand+0x40/0x40 [ 743.040242] ? lock_downgrade+0x6e0/0x6e0 [ 743.044381] _do_fork+0x180/0xc80 [ 743.047831] ? fork_idle+0x270/0x270 [ 743.051532] ? fput+0xb/0x140 [ 743.054619] ? SyS_write+0x14d/0x210 [ 743.058313] ? SyS_read+0x210/0x210 [ 743.061917] ? SyS_clock_settime+0x1a0/0x1a0 [ 743.066303] ? do_syscall_64+0x4c/0x640 [ 743.070256] ? sys_vfork+0x20/0x20 [ 743.073782] do_syscall_64+0x1d5/0x640 [ 743.077652] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 743.082818] RIP: 0033:0x45cba9 [ 743.085986] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 743.093682] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 743.100931] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 09:39:21 executing program 1 (fault-call:3 fault-nth:16): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 743.108178] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 743.115471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 743.122718] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 743.173643] FAULT_INJECTION: forcing a failure. [ 743.173643] name failslab, interval 1, probability 0, space 0, times 0 [ 743.185867] CPU: 1 PID: 21716 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 743.193749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.203093] Call Trace: [ 743.205671] dump_stack+0x1b2/0x283 [ 743.209293] should_fail.cold+0x10a/0x154 [ 743.213450] should_failslab+0xd6/0x130 [ 743.217422] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 743.222089] inc_ucount+0x3bd/0x6f0 [ 743.225714] ? retire_userns_sysctls+0x80/0x80 [ 743.230292] ? fs_reclaim_acquire+0x10/0x10 [ 743.234614] alloc_mnt_ns+0x8e/0x440 [ 743.238335] copy_mnt_ns+0x8e/0x8a0 [ 743.241966] ? rcu_read_lock_sched_held+0x10a/0x130 [ 743.247065] ? kmem_cache_alloc+0x35f/0x3c0 [ 743.251394] create_new_namespaces+0xc9/0x730 [ 743.255882] ? security_capable+0x88/0xb0 [ 743.260034] copy_namespaces+0x27b/0x310 [ 743.264097] copy_process.part.0+0x2616/0x6fa0 [ 743.268677] ? get_pid_task+0xb8/0x130 [ 743.272565] ? proc_tid_io_accounting+0x20/0x20 [ 743.277263] ? __cleanup_sighand+0x40/0x40 [ 743.281497] ? lock_downgrade+0x6e0/0x6e0 [ 743.285648] _do_fork+0x180/0xc80 [ 743.289102] ? fork_idle+0x270/0x270 [ 743.292811] ? fput+0xb/0x140 [ 743.295917] ? SyS_write+0x14d/0x210 [ 743.299624] ? SyS_read+0x210/0x210 [ 743.303259] ? SyS_clock_settime+0x1a0/0x1a0 [ 743.307661] ? do_syscall_64+0x4c/0x640 [ 743.311712] ? sys_vfork+0x20/0x20 [ 743.315251] do_syscall_64+0x1d5/0x640 [ 743.319138] entry_SYSCALL_64_after_hwframe+0x46/0xbb 09:39:21 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10042, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 743.324320] RIP: 0033:0x45cba9 [ 743.327500] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 743.335205] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 743.342466] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 743.349731] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 743.356993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 743.364257] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:21 executing program 1 (fault-call:3 fault-nth:17): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 743.472605] FAULT_INJECTION: forcing a failure. [ 743.472605] name failslab, interval 1, probability 0, space 0, times 0 [ 743.484791] CPU: 1 PID: 21730 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 743.492687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.502036] Call Trace: [ 743.504622] dump_stack+0x1b2/0x283 [ 743.508254] should_fail.cold+0x10a/0x154 [ 743.512399] should_failslab+0xd6/0x130 [ 743.516368] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 743.521028] alloc_mnt_ns+0xd4/0x440 [ 743.524731] copy_mnt_ns+0x8e/0x8a0 [ 743.528349] ? rcu_read_lock_sched_held+0x10a/0x130 [ 743.533358] ? kmem_cache_alloc+0x35f/0x3c0 [ 743.537672] create_new_namespaces+0xc9/0x730 [ 743.542145] ? security_capable+0x88/0xb0 [ 743.546270] copy_namespaces+0x27b/0x310 [ 743.550307] copy_process.part.0+0x2616/0x6fa0 [ 743.554868] ? get_pid_task+0xb8/0x130 [ 743.558744] ? proc_tid_io_accounting+0x20/0x20 [ 743.563402] ? __cleanup_sighand+0x40/0x40 [ 743.567616] ? lock_downgrade+0x6e0/0x6e0 [ 743.571764] _do_fork+0x180/0xc80 [ 743.575226] ? fork_idle+0x270/0x270 [ 743.578921] ? fput+0xb/0x140 [ 743.582013] ? SyS_write+0x14d/0x210 [ 743.585717] ? SyS_read+0x210/0x210 [ 743.589420] ? SyS_clock_settime+0x1a0/0x1a0 [ 743.593809] ? do_syscall_64+0x4c/0x640 [ 743.597761] ? sys_vfork+0x20/0x20 [ 743.601288] do_syscall_64+0x1d5/0x640 [ 743.605208] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 743.610494] RIP: 0033:0x45cba9 [ 743.613676] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:39:22 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:22 executing program 1 (fault-call:3 fault-nth:18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 743.621603] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 743.628861] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 743.636132] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 743.643408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 743.650668] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 743.712447] FAULT_INJECTION: forcing a failure. [ 743.712447] name failslab, interval 1, probability 0, space 0, times 0 [ 743.724079] CPU: 1 PID: 21739 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 743.731946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.741278] Call Trace: [ 743.743857] dump_stack+0x1b2/0x283 [ 743.747486] should_fail.cold+0x10a/0x154 [ 743.751633] should_failslab+0xd6/0x130 [ 743.755605] kmem_cache_alloc+0x28e/0x3c0 [ 743.759745] alloc_vfsmnt+0x23/0x7c0 [ 743.763457] clone_mnt+0x6c/0xef0 [ 743.766902] ? ida_simple_get+0x112/0x190 [ 743.771039] copy_tree+0xd3/0x860 [ 743.774485] copy_mnt_ns+0x112/0x8a0 [ 743.778180] ? rcu_read_lock_sched_held+0x10a/0x130 [ 743.783180] ? kmem_cache_alloc+0x35f/0x3c0 [ 743.787491] create_new_namespaces+0xc9/0x730 [ 743.791973] ? security_capable+0x88/0xb0 [ 743.796126] copy_namespaces+0x27b/0x310 [ 743.800178] copy_process.part.0+0x2616/0x6fa0 [ 743.804752] ? get_pid_task+0xb8/0x130 [ 743.808637] ? proc_tid_io_accounting+0x20/0x20 [ 743.813313] ? __cleanup_sighand+0x40/0x40 [ 743.817542] ? lock_downgrade+0x6e0/0x6e0 [ 743.821688] _do_fork+0x180/0xc80 [ 743.825145] ? fork_idle+0x270/0x270 [ 743.828853] ? fput+0xb/0x140 [ 743.831954] ? SyS_write+0x14d/0x210 [ 743.835661] ? SyS_read+0x210/0x210 [ 743.839368] ? SyS_clock_settime+0x1a0/0x1a0 [ 743.843772] ? do_syscall_64+0x4c/0x640 [ 743.847742] ? sys_vfork+0x20/0x20 [ 743.851279] do_syscall_64+0x1d5/0x640 [ 743.855172] entry_SYSCALL_64_after_hwframe+0x46/0xbb 09:39:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 743.860353] RIP: 0033:0x45cba9 [ 743.863533] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 743.871236] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 743.878498] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 743.885759] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 743.893117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 743.900380] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:22 executing program 1 (fault-call:3 fault-nth:19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 743.998508] FAULT_INJECTION: forcing a failure. [ 743.998508] name failslab, interval 1, probability 0, space 0, times 0 [ 744.010378] CPU: 0 PID: 21751 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 744.018264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.027611] Call Trace: [ 744.030202] dump_stack+0x1b2/0x283 [ 744.033832] should_fail.cold+0x10a/0x154 [ 744.037982] should_failslab+0xd6/0x130 [ 744.041954] kmem_cache_alloc+0x28e/0x3c0 09:39:22 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 744.046105] alloc_vfsmnt+0x23/0x7c0 [ 744.049816] clone_mnt+0x6c/0xef0 [ 744.053266] ? ida_simple_get+0x112/0x190 [ 744.057413] copy_tree+0xd3/0x860 [ 744.060869] copy_mnt_ns+0x112/0x8a0 [ 744.064693] ? rcu_read_lock_sched_held+0x10a/0x130 [ 744.069704] ? kmem_cache_alloc+0x35f/0x3c0 [ 744.074024] create_new_namespaces+0xc9/0x730 [ 744.078515] ? security_capable+0x88/0xb0 [ 744.082666] copy_namespaces+0x27b/0x310 [ 744.086729] copy_process.part.0+0x2616/0x6fa0 [ 744.091313] ? get_pid_task+0xb8/0x130 [ 744.095204] ? proc_tid_io_accounting+0x20/0x20 [ 744.099883] ? __cleanup_sighand+0x40/0x40 [ 744.104121] ? lock_downgrade+0x6e0/0x6e0 [ 744.108276] _do_fork+0x180/0xc80 [ 744.111823] ? fork_idle+0x270/0x270 [ 744.115526] ? fput+0xb/0x140 [ 744.118624] ? SyS_write+0x14d/0x210 [ 744.122324] ? SyS_read+0x210/0x210 [ 744.125941] ? SyS_clock_settime+0x1a0/0x1a0 [ 744.130336] ? do_syscall_64+0x4c/0x640 [ 744.134290] ? sys_vfork+0x20/0x20 [ 744.137818] do_syscall_64+0x1d5/0x640 [ 744.141706] entry_SYSCALL_64_after_hwframe+0x46/0xbb 09:39:22 executing program 1 (fault-call:3 fault-nth:20): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 744.146881] RIP: 0033:0x45cba9 [ 744.150053] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 744.157750] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 744.165009] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 744.172257] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 744.179505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 744.186754] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x440240, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="8b68eb4956a0193e1f4058") syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x2, 0x3, 0x3, 0x0, 0x0, {0x238ca14db00411c4, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x36}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x400, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfff}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8810) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) [ 744.286336] FAULT_INJECTION: forcing a failure. [ 744.286336] name failslab, interval 1, probability 0, space 0, times 0 [ 744.297859] CPU: 0 PID: 21762 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 744.305739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.315086] Call Trace: [ 744.317676] dump_stack+0x1b2/0x283 [ 744.321306] should_fail.cold+0x10a/0x154 [ 744.325453] should_failslab+0xd6/0x130 [ 744.329424] kmem_cache_alloc+0x28e/0x3c0 [ 744.333570] alloc_vfsmnt+0x23/0x7c0 [ 744.337282] clone_mnt+0x6c/0xef0 [ 744.340733] ? is_subdir+0x223/0x38a [ 744.344445] copy_tree+0x33a/0x860 [ 744.347988] copy_mnt_ns+0x112/0x8a0 [ 744.351699] ? rcu_read_lock_sched_held+0x10a/0x130 [ 744.356709] ? kmem_cache_alloc+0x35f/0x3c0 [ 744.361031] create_new_namespaces+0xc9/0x730 [ 744.365523] ? security_capable+0x88/0xb0 [ 744.369672] copy_namespaces+0x27b/0x310 [ 744.373733] copy_process.part.0+0x2616/0x6fa0 [ 744.378316] ? get_pid_task+0xb8/0x130 [ 744.382201] ? proc_tid_io_accounting+0x20/0x20 09:39:22 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 744.386878] ? __cleanup_sighand+0x40/0x40 [ 744.391119] ? lock_downgrade+0x6e0/0x6e0 [ 744.395268] _do_fork+0x180/0xc80 [ 744.398725] ? fork_idle+0x270/0x270 [ 744.402436] ? fput+0xb/0x140 [ 744.405536] ? SyS_write+0x14d/0x210 [ 744.409245] ? SyS_read+0x210/0x210 [ 744.412867] ? SyS_clock_settime+0x1a0/0x1a0 [ 744.417281] ? do_syscall_64+0x4c/0x640 [ 744.421251] ? sys_vfork+0x20/0x20 [ 744.424792] do_syscall_64+0x1d5/0x640 [ 744.428686] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 744.433876] RIP: 0033:0x45cba9 09:39:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 744.437062] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 744.444767] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 744.452044] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 744.459343] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 744.466591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 744.473842] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:22 executing program 1 (fault-call:3 fault-nth:21): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 744.558813] FAULT_INJECTION: forcing a failure. [ 744.558813] name failslab, interval 1, probability 0, space 0, times 0 [ 744.693640] CPU: 0 PID: 21776 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 744.701545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.710894] Call Trace: [ 744.713487] dump_stack+0x1b2/0x283 [ 744.717121] should_fail.cold+0x10a/0x154 [ 744.721267] should_failslab+0xd6/0x130 [ 744.725240] kmem_cache_alloc+0x28e/0x3c0 [ 744.729386] alloc_vfsmnt+0x23/0x7c0 [ 744.733097] clone_mnt+0x6c/0xef0 [ 744.736550] copy_tree+0x33a/0x860 [ 744.740094] copy_mnt_ns+0x112/0x8a0 [ 744.743916] ? rcu_read_lock_sched_held+0x10a/0x130 [ 744.748928] ? kmem_cache_alloc+0x35f/0x3c0 [ 744.753335] create_new_namespaces+0xc9/0x730 [ 744.757827] ? security_capable+0x88/0xb0 [ 744.761976] copy_namespaces+0x27b/0x310 [ 744.766041] copy_process.part.0+0x2616/0x6fa0 [ 744.770625] ? get_pid_task+0xb8/0x130 [ 744.774509] ? proc_tid_io_accounting+0x20/0x20 [ 744.779186] ? __cleanup_sighand+0x40/0x40 [ 744.783413] ? lock_downgrade+0x6e0/0x6e0 [ 744.787559] _do_fork+0x180/0xc80 09:39:23 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000040)=""/60, 0x3c}], 0x2, 0x800000000001) [ 744.791010] ? fork_idle+0x270/0x270 [ 744.794724] ? fput+0xb/0x140 [ 744.797824] ? SyS_write+0x14d/0x210 [ 744.801531] ? SyS_read+0x210/0x210 [ 744.805161] ? SyS_clock_settime+0x1a0/0x1a0 [ 744.809565] ? do_syscall_64+0x4c/0x640 [ 744.813534] ? sys_vfork+0x20/0x20 [ 744.817072] do_syscall_64+0x1d5/0x640 [ 744.820963] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 744.826143] RIP: 0033:0x45cba9 [ 744.829324] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 744.837031] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 09:39:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:23 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 744.844295] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 744.851559] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 744.858819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 744.866079] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:23 executing program 1 (fault-call:3 fault-nth:22): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 744.953614] FAULT_INJECTION: forcing a failure. [ 744.953614] name failslab, interval 1, probability 0, space 0, times 0 [ 744.970645] CPU: 0 PID: 21791 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 744.978545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.987892] Call Trace: [ 744.990480] dump_stack+0x1b2/0x283 [ 744.994115] should_fail.cold+0x10a/0x154 [ 744.998265] should_failslab+0xd6/0x130 [ 745.002237] __kmalloc_track_caller+0x2bc/0x400 [ 745.006902] ? kstrdup_const+0x35/0x60 [ 745.010787] ? lock_downgrade+0x6e0/0x6e0 [ 745.014933] kstrdup+0x36/0x70 [ 745.018122] kstrdup_const+0x35/0x60 [ 745.021833] alloc_vfsmnt+0xe0/0x7c0 [ 745.025542] clone_mnt+0x6c/0xef0 [ 745.028995] copy_tree+0x33a/0x860 [ 745.032542] copy_mnt_ns+0x112/0x8a0 [ 745.036252] ? rcu_read_lock_sched_held+0x10a/0x130 [ 745.041262] ? kmem_cache_alloc+0x35f/0x3c0 [ 745.045579] create_new_namespaces+0xc9/0x730 [ 745.050067] ? security_capable+0x88/0xb0 [ 745.054219] copy_namespaces+0x27b/0x310 [ 745.058277] copy_process.part.0+0x2616/0x6fa0 [ 745.062860] ? get_pid_task+0xb8/0x130 [ 745.066747] ? proc_tid_io_accounting+0x20/0x20 [ 745.071424] ? __cleanup_sighand+0x40/0x40 [ 745.075651] ? lock_downgrade+0x6e0/0x6e0 [ 745.079807] _do_fork+0x180/0xc80 [ 745.083258] ? fork_idle+0x270/0x270 [ 745.086970] ? fput+0xb/0x140 [ 745.090069] ? SyS_write+0x14d/0x210 [ 745.093774] ? SyS_read+0x210/0x210 [ 745.097382] ? SyS_clock_settime+0x1a0/0x1a0 [ 745.101773] ? do_syscall_64+0x4c/0x640 [ 745.105735] ? sys_vfork+0x20/0x20 [ 745.109257] do_syscall_64+0x1d5/0x640 [ 745.113138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 745.118313] RIP: 0033:0x45cba9 [ 745.121479] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 745.129401] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 745.136649] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 745.143900] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0) [ 745.151163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 745.158424] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:23 executing program 1 (fault-call:3 fault-nth:23): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:23 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 745.280123] FAULT_INJECTION: forcing a failure. [ 745.280123] name failslab, interval 1, probability 0, space 0, times 0 [ 745.314634] CPU: 1 PID: 21801 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 09:39:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 745.322545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 745.331894] Call Trace: [ 745.334486] dump_stack+0x1b2/0x283 [ 745.338116] should_fail.cold+0x10a/0x154 [ 745.342272] should_failslab+0xd6/0x130 [ 745.346239] kmem_cache_alloc+0x28e/0x3c0 [ 745.350384] alloc_vfsmnt+0x23/0x7c0 [ 745.354095] clone_mnt+0x6c/0xef0 [ 745.357544] copy_tree+0x33a/0x860 [ 745.361085] copy_mnt_ns+0x112/0x8a0 [ 745.364792] ? rcu_read_lock_sched_held+0x10a/0x130 [ 745.369795] ? kmem_cache_alloc+0x35f/0x3c0 [ 745.374110] create_new_namespaces+0xc9/0x730 [ 745.378595] ? security_capable+0x88/0xb0 [ 745.382732] copy_namespaces+0x27b/0x310 [ 745.386784] copy_process.part.0+0x2616/0x6fa0 [ 745.391358] ? get_pid_task+0xb8/0x130 [ 745.395227] ? proc_tid_io_accounting+0x20/0x20 [ 745.400827] ? __cleanup_sighand+0x40/0x40 [ 745.405060] ? lock_downgrade+0x6e0/0x6e0 [ 745.409200] _do_fork+0x180/0xc80 [ 745.412639] ? fork_idle+0x270/0x270 [ 745.416339] ? fput+0xb/0x140 [ 745.419441] ? SyS_write+0x14d/0x210 [ 745.423146] ? SyS_read+0x210/0x210 [ 745.426760] ? SyS_clock_settime+0x1a0/0x1a0 [ 745.431153] ? do_syscall_64+0x4c/0x640 [ 745.435117] ? sys_vfork+0x20/0x20 [ 745.438654] do_syscall_64+0x1d5/0x640 [ 745.442527] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 745.447694] RIP: 0033:0x45cba9 [ 745.450868] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 745.458575] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 745.465834] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 745.473082] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 745.480338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 745.487592] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:23 executing program 1 (fault-call:3 fault-nth:24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'veth0_to_bond\x00', {0x7}, 0x137}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 745.704882] FAULT_INJECTION: forcing a failure. [ 745.704882] name failslab, interval 1, probability 0, space 0, times 0 [ 745.729344] CPU: 1 PID: 21812 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 745.737238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 745.746585] Call Trace: [ 745.749173] dump_stack+0x1b2/0x283 [ 745.752814] should_fail.cold+0x10a/0x154 [ 745.756959] should_failslab+0xd6/0x130 [ 745.760913] __kmalloc_track_caller+0x2bc/0x400 [ 745.765579] ? kstrdup_const+0x35/0x60 [ 745.769449] ? lock_downgrade+0x6e0/0x6e0 [ 745.773581] kstrdup+0x36/0x70 [ 745.776754] kstrdup_const+0x35/0x60 [ 745.780455] alloc_vfsmnt+0xe0/0x7c0 [ 745.784167] clone_mnt+0x6c/0xef0 [ 745.787625] copy_tree+0x33a/0x860 [ 745.791163] copy_mnt_ns+0x112/0x8a0 [ 745.794875] ? rcu_read_lock_sched_held+0x10a/0x130 [ 745.799884] ? kmem_cache_alloc+0x35f/0x3c0 [ 745.804208] create_new_namespaces+0xc9/0x730 [ 745.808699] ? security_capable+0x88/0xb0 [ 745.812846] copy_namespaces+0x27b/0x310 [ 745.816905] copy_process.part.0+0x2616/0x6fa0 [ 745.821485] ? get_pid_task+0xb8/0x130 [ 745.825372] ? proc_tid_io_accounting+0x20/0x20 [ 745.830046] ? __cleanup_sighand+0x40/0x40 [ 745.834277] ? lock_downgrade+0x6e0/0x6e0 [ 745.838426] _do_fork+0x180/0xc80 [ 745.841889] ? fork_idle+0x270/0x270 [ 745.845600] ? fput+0xb/0x140 [ 745.848706] ? SyS_write+0x14d/0x210 [ 745.852416] ? SyS_read+0x210/0x210 [ 745.856036] ? SyS_clock_settime+0x1a0/0x1a0 [ 745.860438] ? do_syscall_64+0x4c/0x640 [ 745.864404] ? sys_vfork+0x20/0x20 [ 745.867938] do_syscall_64+0x1d5/0x640 [ 745.871828] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 745.877009] RIP: 0033:0x45cba9 [ 745.880191] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 745.887893] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 745.895155] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 745.902415] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 745.909679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 745.916938] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:24 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:24 executing program 1 (fault-call:3 fault-nth:25): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f00000017c0), 0x375, 0x0) [ 746.023858] FAULT_INJECTION: forcing a failure. [ 746.023858] name failslab, interval 1, probability 0, space 0, times 0 [ 746.045748] CPU: 1 PID: 21831 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 746.053634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.062968] Call Trace: [ 746.065548] dump_stack+0x1b2/0x283 [ 746.069177] should_fail.cold+0x10a/0x154 [ 746.073315] should_failslab+0xd6/0x130 [ 746.077273] __kmalloc_track_caller+0x2bc/0x400 [ 746.081923] ? kstrdup_const+0x35/0x60 [ 746.085795] ? lock_downgrade+0x6e0/0x6e0 [ 746.089927] kstrdup+0x36/0x70 [ 746.093102] kstrdup_const+0x35/0x60 [ 746.096803] alloc_vfsmnt+0xe0/0x7c0 [ 746.100503] clone_mnt+0x6c/0xef0 [ 746.103939] copy_tree+0x33a/0x860 [ 746.107465] copy_mnt_ns+0x112/0x8a0 [ 746.111169] ? rcu_read_lock_sched_held+0x10a/0x130 [ 746.116173] ? kmem_cache_alloc+0x35f/0x3c0 09:39:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 746.120545] create_new_namespaces+0xc9/0x730 [ 746.125020] ? security_capable+0x88/0xb0 [ 746.129153] copy_namespaces+0x27b/0x310 [ 746.133207] copy_process.part.0+0x2616/0x6fa0 [ 746.137791] ? get_pid_task+0xb8/0x130 [ 746.141676] ? proc_tid_io_accounting+0x20/0x20 [ 746.146350] ? __cleanup_sighand+0x40/0x40 [ 746.150586] ? lock_downgrade+0x6e0/0x6e0 [ 746.154740] _do_fork+0x180/0xc80 [ 746.158192] ? fork_idle+0x270/0x270 [ 746.161898] ? fput+0xb/0x140 [ 746.164984] ? SyS_write+0x14d/0x210 [ 746.168682] ? SyS_read+0x210/0x210 [ 746.172295] ? SyS_clock_settime+0x1a0/0x1a0 [ 746.176695] ? do_syscall_64+0x4c/0x640 [ 746.180651] ? sys_vfork+0x20/0x20 [ 746.184173] do_syscall_64+0x1d5/0x640 [ 746.188055] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 746.193232] RIP: 0033:0x45cba9 [ 746.196403] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 746.204104] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 746.211359] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 09:39:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f00000017c0), 0x375, 0x0) [ 746.218607] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 746.225859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 746.233229] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:24 executing program 1 (fault-call:3 fault-nth:26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 746.344558] FAULT_INJECTION: forcing a failure. [ 746.344558] name failslab, interval 1, probability 0, space 0, times 0 [ 746.357510] CPU: 1 PID: 21848 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 746.365415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.374760] Call Trace: [ 746.377350] dump_stack+0x1b2/0x283 [ 746.380978] should_fail.cold+0x10a/0x154 [ 746.385129] should_failslab+0xd6/0x130 [ 746.389129] __kmalloc_track_caller+0x2bc/0x400 [ 746.393795] ? kstrdup_const+0x35/0x60 [ 746.397676] ? lock_downgrade+0x6e0/0x6e0 [ 746.401818] kstrdup+0x36/0x70 [ 746.405007] kstrdup_const+0x35/0x60 [ 746.408731] alloc_vfsmnt+0xe0/0x7c0 [ 746.412442] clone_mnt+0x6c/0xef0 [ 746.415905] copy_tree+0x33a/0x860 [ 746.419445] copy_mnt_ns+0x112/0x8a0 [ 746.423154] ? rcu_read_lock_sched_held+0x10a/0x130 [ 746.428161] ? kmem_cache_alloc+0x35f/0x3c0 [ 746.432478] create_new_namespaces+0xc9/0x730 [ 746.436966] ? security_capable+0x88/0xb0 [ 746.442070] copy_namespaces+0x27b/0x310 [ 746.446218] copy_process.part.0+0x2616/0x6fa0 [ 746.450801] ? get_pid_task+0xb8/0x130 [ 746.454686] ? proc_tid_io_accounting+0x20/0x20 [ 746.459362] ? __cleanup_sighand+0x40/0x40 [ 746.463590] ? lock_downgrade+0x6e0/0x6e0 [ 746.467738] _do_fork+0x180/0xc80 [ 746.471187] ? fork_idle+0x270/0x270 [ 746.474899] ? fput+0xb/0x140 [ 746.477998] ? SyS_write+0x14d/0x210 [ 746.481703] ? SyS_read+0x210/0x210 [ 746.485330] ? SyS_clock_settime+0x1a0/0x1a0 [ 746.489732] ? do_syscall_64+0x4c/0x640 [ 746.493698] ? sys_vfork+0x20/0x20 [ 746.497232] do_syscall_64+0x1d5/0x640 [ 746.501118] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 746.506299] RIP: 0033:0x45cba9 [ 746.509479] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 746.517178] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 746.524440] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 746.531699] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f00000017c0), 0x375, 0x0) 09:39:25 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x5) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 746.538968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 746.546227] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:25 executing program 1 (fault-call:3 fault-nth:27): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 746.664109] FAULT_INJECTION: forcing a failure. [ 746.664109] name failslab, interval 1, probability 0, space 0, times 0 [ 746.675732] CPU: 0 PID: 21865 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 746.683617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.692961] Call Trace: [ 746.695557] dump_stack+0x1b2/0x283 [ 746.699190] should_fail.cold+0x10a/0x154 [ 746.703333] should_failslab+0xd6/0x130 [ 746.707299] __kmalloc_track_caller+0x2bc/0x400 [ 746.711959] ? kstrdup_const+0x35/0x60 [ 746.715838] ? lock_downgrade+0x6e0/0x6e0 [ 746.719982] kstrdup+0x36/0x70 [ 746.723169] kstrdup_const+0x35/0x60 [ 746.726870] alloc_vfsmnt+0xe0/0x7c0 [ 746.730577] clone_mnt+0x6c/0xef0 [ 746.734026] copy_tree+0x33a/0x860 [ 746.737563] copy_mnt_ns+0x112/0x8a0 [ 746.741275] ? rcu_read_lock_sched_held+0x10a/0x130 [ 746.746280] ? kmem_cache_alloc+0x35f/0x3c0 [ 746.750597] create_new_namespaces+0xc9/0x730 [ 746.755085] ? security_capable+0x88/0xb0 [ 746.759227] copy_namespaces+0x27b/0x310 [ 746.763286] copy_process.part.0+0x2616/0x6fa0 [ 746.767952] ? get_pid_task+0xb8/0x130 [ 746.771834] ? proc_tid_io_accounting+0x20/0x20 [ 746.776507] ? __cleanup_sighand+0x40/0x40 [ 746.780737] ? lock_downgrade+0x6e0/0x6e0 [ 746.784879] _do_fork+0x180/0xc80 [ 746.788332] ? fork_idle+0x270/0x270 [ 746.792042] ? fput+0xb/0x140 [ 746.795135] ? SyS_write+0x14d/0x210 [ 746.798834] ? SyS_read+0x210/0x210 [ 746.802443] ? SyS_clock_settime+0x1a0/0x1a0 [ 746.806828] ? do_syscall_64+0x4c/0x640 [ 746.810784] ? sys_vfork+0x20/0x20 [ 746.814307] do_syscall_64+0x1d5/0x640 [ 746.818176] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 746.823338] RIP: 0033:0x45cba9 [ 746.826507] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 746.834194] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 746.841438] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 746.848684] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 746.855932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:25 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) [ 746.863176] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:25 executing program 1 (fault-call:3 fault-nth:28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 746.953896] FAULT_INJECTION: forcing a failure. [ 746.953896] name failslab, interval 1, probability 0, space 0, times 0 [ 746.970694] CPU: 0 PID: 21878 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 746.978576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.987915] Call Trace: [ 746.990489] dump_stack+0x1b2/0x283 [ 746.994113] should_fail.cold+0x10a/0x154 [ 746.998267] should_failslab+0xd6/0x130 [ 747.002233] kmem_cache_alloc+0x28e/0x3c0 [ 747.006373] alloc_vfsmnt+0x23/0x7c0 [ 747.010078] clone_mnt+0x6c/0xef0 [ 747.013524] copy_tree+0x33a/0x860 [ 747.017210] copy_mnt_ns+0x112/0x8a0 [ 747.020924] ? rcu_read_lock_sched_held+0x10a/0x130 [ 747.025937] ? kmem_cache_alloc+0x35f/0x3c0 [ 747.030259] create_new_namespaces+0xc9/0x730 [ 747.034750] ? security_capable+0x88/0xb0 [ 747.038900] copy_namespaces+0x27b/0x310 [ 747.042962] copy_process.part.0+0x2616/0x6fa0 [ 747.047549] ? get_pid_task+0xb8/0x130 [ 747.051445] ? proc_tid_io_accounting+0x20/0x20 [ 747.056129] ? __cleanup_sighand+0x40/0x40 [ 747.060361] ? lock_downgrade+0x6e0/0x6e0 [ 747.064511] _do_fork+0x180/0xc80 [ 747.067985] ? fork_idle+0x270/0x270 [ 747.071704] ? fput+0xb/0x140 [ 747.074802] ? SyS_write+0x14d/0x210 [ 747.078512] ? SyS_read+0x210/0x210 [ 747.082135] ? do_syscall_64+0x4c/0x640 [ 747.086106] ? sys_vfork+0x20/0x20 [ 747.089643] do_syscall_64+0x1d5/0x640 [ 747.093534] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 747.098716] RIP: 0033:0x45cba9 09:39:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 747.101895] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 747.109699] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 747.116963] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 747.124225] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 747.131489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 747.138752] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:39:25 executing program 1 (fault-call:3 fault-nth:29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:25 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 747.315215] FAULT_INJECTION: forcing a failure. [ 747.315215] name failslab, interval 1, probability 0, space 0, times 0 [ 747.331619] CPU: 0 PID: 21894 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 747.339655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.348999] Call Trace: [ 747.351581] dump_stack+0x1b2/0x283 [ 747.355210] should_fail.cold+0x10a/0x154 [ 747.359361] should_failslab+0xd6/0x130 [ 747.363327] __kmalloc_track_caller+0x2bc/0x400 [ 747.367975] ? kstrdup_const+0x35/0x60 [ 747.371838] ? lock_downgrade+0x6e0/0x6e0 [ 747.376107] kstrdup+0x36/0x70 [ 747.379279] kstrdup_const+0x35/0x60 [ 747.382975] alloc_vfsmnt+0xe0/0x7c0 [ 747.386674] clone_mnt+0x6c/0xef0 [ 747.390119] copy_tree+0x33a/0x860 [ 747.393648] copy_mnt_ns+0x112/0x8a0 [ 747.397354] ? rcu_read_lock_sched_held+0x10a/0x130 [ 747.402363] ? kmem_cache_alloc+0x35f/0x3c0 [ 747.406683] create_new_namespaces+0xc9/0x730 [ 747.411170] ? security_capable+0x88/0xb0 09:39:25 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0)=0x2, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r4 = accept$inet(r3, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) write(r4, &(0x7f0000000000)="25504fa7f4ff4daacfb46b9ece2b6746d82dd518b3289891c4b9fb705ea9f5c970ae1aaa58f28d24fefa9e9e4a7a7fafe1a408ec38d3f67950b89848f3d2cfdd2e5389eef25de654db4c8c4f11565194e88c06081629db7c9bc88c2bbb6f636a43b3e84dc961a986fdbbf0524ee0c3a7fb420fbb428e2ec97c491106e6953b56b5abcab73e5f6a63705caf15348f862a751c5bcf1cfb4f9a4176b55379692b37955b3bcca010", 0xa6) sched_setattr(0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) [ 747.415309] copy_namespaces+0x27b/0x310 [ 747.419366] copy_process.part.0+0x2616/0x6fa0 [ 747.423939] ? get_pid_task+0xb8/0x130 [ 747.427808] ? proc_tid_io_accounting+0x20/0x20 [ 747.432480] ? __cleanup_sighand+0x40/0x40 [ 747.436709] ? lock_downgrade+0x6e0/0x6e0 [ 747.440866] _do_fork+0x180/0xc80 [ 747.444325] ? fork_idle+0x270/0x270 [ 747.448038] ? fput+0xb/0x140 [ 747.451141] ? SyS_write+0x14d/0x210 [ 747.454860] ? SyS_read+0x210/0x210 [ 747.458482] ? SyS_clock_settime+0x1a0/0x1a0 [ 747.462898] ? do_syscall_64+0x4c/0x640 [ 747.466868] ? sys_vfork+0x20/0x20 [ 747.470407] do_syscall_64+0x1d5/0x640 [ 747.474296] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 747.479480] RIP: 0033:0x45cba9 [ 747.482667] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 747.490368] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 747.497631] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 747.504893] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 747.512154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 747.519417] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:39:26 executing program 1 (fault-call:3 fault-nth:30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 747.666779] FAULT_INJECTION: forcing a failure. [ 747.666779] name failslab, interval 1, probability 0, space 0, times 0 [ 747.678294] CPU: 1 PID: 21918 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 747.686173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.695532] Call Trace: [ 747.698119] dump_stack+0x1b2/0x283 [ 747.701750] should_fail.cold+0x10a/0x154 [ 747.705900] should_failslab+0xd6/0x130 [ 747.709870] __kmalloc_track_caller+0x2bc/0x400 [ 747.714533] ? kstrdup_const+0x35/0x60 [ 747.718410] ? lock_downgrade+0x6e0/0x6e0 [ 747.722550] kstrdup+0x36/0x70 [ 747.725720] kstrdup_const+0x35/0x60 [ 747.729412] alloc_vfsmnt+0xe0/0x7c0 [ 747.733101] clone_mnt+0x6c/0xef0 [ 747.736532] copy_tree+0x33a/0x860 [ 747.740050] copy_mnt_ns+0x112/0x8a0 [ 747.743878] ? rcu_read_lock_sched_held+0x10a/0x130 [ 747.748878] ? kmem_cache_alloc+0x35f/0x3c0 [ 747.753179] create_new_namespaces+0xc9/0x730 [ 747.757650] ? security_capable+0x88/0xb0 [ 747.761778] copy_namespaces+0x27b/0x310 [ 747.765817] copy_process.part.0+0x2616/0x6fa0 [ 747.770401] ? get_pid_task+0xb8/0x130 [ 747.774269] ? proc_tid_io_accounting+0x20/0x20 [ 747.778920] ? __cleanup_sighand+0x40/0x40 [ 747.783132] ? lock_downgrade+0x6e0/0x6e0 [ 747.787259] _do_fork+0x180/0xc80 [ 747.790698] ? fork_idle+0x270/0x270 [ 747.794399] ? fput+0xb/0x140 [ 747.797482] ? SyS_write+0x14d/0x210 [ 747.801174] ? SyS_read+0x210/0x210 [ 747.804775] ? SyS_clock_settime+0x1a0/0x1a0 [ 747.809161] ? do_syscall_64+0x4c/0x640 [ 747.813120] ? sys_vfork+0x20/0x20 [ 747.816686] do_syscall_64+0x1d5/0x640 [ 747.820598] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 747.825786] RIP: 0033:0x45cba9 [ 747.828955] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 747.836646] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 747.843897] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 747.851184] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 747.858429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:26 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, 0x0, 0x0, 0x0) 09:39:26 executing program 1 (fault-call:3 fault-nth:31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 747.865674] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 747.929166] FAULT_INJECTION: forcing a failure. [ 747.929166] name failslab, interval 1, probability 0, space 0, times 0 [ 747.941209] CPU: 0 PID: 21929 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 747.949085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.958419] Call Trace: [ 747.961121] dump_stack+0x1b2/0x283 [ 747.964751] should_fail.cold+0x10a/0x154 [ 747.968905] should_failslab+0xd6/0x130 [ 747.972872] kmem_cache_alloc+0x28e/0x3c0 [ 747.976998] alloc_vfsmnt+0x23/0x7c0 [ 747.980698] clone_mnt+0x6c/0xef0 [ 747.984139] copy_tree+0x33a/0x860 [ 747.987662] copy_mnt_ns+0x112/0x8a0 [ 747.991360] ? rcu_read_lock_sched_held+0x10a/0x130 [ 747.996359] ? kmem_cache_alloc+0x35f/0x3c0 [ 748.000680] create_new_namespaces+0xc9/0x730 [ 748.005164] ? security_capable+0x88/0xb0 [ 748.009302] copy_namespaces+0x27b/0x310 [ 748.013355] copy_process.part.0+0x2616/0x6fa0 [ 748.017936] ? get_pid_task+0xb8/0x130 [ 748.021827] ? proc_tid_io_accounting+0x20/0x20 [ 748.026502] ? __cleanup_sighand+0x40/0x40 [ 748.030735] ? lock_downgrade+0x6e0/0x6e0 [ 748.034882] _do_fork+0x180/0xc80 [ 748.038333] ? fork_idle+0x270/0x270 [ 748.042045] ? fput+0xb/0x140 [ 748.045146] ? SyS_write+0x14d/0x210 [ 748.048855] ? SyS_read+0x210/0x210 [ 748.052477] ? SyS_clock_settime+0x1a0/0x1a0 [ 748.056881] ? do_syscall_64+0x4c/0x640 [ 748.060848] ? sys_vfork+0x20/0x20 [ 748.064400] do_syscall_64+0x1d5/0x640 [ 748.068287] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 748.073468] RIP: 0033:0x45cba9 09:39:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 748.076647] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 748.084350] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 748.091613] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 748.098874] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 748.106136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 748.113399] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:26 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:26 executing program 1 (fault-call:3 fault-nth:32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, 0x0, 0x0, 0x0) 09:39:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setpipe(r3, 0x407, 0x7fffffff) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RCLUNK(r6, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) [ 748.267175] FAULT_INJECTION: forcing a failure. [ 748.267175] name failslab, interval 1, probability 0, space 0, times 0 [ 748.283674] CPU: 0 PID: 21951 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 748.291579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.300927] Call Trace: [ 748.303507] dump_stack+0x1b2/0x283 [ 748.307119] should_fail.cold+0x10a/0x154 [ 748.311259] should_failslab+0xd6/0x130 [ 748.315220] __kmalloc_track_caller+0x2bc/0x400 [ 748.319875] ? kstrdup_const+0x35/0x60 [ 748.323806] ? lock_downgrade+0x6e0/0x6e0 [ 748.327940] kstrdup+0x36/0x70 [ 748.331118] kstrdup_const+0x35/0x60 [ 748.334817] alloc_vfsmnt+0xe0/0x7c0 [ 748.338511] clone_mnt+0x6c/0xef0 [ 748.341970] copy_tree+0x33a/0x860 [ 748.345668] copy_mnt_ns+0x112/0x8a0 [ 748.349373] ? rcu_read_lock_sched_held+0x10a/0x130 [ 748.354379] ? kmem_cache_alloc+0x35f/0x3c0 [ 748.358691] create_new_namespaces+0xc9/0x730 [ 748.363166] ? security_capable+0x88/0xb0 [ 748.367315] copy_namespaces+0x27b/0x310 [ 748.371368] copy_process.part.0+0x2616/0x6fa0 [ 748.375953] ? get_pid_task+0xb8/0x130 [ 748.379844] ? proc_tid_io_accounting+0x20/0x20 [ 748.384505] ? __cleanup_sighand+0x40/0x40 [ 748.388717] ? lock_downgrade+0x6e0/0x6e0 [ 748.392945] _do_fork+0x180/0xc80 [ 748.396397] ? fork_idle+0x270/0x270 [ 748.400108] ? fput+0xb/0x140 [ 748.403227] ? SyS_write+0x14d/0x210 [ 748.406929] ? SyS_read+0x210/0x210 [ 748.410545] ? SyS_clock_settime+0x1a0/0x1a0 09:39:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r3, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000"], 0x18}}], 0x136, 0xbb8) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4, [@multicast2]}]}}}], 0x18}}], 0x136, 0xbb8) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FBIOGET_CON2FBMAP(r4, 0x460f, &(0x7f0000000040)={0x27}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e22, @broadcast}}) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, [], 0x1}, 0x7fff}}, 0x0, 0x0, 0x2, 0x0, "1722f0d395cac9cd16a31dc880f9d5eb3edeb1f645b64d4a23589d1690e799cfb34cf5869194f551d6afa40b1cfcd56bbb95f018c556a3aed078eec3651b7e36efbd2518710330c3c340079bc7d10984"}, 0xd8) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) [ 748.414950] ? do_syscall_64+0x4c/0x640 [ 748.418922] ? sys_vfork+0x20/0x20 [ 748.422465] do_syscall_64+0x1d5/0x640 [ 748.426358] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 748.431543] RIP: 0033:0x45cba9 [ 748.434858] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 748.442583] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 748.449846] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 748.457103] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') openat$cgroup_freezer_state(r5, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r6, 0x0, 0x0, 0x0) [ 748.464353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 748.471607] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:26 executing program 1 (fault-call:3 fault-nth:33): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 748.559826] FAULT_INJECTION: forcing a failure. [ 748.559826] name failslab, interval 1, probability 0, space 0, times 0 [ 748.575615] CPU: 0 PID: 21973 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 748.583503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.592849] Call Trace: [ 748.595442] dump_stack+0x1b2/0x283 [ 748.599077] should_fail.cold+0x10a/0x154 [ 748.603317] should_failslab+0xd6/0x130 [ 748.607288] kmem_cache_alloc+0x28e/0x3c0 [ 748.611435] alloc_vfsmnt+0x23/0x7c0 [ 748.615149] clone_mnt+0x6c/0xef0 [ 748.618607] copy_tree+0x33a/0x860 [ 748.622151] copy_mnt_ns+0x112/0x8a0 [ 748.625865] ? rcu_read_lock_sched_held+0x10a/0x130 [ 748.630875] ? kmem_cache_alloc+0x35f/0x3c0 [ 748.635196] create_new_namespaces+0xc9/0x730 [ 748.639686] ? security_capable+0x88/0xb0 [ 748.643841] copy_namespaces+0x27b/0x310 [ 748.647902] copy_process.part.0+0x2616/0x6fa0 [ 748.652482] ? get_pid_task+0xb8/0x130 [ 748.656367] ? proc_tid_io_accounting+0x20/0x20 [ 748.661050] ? __cleanup_sighand+0x40/0x40 [ 748.665280] ? lock_downgrade+0x6e0/0x6e0 [ 748.669432] _do_fork+0x180/0xc80 [ 748.672886] ? fork_idle+0x270/0x270 [ 748.676596] ? fput+0xb/0x140 [ 748.679700] ? SyS_write+0x14d/0x210 [ 748.683519] ? SyS_read+0x210/0x210 [ 748.687141] ? SyS_clock_settime+0x1a0/0x1a0 [ 748.691545] ? do_syscall_64+0x4c/0x640 [ 748.695511] ? sys_vfork+0x20/0x20 [ 748.699052] do_syscall_64+0x1d5/0x640 [ 748.702940] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 748.708121] RIP: 0033:0x45cba9 [ 748.711301] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 748.719004] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 748.726266] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 748.733531] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 748.740791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 748.748069] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:27 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf948dc020e22ac98}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000f0dbdf25010000007e00000273787a30000000000000000000000030faffffff0800030073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x20000090) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:27 executing program 1 (fault-call:3 fault-nth:34): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:27 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 748.919010] FAULT_INJECTION: forcing a failure. [ 748.919010] name failslab, interval 1, probability 0, space 0, times 0 [ 748.930540] CPU: 1 PID: 21984 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 748.938424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.947767] Call Trace: [ 748.950359] dump_stack+0x1b2/0x283 [ 748.953982] should_fail.cold+0x10a/0x154 [ 748.958112] should_failslab+0xd6/0x130 [ 748.962073] __kmalloc_track_caller+0x2bc/0x400 [ 748.966838] ? kstrdup_const+0x35/0x60 [ 748.970702] ? lock_downgrade+0x6e0/0x6e0 [ 748.974830] kstrdup+0x36/0x70 [ 748.978002] kstrdup_const+0x35/0x60 [ 748.981695] alloc_vfsmnt+0xe0/0x7c0 [ 748.985397] clone_mnt+0x6c/0xef0 [ 748.988839] copy_tree+0x33a/0x860 [ 748.992362] copy_mnt_ns+0x112/0x8a0 [ 748.996057] ? rcu_read_lock_sched_held+0x10a/0x130 [ 749.001062] ? kmem_cache_alloc+0x35f/0x3c0 [ 749.005384] create_new_namespaces+0xc9/0x730 [ 749.009879] ? security_capable+0x88/0xb0 [ 749.014030] copy_namespaces+0x27b/0x310 [ 749.018093] copy_process.part.0+0x2616/0x6fa0 [ 749.022675] ? get_pid_task+0xb8/0x130 [ 749.026565] ? proc_tid_io_accounting+0x20/0x20 [ 749.031250] ? __cleanup_sighand+0x40/0x40 [ 749.035484] ? lock_downgrade+0x6e0/0x6e0 [ 749.039634] _do_fork+0x180/0xc80 [ 749.043087] ? fork_idle+0x270/0x270 [ 749.046799] ? fput+0xb/0x140 [ 749.049899] ? SyS_write+0x14d/0x210 [ 749.053604] ? SyS_read+0x210/0x210 [ 749.057225] ? SyS_clock_settime+0x1a0/0x1a0 [ 749.061630] ? do_syscall_64+0x4c/0x640 [ 749.065597] ? sys_vfork+0x20/0x20 [ 749.069133] do_syscall_64+0x1d5/0x640 [ 749.073025] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 749.078207] RIP: 0033:0x45cba9 [ 749.081388] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 749.089090] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 749.096352] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 749.103625] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 749.110889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) [ 749.118158] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:27 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:27 executing program 1 (fault-call:3 fault-nth:35): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) [ 749.262367] FAULT_INJECTION: forcing a failure. [ 749.262367] name failslab, interval 1, probability 0, space 0, times 0 [ 749.274520] CPU: 0 PID: 22007 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 749.282461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.291810] Call Trace: [ 749.294399] dump_stack+0x1b2/0x283 [ 749.298018] should_fail.cold+0x10a/0x154 [ 749.302148] should_failslab+0xd6/0x130 [ 749.306111] kmem_cache_alloc+0x28e/0x3c0 09:39:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 749.310249] alloc_vfsmnt+0x23/0x7c0 [ 749.313951] clone_mnt+0x6c/0xef0 [ 749.317403] copy_tree+0x33a/0x860 [ 749.320948] copy_mnt_ns+0x112/0x8a0 [ 749.324665] ? rcu_read_lock_sched_held+0x10a/0x130 [ 749.329671] ? kmem_cache_alloc+0x35f/0x3c0 [ 749.333974] create_new_namespaces+0xc9/0x730 [ 749.338453] ? security_capable+0x88/0xb0 [ 749.342605] copy_namespaces+0x27b/0x310 [ 749.346665] copy_process.part.0+0x2616/0x6fa0 [ 749.351244] ? get_pid_task+0xb8/0x130 [ 749.355136] ? proc_tid_io_accounting+0x20/0x20 [ 749.359857] ? __cleanup_sighand+0x40/0x40 [ 749.364073] ? lock_downgrade+0x6e0/0x6e0 [ 749.368202] _do_fork+0x180/0xc80 [ 749.371644] ? fork_idle+0x270/0x270 [ 749.375350] ? fput+0xb/0x140 [ 749.378433] ? SyS_write+0x14d/0x210 [ 749.382131] ? SyS_read+0x210/0x210 [ 749.385844] ? SyS_clock_settime+0x1a0/0x1a0 [ 749.390245] ? do_syscall_64+0x4c/0x640 [ 749.394206] ? sys_vfork+0x20/0x20 [ 749.397742] do_syscall_64+0x1d5/0x640 [ 749.401625] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 749.406816] RIP: 0033:0x45cba9 [ 749.409984] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 749.417676] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 749.424928] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 749.432179] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 749.439433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 749.446694] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:27 executing program 1 (fault-call:3 fault-nth:36): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 749.548087] FAULT_INJECTION: forcing a failure. [ 749.548087] name failslab, interval 1, probability 0, space 0, times 0 [ 749.567040] CPU: 0 PID: 22017 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 749.575100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.584446] Call Trace: [ 749.587036] dump_stack+0x1b2/0x283 [ 749.590667] should_fail.cold+0x10a/0x154 [ 749.594816] should_failslab+0xd6/0x130 [ 749.598788] __kmalloc_track_caller+0x2bc/0x400 [ 749.603449] ? kstrdup_const+0x35/0x60 [ 749.607334] ? lock_downgrade+0x6e0/0x6e0 [ 749.611483] kstrdup+0x36/0x70 [ 749.614672] kstrdup_const+0x35/0x60 [ 749.618389] alloc_vfsmnt+0xe0/0x7c0 [ 749.622102] clone_mnt+0x6c/0xef0 [ 749.625561] copy_tree+0x33a/0x860 [ 749.629103] copy_mnt_ns+0x112/0x8a0 [ 749.632812] ? rcu_read_lock_sched_held+0x10a/0x130 [ 749.637835] ? kmem_cache_alloc+0x35f/0x3c0 [ 749.642162] create_new_namespaces+0xc9/0x730 09:39:28 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 749.646653] ? security_capable+0x88/0xb0 [ 749.650803] copy_namespaces+0x27b/0x310 [ 749.654862] copy_process.part.0+0x2616/0x6fa0 [ 749.659443] ? get_pid_task+0xb8/0x130 [ 749.663331] ? proc_tid_io_accounting+0x20/0x20 [ 749.668006] ? __cleanup_sighand+0x40/0x40 [ 749.672243] ? lock_downgrade+0x6e0/0x6e0 [ 749.676393] _do_fork+0x180/0xc80 [ 749.679849] ? fork_idle+0x270/0x270 [ 749.683565] ? fput+0xb/0x140 [ 749.686671] ? SyS_write+0x14d/0x210 [ 749.690387] ? SyS_read+0x210/0x210 [ 749.694009] ? SyS_clock_settime+0x1a0/0x1a0 09:39:28 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2810a9f647197b083ed4b3913729006753a425dde8b0d803cc393bb6bb41c68d2eedf61b4691282639e357daaf8605dbff7952977633464758b834511c139f3a09bef3c861723eb4e8b96f3992fdcdff203bcdb6a7e942a3f05c3aa0ef6a558b6571e3be49a20735cfd6891b11c61f6744644bb686592d8cee3f344a90ae8dcbf75c0b464d1108cc724e254a7bd2a47e4a429692c444af56137dae9a114015804e43910a8bf20c9b31f49bad90516eb694fcf8a961d3bb960160da87a91d06c586d32f47b75ac27d444123a05b66f39143bed2335740c02d0e9df1ffe88b24bf38185e3d85dcd9a8e2281fad2df7d8be295add13424a36ca60768d2db3170fbba0054a68d37923e40168afa8cb0dccb605cf3898a2d342f4eded9023c9553ab87f770c79adf3eed966ef", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf948dc020e22ac98}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000f0dbdf25010000007e00000273787a30000000000000000000000030faffffff0800030073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x20000090) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 749.698418] ? do_syscall_64+0x4c/0x640 [ 749.702390] ? sys_vfork+0x20/0x20 [ 749.705933] do_syscall_64+0x1d5/0x640 [ 749.709821] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 749.715004] RIP: 0033:0x45cba9 [ 749.718187] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 749.725900] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 749.733154] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 749.740418] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 749.747671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 749.754937] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:28 executing program 1 (fault-call:3 fault-nth:37): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 749.856983] FAULT_INJECTION: forcing a failure. [ 749.856983] name failslab, interval 1, probability 0, space 0, times 0 [ 749.868984] CPU: 0 PID: 22030 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 749.876871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.886215] Call Trace: [ 749.888794] dump_stack+0x1b2/0x283 [ 749.892401] should_fail.cold+0x10a/0x154 [ 749.896530] should_failslab+0xd6/0x130 [ 749.900482] kmem_cache_alloc+0x28e/0x3c0 [ 749.904608] alloc_vfsmnt+0x23/0x7c0 [ 749.908300] clone_mnt+0x6c/0xef0 [ 749.911731] copy_tree+0x33a/0x860 [ 749.915251] copy_mnt_ns+0x112/0x8a0 [ 749.918943] ? rcu_read_lock_sched_held+0x10a/0x130 [ 749.923953] ? kmem_cache_alloc+0x35f/0x3c0 [ 749.928254] create_new_namespaces+0xc9/0x730 [ 749.932727] ? security_capable+0x88/0xb0 [ 749.936942] copy_namespaces+0x27b/0x310 [ 749.941028] copy_process.part.0+0x2616/0x6fa0 [ 749.945590] ? get_pid_task+0xb8/0x130 [ 749.949457] ? proc_tid_io_accounting+0x20/0x20 [ 749.954114] ? __cleanup_sighand+0x40/0x40 [ 749.958340] ? lock_downgrade+0x6e0/0x6e0 [ 749.962470] _do_fork+0x180/0xc80 [ 749.965912] ? fork_idle+0x270/0x270 [ 749.969602] ? fput+0xb/0x140 [ 749.972731] ? SyS_write+0x14d/0x210 [ 749.976423] ? SyS_read+0x210/0x210 [ 749.980028] ? SyS_clock_settime+0x1a0/0x1a0 [ 749.985993] ? do_syscall_64+0x4c/0x640 [ 749.989988] ? sys_vfork+0x20/0x20 [ 749.993506] do_syscall_64+0x1d5/0x640 [ 749.997376] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 750.002542] RIP: 0033:0x45cba9 09:39:28 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:28 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:39:28 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000000)=""/57) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) [ 750.005708] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 750.013392] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 750.020639] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 750.027911] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 750.035175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 750.042421] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:28 executing program 1 (fault-call:3 fault-nth:38): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 750.134699] FAULT_INJECTION: forcing a failure. [ 750.134699] name failslab, interval 1, probability 0, space 0, times 0 [ 750.146221] CPU: 1 PID: 22039 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 750.154103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.163447] Call Trace: [ 750.166033] dump_stack+0x1b2/0x283 [ 750.169665] should_fail.cold+0x10a/0x154 [ 750.173808] should_failslab+0xd6/0x130 [ 750.177812] __kmalloc_track_caller+0x2bc/0x400 [ 750.182463] ? kstrdup_const+0x35/0x60 [ 750.186336] ? lock_downgrade+0x6e0/0x6e0 [ 750.190489] kstrdup+0x36/0x70 [ 750.193678] kstrdup_const+0x35/0x60 [ 750.197373] alloc_vfsmnt+0xe0/0x7c0 [ 750.201077] clone_mnt+0x6c/0xef0 [ 750.204529] copy_tree+0x33a/0x860 [ 750.208056] copy_mnt_ns+0x112/0x8a0 [ 750.211753] ? rcu_read_lock_sched_held+0x10a/0x130 [ 750.216754] ? kmem_cache_alloc+0x35f/0x3c0 [ 750.221056] create_new_namespaces+0xc9/0x730 [ 750.225540] ? security_capable+0x88/0xb0 [ 750.229679] copy_namespaces+0x27b/0x310 [ 750.233721] copy_process.part.0+0x2616/0x6fa0 [ 750.238292] ? get_pid_task+0xb8/0x130 [ 750.242170] ? proc_tid_io_accounting+0x20/0x20 [ 750.246936] ? __cleanup_sighand+0x40/0x40 [ 750.251149] ? lock_downgrade+0x6e0/0x6e0 [ 750.255277] _do_fork+0x180/0xc80 [ 750.258713] ? fork_idle+0x270/0x270 [ 750.262404] ? fput+0xb/0x140 [ 750.265486] ? SyS_write+0x14d/0x210 [ 750.269176] ? SyS_read+0x210/0x210 [ 750.272786] ? SyS_clock_settime+0x1a0/0x1a0 [ 750.277182] ? do_syscall_64+0x4c/0x640 [ 750.281148] ? sys_vfork+0x20/0x20 [ 750.284678] do_syscall_64+0x1d5/0x640 [ 750.288556] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 750.293722] RIP: 0033:0x45cba9 [ 750.296889] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 750.304618] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 750.311872] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 750.319127] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 750.326375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x0, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:28 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:28 executing program 1 (fault-call:3 fault-nth:39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 750.333620] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 750.400787] FAULT_INJECTION: forcing a failure. [ 750.400787] name failslab, interval 1, probability 0, space 0, times 0 [ 750.413026] CPU: 1 PID: 22053 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 750.420914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.430248] Call Trace: [ 750.432992] dump_stack+0x1b2/0x283 [ 750.436602] should_fail.cold+0x10a/0x154 [ 750.440747] should_failslab+0xd6/0x130 [ 750.444722] kmem_cache_alloc+0x28e/0x3c0 [ 750.448857] alloc_vfsmnt+0x23/0x7c0 [ 750.452563] clone_mnt+0x6c/0xef0 [ 750.456004] copy_tree+0x33a/0x860 [ 750.459527] copy_mnt_ns+0x112/0x8a0 [ 750.463228] ? rcu_read_lock_sched_held+0x10a/0x130 [ 750.468223] ? kmem_cache_alloc+0x35f/0x3c0 [ 750.472534] create_new_namespaces+0xc9/0x730 [ 750.477013] ? security_capable+0x88/0xb0 [ 750.481146] copy_namespaces+0x27b/0x310 [ 750.485197] copy_process.part.0+0x2616/0x6fa0 [ 750.489770] ? get_pid_task+0xb8/0x130 [ 750.493639] ? proc_tid_io_accounting+0x20/0x20 [ 750.498299] ? __cleanup_sighand+0x40/0x40 [ 750.502519] ? lock_downgrade+0x6e0/0x6e0 [ 750.506660] _do_fork+0x180/0xc80 [ 750.510094] ? fork_idle+0x270/0x270 [ 750.513790] ? fput+0xb/0x140 [ 750.516883] ? SyS_write+0x14d/0x210 [ 750.520577] ? SyS_read+0x210/0x210 [ 750.524185] ? SyS_clock_settime+0x1a0/0x1a0 [ 750.528574] ? do_syscall_64+0x4c/0x640 [ 750.532552] ? sys_vfork+0x20/0x20 [ 750.536090] do_syscall_64+0x1d5/0x640 [ 750.539981] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 750.545164] RIP: 0033:0x45cba9 09:39:28 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf948dc020e22ac98}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000f0dbdf25010000007e00000273787a30000000000000000000000030faffffff0800030073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x20000090) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:28 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 750.548366] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 750.556068] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 750.563320] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 750.570576] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 750.577839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 750.585103] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:29 executing program 1 (fault-call:3 fault-nth:40): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 750.664523] FAULT_INJECTION: forcing a failure. [ 750.664523] name failslab, interval 1, probability 0, space 0, times 0 [ 750.676072] CPU: 0 PID: 22067 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 750.683959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.693302] Call Trace: [ 750.695879] dump_stack+0x1b2/0x283 [ 750.699509] should_fail.cold+0x10a/0x154 [ 750.703650] should_failslab+0xd6/0x130 [ 750.707616] __kmalloc_track_caller+0x2bc/0x400 [ 750.712268] ? kstrdup_const+0x35/0x60 [ 750.716136] ? lock_downgrade+0x6e0/0x6e0 [ 750.720264] kstrdup+0x36/0x70 [ 750.723445] kstrdup_const+0x35/0x60 [ 750.727154] alloc_vfsmnt+0xe0/0x7c0 [ 750.730857] clone_mnt+0x6c/0xef0 [ 750.734296] copy_tree+0x33a/0x860 [ 750.737821] copy_mnt_ns+0x112/0x8a0 [ 750.741530] ? rcu_read_lock_sched_held+0x10a/0x130 [ 750.746540] ? kmem_cache_alloc+0x35f/0x3c0 [ 750.750859] create_new_namespaces+0xc9/0x730 [ 750.755353] ? security_capable+0x88/0xb0 [ 750.759518] copy_namespaces+0x27b/0x310 [ 750.763578] copy_process.part.0+0x2616/0x6fa0 [ 750.768164] ? get_pid_task+0xb8/0x130 [ 750.772044] ? proc_tid_io_accounting+0x20/0x20 [ 750.776705] ? __cleanup_sighand+0x40/0x40 [ 750.780922] ? lock_downgrade+0x6e0/0x6e0 [ 750.785064] _do_fork+0x180/0xc80 [ 750.788510] ? fork_idle+0x270/0x270 [ 750.792205] ? fput+0xb/0x140 [ 750.795301] ? SyS_write+0x14d/0x210 [ 750.798993] ? SyS_read+0x210/0x210 [ 750.802605] ? SyS_clock_settime+0x1a0/0x1a0 [ 750.807015] ? do_syscall_64+0x4c/0x640 [ 750.810983] ? sys_vfork+0x20/0x20 [ 750.814517] do_syscall_64+0x1d5/0x640 [ 750.818389] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 750.823562] RIP: 0033:0x45cba9 [ 750.826741] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 750.834439] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 750.841694] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 750.848953] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 750.856202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0xe, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) recvfrom$inet6(r0, &(0x7f0000000240)=""/23, 0x17, 0x42, &(0x7f0000000280)={0xa, 0x4e24, 0x7fffffff, @private2, 0x9}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:29 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) [ 750.863471] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:29 executing program 1 (fault-call:3 fault-nth:41): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:29 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 750.968914] FAULT_INJECTION: forcing a failure. [ 750.968914] name failslab, interval 1, probability 0, space 0, times 0 [ 750.980337] CPU: 0 PID: 22076 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 750.988217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.997554] Call Trace: [ 751.000170] dump_stack+0x1b2/0x283 [ 751.003786] should_fail.cold+0x10a/0x154 [ 751.007922] should_failslab+0xd6/0x130 [ 751.012236] kmem_cache_alloc+0x28e/0x3c0 [ 751.016385] alloc_vfsmnt+0x23/0x7c0 [ 751.020098] clone_mnt+0x6c/0xef0 [ 751.023552] copy_tree+0x33a/0x860 [ 751.027081] copy_mnt_ns+0x112/0x8a0 [ 751.030776] ? rcu_read_lock_sched_held+0x10a/0x130 [ 751.035771] ? kmem_cache_alloc+0x35f/0x3c0 [ 751.040072] create_new_namespaces+0xc9/0x730 [ 751.044545] ? security_capable+0x88/0xb0 [ 751.048679] copy_namespaces+0x27b/0x310 [ 751.052737] copy_process.part.0+0x2616/0x6fa0 [ 751.057320] ? get_pid_task+0xb8/0x130 [ 751.061197] ? proc_tid_io_accounting+0x20/0x20 [ 751.065852] ? __cleanup_sighand+0x40/0x40 [ 751.070079] ? lock_downgrade+0x6e0/0x6e0 [ 751.074227] _do_fork+0x180/0xc80 [ 751.077678] ? fork_idle+0x270/0x270 [ 751.081387] ? fput+0xb/0x140 [ 751.084490] ? SyS_write+0x14d/0x210 [ 751.088199] ? SyS_read+0x210/0x210 [ 751.091822] ? SyS_clock_settime+0x1a0/0x1a0 [ 751.096234] ? do_syscall_64+0x4c/0x640 [ 751.100203] ? sys_vfork+0x20/0x20 [ 751.103739] do_syscall_64+0x1d5/0x640 [ 751.107628] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 751.112814] RIP: 0033:0x45cba9 09:39:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x0, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 751.116005] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 751.123707] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 751.130971] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 751.138235] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 751.145607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 751.152869] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:29 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:29 executing program 1 (fault-call:3 fault-nth:42): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 751.227579] FAULT_INJECTION: forcing a failure. [ 751.227579] name failslab, interval 1, probability 0, space 0, times 0 [ 751.239315] CPU: 0 PID: 22091 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 751.247194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.256534] Call Trace: [ 751.259115] dump_stack+0x1b2/0x283 [ 751.262728] should_fail.cold+0x10a/0x154 [ 751.266861] should_failslab+0xd6/0x130 [ 751.270819] __kmalloc_track_caller+0x2bc/0x400 [ 751.275472] ? kstrdup_const+0x35/0x60 [ 751.279338] ? lock_downgrade+0x6e0/0x6e0 [ 751.283470] kstrdup+0x36/0x70 [ 751.286643] kstrdup_const+0x35/0x60 [ 751.290359] alloc_vfsmnt+0xe0/0x7c0 [ 751.294060] clone_mnt+0x6c/0xef0 [ 751.297516] copy_tree+0x33a/0x860 [ 751.301046] copy_mnt_ns+0x112/0x8a0 [ 751.304745] ? rcu_read_lock_sched_held+0x10a/0x130 [ 751.309746] ? kmem_cache_alloc+0x35f/0x3c0 [ 751.314067] create_new_namespaces+0xc9/0x730 [ 751.318558] ? security_capable+0x88/0xb0 [ 751.322710] copy_namespaces+0x27b/0x310 [ 751.326771] copy_process.part.0+0x2616/0x6fa0 [ 751.331354] ? get_pid_task+0xb8/0x130 [ 751.335238] ? proc_tid_io_accounting+0x20/0x20 [ 751.339915] ? __cleanup_sighand+0x40/0x40 [ 751.344147] ? lock_downgrade+0x6e0/0x6e0 [ 751.348296] _do_fork+0x180/0xc80 [ 751.351754] ? fork_idle+0x270/0x270 [ 751.355467] ? fput+0xb/0x140 [ 751.358570] ? SyS_write+0x14d/0x210 [ 751.362281] ? SyS_read+0x210/0x210 [ 751.365908] ? SyS_clock_settime+0x1a0/0x1a0 [ 751.370314] ? do_syscall_64+0x4c/0x640 [ 751.374287] ? sys_vfork+0x20/0x20 [ 751.377822] do_syscall_64+0x1d5/0x640 [ 751.381713] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 751.386892] RIP: 0033:0x45cba9 [ 751.390072] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 751.397773] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 751.405034] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 751.412296] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 751.419556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:29 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf948dc020e22ac98}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000f0dbdf25010000007e00000273787a30000000000000000000000030faffffff0800030073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x20000090) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 09:39:29 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 751.426820] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:29 executing program 1 (fault-call:3 fault-nth:43): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 751.503708] FAULT_INJECTION: forcing a failure. [ 751.503708] name failslab, interval 1, probability 0, space 0, times 0 [ 751.515968] CPU: 1 PID: 22103 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 751.523854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.533198] Call Trace: [ 751.535780] dump_stack+0x1b2/0x283 [ 751.539392] should_fail.cold+0x10a/0x154 [ 751.543530] should_failslab+0xd6/0x130 [ 751.547487] kmem_cache_alloc+0x28e/0x3c0 [ 751.551617] alloc_vfsmnt+0x23/0x7c0 [ 751.555318] clone_mnt+0x6c/0xef0 [ 751.558768] copy_tree+0x33a/0x860 [ 751.562307] copy_mnt_ns+0x112/0x8a0 [ 751.566015] ? rcu_read_lock_sched_held+0x10a/0x130 [ 751.571015] ? kmem_cache_alloc+0x35f/0x3c0 [ 751.575320] create_new_namespaces+0xc9/0x730 [ 751.579809] ? security_capable+0x88/0xb0 [ 751.583960] copy_namespaces+0x27b/0x310 [ 751.588024] copy_process.part.0+0x2616/0x6fa0 [ 751.592611] ? get_pid_task+0xb8/0x130 [ 751.596501] ? proc_tid_io_accounting+0x20/0x20 [ 751.601185] ? __cleanup_sighand+0x40/0x40 [ 751.605426] ? lock_downgrade+0x6e0/0x6e0 [ 751.609584] _do_fork+0x180/0xc80 [ 751.613065] ? fork_idle+0x270/0x270 [ 751.616827] ? fput+0xb/0x140 [ 751.619965] ? SyS_write+0x14d/0x210 [ 751.623677] ? SyS_read+0x210/0x210 [ 751.627300] ? SyS_clock_settime+0x1a0/0x1a0 [ 751.631706] ? do_syscall_64+0x4c/0x640 [ 751.635675] ? sys_vfork+0x20/0x20 [ 751.639205] do_syscall_64+0x1d5/0x640 [ 751.643087] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 751.648359] RIP: 0033:0x45cba9 09:39:30 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 751.651547] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 751.659250] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 751.666513] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 751.673776] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 751.681039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 751.688297] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:30 executing program 1 (fault-call:3 fault-nth:44): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:30 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xe06) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x3, 0x4) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:30 executing program 3: dup(0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) [ 751.770216] FAULT_INJECTION: forcing a failure. [ 751.770216] name failslab, interval 1, probability 0, space 0, times 0 [ 751.790993] CPU: 0 PID: 22115 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 751.798990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.808338] Call Trace: [ 751.810935] dump_stack+0x1b2/0x283 [ 751.814568] should_fail.cold+0x10a/0x154 [ 751.818719] should_failslab+0xd6/0x130 [ 751.822695] __kmalloc_track_caller+0x2bc/0x400 [ 751.827363] ? kstrdup_const+0x35/0x60 [ 751.831265] ? lock_downgrade+0x6e0/0x6e0 [ 751.835413] kstrdup+0x36/0x70 [ 751.838603] kstrdup_const+0x35/0x60 [ 751.842300] alloc_vfsmnt+0xe0/0x7c0 [ 751.846001] clone_mnt+0x6c/0xef0 [ 751.849446] copy_tree+0x33a/0x860 [ 751.852984] copy_mnt_ns+0x112/0x8a0 [ 751.856687] ? rcu_read_lock_sched_held+0x10a/0x130 [ 751.861834] ? kmem_cache_alloc+0x35f/0x3c0 09:39:30 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 751.866500] create_new_namespaces+0xc9/0x730 [ 751.870993] ? security_capable+0x88/0xb0 [ 751.875145] copy_namespaces+0x27b/0x310 [ 751.879207] copy_process.part.0+0x2616/0x6fa0 [ 751.883786] ? get_pid_task+0xb8/0x130 [ 751.887672] ? proc_tid_io_accounting+0x20/0x20 [ 751.892364] ? __cleanup_sighand+0x40/0x40 [ 751.896598] ? lock_downgrade+0x6e0/0x6e0 [ 751.900748] _do_fork+0x180/0xc80 [ 751.904212] ? fork_idle+0x270/0x270 [ 751.907921] ? fput+0xb/0x140 [ 751.911018] ? SyS_write+0x14d/0x210 [ 751.914718] ? SyS_read+0x210/0x210 [ 751.918327] ? SyS_clock_settime+0x1a0/0x1a0 [ 751.922873] ? do_syscall_64+0x4c/0x640 [ 751.926833] ? sys_vfork+0x20/0x20 [ 751.930353] do_syscall_64+0x1d5/0x640 [ 751.934236] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 751.939414] RIP: 0033:0x45cba9 [ 751.942586] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 751.950277] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 751.957539] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 09:39:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x0, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 751.964797] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 751.972045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 751.979297] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:30 executing program 1 (fault-call:3 fault-nth:45): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:30 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 752.065734] FAULT_INJECTION: forcing a failure. [ 752.065734] name failslab, interval 1, probability 0, space 0, times 0 [ 752.077384] CPU: 1 PID: 22134 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 752.085277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.094611] Call Trace: [ 752.097186] dump_stack+0x1b2/0x283 [ 752.100815] should_fail.cold+0x10a/0x154 [ 752.105910] should_failslab+0xd6/0x130 [ 752.109882] kmem_cache_alloc+0x28e/0x3c0 [ 752.114017] alloc_vfsmnt+0x23/0x7c0 [ 752.117718] clone_mnt+0x6c/0xef0 [ 752.121174] copy_tree+0x33a/0x860 [ 752.124698] copy_mnt_ns+0x112/0x8a0 [ 752.128406] ? rcu_read_lock_sched_held+0x10a/0x130 [ 752.133457] ? kmem_cache_alloc+0x35f/0x3c0 [ 752.137761] create_new_namespaces+0xc9/0x730 [ 752.142237] ? security_capable+0x88/0xb0 [ 752.146377] copy_namespaces+0x27b/0x310 [ 752.150431] copy_process.part.0+0x2616/0x6fa0 [ 752.155005] ? get_pid_task+0xb8/0x130 [ 752.158873] ? proc_tid_io_accounting+0x20/0x20 [ 752.163538] ? __cleanup_sighand+0x40/0x40 [ 752.167756] ? lock_downgrade+0x6e0/0x6e0 [ 752.171884] _do_fork+0x180/0xc80 [ 752.175334] ? fork_idle+0x270/0x270 [ 752.179065] ? fput+0xb/0x140 [ 752.182185] ? SyS_write+0x14d/0x210 [ 752.185903] ? SyS_read+0x210/0x210 [ 752.189530] ? SyS_clock_settime+0x1a0/0x1a0 [ 752.193942] ? do_syscall_64+0x4c/0x640 [ 752.197912] ? sys_vfork+0x20/0x20 [ 752.201453] do_syscall_64+0x1d5/0x640 [ 752.205344] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 752.210524] RIP: 0033:0x45cba9 09:39:30 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf948dc020e22ac98}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000f0dbdf25010000007e00000273787a30000000000000000000000030faffffff0800030073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x20000090) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) [ 752.213708] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 752.221439] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 752.228701] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 752.235962] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 752.243225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 752.250486] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:30 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:30 executing program 1 (fault-call:3 fault-nth:46): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 752.330463] FAULT_INJECTION: forcing a failure. [ 752.330463] name failslab, interval 1, probability 0, space 0, times 0 [ 752.343232] CPU: 1 PID: 22149 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 752.351120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.360452] Call Trace: [ 752.363030] dump_stack+0x1b2/0x283 [ 752.366642] should_fail.cold+0x10a/0x154 [ 752.370776] should_failslab+0xd6/0x130 [ 752.374736] __kmalloc_track_caller+0x2bc/0x400 [ 752.379442] ? kstrdup_const+0x35/0x60 [ 752.383309] ? lock_downgrade+0x6e0/0x6e0 [ 752.387436] kstrdup+0x36/0x70 [ 752.390608] kstrdup_const+0x35/0x60 [ 752.394302] alloc_vfsmnt+0xe0/0x7c0 [ 752.398005] clone_mnt+0x6c/0xef0 [ 752.401451] copy_tree+0x33a/0x860 [ 752.404976] copy_mnt_ns+0x112/0x8a0 [ 752.408700] ? rcu_read_lock_sched_held+0x10a/0x130 [ 752.413694] ? kmem_cache_alloc+0x35f/0x3c0 [ 752.417996] create_new_namespaces+0xc9/0x730 [ 752.422490] ? security_capable+0x88/0xb0 [ 752.426664] copy_namespaces+0x27b/0x310 [ 752.430757] copy_process.part.0+0x2616/0x6fa0 [ 752.435328] ? get_pid_task+0xb8/0x130 [ 752.439199] ? proc_tid_io_accounting+0x20/0x20 [ 752.443866] ? __cleanup_sighand+0x40/0x40 [ 752.448080] ? lock_downgrade+0x6e0/0x6e0 [ 752.452219] _do_fork+0x180/0xc80 [ 752.455679] ? fork_idle+0x270/0x270 [ 752.459371] ? fput+0xb/0x140 [ 752.462454] ? SyS_write+0x14d/0x210 [ 752.466215] ? SyS_read+0x210/0x210 [ 752.469834] ? SyS_clock_settime+0x1a0/0x1a0 [ 752.474223] ? do_syscall_64+0x4c/0x640 [ 752.478198] ? sys_vfork+0x20/0x20 [ 752.481726] do_syscall_64+0x1d5/0x640 [ 752.485615] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 752.490782] RIP: 0033:0x45cba9 [ 752.493962] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 752.501648] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 752.508914] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 752.516168] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 752.523416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 752.530664] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:30 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000000)={0x2, [0x0, 0x0]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f00000002c0)="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", 0x124) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:31 executing program 3: dup(0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:39:31 executing program 1 (fault-call:3 fault-nth:47): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 752.635366] FAULT_INJECTION: forcing a failure. [ 752.635366] name failslab, interval 1, probability 0, space 0, times 0 [ 752.647311] CPU: 0 PID: 22157 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 752.655194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.664544] Call Trace: [ 752.667136] dump_stack+0x1b2/0x283 [ 752.670768] should_fail.cold+0x10a/0x154 [ 752.674931] should_failslab+0xd6/0x130 [ 752.678903] kmem_cache_alloc+0x28e/0x3c0 [ 752.683834] alloc_vfsmnt+0x23/0x7c0 [ 752.687573] clone_mnt+0x6c/0xef0 [ 752.691021] copy_tree+0x33a/0x860 [ 752.694560] copy_mnt_ns+0x112/0x8a0 [ 752.698270] ? rcu_read_lock_sched_held+0x10a/0x130 [ 752.703281] ? kmem_cache_alloc+0x35f/0x3c0 [ 752.707602] create_new_namespaces+0xc9/0x730 [ 752.712091] ? security_capable+0x88/0xb0 [ 752.716222] copy_namespaces+0x27b/0x310 [ 752.720264] copy_process.part.0+0x2616/0x6fa0 [ 752.724834] ? get_pid_task+0xb8/0x130 [ 752.728720] ? proc_tid_io_accounting+0x20/0x20 [ 752.733399] ? __cleanup_sighand+0x40/0x40 [ 752.737628] ? lock_downgrade+0x6e0/0x6e0 [ 752.741775] _do_fork+0x180/0xc80 [ 752.745220] ? fork_idle+0x270/0x270 [ 752.748926] ? fput+0xb/0x140 [ 752.752010] ? SyS_write+0x14d/0x210 [ 752.755718] ? SyS_read+0x210/0x210 [ 752.759343] ? SyS_clock_settime+0x1a0/0x1a0 [ 752.763738] ? do_syscall_64+0x4c/0x640 [ 752.767696] ? sys_vfork+0x20/0x20 [ 752.771216] do_syscall_64+0x1d5/0x640 [ 752.775089] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 752.780262] RIP: 0033:0x45cba9 09:39:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:31 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 752.783440] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 752.791134] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 752.798413] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 752.805663] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 752.812915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 752.820169] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:31 executing program 1 (fault-call:3 fault-nth:48): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 752.900491] FAULT_INJECTION: forcing a failure. [ 752.900491] name failslab, interval 1, probability 0, space 0, times 0 [ 752.912144] CPU: 0 PID: 22169 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 752.920036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.929376] Call Trace: [ 752.931958] dump_stack+0x1b2/0x283 [ 752.935572] should_fail.cold+0x10a/0x154 [ 752.939704] should_failslab+0xd6/0x130 [ 752.943667] __kmalloc_track_caller+0x2bc/0x400 [ 752.948328] ? kstrdup_const+0x35/0x60 [ 752.952202] ? lock_downgrade+0x6e0/0x6e0 [ 752.956347] kstrdup+0x36/0x70 [ 752.959538] kstrdup_const+0x35/0x60 [ 752.963247] alloc_vfsmnt+0xe0/0x7c0 [ 752.966959] clone_mnt+0x6c/0xef0 [ 752.970410] copy_tree+0x33a/0x860 [ 752.973952] copy_mnt_ns+0x112/0x8a0 [ 752.977667] ? rcu_read_lock_sched_held+0x10a/0x130 [ 752.982678] ? kmem_cache_alloc+0x35f/0x3c0 [ 752.987000] create_new_namespaces+0xc9/0x730 [ 752.991488] ? security_capable+0x88/0xb0 [ 752.995636] copy_namespaces+0x27b/0x310 [ 752.999694] copy_process.part.0+0x2616/0x6fa0 [ 753.004277] ? get_pid_task+0xb8/0x130 [ 753.008160] ? proc_tid_io_accounting+0x20/0x20 [ 753.012836] ? __cleanup_sighand+0x40/0x40 [ 753.017066] ? lock_downgrade+0x6e0/0x6e0 [ 753.021218] _do_fork+0x180/0xc80 [ 753.024668] ? fork_idle+0x270/0x270 [ 753.028376] ? fput+0xb/0x140 [ 753.031476] ? SyS_write+0x14d/0x210 [ 753.035186] ? SyS_read+0x210/0x210 [ 753.038809] ? SyS_clock_settime+0x1a0/0x1a0 [ 753.043218] ? do_syscall_64+0x4c/0x640 [ 753.047187] ? sys_vfork+0x20/0x20 [ 753.050728] do_syscall_64+0x1d5/0x640 [ 753.054619] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 753.059805] RIP: 0033:0x45cba9 [ 753.062985] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 753.070687] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 753.077948] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 753.085211] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 753.092471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:31 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf948dc020e22ac98}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000f0dbdf25010000007e00000273787a30000000000000000000000030faffffff0800030073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x20000090) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) [ 753.099734] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:31 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:31 executing program 1 (fault-call:3 fault-nth:49): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 753.179536] FAULT_INJECTION: forcing a failure. [ 753.179536] name failslab, interval 1, probability 0, space 0, times 0 [ 753.190866] CPU: 1 PID: 22180 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 753.198738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.208070] Call Trace: [ 753.210649] dump_stack+0x1b2/0x283 [ 753.214277] should_fail.cold+0x10a/0x154 [ 753.218419] should_failslab+0xd6/0x130 [ 753.222390] kmem_cache_alloc+0x28e/0x3c0 [ 753.226525] alloc_vfsmnt+0x23/0x7c0 [ 753.230232] clone_mnt+0x6c/0xef0 [ 753.233684] copy_tree+0x33a/0x860 [ 753.237228] copy_mnt_ns+0x112/0x8a0 [ 753.240932] ? rcu_read_lock_sched_held+0x10a/0x130 [ 753.246027] ? kmem_cache_alloc+0x35f/0x3c0 [ 753.250339] create_new_namespaces+0xc9/0x730 [ 753.255689] ? security_capable+0x88/0xb0 [ 753.259822] copy_namespaces+0x27b/0x310 [ 753.263863] copy_process.part.0+0x2616/0x6fa0 [ 753.268433] ? get_pid_task+0xb8/0x130 [ 753.272303] ? proc_tid_io_accounting+0x20/0x20 [ 753.276954] ? __cleanup_sighand+0x40/0x40 [ 753.281177] ? lock_downgrade+0x6e0/0x6e0 [ 753.285318] _do_fork+0x180/0xc80 [ 753.288768] ? fork_idle+0x270/0x270 [ 753.292481] ? fput+0xb/0x140 [ 753.295564] ? SyS_write+0x14d/0x210 [ 753.299255] ? SyS_read+0x210/0x210 [ 753.302869] ? SyS_clock_settime+0x1a0/0x1a0 [ 753.307275] ? do_syscall_64+0x4c/0x640 [ 753.311321] ? sys_vfork+0x20/0x20 [ 753.314837] do_syscall_64+0x1d5/0x640 [ 753.318812] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 753.323984] RIP: 0033:0x45cba9 [ 753.327162] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 753.334856] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 753.342114] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 753.349363] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 753.356622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 753.363879] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:31 executing program 1 (fault-call:3 fault-nth:50): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 753.423579] FAULT_INJECTION: forcing a failure. [ 753.423579] name failslab, interval 1, probability 0, space 0, times 0 [ 753.439515] CPU: 0 PID: 22185 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 753.447408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.456756] Call Trace: [ 753.459372] dump_stack+0x1b2/0x283 [ 753.463002] should_fail.cold+0x10a/0x154 [ 753.467150] should_failslab+0xd6/0x130 [ 753.471126] __kmalloc_track_caller+0x2bc/0x400 [ 753.475789] ? kstrdup_const+0x35/0x60 [ 753.479666] ? lock_downgrade+0x6e0/0x6e0 [ 753.483807] kstrdup+0x36/0x70 [ 753.486992] kstrdup_const+0x35/0x60 [ 753.490697] alloc_vfsmnt+0xe0/0x7c0 [ 753.494405] clone_mnt+0x6c/0xef0 [ 753.497857] copy_tree+0x33a/0x860 [ 753.501399] copy_mnt_ns+0x112/0x8a0 [ 753.505111] ? rcu_read_lock_sched_held+0x10a/0x130 [ 753.510117] ? kmem_cache_alloc+0x35f/0x3c0 [ 753.514453] create_new_namespaces+0xc9/0x730 [ 753.518946] ? security_capable+0x88/0xb0 09:39:31 executing program 3: dup(0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) [ 753.523183] copy_namespaces+0x27b/0x310 [ 753.527241] copy_process.part.0+0x2616/0x6fa0 [ 753.531823] ? get_pid_task+0xb8/0x130 [ 753.535706] ? proc_tid_io_accounting+0x20/0x20 [ 753.540395] ? __cleanup_sighand+0x40/0x40 [ 753.544625] ? lock_downgrade+0x6e0/0x6e0 [ 753.548773] _do_fork+0x180/0xc80 [ 753.552226] ? fork_idle+0x270/0x270 [ 753.556027] ? fput+0xb/0x140 [ 753.559125] ? SyS_write+0x14d/0x210 [ 753.562942] ? SyS_read+0x210/0x210 [ 753.566562] ? SyS_clock_settime+0x1a0/0x1a0 [ 753.570964] ? do_syscall_64+0x4c/0x640 [ 753.574935] ? sys_vfork+0x20/0x20 [ 753.578470] do_syscall_64+0x1d5/0x640 [ 753.582357] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 753.587539] RIP: 0033:0x45cba9 [ 753.590721] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 753.598427] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 753.605690] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 753.612958] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x400000000) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0x40, 0x4, 0x0, 0x1, 0x9, 0x0, 0x15f, 0x401, 0xfff, 0x2b68, 0xb13, 0x4, 0x5, 0xfffffffa, 0x4, 0x0, {0x8, 0x400}, 0xff, 0x2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) lseek(r6, 0x28000, 0x4) 09:39:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 753.620229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 753.627495] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:32 executing program 1 (fault-call:3 fault-nth:51): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 753.710796] FAULT_INJECTION: forcing a failure. [ 753.710796] name failslab, interval 1, probability 0, space 0, times 0 [ 753.727280] CPU: 0 PID: 22200 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 753.735172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.744604] Call Trace: [ 753.747189] dump_stack+0x1b2/0x283 [ 753.750818] should_fail.cold+0x10a/0x154 [ 753.754964] should_failslab+0xd6/0x130 [ 753.758936] kmem_cache_alloc+0x28e/0x3c0 [ 753.763079] alloc_vfsmnt+0x23/0x7c0 [ 753.766790] clone_mnt+0x6c/0xef0 [ 753.770240] copy_tree+0x33a/0x860 [ 753.773783] copy_mnt_ns+0x112/0x8a0 [ 753.777495] ? rcu_read_lock_sched_held+0x10a/0x130 [ 753.782503] ? kmem_cache_alloc+0x35f/0x3c0 [ 753.786822] create_new_namespaces+0xc9/0x730 [ 753.791310] ? security_capable+0x88/0xb0 [ 753.795468] copy_namespaces+0x27b/0x310 [ 753.799531] copy_process.part.0+0x2616/0x6fa0 [ 753.804112] ? get_pid_task+0xb8/0x130 [ 753.807997] ? proc_tid_io_accounting+0x20/0x20 [ 753.812671] ? __cleanup_sighand+0x40/0x40 [ 753.816898] ? lock_downgrade+0x6e0/0x6e0 [ 753.821046] _do_fork+0x180/0xc80 [ 753.824496] ? fork_idle+0x270/0x270 [ 753.828201] ? fput+0xb/0x140 [ 753.831301] ? SyS_write+0x14d/0x210 [ 753.835006] ? SyS_read+0x210/0x210 [ 753.838625] ? SyS_clock_settime+0x1a0/0x1a0 [ 753.843040] ? do_syscall_64+0x4c/0x640 [ 753.847006] ? sys_vfork+0x20/0x20 [ 753.850542] do_syscall_64+0x1d5/0x640 [ 753.854433] entry_SYSCALL_64_after_hwframe+0x46/0xbb 09:39:32 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 753.859613] RIP: 0033:0x45cba9 [ 753.862794] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 753.870496] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 753.877757] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 753.885016] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 753.892275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 753.899536] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:32 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf948dc020e22ac98}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000f0dbdf25010000007e00000273787a30000000000000000000000030faffffff0800030073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x20000090) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:32 executing program 1 (fault-call:3 fault-nth:52): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 753.969295] FAULT_INJECTION: forcing a failure. [ 753.969295] name failslab, interval 1, probability 0, space 0, times 0 [ 753.980811] CPU: 1 PID: 22211 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 753.988697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.998040] Call Trace: [ 754.000622] dump_stack+0x1b2/0x283 [ 754.004245] should_fail.cold+0x10a/0x154 [ 754.008382] should_failslab+0xd6/0x130 [ 754.012344] __kmalloc_track_caller+0x2bc/0x400 [ 754.016995] ? kstrdup_const+0x35/0x60 [ 754.020870] ? lock_downgrade+0x6e0/0x6e0 [ 754.025022] kstrdup+0x36/0x70 [ 754.028213] kstrdup_const+0x35/0x60 [ 754.031926] alloc_vfsmnt+0xe0/0x7c0 [ 754.035636] clone_mnt+0x6c/0xef0 [ 754.039098] copy_tree+0x33a/0x860 [ 754.042641] copy_mnt_ns+0x112/0x8a0 [ 754.046353] ? rcu_read_lock_sched_held+0x10a/0x130 [ 754.051362] ? kmem_cache_alloc+0x35f/0x3c0 [ 754.055682] create_new_namespaces+0xc9/0x730 [ 754.060169] ? security_capable+0x88/0xb0 [ 754.064317] copy_namespaces+0x27b/0x310 [ 754.068376] copy_process.part.0+0x2616/0x6fa0 [ 754.072956] ? get_pid_task+0xb8/0x130 [ 754.076845] ? proc_tid_io_accounting+0x20/0x20 [ 754.081522] ? __cleanup_sighand+0x40/0x40 [ 754.085750] ? lock_downgrade+0x6e0/0x6e0 [ 754.090509] _do_fork+0x180/0xc80 [ 754.093963] ? fork_idle+0x270/0x270 [ 754.097671] ? fput+0xb/0x140 [ 754.100771] ? SyS_write+0x14d/0x210 [ 754.104479] ? SyS_read+0x210/0x210 [ 754.108101] ? SyS_clock_settime+0x1a0/0x1a0 [ 754.112505] ? do_syscall_64+0x4c/0x640 [ 754.116473] ? sys_vfork+0x20/0x20 [ 754.120012] do_syscall_64+0x1d5/0x640 [ 754.123903] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 754.129089] RIP: 0033:0x45cba9 [ 754.132373] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 754.140159] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 754.147420] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 754.154684] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 754.161941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 754.169194] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:32 executing program 1 (fault-call:3 fault-nth:53): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 754.254231] FAULT_INJECTION: forcing a failure. [ 754.254231] name failslab, interval 1, probability 0, space 0, times 0 [ 754.266341] CPU: 1 PID: 22220 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 754.274230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.283579] Call Trace: [ 754.286168] dump_stack+0x1b2/0x283 [ 754.289800] should_fail.cold+0x10a/0x154 [ 754.293956] should_failslab+0xd6/0x130 [ 754.297926] kmem_cache_alloc+0x28e/0x3c0 [ 754.302057] alloc_vfsmnt+0x23/0x7c0 [ 754.305747] clone_mnt+0x6c/0xef0 [ 754.309179] copy_tree+0x33a/0x860 [ 754.312711] copy_mnt_ns+0x112/0x8a0 [ 754.316408] ? rcu_read_lock_sched_held+0x10a/0x130 [ 754.321406] ? kmem_cache_alloc+0x35f/0x3c0 [ 754.325714] create_new_namespaces+0xc9/0x730 [ 754.330189] ? security_capable+0x88/0xb0 [ 754.334317] copy_namespaces+0x27b/0x310 [ 754.338402] copy_process.part.0+0x2616/0x6fa0 [ 754.342965] ? get_pid_task+0xb8/0x130 [ 754.346867] ? proc_tid_io_accounting+0x20/0x20 [ 754.351515] ? __cleanup_sighand+0x40/0x40 [ 754.355853] ? lock_downgrade+0x6e0/0x6e0 [ 754.359980] _do_fork+0x180/0xc80 [ 754.363411] ? fork_idle+0x270/0x270 [ 754.367101] ? fput+0xb/0x140 [ 754.370180] ? SyS_write+0x14d/0x210 [ 754.373866] ? SyS_read+0x210/0x210 [ 754.377466] ? SyS_clock_settime+0x1a0/0x1a0 [ 754.381848] ? do_syscall_64+0x4c/0x640 [ 754.385946] ? sys_vfork+0x20/0x20 [ 754.389464] do_syscall_64+0x1d5/0x640 [ 754.393340] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 754.398505] RIP: 0033:0x45cba9 09:39:32 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) [ 754.401669] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 754.409356] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 754.416602] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 754.423888] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 754.431150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 754.438410] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0xc4002, 0x0) accept4$unix(r2, 0x0, &(0x7f0000000080), 0x80000) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) sigaltstack(&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)) 09:39:32 executing program 1 (fault-call:3 fault-nth:54): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 754.521124] FAULT_INJECTION: forcing a failure. [ 754.521124] name failslab, interval 1, probability 0, space 0, times 0 [ 754.541581] CPU: 1 PID: 22228 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 754.549484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.559080] Call Trace: [ 754.561652] dump_stack+0x1b2/0x283 [ 754.565271] should_fail.cold+0x10a/0x154 [ 754.569423] should_failslab+0xd6/0x130 [ 754.573394] __kmalloc_track_caller+0x2bc/0x400 [ 754.578051] ? kstrdup_const+0x35/0x60 [ 754.581918] ? lock_downgrade+0x6e0/0x6e0 [ 754.586045] kstrdup+0x36/0x70 [ 754.589214] kstrdup_const+0x35/0x60 [ 754.592944] alloc_vfsmnt+0xe0/0x7c0 [ 754.596648] clone_mnt+0x6c/0xef0 [ 754.600089] copy_tree+0x33a/0x860 [ 754.603626] copy_mnt_ns+0x112/0x8a0 [ 754.607338] ? rcu_read_lock_sched_held+0x10a/0x130 [ 754.612343] ? kmem_cache_alloc+0x35f/0x3c0 [ 754.616658] create_new_namespaces+0xc9/0x730 [ 754.621142] ? security_capable+0x88/0xb0 [ 754.625275] copy_namespaces+0x27b/0x310 [ 754.629324] copy_process.part.0+0x2616/0x6fa0 [ 754.633902] ? get_pid_task+0xb8/0x130 [ 754.637775] ? proc_tid_io_accounting+0x20/0x20 [ 754.642427] ? __cleanup_sighand+0x40/0x40 [ 754.646680] ? lock_downgrade+0x6e0/0x6e0 [ 754.650823] _do_fork+0x180/0xc80 [ 754.654277] ? fork_idle+0x270/0x270 [ 754.657980] ? fput+0xb/0x140 [ 754.661077] ? SyS_write+0x14d/0x210 [ 754.664890] ? SyS_read+0x210/0x210 [ 754.668496] ? SyS_clock_settime+0x1a0/0x1a0 [ 754.672884] ? do_syscall_64+0x4c/0x640 [ 754.676872] ? sys_vfork+0x20/0x20 [ 754.680390] do_syscall_64+0x1d5/0x640 [ 754.684269] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 754.689445] RIP: 0033:0x45cba9 [ 754.692612] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 754.700298] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 754.707544] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 754.714829] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:33 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2810a9f647197b083ed4b3913729006753a425dde8b0d803cc393bb6bb41c68d2eedf61b4691282639e357daaf8605dbff7952977633464758b834511c139f3a09bef3c861723eb4e8b96f3992fdcdff203bcdb6a7e942a3f05c3aa0ef6a558b6571e3be49a20735cfd6891b11c61f6744644bb686592d8cee3f344a90ae8dcbf75c0b464d1108cc724e254a7bd2a47e4a429692c444af56137dae9a114015804e43910a8bf20c9b31f49bad90516eb694fcf8a961d3bb960160da87a91d06c586d32f47b75ac27d444123a05b66f39143bed2335740c02d0e9df1ffe88b24bf38185e3d85dcd9a8e2281fad2df7d8be295add13424a36ca60768d2db3170fbba0054a68d37923e40168afa8cb0dccb605cf3898a2d342f4eded9023c9553ab87f770c79adf3eed966ef", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf948dc020e22ac98}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000f0dbdf25010000007e00000273787a30000000000000000000000030faffffff0800030073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x20000090) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) [ 754.722110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 754.729357] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:33 executing program 1 (fault-call:3 fault-nth:55): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 754.889986] FAULT_INJECTION: forcing a failure. [ 754.889986] name failslab, interval 1, probability 0, space 0, times 0 [ 754.907976] CPU: 1 PID: 22244 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 754.915886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.925243] Call Trace: [ 754.927816] dump_stack+0x1b2/0x283 [ 754.931420] should_fail.cold+0x10a/0x154 [ 754.935582] should_failslab+0xd6/0x130 [ 754.939542] kmem_cache_alloc+0x28e/0x3c0 [ 754.943666] alloc_vfsmnt+0x23/0x7c0 [ 754.947354] clone_mnt+0x6c/0xef0 [ 754.950781] copy_tree+0x33a/0x860 [ 754.954301] copy_mnt_ns+0x112/0x8a0 [ 754.957990] ? rcu_read_lock_sched_held+0x10a/0x130 [ 754.963022] ? kmem_cache_alloc+0x35f/0x3c0 [ 754.967320] create_new_namespaces+0xc9/0x730 [ 754.971793] ? security_capable+0x88/0xb0 [ 754.975919] copy_namespaces+0x27b/0x310 [ 754.979956] copy_process.part.0+0x2616/0x6fa0 [ 754.984514] ? get_pid_task+0xb8/0x130 [ 754.988378] ? proc_tid_io_accounting+0x20/0x20 [ 754.993025] ? __cleanup_sighand+0x40/0x40 [ 754.997234] ? lock_downgrade+0x6e0/0x6e0 [ 755.001356] _do_fork+0x180/0xc80 [ 755.004785] ? fork_idle+0x270/0x270 [ 755.008471] ? fput+0xb/0x140 [ 755.011549] ? SyS_write+0x14d/0x210 [ 755.015236] ? SyS_read+0x210/0x210 [ 755.018836] ? SyS_clock_settime+0x1a0/0x1a0 [ 755.023220] ? do_syscall_64+0x4c/0x640 [ 755.027170] ? sys_vfork+0x20/0x20 [ 755.030683] do_syscall_64+0x1d5/0x640 [ 755.034551] entry_SYSCALL_64_after_hwframe+0x46/0xbb 09:39:33 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 755.039713] RIP: 0033:0x45cba9 [ 755.042879] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 755.050562] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 755.057807] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 755.065062] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 755.072321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 755.079564] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:33 executing program 1 (fault-call:3 fault-nth:56): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 755.153865] FAULT_INJECTION: forcing a failure. [ 755.153865] name failslab, interval 1, probability 0, space 0, times 0 [ 755.165339] CPU: 0 PID: 22248 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 755.173213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.182553] Call Trace: [ 755.185144] dump_stack+0x1b2/0x283 [ 755.188764] should_fail.cold+0x10a/0x154 [ 755.192895] should_failslab+0xd6/0x130 [ 755.196858] __kmalloc_track_caller+0x2bc/0x400 [ 755.201516] ? kstrdup_const+0x35/0x60 [ 755.205405] ? lock_downgrade+0x6e0/0x6e0 [ 755.209540] kstrdup+0x36/0x70 [ 755.212711] kstrdup_const+0x35/0x60 [ 755.216411] alloc_vfsmnt+0xe0/0x7c0 [ 755.220116] clone_mnt+0x6c/0xef0 [ 755.223566] copy_tree+0x33a/0x860 [ 755.227108] copy_mnt_ns+0x112/0x8a0 [ 755.230822] ? rcu_read_lock_sched_held+0x10a/0x130 [ 755.235851] ? kmem_cache_alloc+0x35f/0x3c0 [ 755.240345] create_new_namespaces+0xc9/0x730 [ 755.244835] ? security_capable+0x88/0xb0 [ 755.248983] copy_namespaces+0x27b/0x310 [ 755.253047] copy_process.part.0+0x2616/0x6fa0 [ 755.257630] ? get_pid_task+0xb8/0x130 [ 755.261516] ? proc_tid_io_accounting+0x20/0x20 [ 755.266194] ? __cleanup_sighand+0x40/0x40 [ 755.270424] ? lock_downgrade+0x6e0/0x6e0 [ 755.274568] _do_fork+0x180/0xc80 [ 755.278015] ? fork_idle+0x270/0x270 [ 755.281724] ? fput+0xb/0x140 [ 755.284833] ? SyS_write+0x14d/0x210 [ 755.288540] ? SyS_read+0x210/0x210 [ 755.292161] ? SyS_clock_settime+0x1a0/0x1a0 [ 755.296569] ? do_syscall_64+0x4c/0x640 [ 755.300538] ? sys_vfork+0x20/0x20 [ 755.304084] do_syscall_64+0x1d5/0x640 [ 755.307973] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 755.313154] RIP: 0033:0x45cba9 [ 755.316332] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 755.324036] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 755.331299] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 755.338564] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 755.345838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:33 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:39:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x0, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 755.353099] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000040)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r4 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000140)='net\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 09:39:33 executing program 1 (fault-call:3 fault-nth:57): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:33 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 755.489300] FAULT_INJECTION: forcing a failure. [ 755.489300] name failslab, interval 1, probability 0, space 0, times 0 [ 755.508966] CPU: 1 PID: 22265 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 755.516862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.526196] Call Trace: [ 755.528780] dump_stack+0x1b2/0x283 [ 755.532413] should_fail.cold+0x10a/0x154 [ 755.536735] should_failslab+0xd6/0x130 [ 755.540703] kmem_cache_alloc+0x28e/0x3c0 [ 755.544840] alloc_vfsmnt+0x23/0x7c0 [ 755.548540] clone_mnt+0x6c/0xef0 [ 755.552002] copy_tree+0x33a/0x860 [ 755.555529] copy_mnt_ns+0x112/0x8a0 [ 755.559224] ? rcu_read_lock_sched_held+0x10a/0x130 [ 755.564228] ? kmem_cache_alloc+0x35f/0x3c0 [ 755.568538] create_new_namespaces+0xc9/0x730 [ 755.573010] ? security_capable+0x88/0xb0 [ 755.577139] copy_namespaces+0x27b/0x310 [ 755.581191] copy_process.part.0+0x2616/0x6fa0 [ 755.585764] ? get_pid_task+0xb8/0x130 09:39:33 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf948dc020e22ac98}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000f0dbdf25010000007e00000273787a30000000000000000000000030faffffff0800030073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x20000090) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) [ 755.589643] ? proc_tid_io_accounting+0x20/0x20 [ 755.594319] ? __cleanup_sighand+0x40/0x40 [ 755.598548] ? lock_downgrade+0x6e0/0x6e0 [ 755.602701] _do_fork+0x180/0xc80 [ 755.606160] ? fork_idle+0x270/0x270 [ 755.609966] ? fput+0xb/0x140 [ 755.613067] ? SyS_write+0x14d/0x210 [ 755.616776] ? SyS_read+0x210/0x210 [ 755.620403] ? SyS_clock_settime+0x1a0/0x1a0 [ 755.624803] ? do_syscall_64+0x4c/0x640 [ 755.628762] ? sys_vfork+0x20/0x20 [ 755.632291] do_syscall_64+0x1d5/0x640 [ 755.636183] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 755.641364] RIP: 0033:0x45cba9 [ 755.644547] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 755.652248] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 755.659511] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 755.666773] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 755.674033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 755.681296] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:34 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:34 executing program 1 (fault-call:3 fault-nth:58): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 755.757682] FAULT_INJECTION: forcing a failure. [ 755.757682] name failslab, interval 1, probability 0, space 0, times 0 [ 755.769445] CPU: 0 PID: 22280 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 755.777334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.786676] Call Trace: [ 755.789255] dump_stack+0x1b2/0x283 [ 755.792872] should_fail.cold+0x10a/0x154 [ 755.797005] should_failslab+0xd6/0x130 [ 755.800970] __kmalloc_track_caller+0x2bc/0x400 [ 755.805618] ? kstrdup_const+0x35/0x60 [ 755.809482] ? lock_downgrade+0x6e0/0x6e0 [ 755.813713] kstrdup+0x36/0x70 [ 755.816888] kstrdup_const+0x35/0x60 [ 755.820590] alloc_vfsmnt+0xe0/0x7c0 [ 755.824299] clone_mnt+0x6c/0xef0 [ 755.827743] copy_tree+0x33a/0x860 [ 755.831266] copy_mnt_ns+0x112/0x8a0 [ 755.834968] ? rcu_read_lock_sched_held+0x10a/0x130 [ 755.839970] ? kmem_cache_alloc+0x35f/0x3c0 [ 755.844359] create_new_namespaces+0xc9/0x730 [ 755.848834] ? security_capable+0x88/0xb0 [ 755.852960] copy_namespaces+0x27b/0x310 [ 755.857007] copy_process.part.0+0x2616/0x6fa0 [ 755.861577] ? get_pid_task+0xb8/0x130 [ 755.865454] ? proc_tid_io_accounting+0x20/0x20 [ 755.870136] ? __cleanup_sighand+0x40/0x40 [ 755.874359] ? lock_downgrade+0x6e0/0x6e0 [ 755.878522] _do_fork+0x180/0xc80 [ 755.881965] ? fork_idle+0x270/0x270 [ 755.885668] ? fput+0xb/0x140 [ 755.888758] ? SyS_write+0x14d/0x210 [ 755.892449] ? SyS_read+0x210/0x210 [ 755.896060] ? SyS_clock_settime+0x1a0/0x1a0 [ 755.900446] ? do_syscall_64+0x4c/0x640 [ 755.904407] ? sys_vfork+0x20/0x20 [ 755.907938] do_syscall_64+0x1d5/0x640 [ 755.911808] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 755.916977] RIP: 0033:0x45cba9 [ 755.920149] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 755.927846] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 755.935095] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 755.942343] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 755.949595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:34 executing program 1 (fault-call:3 fault-nth:59): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 755.956851] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 756.030005] FAULT_INJECTION: forcing a failure. [ 756.030005] name failslab, interval 1, probability 0, space 0, times 0 [ 756.041589] CPU: 1 PID: 22283 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 756.049477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.058828] Call Trace: [ 756.061420] dump_stack+0x1b2/0x283 [ 756.065050] should_fail.cold+0x10a/0x154 [ 756.069202] should_failslab+0xd6/0x130 [ 756.073181] kmem_cache_alloc+0x28e/0x3c0 [ 756.077325] alloc_vfsmnt+0x23/0x7c0 [ 756.081035] clone_mnt+0x6c/0xef0 [ 756.084490] copy_tree+0x33a/0x860 [ 756.088033] copy_mnt_ns+0x112/0x8a0 [ 756.091747] ? rcu_read_lock_sched_held+0x10a/0x130 [ 756.096761] ? kmem_cache_alloc+0x35f/0x3c0 [ 756.101082] create_new_namespaces+0xc9/0x730 [ 756.105573] ? security_capable+0x88/0xb0 [ 756.109730] copy_namespaces+0x27b/0x310 [ 756.113789] copy_process.part.0+0x2616/0x6fa0 [ 756.118373] ? get_pid_task+0xb8/0x130 [ 756.122258] ? proc_tid_io_accounting+0x20/0x20 [ 756.126931] ? __cleanup_sighand+0x40/0x40 [ 756.131162] ? lock_downgrade+0x6e0/0x6e0 [ 756.135310] _do_fork+0x180/0xc80 [ 756.138763] ? fork_idle+0x270/0x270 [ 756.142478] ? fput+0xb/0x140 [ 756.145576] ? SyS_write+0x14d/0x210 [ 756.149281] ? SyS_read+0x210/0x210 [ 756.152901] ? SyS_clock_settime+0x1a0/0x1a0 [ 756.157304] ? do_syscall_64+0x4c/0x640 [ 756.161275] ? sys_vfork+0x20/0x20 [ 756.164813] do_syscall_64+0x1d5/0x640 [ 756.168708] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 756.173889] RIP: 0033:0x45cba9 09:39:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x0, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 756.177072] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 756.184772] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 756.192035] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 756.199296] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 756.206558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 756.213819] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000480)=[0x0]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000001c0)={0xf000000, 0x1, 0x81, r2, 0x0, &(0x7f0000000180)={0x9a090e, 0x1000, [], @p_u8=&(0x7f0000000000)=0x36}}) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RREADLINK(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1000d8f171f20c06b9c28dac0194cbd2b9128dd7220bab720a0403785d59a2e2ec0ddddf790476261acda3e06de76f0866090ec0d19ffdf7b56b258a6ac7bb5181c283ee1504df1a2e03d4af4cf23488adb1"], 0x10) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:34 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:39:34 executing program 1 (fault-call:3 fault-nth:60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:34 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 756.311475] FAULT_INJECTION: forcing a failure. [ 756.311475] name failslab, interval 1, probability 0, space 0, times 0 [ 756.323579] CPU: 1 PID: 22296 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 756.331454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.340792] Call Trace: [ 756.343370] dump_stack+0x1b2/0x283 [ 756.346982] should_fail.cold+0x10a/0x154 [ 756.351111] should_failslab+0xd6/0x130 [ 756.355068] __kmalloc_track_caller+0x2bc/0x400 [ 756.359721] ? kstrdup_const+0x35/0x60 [ 756.363596] ? lock_downgrade+0x6e0/0x6e0 [ 756.367739] kstrdup+0x36/0x70 [ 756.370920] kstrdup_const+0x35/0x60 [ 756.374611] alloc_vfsmnt+0xe0/0x7c0 [ 756.378313] clone_mnt+0x6c/0xef0 [ 756.381754] copy_tree+0x33a/0x860 [ 756.385275] copy_mnt_ns+0x112/0x8a0 [ 756.388968] ? rcu_read_lock_sched_held+0x10a/0x130 [ 756.393964] ? kmem_cache_alloc+0x35f/0x3c0 [ 756.398271] create_new_namespaces+0xc9/0x730 [ 756.402742] ? security_capable+0x88/0xb0 [ 756.406878] copy_namespaces+0x27b/0x310 09:39:34 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2810a9f647197b083ed4b3913729006753a425dde8b0d803cc393bb6bb41c68d2eedf61b4691282639e357daaf8605dbff7952977633464758b834511c139f3a09bef3c861723eb4e8b96f3992fdcdff203bcdb6a7e942a3f05c3aa0ef6a558b6571e3be49a20735cfd6891b11c61f6744644bb686592d8cee3f344a90ae8dcbf75c0b464d1108cc724e254a7bd2a47e4a429692c444af56137dae9a114015804e43910a8bf20c9b31f49bad90516eb694fcf8a961d3bb960160da87a91d06c586d32f47b75ac27d444123a05b66f39143bed2335740c02d0e9df1ffe88b24bf38185e3d85dcd9a8e2281fad2df7d8be295add13424a36ca60768d2db3170fbba0054a68d37923e40168afa8cb0dccb605cf3898a2d342f4eded9023c9553ab87f770c79adf3eed966ef", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf948dc020e22ac98}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000f0dbdf25010000007e00000273787a30000000000000000000000030faffffff0800030073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) [ 756.410935] copy_process.part.0+0x2616/0x6fa0 [ 756.415519] ? get_pid_task+0xb8/0x130 [ 756.419405] ? proc_tid_io_accounting+0x20/0x20 [ 756.424076] ? __cleanup_sighand+0x40/0x40 [ 756.428301] ? lock_downgrade+0x6e0/0x6e0 [ 756.432451] _do_fork+0x180/0xc80 [ 756.435906] ? fork_idle+0x270/0x270 [ 756.439615] ? fput+0xb/0x140 [ 756.442718] ? SyS_write+0x14d/0x210 [ 756.446433] ? SyS_read+0x210/0x210 [ 756.450061] ? SyS_clock_settime+0x1a0/0x1a0 [ 756.454463] ? do_syscall_64+0x4c/0x640 [ 756.458430] ? sys_vfork+0x20/0x20 [ 756.461967] do_syscall_64+0x1d5/0x640 [ 756.465860] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 756.471044] RIP: 0033:0x45cba9 [ 756.474226] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 756.481929] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 756.489192] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 756.496454] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 756.503714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 756.510976] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:34 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:34 executing program 1 (fault-call:3 fault-nth:61): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 756.608241] FAULT_INJECTION: forcing a failure. [ 756.608241] name failslab, interval 1, probability 0, space 0, times 0 [ 756.619614] CPU: 1 PID: 22313 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 756.627481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.636823] Call Trace: [ 756.639408] dump_stack+0x1b2/0x283 [ 756.643027] should_fail.cold+0x10a/0x154 [ 756.647167] should_failslab+0xd6/0x130 [ 756.651138] kmem_cache_alloc+0x28e/0x3c0 [ 756.655272] alloc_vfsmnt+0x23/0x7c0 [ 756.658972] clone_mnt+0x6c/0xef0 [ 756.662420] copy_tree+0x33a/0x860 [ 756.666030] copy_mnt_ns+0x112/0x8a0 [ 756.669725] ? rcu_read_lock_sched_held+0x10a/0x130 [ 756.674716] ? kmem_cache_alloc+0x35f/0x3c0 [ 756.679123] create_new_namespaces+0xc9/0x730 [ 756.683596] ? security_capable+0x88/0xb0 [ 756.687734] copy_namespaces+0x27b/0x310 [ 756.691790] copy_process.part.0+0x2616/0x6fa0 [ 756.696368] ? get_pid_task+0xb8/0x130 [ 756.700247] ? proc_tid_io_accounting+0x20/0x20 [ 756.704900] ? __cleanup_sighand+0x40/0x40 [ 756.709112] ? lock_downgrade+0x6e0/0x6e0 [ 756.713247] _do_fork+0x180/0xc80 [ 756.716690] ? fork_idle+0x270/0x270 [ 756.720384] ? fput+0xb/0x140 [ 756.723465] ? SyS_write+0x14d/0x210 [ 756.727158] ? SyS_read+0x210/0x210 [ 756.730773] ? SyS_clock_settime+0x1a0/0x1a0 [ 756.735166] ? do_syscall_64+0x4c/0x640 [ 756.739299] ? sys_vfork+0x20/0x20 [ 756.742835] do_syscall_64+0x1d5/0x640 [ 756.746726] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 756.751902] RIP: 0033:0x45cba9 [ 756.755067] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 756.762751] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 756.770009] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 756.777283] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 756.784546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 756.791910] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:35 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:35 executing program 1 (fault-call:3 fault-nth:62): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 756.897349] FAULT_INJECTION: forcing a failure. [ 756.897349] name failslab, interval 1, probability 0, space 0, times 0 [ 756.909424] CPU: 0 PID: 22321 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 756.917322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.926671] Call Trace: [ 756.929262] dump_stack+0x1b2/0x283 [ 756.932894] should_fail.cold+0x10a/0x154 [ 756.937044] should_failslab+0xd6/0x130 [ 756.941028] __kmalloc_track_caller+0x2bc/0x400 [ 756.945693] ? kstrdup_const+0x35/0x60 [ 756.949578] ? lock_downgrade+0x6e0/0x6e0 [ 756.953726] kstrdup+0x36/0x70 [ 756.956914] kstrdup_const+0x35/0x60 [ 756.960624] alloc_vfsmnt+0xe0/0x7c0 [ 756.964338] clone_mnt+0x6c/0xef0 [ 756.967819] copy_tree+0x33a/0x860 [ 756.971362] copy_mnt_ns+0x112/0x8a0 [ 756.975184] ? rcu_read_lock_sched_held+0x10a/0x130 [ 756.980197] ? kmem_cache_alloc+0x35f/0x3c0 [ 756.984521] create_new_namespaces+0xc9/0x730 [ 756.989010] ? security_capable+0x88/0xb0 [ 756.993161] copy_namespaces+0x27b/0x310 [ 756.997221] copy_process.part.0+0x2616/0x6fa0 [ 757.001800] ? get_pid_task+0xb8/0x130 [ 757.005686] ? proc_tid_io_accounting+0x20/0x20 [ 757.010363] ? __cleanup_sighand+0x40/0x40 [ 757.014593] ? lock_downgrade+0x6e0/0x6e0 [ 757.018746] _do_fork+0x180/0xc80 [ 757.022242] ? fork_idle+0x270/0x270 [ 757.025953] ? fput+0xb/0x140 [ 757.029056] ? SyS_write+0x14d/0x210 [ 757.032766] ? SyS_read+0x210/0x210 [ 757.036387] ? SyS_clock_settime+0x1a0/0x1a0 [ 757.040792] ? do_syscall_64+0x4c/0x640 [ 757.044764] ? sys_vfork+0x20/0x20 [ 757.048301] do_syscall_64+0x1d5/0x640 [ 757.052193] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 757.057464] RIP: 0033:0x45cba9 [ 757.060644] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 757.068345] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 757.075606] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 757.082869] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 757.090132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x0, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 757.097391] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:35 executing program 1 (fault-call:3 fault-nth:63): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 757.219501] FAULT_INJECTION: forcing a failure. [ 757.219501] name failslab, interval 1, probability 0, space 0, times 0 [ 757.256101] CPU: 0 PID: 22330 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 757.264021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.273374] Call Trace: [ 757.275966] dump_stack+0x1b2/0x283 [ 757.279598] should_fail.cold+0x10a/0x154 [ 757.283745] should_failslab+0xd6/0x130 [ 757.287718] kmem_cache_alloc+0x28e/0x3c0 [ 757.291864] alloc_vfsmnt+0x23/0x7c0 [ 757.295579] clone_mnt+0x6c/0xef0 [ 757.299033] copy_tree+0x33a/0x860 [ 757.302575] copy_mnt_ns+0x112/0x8a0 [ 757.306285] ? rcu_read_lock_sched_held+0x10a/0x130 [ 757.311292] ? kmem_cache_alloc+0x35f/0x3c0 [ 757.315610] create_new_namespaces+0xc9/0x730 [ 757.320101] ? security_capable+0x88/0xb0 [ 757.324249] copy_namespaces+0x27b/0x310 [ 757.328307] copy_process.part.0+0x2616/0x6fa0 [ 757.332885] ? get_pid_task+0xb8/0x130 [ 757.336773] ? proc_tid_io_accounting+0x20/0x20 [ 757.341452] ? __cleanup_sighand+0x40/0x40 [ 757.345682] ? lock_downgrade+0x6e0/0x6e0 [ 757.349830] _do_fork+0x180/0xc80 [ 757.353280] ? fork_idle+0x270/0x270 [ 757.356987] ? fput+0xb/0x140 [ 757.360085] ? SyS_write+0x14d/0x210 [ 757.363790] ? SyS_read+0x210/0x210 [ 757.367416] ? SyS_clock_settime+0x1a0/0x1a0 [ 757.371818] ? do_syscall_64+0x4c/0x640 [ 757.375789] ? sys_vfork+0x20/0x20 [ 757.379323] do_syscall_64+0x1d5/0x640 [ 757.383224] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 757.388411] RIP: 0033:0x45cba9 [ 757.391679] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 757.399380] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 757.406656] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 757.413917] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 757.421179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 757.429136] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:35 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf948dc020e22ac98}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000f0dbdf25010000007e00000273787a30000000000000000000000030faffffff0800030073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:35 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:36 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:36 executing program 1 (fault-call:3 fault-nth:64): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 757.844081] FAULT_INJECTION: forcing a failure. [ 757.844081] name failslab, interval 1, probability 0, space 0, times 0 [ 757.860220] CPU: 0 PID: 22345 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 757.868124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.878013] Call Trace: [ 757.880612] dump_stack+0x1b2/0x283 [ 757.884248] should_fail.cold+0x10a/0x154 [ 757.888403] should_failslab+0xd6/0x130 [ 757.892378] __kmalloc_track_caller+0x2bc/0x400 [ 757.897049] ? kstrdup_const+0x35/0x60 [ 757.900933] ? lock_downgrade+0x6e0/0x6e0 [ 757.905078] kstrdup+0x36/0x70 [ 757.908268] kstrdup_const+0x35/0x60 [ 757.911976] alloc_vfsmnt+0xe0/0x7c0 [ 757.915684] clone_mnt+0x6c/0xef0 [ 757.919145] copy_tree+0x33a/0x860 [ 757.922686] copy_mnt_ns+0x112/0x8a0 [ 757.926405] ? rcu_read_lock_sched_held+0x10a/0x130 [ 757.931418] ? kmem_cache_alloc+0x35f/0x3c0 [ 757.935737] create_new_namespaces+0xc9/0x730 [ 757.940225] ? security_capable+0x88/0xb0 [ 757.944375] copy_namespaces+0x27b/0x310 [ 757.948565] copy_process.part.0+0x2616/0x6fa0 [ 757.953146] ? get_pid_task+0xb8/0x130 [ 757.957030] ? proc_tid_io_accounting+0x20/0x20 [ 757.961702] ? __cleanup_sighand+0x40/0x40 [ 757.966013] ? lock_downgrade+0x6e0/0x6e0 [ 757.970150] _do_fork+0x180/0xc80 [ 757.973590] ? fork_idle+0x270/0x270 [ 757.977290] ? fput+0xb/0x140 [ 757.980389] ? SyS_write+0x14d/0x210 [ 757.984089] ? SyS_read+0x210/0x210 [ 757.987698] ? SyS_clock_settime+0x1a0/0x1a0 [ 757.992101] ? do_syscall_64+0x4c/0x640 [ 757.996062] ? sys_vfork+0x20/0x20 [ 757.999588] do_syscall_64+0x1d5/0x640 [ 758.003464] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 758.008641] RIP: 0033:0x45cba9 [ 758.011820] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 758.019522] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 758.026785] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 758.034050] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0x0, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 758.041320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 758.048582] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:36 executing program 1 (fault-call:3 fault-nth:65): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 758.185112] FAULT_INJECTION: forcing a failure. [ 758.185112] name failslab, interval 1, probability 0, space 0, times 0 [ 758.209630] CPU: 1 PID: 22357 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 758.217537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.226891] Call Trace: [ 758.229487] dump_stack+0x1b2/0x283 [ 758.233122] should_fail.cold+0x10a/0x154 [ 758.237274] should_failslab+0xd6/0x130 [ 758.241247] kmem_cache_alloc+0x28e/0x3c0 [ 758.245394] alloc_vfsmnt+0x23/0x7c0 [ 758.249111] clone_mnt+0x6c/0xef0 [ 758.252570] copy_tree+0x33a/0x860 [ 758.256116] copy_mnt_ns+0x112/0x8a0 [ 758.259830] ? rcu_read_lock_sched_held+0x10a/0x130 [ 758.264980] ? kmem_cache_alloc+0x35f/0x3c0 [ 758.269302] create_new_namespaces+0xc9/0x730 [ 758.273795] ? security_capable+0x88/0xb0 [ 758.277946] copy_namespaces+0x27b/0x310 [ 758.282010] copy_process.part.0+0x2616/0x6fa0 [ 758.286595] ? get_pid_task+0xb8/0x130 [ 758.290483] ? proc_tid_io_accounting+0x20/0x20 [ 758.295158] ? __cleanup_sighand+0x40/0x40 [ 758.299386] ? lock_downgrade+0x6e0/0x6e0 [ 758.303535] _do_fork+0x180/0xc80 [ 758.306989] ? fork_idle+0x270/0x270 [ 758.310700] ? fput+0xb/0x140 [ 758.313801] ? SyS_write+0x14d/0x210 [ 758.317508] ? SyS_read+0x210/0x210 [ 758.321127] ? SyS_clock_settime+0x1a0/0x1a0 [ 758.325534] ? do_syscall_64+0x4c/0x640 [ 758.329505] ? sys_vfork+0x20/0x20 [ 758.333043] do_syscall_64+0x1d5/0x640 [ 758.336932] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 758.342113] RIP: 0033:0x45cba9 [ 758.345294] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 758.352995] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 758.360265] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 758.367542] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 758.374807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:36 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:36 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 758.382068] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:36 executing program 1 (fault-call:3 fault-nth:66): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 758.488397] FAULT_INJECTION: forcing a failure. [ 758.488397] name failslab, interval 1, probability 0, space 0, times 0 [ 758.502100] CPU: 1 PID: 22364 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 758.509995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.519351] Call Trace: [ 758.521944] dump_stack+0x1b2/0x283 [ 758.525582] should_fail.cold+0x10a/0x154 [ 758.529735] should_failslab+0xd6/0x130 [ 758.533710] __kmalloc_track_caller+0x2bc/0x400 [ 758.538378] ? kstrdup_const+0x35/0x60 [ 758.542262] ? lock_downgrade+0x6e0/0x6e0 [ 758.546416] kstrdup+0x36/0x70 [ 758.549608] kstrdup_const+0x35/0x60 [ 758.553316] alloc_vfsmnt+0xe0/0x7c0 [ 758.557031] clone_mnt+0x6c/0xef0 [ 758.560486] copy_tree+0x33a/0x860 [ 758.564027] copy_mnt_ns+0x112/0x8a0 [ 758.567742] ? rcu_read_lock_sched_held+0x10a/0x130 [ 758.572752] ? kmem_cache_alloc+0x35f/0x3c0 [ 758.577073] create_new_namespaces+0xc9/0x730 [ 758.581564] ? security_capable+0x88/0xb0 [ 758.585713] copy_namespaces+0x27b/0x310 [ 758.589773] copy_process.part.0+0x2616/0x6fa0 [ 758.594363] ? get_pid_task+0xb8/0x130 [ 758.598341] ? proc_tid_io_accounting+0x20/0x20 [ 758.603018] ? __cleanup_sighand+0x40/0x40 [ 758.607259] ? lock_downgrade+0x6e0/0x6e0 [ 758.611416] _do_fork+0x180/0xc80 [ 758.614872] ? fork_idle+0x270/0x270 [ 758.618695] ? fput+0xb/0x140 [ 758.621797] ? SyS_write+0x14d/0x210 [ 758.625506] ? SyS_read+0x210/0x210 [ 758.629131] ? SyS_clock_settime+0x1a0/0x1a0 [ 758.633536] ? do_syscall_64+0x4c/0x640 [ 758.637592] ? sys_vfork+0x20/0x20 [ 758.641134] do_syscall_64+0x1d5/0x640 [ 758.645025] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 758.650206] RIP: 0033:0x45cba9 [ 758.653387] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 758.661092] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 758.668354] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 758.675621] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:37 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 758.682886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 758.690148] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:37 executing program 1 (fault-call:3 fault-nth:67): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 758.790817] FAULT_INJECTION: forcing a failure. [ 758.790817] name failslab, interval 1, probability 0, space 0, times 0 [ 758.803015] CPU: 1 PID: 22372 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 758.810904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.820255] Call Trace: [ 758.822846] dump_stack+0x1b2/0x283 [ 758.826571] should_fail.cold+0x10a/0x154 [ 758.830731] should_failslab+0xd6/0x130 [ 758.834709] kmem_cache_alloc+0x28e/0x3c0 [ 758.838858] alloc_vfsmnt+0x23/0x7c0 [ 758.842571] clone_mnt+0x6c/0xef0 [ 758.846024] copy_tree+0x33a/0x860 [ 758.849568] copy_mnt_ns+0x112/0x8a0 [ 758.853280] ? rcu_read_lock_sched_held+0x10a/0x130 [ 758.858290] ? kmem_cache_alloc+0x35f/0x3c0 [ 758.862611] create_new_namespaces+0xc9/0x730 [ 758.867099] ? security_capable+0x88/0xb0 [ 758.871249] copy_namespaces+0x27b/0x310 [ 758.875311] copy_process.part.0+0x2616/0x6fa0 [ 758.879894] ? get_pid_task+0xb8/0x130 [ 758.883786] ? proc_tid_io_accounting+0x20/0x20 [ 758.888463] ? __cleanup_sighand+0x40/0x40 [ 758.892695] ? lock_downgrade+0x6e0/0x6e0 [ 758.896844] _do_fork+0x180/0xc80 [ 758.900293] ? fork_idle+0x270/0x270 [ 758.904001] ? fput+0xb/0x140 [ 758.907102] ? SyS_write+0x14d/0x210 [ 758.910809] ? SyS_read+0x210/0x210 [ 758.914427] ? SyS_clock_settime+0x1a0/0x1a0 [ 758.918828] ? do_syscall_64+0x4c/0x640 [ 758.922802] ? sys_vfork+0x20/0x20 [ 758.926336] do_syscall_64+0x1d5/0x640 [ 758.930227] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 758.935407] RIP: 0033:0x45cba9 09:39:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0xe7, r6}) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) [ 758.938590] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 758.946292] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 758.953562] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 758.960862] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 758.968124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 758.975384] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0x0, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:37 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:37 executing program 1 (fault-call:3 fault-nth:68): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 759.222772] FAULT_INJECTION: forcing a failure. [ 759.222772] name failslab, interval 1, probability 0, space 0, times 0 [ 759.254616] CPU: 0 PID: 22390 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 759.262524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.271872] Call Trace: [ 759.274462] dump_stack+0x1b2/0x283 [ 759.278093] should_fail.cold+0x10a/0x154 [ 759.282249] should_failslab+0xd6/0x130 [ 759.286224] kmem_cache_alloc+0x28e/0x3c0 [ 759.290375] alloc_vfsmnt+0x23/0x7c0 [ 759.294085] clone_mnt+0x6c/0xef0 [ 759.297538] copy_tree+0x33a/0x860 [ 759.301085] copy_mnt_ns+0x112/0x8a0 [ 759.304797] ? rcu_read_lock_sched_held+0x10a/0x130 [ 759.309807] ? kmem_cache_alloc+0x35f/0x3c0 [ 759.314126] create_new_namespaces+0xc9/0x730 [ 759.318615] ? security_capable+0x88/0xb0 [ 759.322763] copy_namespaces+0x27b/0x310 [ 759.326822] copy_process.part.0+0x2616/0x6fa0 [ 759.331402] ? get_pid_task+0xb8/0x130 [ 759.335287] ? proc_tid_io_accounting+0x20/0x20 [ 759.339981] ? __cleanup_sighand+0x40/0x40 [ 759.344209] ? lock_downgrade+0x6e0/0x6e0 [ 759.348360] _do_fork+0x180/0xc80 [ 759.351813] ? fork_idle+0x270/0x270 [ 759.355537] ? fput+0xb/0x140 [ 759.358637] ? SyS_write+0x14d/0x210 [ 759.362343] ? SyS_read+0x210/0x210 [ 759.365963] ? SyS_clock_settime+0x1a0/0x1a0 [ 759.370363] ? do_syscall_64+0x4c/0x640 [ 759.374327] ? sys_vfork+0x20/0x20 [ 759.377866] do_syscall_64+0x1d5/0x640 [ 759.381755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 759.386935] RIP: 0033:0x45cba9 [ 759.390117] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 759.397817] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 759.405078] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 759.412340] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:37 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="08000000000000000000000000000000020000001e98c9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) [ 759.419602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 759.426859] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:37 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:37 executing program 1 (fault-call:3 fault-nth:69): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 759.569959] FAULT_INJECTION: forcing a failure. [ 759.569959] name failslab, interval 1, probability 0, space 0, times 0 [ 759.581989] CPU: 0 PID: 22401 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 759.589878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.599221] Call Trace: [ 759.601794] dump_stack+0x1b2/0x283 [ 759.605417] should_fail.cold+0x10a/0x154 [ 759.609563] should_failslab+0xd6/0x130 [ 759.613519] __kmalloc_track_caller+0x2bc/0x400 [ 759.618169] ? kstrdup_const+0x35/0x60 [ 759.622038] ? lock_downgrade+0x6e0/0x6e0 [ 759.626317] kstrdup+0x36/0x70 [ 759.629499] kstrdup_const+0x35/0x60 [ 759.633192] alloc_vfsmnt+0xe0/0x7c0 [ 759.636887] clone_mnt+0x6c/0xef0 [ 759.640320] copy_tree+0x33a/0x860 [ 759.643853] copy_mnt_ns+0x112/0x8a0 [ 759.647557] ? rcu_read_lock_sched_held+0x10a/0x130 [ 759.652573] ? kmem_cache_alloc+0x35f/0x3c0 [ 759.657142] create_new_namespaces+0xc9/0x730 [ 759.661629] ? security_capable+0x88/0xb0 [ 759.665762] copy_namespaces+0x27b/0x310 [ 759.669814] copy_process.part.0+0x2616/0x6fa0 [ 759.674388] ? get_pid_task+0xb8/0x130 [ 759.678281] ? proc_tid_io_accounting+0x20/0x20 [ 759.682955] ? __cleanup_sighand+0x40/0x40 [ 759.687186] ? lock_downgrade+0x6e0/0x6e0 [ 759.691408] _do_fork+0x180/0xc80 [ 759.694849] ? fork_idle+0x270/0x270 [ 759.698550] ? fput+0xb/0x140 [ 759.701648] ? SyS_write+0x14d/0x210 [ 759.705401] ? SyS_read+0x210/0x210 [ 759.709022] ? SyS_clock_settime+0x1a0/0x1a0 [ 759.713408] ? do_syscall_64+0x4c/0x640 [ 759.717371] ? sys_vfork+0x20/0x20 [ 759.720898] do_syscall_64+0x1d5/0x640 [ 759.724770] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 759.730000] RIP: 0033:0x45cba9 [ 759.733177] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 759.740865] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 759.748114] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 759.755368] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 759.762626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getpeername$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:38 executing program 1 (fault-call:3 fault-nth:70): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 759.769893] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:38 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0x0, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 759.871946] FAULT_INJECTION: forcing a failure. [ 759.871946] name failslab, interval 1, probability 0, space 0, times 0 [ 759.891373] CPU: 1 PID: 22409 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 759.899285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.908819] Call Trace: [ 759.911410] dump_stack+0x1b2/0x283 [ 759.915023] should_fail.cold+0x10a/0x154 [ 759.919167] should_failslab+0xd6/0x130 [ 759.923125] __kmalloc_track_caller+0x2bc/0x400 [ 759.927774] ? kstrdup_const+0x35/0x60 [ 759.931642] ? lock_downgrade+0x6e0/0x6e0 [ 759.935781] kstrdup+0x36/0x70 [ 759.938966] kstrdup_const+0x35/0x60 [ 759.942662] alloc_vfsmnt+0xe0/0x7c0 [ 759.946354] clone_mnt+0x6c/0xef0 [ 759.949787] copy_tree+0x33a/0x860 [ 759.953329] copy_mnt_ns+0x112/0x8a0 [ 759.957032] ? rcu_read_lock_sched_held+0x10a/0x130 [ 759.962029] ? kmem_cache_alloc+0x35f/0x3c0 [ 759.966343] create_new_namespaces+0xc9/0x730 [ 759.970830] ? security_capable+0x88/0xb0 [ 759.974962] copy_namespaces+0x27b/0x310 [ 759.979006] copy_process.part.0+0x2616/0x6fa0 [ 759.983579] ? get_pid_task+0xb8/0x130 [ 759.987457] ? proc_tid_io_accounting+0x20/0x20 [ 759.992118] ? __cleanup_sighand+0x40/0x40 [ 759.996340] ? lock_downgrade+0x6e0/0x6e0 [ 760.000479] _do_fork+0x180/0xc80 [ 760.003911] ? fork_idle+0x270/0x270 [ 760.007604] ? fput+0xb/0x140 [ 760.010696] ? SyS_write+0x14d/0x210 [ 760.014405] ? SyS_read+0x210/0x210 [ 760.018027] ? SyS_clock_settime+0x1a0/0x1a0 [ 760.022423] ? do_syscall_64+0x4c/0x640 [ 760.026383] ? sys_vfork+0x20/0x20 [ 760.029906] do_syscall_64+0x1d5/0x640 [ 760.033774] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 760.038948] RIP: 0033:0x45cba9 [ 760.042120] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 760.049862] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 760.057118] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 760.064393] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 760.071741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 760.079002] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:38 executing program 1 (fault-call:3 fault-nth:71): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 760.162856] FAULT_INJECTION: forcing a failure. [ 760.162856] name failslab, interval 1, probability 0, space 0, times 0 [ 760.179857] CPU: 1 PID: 22425 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 760.187801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.197139] Call Trace: [ 760.199718] dump_stack+0x1b2/0x283 [ 760.203325] should_fail.cold+0x10a/0x154 [ 760.207455] should_failslab+0xd6/0x130 [ 760.211406] __kmalloc_track_caller+0x2bc/0x400 [ 760.216053] ? kstrdup_const+0x35/0x60 [ 760.219935] ? lock_downgrade+0x6e0/0x6e0 [ 760.224059] kstrdup+0x36/0x70 [ 760.227228] kstrdup_const+0x35/0x60 [ 760.230920] alloc_vfsmnt+0xe0/0x7c0 [ 760.234620] clone_mnt+0x6c/0xef0 [ 760.238068] copy_tree+0x33a/0x860 [ 760.241587] copy_mnt_ns+0x112/0x8a0 [ 760.245278] ? rcu_read_lock_sched_held+0x10a/0x130 [ 760.250267] ? kmem_cache_alloc+0x35f/0x3c0 [ 760.254655] create_new_namespaces+0xc9/0x730 [ 760.259126] ? security_capable+0x88/0xb0 [ 760.263339] copy_namespaces+0x27b/0x310 [ 760.267381] copy_process.part.0+0x2616/0x6fa0 [ 760.271940] ? get_pid_task+0xb8/0x130 [ 760.275813] ? proc_tid_io_accounting+0x20/0x20 [ 760.280480] ? __cleanup_sighand+0x40/0x40 [ 760.284698] ? lock_downgrade+0x6e0/0x6e0 [ 760.288833] _do_fork+0x180/0xc80 [ 760.292262] ? fork_idle+0x270/0x270 [ 760.295961] ? fput+0xb/0x140 [ 760.299057] ? SyS_write+0x14d/0x210 [ 760.302749] ? SyS_read+0x210/0x210 [ 760.306349] ? SyS_clock_settime+0x1a0/0x1a0 [ 760.310736] ? do_syscall_64+0x4c/0x640 [ 760.314685] ? sys_vfork+0x20/0x20 [ 760.318201] do_syscall_64+0x1d5/0x640 [ 760.322078] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 760.327248] RIP: 0033:0x45cba9 [ 760.330413] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 760.338098] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 760.345341] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 760.352589] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:38 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:38 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:38 executing program 1 (fault-call:3 fault-nth:72): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 760.359834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 760.367081] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 760.434729] FAULT_INJECTION: forcing a failure. [ 760.434729] name failslab, interval 1, probability 0, space 0, times 0 [ 760.446308] CPU: 1 PID: 22431 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 760.454282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.463655] Call Trace: [ 760.466257] dump_stack+0x1b2/0x283 [ 760.469884] should_fail.cold+0x10a/0x154 [ 760.474033] should_failslab+0xd6/0x130 [ 760.478005] kmem_cache_alloc+0x28e/0x3c0 [ 760.482151] alloc_vfsmnt+0x23/0x7c0 [ 760.485862] clone_mnt+0x6c/0xef0 [ 760.489317] copy_tree+0x33a/0x860 [ 760.492861] copy_mnt_ns+0x112/0x8a0 [ 760.496571] ? rcu_read_lock_sched_held+0x10a/0x130 [ 760.501596] ? kmem_cache_alloc+0x35f/0x3c0 [ 760.505923] create_new_namespaces+0xc9/0x730 [ 760.510417] ? security_capable+0x88/0xb0 [ 760.514564] copy_namespaces+0x27b/0x310 [ 760.518626] copy_process.part.0+0x2616/0x6fa0 [ 760.523206] ? get_pid_task+0xb8/0x130 [ 760.527091] ? proc_tid_io_accounting+0x20/0x20 [ 760.531765] ? __cleanup_sighand+0x40/0x40 [ 760.535995] ? lock_downgrade+0x6e0/0x6e0 [ 760.540143] _do_fork+0x180/0xc80 [ 760.543591] ? fork_idle+0x270/0x270 [ 760.547388] ? fput+0xb/0x140 [ 760.550488] ? SyS_write+0x14d/0x210 [ 760.554192] ? SyS_read+0x210/0x210 [ 760.557817] ? SyS_clock_settime+0x1a0/0x1a0 [ 760.562221] ? do_syscall_64+0x4c/0x640 [ 760.566189] ? sys_vfork+0x20/0x20 [ 760.569724] do_syscall_64+0x1d5/0x640 [ 760.573612] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 760.578791] RIP: 0033:0x45cba9 09:39:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0xa, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 760.581969] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 760.589675] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 760.596937] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 760.604199] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 760.611464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 760.618729] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:39 executing program 1 (fault-call:3 fault-nth:73): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:39 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 760.745701] FAULT_INJECTION: forcing a failure. [ 760.745701] name failslab, interval 1, probability 0, space 0, times 0 [ 760.757050] CPU: 0 PID: 22446 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 760.765063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.774498] Call Trace: [ 760.777079] dump_stack+0x1b2/0x283 [ 760.780698] should_fail.cold+0x10a/0x154 [ 760.784836] should_failslab+0xd6/0x130 [ 760.788801] kmem_cache_alloc+0x28e/0x3c0 [ 760.792979] alloc_vfsmnt+0x23/0x7c0 [ 760.796673] clone_mnt+0x6c/0xef0 [ 760.800117] copy_tree+0x33a/0x860 [ 760.803653] copy_mnt_ns+0x112/0x8a0 [ 760.807357] ? rcu_read_lock_sched_held+0x10a/0x130 [ 760.812369] ? kmem_cache_alloc+0x35f/0x3c0 [ 760.816680] create_new_namespaces+0xc9/0x730 [ 760.821159] ? security_capable+0x88/0xb0 [ 760.825290] copy_namespaces+0x27b/0x310 [ 760.829333] copy_process.part.0+0x2616/0x6fa0 [ 760.833898] ? get_pid_task+0xb8/0x130 [ 760.837770] ? proc_tid_io_accounting+0x20/0x20 [ 760.842438] ? __cleanup_sighand+0x40/0x40 [ 760.846656] ? lock_downgrade+0x6e0/0x6e0 [ 760.850784] _do_fork+0x180/0xc80 [ 760.854227] ? fork_idle+0x270/0x270 [ 760.857936] ? fput+0xb/0x140 [ 760.861040] ? SyS_write+0x14d/0x210 [ 760.864743] ? SyS_read+0x210/0x210 [ 760.868352] ? SyS_clock_settime+0x1a0/0x1a0 [ 760.872742] ? do_syscall_64+0x4c/0x640 [ 760.876701] ? sys_vfork+0x20/0x20 [ 760.880229] do_syscall_64+0x1d5/0x640 [ 760.884105] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 760.889273] RIP: 0033:0x45cba9 [ 760.892439] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 760.900122] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 760.907369] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 760.914627] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 760.921880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 760.929141] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:39 executing program 1 (fault-call:3 fault-nth:74): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 761.011992] FAULT_INJECTION: forcing a failure. [ 761.011992] name failslab, interval 1, probability 0, space 0, times 0 [ 761.024406] CPU: 0 PID: 22455 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 761.032291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.041680] Call Trace: [ 761.044248] dump_stack+0x1b2/0x283 [ 761.047855] should_fail.cold+0x10a/0x154 [ 761.051981] should_failslab+0xd6/0x130 [ 761.055945] kmem_cache_alloc+0x28e/0x3c0 [ 761.060070] alloc_vfsmnt+0x23/0x7c0 [ 761.063760] clone_mnt+0x6c/0xef0 [ 761.067191] copy_tree+0x33a/0x860 [ 761.070709] copy_mnt_ns+0x112/0x8a0 [ 761.074399] ? rcu_read_lock_sched_held+0x10a/0x130 [ 761.079475] ? kmem_cache_alloc+0x35f/0x3c0 [ 761.083781] create_new_namespaces+0xc9/0x730 [ 761.088286] ? security_capable+0x88/0xb0 [ 761.092420] copy_namespaces+0x27b/0x310 [ 761.096457] copy_process.part.0+0x2616/0x6fa0 [ 761.101030] ? get_pid_task+0xb8/0x130 [ 761.105075] ? proc_tid_io_accounting+0x20/0x20 [ 761.109723] ? __cleanup_sighand+0x40/0x40 [ 761.113931] ? lock_downgrade+0x6e0/0x6e0 [ 761.118057] _do_fork+0x180/0xc80 [ 761.121495] ? fork_idle+0x270/0x270 [ 761.125210] ? fput+0xb/0x140 [ 761.128291] ? SyS_write+0x14d/0x210 [ 761.131976] ? SyS_read+0x210/0x210 [ 761.135576] ? SyS_clock_settime+0x1a0/0x1a0 [ 761.139961] ? do_syscall_64+0x4c/0x640 [ 761.143906] ? sys_vfork+0x20/0x20 [ 761.147422] do_syscall_64+0x1d5/0x640 [ 761.151287] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 761.156449] RIP: 0033:0x45cba9 09:39:39 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:39 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) [ 761.159612] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 761.167292] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 761.174533] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 761.181788] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 761.189032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 761.196276] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:39 executing program 1 (fault-call:3 fault-nth:75): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 761.275356] FAULT_INJECTION: forcing a failure. [ 761.275356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 761.287173] CPU: 0 PID: 22461 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 761.295041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.304379] Call Trace: [ 761.306954] dump_stack+0x1b2/0x283 [ 761.310569] should_fail.cold+0x10a/0x154 [ 761.314710] __alloc_pages_nodemask+0x22b/0x2730 [ 761.319467] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 761.324300] ? trace_hardirqs_on+0x10/0x10 [ 761.328518] ? trace_hardirqs_on+0x10/0x10 [ 761.332735] cache_grow_begin+0x91/0x410 [ 761.336779] cache_alloc_refill+0x28c/0x360 [ 761.341081] kmem_cache_alloc+0x333/0x3c0 [ 761.345216] alloc_vfsmnt+0x23/0x7c0 [ 761.348921] clone_mnt+0x6c/0xef0 [ 761.352362] copy_tree+0x33a/0x860 [ 761.355896] copy_mnt_ns+0x112/0x8a0 [ 761.359595] ? rcu_read_lock_sched_held+0x10a/0x130 [ 761.364591] ? kmem_cache_alloc+0x35f/0x3c0 [ 761.368893] create_new_namespaces+0xc9/0x730 [ 761.373366] ? security_capable+0x88/0xb0 [ 761.377496] copy_namespaces+0x27b/0x310 [ 761.381540] copy_process.part.0+0x2616/0x6fa0 [ 761.386102] ? get_pid_task+0xb8/0x130 [ 761.389970] ? proc_tid_io_accounting+0x20/0x20 [ 761.394634] ? __cleanup_sighand+0x40/0x40 [ 761.398854] ? lock_downgrade+0x6e0/0x6e0 [ 761.402981] _do_fork+0x180/0xc80 [ 761.406416] ? fork_idle+0x270/0x270 [ 761.410118] ? fput+0xb/0x140 [ 761.413205] ? SyS_write+0x14d/0x210 [ 761.416906] ? SyS_read+0x210/0x210 [ 761.420515] ? SyS_clock_settime+0x1a0/0x1a0 [ 761.424902] ? do_syscall_64+0x4c/0x640 [ 761.428858] ? sys_vfork+0x20/0x20 [ 761.432385] do_syscall_64+0x1d5/0x640 [ 761.436273] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 761.441456] RIP: 0033:0x45cba9 [ 761.444634] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 761.453199] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 761.460453] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 761.467710] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000000)) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 761.474960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 761.482212] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:39 executing program 1 (fault-call:3 fault-nth:76): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:39 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 761.612516] FAULT_INJECTION: forcing a failure. [ 761.612516] name failslab, interval 1, probability 0, space 0, times 0 [ 761.624131] CPU: 1 PID: 22475 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 761.632011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.641349] Call Trace: [ 761.643922] dump_stack+0x1b2/0x283 [ 761.647547] should_fail.cold+0x10a/0x154 [ 761.651690] should_failslab+0xd6/0x130 [ 761.655655] __kmalloc_track_caller+0x2bc/0x400 [ 761.660316] ? kstrdup_const+0x35/0x60 [ 761.664182] ? lock_downgrade+0x6e0/0x6e0 [ 761.668321] kstrdup+0x36/0x70 [ 761.671501] kstrdup_const+0x35/0x60 [ 761.675200] alloc_vfsmnt+0xe0/0x7c0 [ 761.678896] clone_mnt+0x6c/0xef0 [ 761.682333] copy_tree+0x33a/0x860 [ 761.685854] copy_mnt_ns+0x112/0x8a0 [ 761.689556] ? rcu_read_lock_sched_held+0x10a/0x130 [ 761.694557] ? kmem_cache_alloc+0x35f/0x3c0 [ 761.698868] create_new_namespaces+0xc9/0x730 [ 761.703344] ? security_capable+0x88/0xb0 [ 761.707482] copy_namespaces+0x27b/0x310 [ 761.711530] copy_process.part.0+0x2616/0x6fa0 [ 761.716092] ? get_pid_task+0xb8/0x130 [ 761.719968] ? proc_tid_io_accounting+0x20/0x20 [ 761.724723] ? __cleanup_sighand+0x40/0x40 [ 761.728944] ? lock_downgrade+0x6e0/0x6e0 [ 761.733081] _do_fork+0x180/0xc80 [ 761.736532] ? fork_idle+0x270/0x270 [ 761.740231] ? fput+0xb/0x140 [ 761.743314] ? SyS_write+0x14d/0x210 [ 761.747010] ? SyS_read+0x210/0x210 [ 761.750628] ? SyS_clock_settime+0x1a0/0x1a0 [ 761.755032] ? do_syscall_64+0x4c/0x640 [ 761.758985] ? sys_vfork+0x20/0x20 [ 761.762505] do_syscall_64+0x1d5/0x640 [ 761.766381] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 761.771564] RIP: 0033:0x45cba9 [ 761.774750] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 761.782446] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 761.789699] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 761.796959] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 761.804213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 761.811465] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:40 executing program 1 (fault-call:3 fault-nth:77): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:40 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 761.931558] FAULT_INJECTION: forcing a failure. [ 761.931558] name failslab, interval 1, probability 0, space 0, times 0 [ 761.944192] CPU: 0 PID: 22485 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 761.952098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.961440] Call Trace: [ 761.964016] dump_stack+0x1b2/0x283 [ 761.967647] should_fail.cold+0x10a/0x154 [ 761.971790] should_failslab+0xd6/0x130 [ 761.975751] kmem_cache_alloc+0x28e/0x3c0 [ 761.979896] alloc_vfsmnt+0x23/0x7c0 [ 761.983607] clone_mnt+0x6c/0xef0 [ 761.987054] copy_tree+0x33a/0x860 [ 761.990578] copy_mnt_ns+0x112/0x8a0 [ 761.994277] ? rcu_read_lock_sched_held+0x10a/0x130 [ 761.999276] ? kmem_cache_alloc+0x35f/0x3c0 [ 762.003586] create_new_namespaces+0xc9/0x730 [ 762.008077] ? security_capable+0x88/0xb0 [ 762.012210] copy_namespaces+0x27b/0x310 [ 762.016265] copy_process.part.0+0x2616/0x6fa0 [ 762.020827] ? get_pid_task+0xb8/0x130 [ 762.024700] ? proc_tid_io_accounting+0x20/0x20 [ 762.029354] ? __cleanup_sighand+0x40/0x40 [ 762.033565] ? lock_downgrade+0x6e0/0x6e0 [ 762.037699] _do_fork+0x180/0xc80 [ 762.041138] ? fork_idle+0x270/0x270 [ 762.044831] ? fput+0xb/0x140 [ 762.047918] ? SyS_write+0x14d/0x210 [ 762.051608] ? SyS_read+0x210/0x210 [ 762.055212] ? SyS_clock_settime+0x1a0/0x1a0 [ 762.059617] ? do_syscall_64+0x4c/0x640 [ 762.063570] ? sys_vfork+0x20/0x20 [ 762.067088] do_syscall_64+0x1d5/0x640 [ 762.070966] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 762.076139] RIP: 0033:0x45cba9 09:39:40 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:40 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 762.079310] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 762.087008] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 762.094392] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 762.101638] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 762.108885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 762.116132] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:40 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000000)={0x7, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:40 executing program 1 (fault-call:3 fault-nth:78): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 762.206475] FAULT_INJECTION: forcing a failure. [ 762.206475] name failslab, interval 1, probability 0, space 0, times 0 [ 762.221890] CPU: 1 PID: 22496 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 762.229782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.239132] Call Trace: [ 762.241725] dump_stack+0x1b2/0x283 [ 762.245354] should_fail.cold+0x10a/0x154 [ 762.249509] should_failslab+0xd6/0x130 [ 762.253481] kmem_cache_alloc+0x28e/0x3c0 [ 762.257629] alloc_vfsmnt+0x23/0x7c0 [ 762.261337] clone_mnt+0x6c/0xef0 [ 762.264792] copy_tree+0x33a/0x860 [ 762.268337] copy_mnt_ns+0x112/0x8a0 [ 762.272050] ? rcu_read_lock_sched_held+0x10a/0x130 [ 762.277060] ? kmem_cache_alloc+0x35f/0x3c0 [ 762.281380] create_new_namespaces+0xc9/0x730 [ 762.285869] ? security_capable+0x88/0xb0 [ 762.290015] copy_namespaces+0x27b/0x310 [ 762.294072] copy_process.part.0+0x2616/0x6fa0 [ 762.298652] ? get_pid_task+0xb8/0x130 [ 762.302625] ? proc_tid_io_accounting+0x20/0x20 [ 762.307299] ? __cleanup_sighand+0x40/0x40 [ 762.311526] ? lock_downgrade+0x6e0/0x6e0 [ 762.315672] _do_fork+0x180/0xc80 [ 762.319128] ? fork_idle+0x270/0x270 [ 762.322832] ? fput+0xb/0x140 [ 762.325934] ? SyS_write+0x14d/0x210 [ 762.329643] ? SyS_read+0x210/0x210 [ 762.333264] ? SyS_clock_settime+0x1a0/0x1a0 [ 762.337669] ? do_syscall_64+0x4c/0x640 [ 762.341639] ? sys_vfork+0x20/0x20 [ 762.345174] do_syscall_64+0x1d5/0x640 [ 762.349059] entry_SYSCALL_64_after_hwframe+0x46/0xbb 09:39:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000000)) preadv(r4, &(0x7f0000000000), 0x0, 0x0) [ 762.354243] RIP: 0033:0x45cba9 [ 762.357422] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 762.365122] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 762.372384] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 762.379647] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 762.386911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 762.394172] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e}, 0x0) r1 = socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:40 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) 09:39:40 executing program 1 (fault-call:3 fault-nth:79): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 762.527592] FAULT_INJECTION: forcing a failure. [ 762.527592] name failslab, interval 1, probability 0, space 0, times 0 [ 762.543697] CPU: 0 PID: 22508 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 762.551582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.560940] Call Trace: [ 762.563536] dump_stack+0x1b2/0x283 [ 762.567167] should_fail.cold+0x10a/0x154 [ 762.571317] should_failslab+0xd6/0x130 [ 762.575293] kmem_cache_alloc+0x28e/0x3c0 [ 762.579420] alloc_vfsmnt+0x23/0x7c0 [ 762.583149] clone_mnt+0x6c/0xef0 [ 762.586584] copy_tree+0x33a/0x860 [ 762.590111] copy_mnt_ns+0x112/0x8a0 [ 762.593805] ? rcu_read_lock_sched_held+0x10a/0x130 [ 762.598841] ? kmem_cache_alloc+0x35f/0x3c0 [ 762.603142] create_new_namespaces+0xc9/0x730 [ 762.607792] ? security_capable+0x88/0xb0 [ 762.611922] copy_namespaces+0x27b/0x310 [ 762.615962] copy_process.part.0+0x2616/0x6fa0 [ 762.620530] ? get_pid_task+0xb8/0x130 [ 762.624412] ? proc_tid_io_accounting+0x20/0x20 [ 762.629067] ? __cleanup_sighand+0x40/0x40 [ 762.633276] ? lock_downgrade+0x6e0/0x6e0 [ 762.637403] _do_fork+0x180/0xc80 [ 762.640834] ? fork_idle+0x270/0x270 [ 762.644612] ? fput+0xb/0x140 [ 762.647693] ? SyS_write+0x14d/0x210 [ 762.651510] ? SyS_read+0x210/0x210 [ 762.655112] ? SyS_clock_settime+0x1a0/0x1a0 [ 762.659498] ? do_syscall_64+0x4c/0x640 [ 762.663449] ? sys_vfork+0x20/0x20 [ 762.666965] do_syscall_64+0x1d5/0x640 [ 762.670833] entry_SYSCALL_64_after_hwframe+0x46/0xbb 09:39:41 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 762.675998] RIP: 0033:0x45cba9 [ 762.679164] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 762.686845] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 762.694090] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 762.701336] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 762.708580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 762.715825] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:41 executing program 1 (fault-call:3 fault-nth:80): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 762.810930] FAULT_INJECTION: forcing a failure. [ 762.810930] name failslab, interval 1, probability 0, space 0, times 0 [ 762.822475] CPU: 0 PID: 22518 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 762.830358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.839703] Call Trace: [ 762.842294] dump_stack+0x1b2/0x283 [ 762.846010] should_fail.cold+0x10a/0x154 [ 762.850161] should_failslab+0xd6/0x130 [ 762.854139] __kmalloc_track_caller+0x2bc/0x400 [ 762.858804] ? kstrdup_const+0x35/0x60 [ 762.862686] ? lock_downgrade+0x6e0/0x6e0 [ 762.866835] kstrdup+0x36/0x70 [ 762.870025] kstrdup_const+0x35/0x60 [ 762.873732] alloc_vfsmnt+0xe0/0x7c0 [ 762.877444] clone_mnt+0x6c/0xef0 [ 762.880894] copy_tree+0x33a/0x860 [ 762.884441] copy_mnt_ns+0x112/0x8a0 [ 762.888159] ? rcu_read_lock_sched_held+0x10a/0x130 [ 762.893175] ? kmem_cache_alloc+0x35f/0x3c0 [ 762.897498] create_new_namespaces+0xc9/0x730 [ 762.901993] ? security_capable+0x88/0xb0 [ 762.906146] copy_namespaces+0x27b/0x310 [ 762.910209] copy_process.part.0+0x2616/0x6fa0 [ 762.914796] ? get_pid_task+0xb8/0x130 [ 762.918682] ? proc_tid_io_accounting+0x20/0x20 [ 762.923357] ? __cleanup_sighand+0x40/0x40 [ 762.927587] ? lock_downgrade+0x6e0/0x6e0 [ 762.931732] _do_fork+0x180/0xc80 [ 762.935195] ? fork_idle+0x270/0x270 [ 762.938903] ? fput+0xb/0x140 [ 762.942002] ? SyS_write+0x14d/0x210 [ 762.945707] ? SyS_read+0x210/0x210 [ 762.949326] ? SyS_clock_settime+0x1a0/0x1a0 [ 762.953727] ? do_syscall_64+0x4c/0x640 [ 762.957693] ? sys_vfork+0x20/0x20 [ 762.961227] do_syscall_64+0x1d5/0x640 [ 762.965116] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 762.970296] RIP: 0033:0x45cba9 [ 762.973477] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 762.981177] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 762.988436] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 762.995698] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 763.002960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 763.010222] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:41 executing program 1 (fault-call:3 fault-nth:81): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:41 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 763.150888] FAULT_INJECTION: forcing a failure. [ 763.150888] name failslab, interval 1, probability 0, space 0, times 0 [ 763.162715] CPU: 0 PID: 22522 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 763.170691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.180025] Call Trace: [ 763.182607] dump_stack+0x1b2/0x283 [ 763.186220] should_fail.cold+0x10a/0x154 [ 763.190361] should_failslab+0xd6/0x130 [ 763.194328] kmem_cache_alloc+0x28e/0x3c0 [ 763.198463] alloc_vfsmnt+0x23/0x7c0 [ 763.202156] clone_mnt+0x6c/0xef0 [ 763.205603] copy_tree+0x33a/0x860 [ 763.209146] copy_mnt_ns+0x112/0x8a0 [ 763.212868] ? rcu_read_lock_sched_held+0x10a/0x130 [ 763.217876] ? kmem_cache_alloc+0x35f/0x3c0 [ 763.222197] create_new_namespaces+0xc9/0x730 [ 763.226684] ? security_capable+0x88/0xb0 [ 763.230832] copy_namespaces+0x27b/0x310 [ 763.234890] copy_process.part.0+0x2616/0x6fa0 [ 763.239482] ? get_pid_task+0xb8/0x130 [ 763.243369] ? proc_tid_io_accounting+0x20/0x20 [ 763.248044] ? __cleanup_sighand+0x40/0x40 [ 763.252279] ? lock_downgrade+0x6e0/0x6e0 [ 763.256987] _do_fork+0x180/0xc80 [ 763.260440] ? fork_idle+0x270/0x270 [ 763.264147] ? fput+0xb/0x140 [ 763.267245] ? SyS_write+0x14d/0x210 [ 763.270954] ? SyS_read+0x210/0x210 [ 763.274576] ? SyS_clock_settime+0x1a0/0x1a0 [ 763.278982] ? do_syscall_64+0x4c/0x640 [ 763.282946] ? sys_vfork+0x20/0x20 [ 763.286483] do_syscall_64+0x1d5/0x640 [ 763.290380] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 763.295558] RIP: 0033:0x45cba9 09:39:41 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0x0, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0xa, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') socket$l2tp(0x2, 0x2, 0x73) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 763.298741] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 763.306430] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 763.313692] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 763.320953] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 763.328212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 763.335473] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:41 executing program 1 (fault-call:3 fault-nth:82): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 763.434586] FAULT_INJECTION: forcing a failure. [ 763.434586] name failslab, interval 1, probability 0, space 0, times 0 [ 763.449035] CPU: 0 PID: 22541 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 763.456925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.466279] Call Trace: [ 763.468862] dump_stack+0x1b2/0x283 [ 763.472483] should_fail.cold+0x10a/0x154 [ 763.476614] should_failslab+0xd6/0x130 [ 763.480567] __kmalloc_track_caller+0x2bc/0x400 [ 763.485214] ? kstrdup_const+0x35/0x60 [ 763.489075] ? lock_downgrade+0x6e0/0x6e0 [ 763.493200] kstrdup+0x36/0x70 [ 763.496371] kstrdup_const+0x35/0x60 [ 763.500060] alloc_vfsmnt+0xe0/0x7c0 [ 763.503750] clone_mnt+0x6c/0xef0 [ 763.507183] copy_tree+0x33a/0x860 [ 763.510702] copy_mnt_ns+0x112/0x8a0 [ 763.514392] ? rcu_read_lock_sched_held+0x10a/0x130 [ 763.519387] ? kmem_cache_alloc+0x35f/0x3c0 [ 763.525253] create_new_namespaces+0xc9/0x730 [ 763.529771] ? security_capable+0x88/0xb0 [ 763.533898] copy_namespaces+0x27b/0x310 [ 763.537976] copy_process.part.0+0x2616/0x6fa0 [ 763.542547] ? get_pid_task+0xb8/0x130 [ 763.546421] ? proc_tid_io_accounting+0x20/0x20 [ 763.551071] ? __cleanup_sighand+0x40/0x40 [ 763.555541] ? lock_downgrade+0x6e0/0x6e0 [ 763.559667] _do_fork+0x180/0xc80 [ 763.563096] ? fork_idle+0x270/0x270 [ 763.566787] ? fput+0xb/0x140 [ 763.569869] ? SyS_write+0x14d/0x210 [ 763.573689] ? SyS_read+0x210/0x210 [ 763.577291] ? SyS_clock_settime+0x1a0/0x1a0 [ 763.581677] ? do_syscall_64+0x4c/0x640 [ 763.585626] ? sys_vfork+0x20/0x20 [ 763.589160] do_syscall_64+0x1d5/0x640 [ 763.593045] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 763.598209] RIP: 0033:0x45cba9 [ 763.601374] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 763.609066] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 763.616316] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 763.623563] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 763.630807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 763.638052] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:42 executing program 1 (fault-call:3 fault-nth:83): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 763.717919] FAULT_INJECTION: forcing a failure. [ 763.717919] name failslab, interval 1, probability 0, space 0, times 0 [ 763.729429] CPU: 0 PID: 22548 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 763.737313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.746656] Call Trace: [ 763.749246] dump_stack+0x1b2/0x283 [ 763.752963] should_fail.cold+0x10a/0x154 [ 763.757114] should_failslab+0xd6/0x130 [ 763.761085] kmem_cache_alloc+0x28e/0x3c0 [ 763.765231] alloc_vfsmnt+0x23/0x7c0 [ 763.768942] clone_mnt+0x6c/0xef0 [ 763.772395] copy_tree+0x33a/0x860 [ 763.775939] copy_mnt_ns+0x112/0x8a0 [ 763.779648] ? rcu_read_lock_sched_held+0x10a/0x130 [ 763.784658] ? kmem_cache_alloc+0x35f/0x3c0 [ 763.788974] create_new_namespaces+0xc9/0x730 [ 763.793460] ? security_capable+0x88/0xb0 [ 763.797610] copy_namespaces+0x27b/0x310 [ 763.801670] copy_process.part.0+0x2616/0x6fa0 [ 763.806248] ? get_pid_task+0xb8/0x130 [ 763.810132] ? proc_tid_io_accounting+0x20/0x20 [ 763.814808] ? __cleanup_sighand+0x40/0x40 [ 763.819036] ? lock_downgrade+0x6e0/0x6e0 [ 763.823179] _do_fork+0x180/0xc80 [ 763.826627] ? fork_idle+0x270/0x270 [ 763.830331] ? fput+0xb/0x140 [ 763.833429] ? SyS_write+0x14d/0x210 [ 763.837137] ? SyS_read+0x210/0x210 [ 763.840757] ? SyS_clock_settime+0x1a0/0x1a0 [ 763.845159] ? do_syscall_64+0x4c/0x640 [ 763.849125] ? sys_vfork+0x20/0x20 [ 763.852658] do_syscall_64+0x1d5/0x640 [ 763.856562] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 763.861745] RIP: 0033:0x45cba9 [ 763.864925] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 763.872624] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 763.879883] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 763.887144] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 763.894405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 763.901664] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:42 executing program 1 (fault-call:3 fault-nth:84): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 764.011174] FAULT_INJECTION: forcing a failure. [ 764.011174] name failslab, interval 1, probability 0, space 0, times 0 [ 764.025088] CPU: 0 PID: 22552 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 764.032960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.043164] Call Trace: [ 764.045749] dump_stack+0x1b2/0x283 [ 764.049366] should_fail.cold+0x10a/0x154 [ 764.053508] should_failslab+0xd6/0x130 [ 764.057470] kmem_cache_alloc+0x28e/0x3c0 [ 764.061596] alloc_vfsmnt+0x23/0x7c0 [ 764.065288] clone_mnt+0x6c/0xef0 [ 764.068739] copy_tree+0x33a/0x860 [ 764.072285] copy_mnt_ns+0x112/0x8a0 [ 764.075996] ? rcu_read_lock_sched_held+0x10a/0x130 [ 764.081006] ? kmem_cache_alloc+0x35f/0x3c0 [ 764.085329] create_new_namespaces+0xc9/0x730 [ 764.089820] ? security_capable+0x88/0xb0 [ 764.093972] copy_namespaces+0x27b/0x310 [ 764.098031] copy_process.part.0+0x2616/0x6fa0 [ 764.102615] ? get_pid_task+0xb8/0x130 [ 764.106502] ? proc_tid_io_accounting+0x20/0x20 [ 764.111176] ? __cleanup_sighand+0x40/0x40 [ 764.115403] ? lock_downgrade+0x6e0/0x6e0 [ 764.119556] _do_fork+0x180/0xc80 [ 764.123009] ? fork_idle+0x270/0x270 [ 764.126728] ? fput+0xb/0x140 [ 764.129825] ? SyS_write+0x14d/0x210 [ 764.133537] ? SyS_read+0x210/0x210 [ 764.137164] ? SyS_clock_settime+0x1a0/0x1a0 [ 764.141569] ? do_syscall_64+0x4c/0x640 [ 764.145536] ? sys_vfork+0x20/0x20 [ 764.149075] do_syscall_64+0x1d5/0x640 [ 764.152963] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 764.158144] RIP: 0033:0x45cba9 09:39:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x400000000000111, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:42 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 764.161323] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 764.169023] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 764.176289] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 764.183554] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 764.190817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 764.198079] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0x0, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:42 executing program 1 (fault-call:3 fault-nth:85): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 764.341351] FAULT_INJECTION: forcing a failure. [ 764.341351] name failslab, interval 1, probability 0, space 0, times 0 [ 764.361925] CPU: 0 PID: 22571 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 764.369826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.379169] Call Trace: [ 764.381774] dump_stack+0x1b2/0x283 [ 764.385394] should_fail.cold+0x10a/0x154 [ 764.389527] should_failslab+0xd6/0x130 [ 764.393480] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 764.398170] copy_utsname+0x10f/0x320 [ 764.402080] create_new_namespaces+0x14a/0x730 [ 764.406640] ? security_capable+0x88/0xb0 [ 764.410769] copy_namespaces+0x27b/0x310 [ 764.414816] copy_process.part.0+0x2616/0x6fa0 [ 764.419391] ? get_pid_task+0xb8/0x130 [ 764.423282] ? proc_tid_io_accounting+0x20/0x20 [ 764.427947] ? __cleanup_sighand+0x40/0x40 [ 764.432161] ? lock_downgrade+0x6e0/0x6e0 [ 764.436287] _do_fork+0x180/0xc80 [ 764.439725] ? fork_idle+0x270/0x270 [ 764.443423] ? fput+0xb/0x140 [ 764.446515] ? SyS_write+0x14d/0x210 [ 764.450213] ? SyS_read+0x210/0x210 [ 764.453818] ? SyS_clock_settime+0x1a0/0x1a0 [ 764.458213] ? do_syscall_64+0x4c/0x640 [ 764.462178] ? sys_vfork+0x20/0x20 [ 764.465704] do_syscall_64+0x1d5/0x640 [ 764.469673] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 764.475289] RIP: 0033:0x45cba9 [ 764.478470] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:39:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:42 executing program 1 (fault-call:3 fault-nth:86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 764.486175] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 764.493441] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 764.500705] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 764.507971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 764.515232] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 764.585617] FAULT_INJECTION: forcing a failure. [ 764.585617] name failslab, interval 1, probability 0, space 0, times 0 [ 764.601089] CPU: 0 PID: 22583 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 764.608971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.618310] Call Trace: [ 764.620893] dump_stack+0x1b2/0x283 [ 764.624513] should_fail.cold+0x10a/0x154 [ 764.628653] should_failslab+0xd6/0x130 [ 764.632623] kmem_cache_alloc+0x28e/0x3c0 [ 764.636791] copy_pid_ns+0x1b2/0xa70 [ 764.640502] ? copy_ipcs+0x44/0x3f0 [ 764.644127] create_new_namespaces+0x25f/0x730 [ 764.648693] copy_namespaces+0x27b/0x310 [ 764.652743] copy_process.part.0+0x2616/0x6fa0 [ 764.657326] ? get_pid_task+0xb8/0x130 [ 764.661206] ? proc_tid_io_accounting+0x20/0x20 [ 764.665858] ? __cleanup_sighand+0x40/0x40 [ 764.670074] ? lock_downgrade+0x6e0/0x6e0 [ 764.674214] _do_fork+0x180/0xc80 [ 764.677658] ? fork_idle+0x270/0x270 [ 764.681359] ? fput+0xb/0x140 [ 764.684459] ? SyS_write+0x14d/0x210 [ 764.688169] ? SyS_read+0x210/0x210 [ 764.691796] ? SyS_clock_settime+0x1a0/0x1a0 [ 764.696201] ? do_syscall_64+0x4c/0x640 [ 764.700175] ? sys_vfork+0x20/0x20 [ 764.703712] do_syscall_64+0x1d5/0x640 [ 764.707610] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 764.712789] RIP: 0033:0x45cba9 [ 764.715972] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 764.723677] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 764.730936] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 764.738199] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 764.745464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 764.752724] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:43 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:43 executing program 1 (fault-call:3 fault-nth:87): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 764.877144] FAULT_INJECTION: forcing a failure. [ 764.877144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 764.888957] CPU: 0 PID: 22592 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 764.896816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.906146] Call Trace: [ 764.908728] dump_stack+0x1b2/0x283 [ 764.912357] should_fail.cold+0x10a/0x154 [ 764.916499] __alloc_pages_nodemask+0x22b/0x2730 [ 764.921261] ? trace_hardirqs_on+0x10/0x10 [ 764.925488] ? idr_get_free_cmn+0x55e/0x8d0 [ 764.929796] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 764.934625] ? trace_hardirqs_on+0x10/0x10 [ 764.938848] ? inc_ucount+0x1c3/0x6f0 [ 764.942635] ? lock_acquire+0x170/0x3f0 [ 764.946592] ? lock_downgrade+0x6e0/0x6e0 [ 764.950738] cache_grow_begin+0x91/0x410 [ 764.954786] cache_alloc_refill+0x28c/0x360 [ 764.959089] kmem_cache_alloc+0x333/0x3c0 [ 764.963220] copy_pid_ns+0x1b2/0xa70 [ 764.966921] ? copy_ipcs+0x44/0x3f0 [ 764.970536] create_new_namespaces+0x25f/0x730 [ 764.975146] copy_namespaces+0x27b/0x310 [ 764.979189] copy_process.part.0+0x2616/0x6fa0 [ 764.983767] ? get_pid_task+0xb8/0x130 [ 764.987641] ? proc_tid_io_accounting+0x20/0x20 [ 764.992310] ? __cleanup_sighand+0x40/0x40 [ 764.996533] ? lock_downgrade+0x6e0/0x6e0 [ 765.000671] _do_fork+0x180/0xc80 [ 765.004127] ? fork_idle+0x270/0x270 [ 765.007826] ? fput+0xb/0x140 [ 765.010918] ? SyS_write+0x14d/0x210 [ 765.014609] ? SyS_read+0x210/0x210 [ 765.018212] ? SyS_clock_settime+0x1a0/0x1a0 [ 765.022603] ? do_syscall_64+0x4c/0x640 [ 765.026562] ? sys_vfork+0x20/0x20 [ 765.030086] do_syscall_64+0x1d5/0x640 [ 765.033966] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 765.039140] RIP: 0033:0x45cba9 [ 765.042312] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 765.050013] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 765.057277] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 765.064537] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:43 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x1ce5}, {{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/178, 0xb2}], 0x1, &(0x7f0000000280)=""/30, 0x1e}, 0xfffffffb}], 0x2, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000000)=0x100, 0x4) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0x0, 0xfffff6b3) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:43 executing program 1 (fault-call:3 fault-nth:88): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 765.071789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 765.079046] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 765.159244] FAULT_INJECTION: forcing a failure. [ 765.159244] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 765.171058] CPU: 0 PID: 22604 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 765.178917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.188435] Call Trace: [ 765.191014] dump_stack+0x1b2/0x283 [ 765.194631] should_fail.cold+0x10a/0x154 [ 765.198774] __alloc_pages_nodemask+0x22b/0x2730 [ 765.203507] ? __lock_acquire+0x655/0x42a0 [ 765.207726] ? trace_hardirqs_on+0x10/0x10 [ 765.211937] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 765.216756] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 765.221583] ? trace_hardirqs_on+0x10/0x10 [ 765.225813] ? inc_ucount+0x1c3/0x6f0 [ 765.229604] ? ____cache_alloc_node+0x153/0x1c0 [ 765.234261] ? lock_acquire+0x170/0x3f0 [ 765.238214] cache_grow_begin+0x91/0x410 [ 765.242258] ? do_raw_spin_unlock+0x164/0x250 [ 765.246732] ____cache_alloc_node+0x16d/0x1c0 [ 765.251224] ? check_preemption_disabled+0x35/0x240 [ 765.256319] kmem_cache_alloc+0x1e5/0x3c0 [ 765.260456] copy_pid_ns+0x1b2/0xa70 [ 765.264155] ? copy_ipcs+0x44/0x3f0 [ 765.267771] create_new_namespaces+0x25f/0x730 [ 765.272351] copy_namespaces+0x27b/0x310 [ 765.276393] copy_process.part.0+0x2616/0x6fa0 [ 765.280955] ? get_pid_task+0xb8/0x130 [ 765.284830] ? proc_tid_io_accounting+0x20/0x20 [ 765.289485] ? __cleanup_sighand+0x40/0x40 [ 765.293697] ? lock_downgrade+0x6e0/0x6e0 [ 765.297825] _do_fork+0x180/0xc80 [ 765.301264] ? fork_idle+0x270/0x270 [ 765.304954] ? fput+0xb/0x140 [ 765.308036] ? SyS_write+0x14d/0x210 [ 765.311733] ? SyS_read+0x210/0x210 [ 765.315345] ? SyS_clock_settime+0x1a0/0x1a0 [ 765.319850] ? do_syscall_64+0x4c/0x640 [ 765.323804] ? sys_vfork+0x20/0x20 [ 765.327325] do_syscall_64+0x1d5/0x640 [ 765.331198] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 765.336379] RIP: 0033:0x45cba9 [ 765.339556] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 765.347295] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 765.354562] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 765.361817] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 765.369069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 765.376412] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:43 executing program 1 (fault-call:3 fault-nth:89): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 765.450541] FAULT_INJECTION: forcing a failure. [ 765.450541] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 765.469452] CPU: 0 PID: 22614 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 765.477341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.486689] Call Trace: [ 765.489277] dump_stack+0x1b2/0x283 [ 765.492924] should_fail.cold+0x10a/0x154 [ 765.497075] __alloc_pages_nodemask+0x22b/0x2730 [ 765.501820] ? rcu_read_lock_sched_held+0x10a/0x130 [ 765.506832] ? __lock_acquire+0x655/0x42a0 [ 765.511072] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 765.515910] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 765.520743] ? trace_hardirqs_on+0x10/0x10 [ 765.525062] ? inc_ucount+0x1c3/0x6f0 [ 765.528855] ? ____cache_alloc_node+0x153/0x1c0 [ 765.533518] ? cache_grow_begin+0x3f/0x410 [ 765.537746] cache_grow_begin+0x91/0x410 [ 765.541800] fallback_alloc+0x205/0x2b0 [ 765.545769] kmem_cache_alloc+0x1e5/0x3c0 09:39:43 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 765.549913] copy_pid_ns+0x1b2/0xa70 [ 765.553626] ? copy_ipcs+0x44/0x3f0 [ 765.557250] create_new_namespaces+0x25f/0x730 [ 765.561834] copy_namespaces+0x27b/0x310 [ 765.565892] copy_process.part.0+0x2616/0x6fa0 [ 765.570456] ? get_pid_task+0xb8/0x130 [ 765.574331] ? proc_tid_io_accounting+0x20/0x20 [ 765.578987] ? __cleanup_sighand+0x40/0x40 [ 765.583232] ? lock_downgrade+0x6e0/0x6e0 [ 765.587363] _do_fork+0x180/0xc80 [ 765.590806] ? fork_idle+0x270/0x270 [ 765.594507] ? fput+0xb/0x140 [ 765.597598] ? SyS_write+0x14d/0x210 [ 765.601296] ? SyS_read+0x210/0x210 [ 765.604905] ? SyS_clock_settime+0x1a0/0x1a0 [ 765.609315] ? do_syscall_64+0x4c/0x640 [ 765.613286] ? sys_vfork+0x20/0x20 [ 765.616818] do_syscall_64+0x1d5/0x640 [ 765.620699] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 765.625874] RIP: 0033:0x45cba9 [ 765.629044] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 765.636774] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 765.644024] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 765.651270] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 765.658523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 765.665786] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:44 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:44 executing program 1 (fault-call:3 fault-nth:90): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 765.748765] FAULT_INJECTION: forcing a failure. [ 765.748765] name failslab, interval 1, probability 0, space 0, times 0 [ 765.760762] CPU: 0 PID: 22625 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 765.768634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.777983] Call Trace: [ 765.780565] dump_stack+0x1b2/0x283 [ 765.784188] should_fail.cold+0x10a/0x154 [ 765.788321] should_failslab+0xd6/0x130 [ 765.792290] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 765.796951] ? kmem_cache_alloc+0x35f/0x3c0 [ 765.801269] copy_pid_ns+0x1f8/0xa70 [ 765.804976] ? copy_ipcs+0x44/0x3f0 [ 765.808586] create_new_namespaces+0x25f/0x730 [ 765.813151] copy_namespaces+0x27b/0x310 [ 765.817205] copy_process.part.0+0x2616/0x6fa0 [ 765.821798] ? get_pid_task+0xb8/0x130 [ 765.825761] ? proc_tid_io_accounting+0x20/0x20 [ 765.830420] ? __cleanup_sighand+0x40/0x40 [ 765.834638] ? lock_downgrade+0x6e0/0x6e0 [ 765.838776] _do_fork+0x180/0xc80 [ 765.842221] ? fork_idle+0x270/0x270 [ 765.845930] ? fput+0xb/0x140 [ 765.849028] ? SyS_write+0x14d/0x210 [ 765.852736] ? SyS_read+0x210/0x210 [ 765.856360] ? SyS_clock_settime+0x1a0/0x1a0 [ 765.860765] ? do_syscall_64+0x4c/0x640 [ 765.864723] ? sys_vfork+0x20/0x20 [ 765.868241] do_syscall_64+0x1d5/0x640 [ 765.872109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 765.877275] RIP: 0033:0x45cba9 [ 765.880442] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 765.888128] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 09:39:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:44 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) [ 765.895372] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 765.902706] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 765.909954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 765.917199] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea8}, 0x7fff}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000960001baa0bc0634100dd3b3efee7f3582b62df73074da010035ed91636294fed51a899005c95d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r5, 0x8000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5}, &(0x7f00000001c0)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffd) write(r6, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r7, &(0x7f00000017c0), 0x375, 0x0) 09:39:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:44 executing program 1 (fault-call:3 fault-nth:91): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:44 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 766.040801] FAULT_INJECTION: forcing a failure. [ 766.040801] name failslab, interval 1, probability 0, space 0, times 0 [ 766.059807] CPU: 0 PID: 22639 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 766.067708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.077050] Call Trace: [ 766.079630] dump_stack+0x1b2/0x283 [ 766.083255] should_fail.cold+0x10a/0x154 [ 766.087394] should_failslab+0xd6/0x130 [ 766.091364] kmem_cache_alloc+0x28e/0x3c0 [ 766.095512] alloc_vfsmnt+0x23/0x7c0 [ 766.099227] vfs_kern_mount.part.0+0x27/0x3c0 [ 766.103710] ? alloc_pid+0x5a/0xc40 [ 766.107333] kern_mount_data+0x51/0xb0 [ 766.111213] pid_ns_prepare_proc+0x1a/0x80 [ 766.115447] alloc_pid+0x9be/0xc40 [ 766.119004] copy_process.part.0+0x27e8/0x6fa0 [ 766.123597] ? get_pid_task+0xb8/0x130 [ 766.127487] ? proc_tid_io_accounting+0x20/0x20 [ 766.132173] ? __cleanup_sighand+0x40/0x40 [ 766.136405] ? lock_downgrade+0x6e0/0x6e0 [ 766.140563] _do_fork+0x180/0xc80 [ 766.144030] ? fork_idle+0x270/0x270 [ 766.147746] ? fput+0xb/0x140 [ 766.150942] ? SyS_write+0x14d/0x210 [ 766.154656] ? SyS_read+0x210/0x210 [ 766.158285] ? SyS_clock_settime+0x1a0/0x1a0 [ 766.162697] ? do_syscall_64+0x4c/0x640 [ 766.166674] ? sys_vfork+0x20/0x20 [ 766.170218] do_syscall_64+0x1d5/0x640 [ 766.174123] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 766.179319] RIP: 0033:0x45cba9 [ 766.182508] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:39:44 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 766.190221] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 766.197494] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 766.204767] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 766.212036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 766.219300] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:44 executing program 1 (fault-call:3 fault-nth:92): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 766.292446] FAULT_INJECTION: forcing a failure. [ 766.292446] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 766.307216] CPU: 1 PID: 22652 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 766.315099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.324445] Call Trace: [ 766.327033] dump_stack+0x1b2/0x283 [ 766.330656] should_fail.cold+0x10a/0x154 [ 766.334808] __alloc_pages_nodemask+0x22b/0x2730 [ 766.339576] ? lock_downgrade+0x6e0/0x6e0 [ 766.343729] ? _find_next_bit+0xdb/0x100 [ 766.347798] ? pcpu_alloc+0x37d/0xf70 [ 766.351609] ? __mutex_unlock_slowpath+0x75/0x780 [ 766.356464] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 766.361342] ? rcu_read_lock_sched_held+0x10a/0x130 [ 766.366360] ? pcpu_alloc+0xe1/0xf70 [ 766.370089] alloc_pages_current+0xe7/0x1e0 [ 766.374416] ? __lockdep_init_map+0x100/0x560 [ 766.387515] __get_free_pages+0xb/0x40 [ 766.391508] mount_fs+0x1c7/0x2a0 [ 766.394973] vfs_kern_mount.part.0+0x5b/0x3c0 [ 766.399473] ? alloc_pid+0x5a/0xc40 [ 766.403110] kern_mount_data+0x51/0xb0 [ 766.407013] pid_ns_prepare_proc+0x1a/0x80 [ 766.411256] alloc_pid+0x9be/0xc40 [ 766.414817] copy_process.part.0+0x27e8/0x6fa0 [ 766.419411] ? get_pid_task+0xb8/0x130 [ 766.423310] ? proc_tid_io_accounting+0x20/0x20 [ 766.427995] ? __cleanup_sighand+0x40/0x40 [ 766.432240] ? lock_downgrade+0x6e0/0x6e0 [ 766.436494] _do_fork+0x180/0xc80 09:39:44 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 766.439962] ? fork_idle+0x270/0x270 [ 766.443873] ? fput+0xb/0x140 [ 766.446989] ? SyS_write+0x14d/0x210 [ 766.450823] ? SyS_read+0x210/0x210 [ 766.454451] ? SyS_clock_settime+0x1a0/0x1a0 [ 766.458855] ? do_syscall_64+0x4c/0x640 [ 766.462832] ? sys_vfork+0x20/0x20 [ 766.466380] do_syscall_64+0x1d5/0x640 [ 766.470284] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 766.475472] RIP: 0033:0x45cba9 [ 766.478664] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 766.486367] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 766.493638] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 766.500916] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 766.508450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 766.515918] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:44 executing program 1 (fault-call:3 fault-nth:93): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:44 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 766.621888] FAULT_INJECTION: forcing a failure. [ 766.621888] name failslab, interval 1, probability 0, space 0, times 0 [ 766.633924] CPU: 0 PID: 22663 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 766.641814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.651180] Call Trace: [ 766.653869] dump_stack+0x1b2/0x283 [ 766.657500] should_fail.cold+0x10a/0x154 [ 766.661742] should_failslab+0xd6/0x130 [ 766.665716] kmem_cache_alloc+0x28e/0x3c0 [ 766.670028] alloc_vfsmnt+0x23/0x7c0 [ 766.673745] vfs_kern_mount.part.0+0x27/0x3c0 [ 766.678310] ? alloc_pid+0x5a/0xc40 [ 766.681932] kern_mount_data+0x51/0xb0 [ 766.685815] pid_ns_prepare_proc+0x1a/0x80 [ 766.690049] alloc_pid+0x9be/0xc40 [ 766.693608] copy_process.part.0+0x27e8/0x6fa0 [ 766.698208] ? get_pid_task+0xb8/0x130 [ 766.702110] ? proc_tid_io_accounting+0x20/0x20 [ 766.706788] ? __cleanup_sighand+0x40/0x40 [ 766.711018] ? lock_downgrade+0x6e0/0x6e0 [ 766.715347] _do_fork+0x180/0xc80 [ 766.718794] ? fork_idle+0x270/0x270 [ 766.722501] ? fput+0xb/0x140 [ 766.725599] ? SyS_write+0x14d/0x210 [ 766.729307] ? SyS_read+0x210/0x210 [ 766.732938] ? SyS_clock_settime+0x1a0/0x1a0 [ 766.737454] ? do_syscall_64+0x4c/0x640 [ 766.741520] ? sys_vfork+0x20/0x20 [ 766.745057] do_syscall_64+0x1d5/0x640 [ 766.748947] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 766.754735] RIP: 0033:0x45cba9 [ 766.757930] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:39:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4(r1, &(0x7f0000000040)=@ethernet={0x0, @remote}, &(0x7f00000000c0)=0x80, 0x80000) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:45 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) [ 766.766003] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 766.773281] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 766.780646] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 766.787923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 766.795352] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:45 executing program 1 (fault-call:3 fault-nth:94): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:45 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 766.905865] FAULT_INJECTION: forcing a failure. [ 766.905865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 766.918136] CPU: 1 PID: 22682 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 766.926194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.935550] Call Trace: [ 766.938145] dump_stack+0x1b2/0x283 [ 766.941778] should_fail.cold+0x10a/0x154 [ 766.946011] __alloc_pages_nodemask+0x22b/0x2730 [ 766.950795] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 766.956385] ? rcu_read_lock_sched_held+0x10a/0x130 [ 766.961546] ? __alloc_pages_nodemask+0x1a8a/0x2730 [ 766.966566] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 766.971405] ? lock_downgrade+0x6e0/0x6e0 [ 766.975559] ? _find_next_bit+0xdb/0x100 [ 766.979621] ? pcpu_alloc+0x37d/0xf70 [ 766.983449] ? __mutex_unlock_slowpath+0x75/0x780 [ 766.988305] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 766.993151] alloc_pages_current+0xe7/0x1e0 [ 766.997648] __get_free_pages+0xb/0x40 [ 767.001540] selinux_sb_copy_data+0x28/0x380 [ 767.006052] security_sb_copy_data+0x6e/0xa0 [ 767.010609] mount_fs+0x1e7/0x2a0 [ 767.014069] vfs_kern_mount.part.0+0x5b/0x3c0 [ 767.018564] ? alloc_pid+0x5a/0xc40 [ 767.022204] kern_mount_data+0x51/0xb0 [ 767.026236] pid_ns_prepare_proc+0x1a/0x80 [ 767.030562] alloc_pid+0x9be/0xc40 [ 767.034125] copy_process.part.0+0x27e8/0x6fa0 [ 767.038723] ? get_pid_task+0xb8/0x130 [ 767.042626] ? proc_tid_io_accounting+0x20/0x20 [ 767.047312] ? __cleanup_sighand+0x40/0x40 [ 767.051546] ? lock_downgrade+0x6e0/0x6e0 [ 767.055709] _do_fork+0x180/0xc80 [ 767.059172] ? fork_idle+0x270/0x270 [ 767.062982] ? fput+0xb/0x140 [ 767.066357] ? SyS_write+0x14d/0x210 [ 767.070075] ? SyS_read+0x210/0x210 [ 767.073709] ? SyS_clock_settime+0x1a0/0x1a0 [ 767.078121] ? do_syscall_64+0x4c/0x640 [ 767.083662] ? sys_vfork+0x20/0x20 [ 767.087211] do_syscall_64+0x1d5/0x640 [ 767.091120] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 767.096315] RIP: 0033:0x45cba9 09:39:45 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 767.099509] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 767.107225] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 767.114501] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 767.121863] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 767.129292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 767.136714] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:45 executing program 1 (fault-call:3 fault-nth:95): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 767.197034] FAULT_INJECTION: forcing a failure. [ 767.197034] name failslab, interval 1, probability 0, space 0, times 0 [ 767.209756] CPU: 0 PID: 22694 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 767.217653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.227002] Call Trace: [ 767.229598] dump_stack+0x1b2/0x283 [ 767.233217] should_fail.cold+0x10a/0x154 [ 767.237507] should_failslab+0xd6/0x130 [ 767.241468] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 767.246125] ? proc_get_inode+0x620/0x620 [ 767.250411] sget_userns+0x102/0xc30 [ 767.254343] ? get_empty_filp.cold+0x37/0x37 [ 767.258739] ? set_anon_super+0x20/0x20 [ 767.262787] ? proc_get_inode+0x620/0x620 [ 767.266920] mount_ns+0x65/0x180 [ 767.270277] mount_fs+0x92/0x2a0 [ 767.273649] vfs_kern_mount.part.0+0x5b/0x3c0 [ 767.278150] ? alloc_pid+0x5a/0xc40 [ 767.281786] kern_mount_data+0x51/0xb0 [ 767.285804] pid_ns_prepare_proc+0x1a/0x80 [ 767.290042] alloc_pid+0x9be/0xc40 [ 767.293601] copy_process.part.0+0x27e8/0x6fa0 [ 767.298191] ? get_pid_task+0xb8/0x130 [ 767.302248] ? proc_tid_io_accounting+0x20/0x20 [ 767.306927] ? __cleanup_sighand+0x40/0x40 [ 767.311162] ? lock_downgrade+0x6e0/0x6e0 [ 767.315319] _do_fork+0x180/0xc80 [ 767.318777] ? fork_idle+0x270/0x270 [ 767.322495] ? fput+0xb/0x140 [ 767.325610] ? SyS_write+0x14d/0x210 [ 767.329322] ? SyS_read+0x210/0x210 [ 767.333032] ? SyS_clock_settime+0x1a0/0x1a0 [ 767.337443] ? do_syscall_64+0x4c/0x640 [ 767.341588] ? sys_vfork+0x20/0x20 [ 767.345144] do_syscall_64+0x1d5/0x640 [ 767.349057] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 767.354249] RIP: 0033:0x45cba9 [ 767.357438] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 767.365236] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 767.372582] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 767.379842] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 767.387100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:45 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 767.394486] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:45 executing program 1 (fault-call:3 fault-nth:96): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 767.458006] FAULT_INJECTION: forcing a failure. [ 767.458006] name failslab, interval 1, probability 0, space 0, times 0 [ 767.470446] CPU: 0 PID: 22702 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 767.478476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.487967] Call Trace: [ 767.490569] dump_stack+0x1b2/0x283 [ 767.494327] should_fail.cold+0x10a/0x154 [ 767.498473] should_failslab+0xd6/0x130 [ 767.502444] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 767.507117] ? proc_get_inode+0x620/0x620 [ 767.511266] selinux_sb_alloc_security+0x41/0x210 [ 767.516105] security_sb_alloc+0x66/0xa0 [ 767.520168] sget_userns+0x194/0xc30 [ 767.523869] ? get_empty_filp.cold+0x37/0x37 [ 767.528270] ? set_anon_super+0x20/0x20 [ 767.532237] ? proc_get_inode+0x620/0x620 [ 767.536526] mount_ns+0x65/0x180 [ 767.539905] mount_fs+0x92/0x2a0 [ 767.543285] vfs_kern_mount.part.0+0x5b/0x3c0 [ 767.547790] ? alloc_pid+0x5a/0xc40 [ 767.551441] kern_mount_data+0x51/0xb0 [ 767.555474] pid_ns_prepare_proc+0x1a/0x80 [ 767.559715] alloc_pid+0x9be/0xc40 [ 767.563270] copy_process.part.0+0x27e8/0x6fa0 [ 767.567865] ? get_pid_task+0xb8/0x130 [ 767.571762] ? proc_tid_io_accounting+0x20/0x20 [ 767.576447] ? __cleanup_sighand+0x40/0x40 [ 767.580775] ? lock_downgrade+0x6e0/0x6e0 [ 767.585077] _do_fork+0x180/0xc80 [ 767.588543] ? fork_idle+0x270/0x270 [ 767.592262] ? fput+0xb/0x140 [ 767.595377] ? SyS_write+0x14d/0x210 [ 767.599221] ? SyS_read+0x210/0x210 [ 767.602985] ? SyS_clock_settime+0x1a0/0x1a0 [ 767.607509] ? do_syscall_64+0x4c/0x640 [ 767.611641] ? sys_vfork+0x20/0x20 [ 767.615199] do_syscall_64+0x1d5/0x640 [ 767.619116] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 767.624312] RIP: 0033:0x45cba9 [ 767.628192] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 767.636034] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 767.643654] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 767.650917] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 09:39:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:46 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) r1 = socket$inet6(0xa, 0xc, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 09:39:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x13, 0x0}, 0xc}], 0x0, 0x40000020, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 767.658185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 767.665604] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:46 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 09:39:46 executing program 1 (fault-call:3 fault-nth:97): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 767.759916] FAULT_INJECTION: forcing a failure. [ 767.759916] name failslab, interval 1, probability 0, space 0, times 0 [ 767.771791] CPU: 0 PID: 22720 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 767.779675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.789046] Call Trace: [ 767.791635] dump_stack+0x1b2/0x283 [ 767.795401] should_fail.cold+0x10a/0x154 [ 767.799551] should_failslab+0xd6/0x130 [ 767.803666] __kmalloc+0x2c1/0x400 [ 767.807208] ? __list_lru_init+0x67/0x650 [ 767.811488] __list_lru_init+0x67/0x650 [ 767.815466] sget_userns+0x504/0xc30 [ 767.819193] ? get_empty_filp.cold+0x37/0x37 [ 767.823614] ? set_anon_super+0x20/0x20 [ 767.827829] ? proc_get_inode+0x620/0x620 [ 767.831975] mount_ns+0x65/0x180 [ 767.835432] mount_fs+0x92/0x2a0 [ 767.838808] vfs_kern_mount.part.0+0x5b/0x3c0 [ 767.843310] ? alloc_pid+0x5a/0xc40 [ 767.846946] kern_mount_data+0x51/0xb0 [ 767.850928] pid_ns_prepare_proc+0x1a/0x80 [ 767.855295] alloc_pid+0x9be/0xc40 [ 767.858854] copy_process.part.0+0x27e8/0x6fa0 [ 767.864080] ? get_pid_task+0xb8/0x130 [ 767.867981] ? proc_tid_io_accounting+0x20/0x20 [ 767.872667] ? __cleanup_sighand+0x40/0x40 [ 767.876994] ? lock_downgrade+0x6e0/0x6e0 [ 767.881158] _do_fork+0x180/0xc80 [ 767.884636] ? fork_idle+0x270/0x270 [ 767.888499] ? fput+0xb/0x140 [ 767.891754] ? SyS_write+0x14d/0x210 [ 767.895477] ? SyS_read+0x210/0x210 [ 767.899111] ? SyS_clock_settime+0x1a0/0x1a0 [ 767.903661] ? do_syscall_64+0x4c/0x640 [ 767.907640] ? sys_vfork+0x20/0x20 [ 767.911378] do_syscall_64+0x1d5/0x640 [ 767.915276] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 767.920470] RIP: 0033:0x45cba9 [ 767.923822] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 767.931529] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 767.938800] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 767.946069] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 767.953486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:39:46 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 767.960756] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 09:39:46 executing program 1 (fault-call:3 fault-nth:98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34420903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 768.040356] FAULT_INJECTION: forcing a failure. [ 768.040356] name failslab, interval 1, probability 0, space 0, times 0 [ 768.054802] CPU: 0 PID: 22731 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 768.062924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.072601] Call Trace: [ 768.075200] dump_stack+0x1b2/0x283 [ 768.078943] should_fail.cold+0x10a/0x154 [ 768.083105] should_failslab+0xd6/0x130 [ 768.087073] __kmalloc+0x2c1/0x400 [ 768.090614] ? register_shrinker+0x1ab/0x220 [ 768.095025] register_shrinker+0x1ab/0x220 [ 768.099292] sget_userns+0x9c5/0xc30 [ 768.103014] ? get_empty_filp.cold+0x37/0x37 [ 768.107579] ? set_anon_super+0x20/0x20 [ 768.111562] ? proc_get_inode+0x620/0x620 [ 768.115716] mount_ns+0x65/0x180 [ 768.119089] mount_fs+0x92/0x2a0 [ 768.122465] vfs_kern_mount.part.0+0x5b/0x3c0 [ 768.126973] ? alloc_pid+0x5a/0xc40 [ 768.130609] kern_mount_data+0x51/0xb0 [ 768.134504] pid_ns_prepare_proc+0x1a/0x80 [ 768.138748] alloc_pid+0x9be/0xc40 [ 768.142303] copy_process.part.0+0x27e8/0x6fa0 [ 768.146898] ? get_pid_task+0xb8/0x130 [ 768.150793] ? proc_tid_io_accounting+0x20/0x20 [ 768.155477] ? __cleanup_sighand+0x40/0x40 [ 768.159719] ? lock_downgrade+0x6e0/0x6e0 [ 768.163882] _do_fork+0x180/0xc80 [ 768.167350] ? fork_idle+0x270/0x270 [ 768.171239] ? fput+0xb/0x140 [ 768.174350] ? SyS_write+0x14d/0x210 [ 768.178069] ? SyS_read+0x210/0x210 [ 768.181829] ? SyS_clock_settime+0x1a0/0x1a0 [ 768.186245] ? do_syscall_64+0x4c/0x640 09:39:46 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 768.190351] ? sys_vfork+0x20/0x20 [ 768.193902] do_syscall_64+0x1d5/0x640 [ 768.197808] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 768.203090] RIP: 0033:0x45cba9 [ 768.206429] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 768.214218] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 768.221694] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 768.229082] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 768.236371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 768.243637] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 768.298795] ================================================================== [ 768.306620] BUG: KASAN: use-after-free in put_pid_ns+0xf7/0x110 [ 768.312678] Read of size 8 at addr ffff8881c30cdae8 by task syz-executor.1/22731 [ 768.320317] [ 768.321957] CPU: 0 PID: 22731 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 768.329929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.339277] Call Trace: [ 768.341875] dump_stack+0x1b2/0x283 [ 768.345512] ? put_pid_ns+0xf7/0x110 [ 768.349321] print_address_description.cold+0x54/0x1dc [ 768.354606] ? put_pid_ns+0xf7/0x110 [ 768.358329] kasan_report.cold+0xa9/0x2b9 [ 768.362487] put_pid_ns+0xf7/0x110 [ 768.366036] free_nsproxy+0xf7/0x1f0 [ 768.369757] switch_task_namespaces+0x8f/0xb0 [ 768.374443] copy_process.part.0+0x3f47/0x6fa0 [ 768.379045] ? get_pid_task+0xb8/0x130 [ 768.383080] ? proc_tid_io_accounting+0x20/0x20 [ 768.387771] ? __cleanup_sighand+0x40/0x40 [ 768.392186] ? lock_downgrade+0x6e0/0x6e0 [ 768.396350] _do_fork+0x180/0xc80 [ 768.399821] ? fork_idle+0x270/0x270 [ 768.403542] ? fput+0xb/0x140 [ 768.406797] ? SyS_write+0x14d/0x210 [ 768.410513] ? SyS_read+0x210/0x210 [ 768.414145] ? SyS_clock_settime+0x1a0/0x1a0 [ 768.418562] ? do_syscall_64+0x4c/0x640 [ 768.422533] ? sys_vfork+0x20/0x20 [ 768.426073] do_syscall_64+0x1d5/0x640 [ 768.429974] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 768.435276] RIP: 0033:0x45cba9 [ 768.438461] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 768.446169] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 768.453540] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 768.460805] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 768.468251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 768.475603] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 768.482878] [ 768.484661] Allocated by task 22731: [ 768.488378] kasan_kmalloc.part.0+0x4f/0xd0 [ 768.492699] kmem_cache_alloc+0x124/0x3c0 09:39:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @local}, {0x1}, 0x2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 'vlan0\x00'}) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 768.496925] copy_pid_ns+0x1b2/0xa70 [ 768.500635] create_new_namespaces+0x25f/0x730 [ 768.505214] copy_namespaces+0x27b/0x310 [ 768.509274] copy_process.part.0+0x2616/0x6fa0 [ 768.513862] _do_fork+0x180/0xc80 [ 768.517319] do_syscall_64+0x1d5/0x640 [ 768.521198] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 768.526371] [ 768.527988] Freed by task 0: [ 768.531013] kasan_slab_free+0xaf/0x190 [ 768.534992] kmem_cache_free+0x7c/0x2b0 [ 768.538973] rcu_process_callbacks+0x78d/0x1180 [ 768.543798] __do_softirq+0x254/0x9bf [ 768.547597] 09:39:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x4, 0x9, 0x7ff, 0x0, 0x0, 0xa5e, 0xb}, 0x0) socket$inet6(0xa, 0xc, 0xfffff6b3) recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000600)) fcntl$setpipe(r2, 0x407, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) [ 768.549317] The buggy address belongs to the object at ffff8881c30cd2b0 [ 768.549317] which belongs to the cache pid_namespace of size 2264 [ 768.562498] The buggy address is located 2104 bytes inside of [ 768.562498] 2264-byte region [ffff8881c30cd2b0, ffff8881c30cdb88) [ 768.574811] The buggy address belongs to the page: [ 768.579734] page:ffffea00070c3300 count:1 mapcount:0 mapping:ffff8881c30cc000 index:0x0 compound_mapcount: 0 [ 768.589691] flags: 0x57ffe0000008100(slab|head) [ 768.594439] raw: 057ffe0000008100 ffff8881c30cc000 0000000000000000 0000000100000003 [ 768.602516] raw: ffffea00070d77a0 ffff88821942fe48 ffff88821942e500 0000000000000000 [ 768.610790] page dumped because: kasan: bad access detected [ 768.616492] [ 768.618118] Memory state around the buggy address: [ 768.623051] ffff8881c30cd980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.630411] ffff8881c30cda00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.637766] >ffff8881c30cda80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 09:39:47 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:39:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x100, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) 09:39:47 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 768.645532] ^ [ 768.652544] ffff8881c30cdb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.660087] ffff8881c30cdb80: fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 768.667442] ================================================================== [ 768.674876] Disabling lock debugging due to kernel taint [ 768.692241] Kernel panic - not syncing: panic_on_warn set ... [ 768.692241] [ 768.699797] CPU: 0 PID: 22731 Comm: syz-executor.1 Tainted: G B 4.14.184-syzkaller #0 [ 768.709122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.718605] Call Trace: [ 768.721204] dump_stack+0x1b2/0x283 [ 768.724842] panic+0x1f9/0x42d [ 768.728181] ? add_taint.cold+0x16/0x16 [ 768.732158] ? preempt_schedule_common+0x4a/0xc0 [ 768.736923] ? put_pid_ns+0xf7/0x110 [ 768.740758] ? ___preempt_schedule+0x16/0x18 [ 768.745158] ? put_pid_ns+0xf7/0x110 [ 768.749005] kasan_end_report+0x43/0x49 [ 768.752973] kasan_report.cold+0x12f/0x2b9 [ 768.757339] put_pid_ns+0xf7/0x110 [ 768.760869] free_nsproxy+0xf7/0x1f0 [ 768.764572] switch_task_namespaces+0x8f/0xb0 [ 768.769171] copy_process.part.0+0x3f47/0x6fa0 [ 768.773890] ? get_pid_task+0xb8/0x130 [ 768.777769] ? proc_tid_io_accounting+0x20/0x20 [ 768.782451] ? __cleanup_sighand+0x40/0x40 [ 768.786802] ? lock_downgrade+0x6e0/0x6e0 [ 768.790953] _do_fork+0x180/0xc80 [ 768.794405] ? fork_idle+0x270/0x270 [ 768.798114] ? fput+0xb/0x140 [ 768.801212] ? SyS_write+0x14d/0x210 [ 768.804913] ? SyS_read+0x210/0x210 [ 768.808534] ? SyS_clock_settime+0x1a0/0x1a0 [ 768.812938] ? do_syscall_64+0x4c/0x640 [ 768.817066] ? sys_vfork+0x20/0x20 [ 768.820823] do_syscall_64+0x1d5/0x640 [ 768.824708] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 768.830009] RIP: 0033:0x45cba9 [ 768.833204] RSP: 002b:00007f91bc229c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 768.841044] RAX: ffffffffffffffda RBX: 00000000004db6e0 RCX: 000000000045cba9 [ 768.848614] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000034420903 [ 768.855874] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 768.863289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 768.870550] R13: 000000000000007c R14: 00000000004c353a R15: 00007f91bc22a6d4 [ 768.879516] Kernel Offset: disabled [ 768.883141] Rebooting in 86400 seconds..