[ 33.683252][ T27] audit: type=1800 audit(1552993974.891:27): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 33.706944][ T27] audit: type=1800 audit(1552993974.891:28): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.533304][ T27] audit: type=1800 audit(1552993975.791:29): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 34.553798][ T27] audit: type=1800 audit(1552993975.791:30): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.39' (ECDSA) to the list of known hosts. 2019/03/19 11:13:05 fuzzer started 2019/03/19 11:13:08 dialing manager at 10.128.0.26:38327 2019/03/19 11:13:08 syscalls: 1 2019/03/19 11:13:08 code coverage: enabled 2019/03/19 11:13:08 comparison tracing: enabled 2019/03/19 11:13:08 extra coverage: extra coverage is not supported by the kernel 2019/03/19 11:13:08 setuid sandbox: enabled 2019/03/19 11:13:08 namespace sandbox: enabled 2019/03/19 11:13:08 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/19 11:13:08 fault injection: enabled 2019/03/19 11:13:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/19 11:13:08 net packet injection: enabled 2019/03/19 11:13:08 net device setup: enabled 11:15:36 executing program 0: r0 = getpgrp(0xffffffffffffffff) get_robust_list(r0, &(0x7f00000000c0)=&(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x18) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x4000, 0x0) sendmsg$unix(r1, &(0x7f00000012c0)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="4dde5c40b1d1cb0d133b90d288b338a8d163ad7d11c1c30f037f214f776aa2ae8a84ad34197c1b8ad4eba88a8372558cd7987b5308f33ec7c5c4eeca53c05b9ea90e2e637e5e999802c02d8188e08c60f5c0ac2bd9edc738b0b2d8851ccabf1b955ed1687f9d57c4b9d0f56f095b7a74ea06", 0x72}], 0x2, 0x0, 0x0, 0x20000800}, 0x24004810) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000001300)={0x0, @aes128, 0x3, "9834e6a3578c0726"}) r2 = syz_open_dev$audion(&(0x7f0000001340)='/dev/audio#\x00', 0xffffffffffff8000, 0x60000) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000013c0)={0x0, 0x6, 0x10001, &(0x7f0000001380)=0x5}) r3 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) fsetxattr$security_ima(r2, &(0x7f0000001400)='security.ima\x00', &(0x7f0000001440)=@md5={0x1, "5c94c2e1a88cd0fbc7623104d8519f54"}, 0x11, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000001480)={0x0, @speck128}) fstat(r2, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001600), &(0x7f0000001640)=0x0, &(0x7f0000001680)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000016c0)={0x0, 0x0}, &(0x7f0000001700)=0xc) fstat(r2, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getuid() getgroups(0x2, &(0x7f00000017c0)=[0xee00, 0xee01]) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001800)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000001900)=0xe8) r11 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001940)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000001a40)=0xe8) lstat(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002f00)={{{@in=@remote, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000003000)=0xe8) lstat(&(0x7f0000003040)='./file0\x00', &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003100)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000003200)=0xe8) fstat(r2, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = openat$ppp(0xffffffffffffff9c, &(0x7f00000032c0)='/dev/ppp\x00', 0x40, 0x0) lstat(&(0x7f0000003300)='./file0\x00', &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000033c0)='./file0\x00', &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000003580)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000035c0)={0x0, 0x0, 0x0}, &(0x7f0000003600)=0xc) r23 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003a40)={0x0, 0x0, 0x0}, &(0x7f0000003a80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003ac0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000003bc0)=0xe8) fstat(r2, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003c80)='./file0\x00', &(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003d40)='./file0\x00', &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x0, 0x0}) r30 = getegid() stat(&(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000003f40)=[0xee01, 0xffffffffffffffff, 0xee00, 0xee00, 0xee00, 0x0]) getresuid(&(0x7f0000004740), &(0x7f0000004780), &(0x7f00000047c0)=0x0) r34 = getegid() r35 = geteuid() fstat(r1, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000004880)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000004980)=0xe8) lstat(&(0x7f00000049c0)='./file0\x00', &(0x7f0000004a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000004a80)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000004b80)=0xe8) r40 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000005000)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000005100)=0xe8) getgroups(0x1, &(0x7f0000005140)=[0xee00]) getresuid(&(0x7f00000055c0), &(0x7f0000005600)=0x0, &(0x7f0000005640)) getresgid(&(0x7f0000005680), &(0x7f00000056c0)=0x0, &(0x7f0000005700)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000005800), &(0x7f0000005840)=0x0, &(0x7f0000005880)) sendmmsg$unix(r1, &(0x7f00000059c0)=[{&(0x7f00000014c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001540), 0x0, &(0x7f0000001b40)=[@cred={0x20, 0x1, 0x2, r0, r4, r5}, @cred={0x20, 0x1, 0x2, r0, r6, r7}, @cred={0x20, 0x1, 0x2, r0, r8, r9}, @rights={0x18, 0x1, 0x1, [r1, r2]}, @rights={0x28, 0x1, 0x1, [r1, r2, r2, r2, r1]}, @cred={0x20, 0x1, 0x2, r0, r10, r11}, @rights={0x18, 0x1, 0x1, [r2]}, @cred={0x20, 0x1, 0x2, r0, r12, r13}, @rights={0x18, 0x1, 0x1, [r1]}], 0x110, 0x4008081}, {&(0x7f0000001c80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="9a97b5cbf33d7ee444224c246b73fdb21cb10a96b5c65533866b88941c444607aed2054a32217e926ca1c38786ec2f9152d1b4b5026d9fd98408bd90c73c5e399e08ce548cc69081e9c4e751ef3e70ff8265737f45d0ed8e61c20df53e60908429a418e3bbfe8a7e0ed679b57897b20f5452fba1c73dfde38f2be93708ebbcbe4b4d6aba8a02662b", 0x88}, {&(0x7f0000002dc0)="540f0f", 0x3}, {&(0x7f0000002e00)="aac7b89534c43a6d9d7fea71396576ec1ca81c85960fdc7dd216ff9c48c012ff", 0x20}, {&(0x7f0000002e40)="f670d6cc34c8266be1a1431d8548742e6ade23b2a004df02487337e1a45624dd597b7614", 0x24}], 0x5, &(0x7f0000003640)=[@cred={0x20, 0x1, 0x2, r0, r14, r15}, @cred={0x20, 0x1, 0x2, r0, r16, r17}, @rights={0x28, 0x1, 0x1, [r1, r2, r1, r1, r1, r1]}, @rights={0x38, 0x1, 0x1, [r1, r2, r18, r1, r2, r1, r2, r1, r1, r2]}, @rights={0x18, 0x1, 0x1, [r1, r2]}, @rights={0x20, 0x1, 0x1, [r2, r2, r1, r2]}, @cred={0x20, 0x1, 0x2, r0, r19, r20}, @rights={0x30, 0x1, 0x1, [r2, r1, r1, r1, r2, r1, r2]}, @cred={0x20, 0x1, 0x2, r0, r21, r22}], 0x148, 0x1}, {&(0x7f00000037c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003840), 0x0, &(0x7f0000003880)=[@rights={0x18, 0x1, 0x1, [r1, r2]}, @rights={0x18, 0x1, 0x1, [r2]}], 0x30, 0x4000}, {&(0x7f00000038c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003940)="3a1a3293e114d4c4ead84135dc51b44596e815c0ece618b7e51e82d9aee7a6ccde7d1cc16a2766ccf47a773a420fc1c70528ede48f8fd94589003012b3dc35c628be48a98c26e07304d1e1e2b1", 0x4d}, {&(0x7f00000039c0)='O', 0x1}], 0x2, &(0x7f0000003f80)=[@cred={0x20, 0x1, 0x2, r0, r23, r24}, @rights={0x38, 0x1, 0x1, [r1, r2, r1, r1, r2, r2, r1, r2, r1]}, @rights={0x20, 0x1, 0x1, [r1, r1, r1, r1]}, @rights={0x20, 0x1, 0x1, [r1, r2, r1]}, @cred={0x20, 0x1, 0x2, r0, r25, r26}, @cred={0x20, 0x1, 0x2, r0, r27, r28}, @cred={0x20, 0x1, 0x2, r0, r29, r30}, @cred={0x20, 0x1, 0x2, r0, r31, r32}, @rights={0x20, 0x1, 0x1, [r2, r1, r1, r2]}, @rights={0x18, 0x1, 0x1, [r2, r1]}], 0x150, 0x4000}, {&(0x7f0000004100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004680)=[{&(0x7f0000004180)="0d170559407e7402e05019892de82caf0207570538fdc09a3849107a671bcb0bc440d5a03c056189c00fff8dedb7dc70", 0x30}, {&(0x7f00000041c0)="8bcf9fd592d7ae2244f1e6376ab1f8768677655e6d8faaf21015c8", 0x1b}, {&(0x7f0000004200)="ad0b5d16e48373f6709441092230ac4410e14f393998f02c0a40a5b229da85eda1a768746ab61073a615253d8e0c8fcb86", 0x31}, {&(0x7f0000004240)="93adbee1faa10e21073c64e6f31924787fdeeef2b5e58b3c7a4dba8ae84983356329d0d392753652621907781dd68cc9335af489cb1ddd1a3b053d3b0922ced84031dcdc93bd0ed5b6360add1dfeaf557a7ebf4823a9f42c852a8ebebe36017b709ced2c46d627ce5db752e12d9fd3e34f0f951f4144871ec389", 0x7a}, {&(0x7f00000042c0)="9b1b079cd4d8253bdf5ff44bd79afc01927d94838e35cae578066dbd7806f48b088818ebd9f56060075924f442ab7fc912b683edbe178a0f3fe00ff296658c8055e8fcb6898ab8a0d94e6af99303769165b1611cc82130e9153fa0fd26ba897157985ce8a62bedd1e23ef2f616250b8b30493f08b025e13e3c4a1a863b3376cb11e475100c", 0x85}, {&(0x7f0000004380)="4451fe3a381cd434e959ef83018c6d307c99f9a87b29a72b892b3ee29a603ff65159967606a0f5f84849efc6022bab1d5547b671f058484caa1804c3e5b621d2adc8166382b9", 0x46}, {&(0x7f0000004400)="5087a492f5d36ae7da605d828505ec7f721ba502b8db90de2e2370da2075564f6b62d67058ac8a963198a4dfc3b90cfbbd196aa2f8aa1537304941a21e3145fd6b2a30069ac156b7352526cc322b1f09cd3670659bb0b4ac01b68cf8bca35b62a60703cae5b2559b83fba21184721076867364c86974fc6e15826c4436e125ae42d62e0fe6ebfbd2baff9e29a11b7ceba630d51ea8714a734327cdac29c2e17790961d82df75fe4c4959be01db66e02b6c", 0xb1}, {&(0x7f00000044c0)="7134e0cb2a01f6f6bb549257e1844ba3e33cfc8a353735a4ea154bba60be4df091376040926269e8add7b389a00fc25591d1d4385a7bc6224ab1d748828387b62e35ebc3087090f6ddf9f0b41e83bad4595d36f7eb5622f34d40bd7b2ce4346373f0747908e29dc168781e11f7f1f994f56dc01b1ba9712b6408bed985ce8ca643ea21c0e894b2ac57e18f99c5f0745e2b", 0x91}, {&(0x7f0000004580)="516b4e7fdd285413d5ac5c0de32e7e648ceb5b31aa5029ce5e47b530aebe59a8d986e11ab77ad95cde17a3f0f62b887d69e1b2f5f3b212e459d683fae7aab8838cd80ce24dbc7c41b5deab073521cb5ac705d63925a3aefa7f29be0be88eea50e100a0d3a1b4cb69907c6f13e3407d57713d9b6980a47996af5a0db81c8174c0db1d985b823ca97b54980dd55b84154bf42ecb391b7b7afc1b7d866e217a4c9fe08f8923721e2e4ce689b6ed4263b3122a5092ec2ed5e121878a34ad976c7236dd8eacc46da90ad52a2f8f48ae9fa188f6258e3fc78129166aafe5c1d1a36d0d72b15dc76894024a50da8c5ad4ebbe19b191", 0xf2}], 0x9, &(0x7f0000004bc0)=[@cred={0x20, 0x1, 0x2, r0, r33, r34}, @cred={0x20, 0x1, 0x2, r0, r35, r36}, @cred={0x20, 0x1, 0x2, r0, r37, r38}, @rights={0x20, 0x1, 0x1, [r1, r1, r2, r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r2, r2, r1]}, @cred={0x20, 0x1, 0x2, r0, r39, r40}, @rights={0x30, 0x1, 0x1, [r1, r1, r1, r2, r2, r1, r2]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r2, r2, r1, r2]}], 0x138, 0x4004}, {&(0x7f0000004d00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000004d80)="ff70dc9a0a9e1c1ea359122f1d2ca824199578b4fac2f8a5d48b5002ffec3d2448da07506203e558aa2b585d2e88b6f55de52ca83b486bbd0688d0ddb14254c61d3b62abd75955a9c78de39940dbcc59b7323e75c50a4fe74e134b5bcbe6bf41aa4ec8b918573e9973bf7223a4406cf034551a4e585368a68f94c8f3c87446f064ecdc1f7c598e120bc3e6213d1715451571e888afd75059f68814843d804db745e2040942d3ee7575d68d0d0a21e59b7b624f2bae8bb9e9a0cbfc89de148cb11ed621cc7e0f0393e54aebfb85becabccf906781dd67b1bd263b5116efd6e097213b08", 0xe3}, {&(0x7f0000004e80)="cba5b0a77ee03826553814b9d02e07a4c17a", 0x12}, {&(0x7f0000004ec0)="4b2ef79af51e068a64e5f3cf0f57075b25c2f146d1c48ef9ff0c29cd68042c10007281e0ba4e6a2764e3cfa4192d5ebffd9a6c5f7401d686cbbe0c0dba82dabaa10bce2a3eeb82746b70bc728127b66e92ae55af6239cf982a146c5c9ff9a1193d6e2c99e60b", 0x66}, {&(0x7f0000004f40)="96235c57b09ae403ad2c2628b804d3d2aebbe3e636fc959da3a2b2fbf9e94223fc9a2d0c420ad21ad416899fb54e5abd55132929fc100e542d7bb49e1260d3e918bda19518ab101022be4107cd52a3", 0x4f}], 0x4, &(0x7f0000005180)=[@cred={0x20, 0x1, 0x2, r0, r41, r42}], 0x20}, {&(0x7f00000051c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005540)=[{&(0x7f0000005240)}, {&(0x7f0000005280)="358a292e632dcbb0c4caf50c5015df7b5c1b9f6bb08eaecbd72d5a0d864e6b40b15ff7b97e5aef3b47a48b052ddfd69972caabe660bf8d4a0739a663b331de2737bc95b7f2d1f289557a64df12a4fbadd45beee4bd0dfa14f8ad2d26b6f702fe174dedc083f8fc56df56e58be039aed21569a3c8308afff90cd1376a1650b37b84fedd128fc830e3009ce3efeb516e03c05536d594138d118f5ac4265a980fe125927e6b6757349512e7845c28dda7da17fa3117abbdf1b7dfa94e2ffad56cd050d599f468a4f0a86407dcf7e100ec56960cbbd2f6dcf47de65df34a1ef73723829835cda8e8d4371e7a", 0xea}, {&(0x7f0000005380)="5a51790e2b2585bed6c742aaf7175ccc680f27abc5389b483374ab433ebf262ae0f7c5ef3ecdfc1cd9a2a13ed2d416f1eb9141cb87ca2a259a2f79c8600b6e9a376d41617edd06bd11403a26432949cfeaaf6601f4a812971ee5c89b1e297c444b52192f8a8ea7839882990735b28b344ab8b57e036292a537627f7b43db25c0ac1508897c32e18f924f04b20518d7d2b2fe3dcb1575cd", 0x97}, {&(0x7f0000005440)="2c0a0c43b84bd19f1da3e8e2adb6a8f58fa3fd36504e6052448a8c1342e34f9667cc306692519984925691033bdde97eea03a596da0b8b167673410e9d734ab792d01c187ac8e0e1b6b3a06cbc50c0548a8d67b5091d0ab9f12a68bb77b5dd13f113840195fc1af12166a594cffbb52ade0a384e9040370fa0d3cb8139afe8d2d750fe2593116a7a6ffa95def53c", 0x8e}, {&(0x7f0000005500)="bc54607e6731ae49686af6107dda4ddcf04784dc1ac053db1e45c70b70c8f0b6", 0x20}], 0x5, &(0x7f00000058c0)=[@cred={0x20, 0x1, 0x2, r0, r43, r44}, @cred={0x20, 0x1, 0x2, r0, r45, r46}, @rights={0x20, 0x1, 0x1, [r2, r1, r1]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x20, 0x1, 0x1, [r2, r1, r1, r1]}, @rights={0x38, 0x1, 0x1, [r1, r2, r1, r1, r1, r1, r1, r2, r1]}], 0xd0, 0x800}], 0x7, 0x44) syzkaller login: [ 195.559231][ T7622] IPVS: ftp: loaded support on port[0] = 21 11:15:36 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) r1 = getuid() fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x12c4, {0x0, 0x2, 0x4}, 0xb1, r1, r2, 0x5, 0x3, 0x9, 0x1, 0x7fffffff, 0xffffffff, 0xff, 0x6, 0xcb, 0x4, 0x8, 0x8, 0x0, 0x7, 0x1ff}}, 0xa0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0xffff, 0x3e, 0x84, 0x9, 0x100, 0x4}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x1, 0x8001}, {0x401, 0x6}, 0x7, 0x2, 0x2}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000300)) r3 = request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='icmp6\x00', 0xfffffffffffffff9) keyctl$setperm(0x5, r3, 0x5a107e74f4bf3ef8) write$vnet(r0, &(0x7f0000001480)={0x1, {&(0x7f0000000400)=""/125, 0x7d, &(0x7f0000000480)=""/4096, 0x2, 0x2}}, 0x68) write$P9_RVERSION(r0, &(0x7f0000001500)={0x13, 0x65, 0xffff, 0x9, 0x6, '9P2000'}, 0x13) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000002540)={0x1000, &(0x7f0000001540)=""/4096}) prctl$PR_GET_FPEXC(0xb, &(0x7f0000002580)) ioctl$KDENABIO(r0, 0x4b36) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000025c0)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002bc0)=@nat={'nat\x00', 0x19, 0x3, 0x550, [0x20002640, 0x0, 0x0, 0x200029c8, 0x20002b60], 0x0, &(0x7f0000002600), &(0x7f0000002640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x1f, 0x4, 0x813f, 'veth0_to_team\x00', 'veth0_to_bridge\x00', 'teql0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0x218, 0x248}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, '/usr/sbin/cupsd\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x9ae, 0x0, 0x7, 0x0, 0x0, "af0287e7b523c3d1629a7dfd8180483a7926d4ed3133ab9d78c2a417b0b7a4490c18c87b74ef23337662e35ab5bb02863a475a67c440cc180bfe696048b1ba0b"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}, {{{0x0, 0x74, 0x9808, 'bond0\x00', 'bond_slave_1\x00', 'teql0\x00', 'erspan0\x00', @local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @random="249dfa746517", [0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0xd8, 0x110}, [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x0, 0x5, 0x6206, 'rose0\x00', 'team_slave_1\x00', 'batadv0\x00', 'veth0_to_bond\x00', @dev={[], 0x22}, [0xff, 0x4c9bc39b8dba8a85, 0xff, 0xff, 0xff, 0xff], @link_local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xf0, 0x168}, [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x3, 0xf2a8}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x3, 0x1, 0x6, 0x0, 0x0, "baf774d3f2edee31e719aad1c3ce1cdf471a807dea75a3cf30f4d1703c2875d2a2b4a0b06c440be83bf2fcbfb805968d7198b01b521d10e1794b72658ef1c976"}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x5c8) ioctl$RTC_PIE_ON(r0, 0x7005) r4 = syz_open_dev$sndpcmc(&(0x7f0000002c40)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000002c80)={0x0, 0x0}) prlimit64(r5, 0xf, &(0x7f0000002cc0)={0x7ff, 0x7}, &(0x7f0000002d00)) write$vhci(r4, &(0x7f0000002d40)=@HCI_SCODATA_PKT={0x3, "4ae09a151b5ddefe0c3c603397f6e262dff2a34fa5076313918b38d38788b232faa58d065747e5592e9660aee87620c8502b50a7210451b66179722042148bccbd303bfb1e4c2fbbf27096053e1ee5f49c7e88690f878bc4eca4a9c979bb24d2329b11759f573db3c1607fd3bd20ac1c44435c89e38f0a01dca62833e700bd971a5d3fa0dbe5f266ec686eeea3124bb49206e19ebef4dedc979753373db3f44c59fe85ecf757aa8482"}, 0xaa) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000002e00)={0x4, 0x81, {0x57, 0x4, 0x7f, {0x1, 0x9}, {0x0, 0x5}, @cond=[{0x2, 0x20, 0x9, 0x7, 0x7, 0x3}, {0x9, 0x40, 0x2, 0x100, 0x6, 0x7}]}, {0x57, 0x1ff, 0x101, {0x5, 0x5}, {0x7, 0x4}, @ramp={0x7, 0xeb, {0x2, 0x8000, 0x4}}}}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002e80)=0xfffffffffffffff8, 0x4) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000002ec0)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002f40)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000003040)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x70, r6, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0xfffffffffffffffa}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x587}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x62}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x40]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x3ff, 0x9, 0x910, 0x10001, 0x1]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000001}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8000}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004800) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000030c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x30, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 195.676928][ T7622] chnl_net:caif_netlink_parms(): no params data found [ 195.700063][ T7625] IPVS: ftp: loaded support on port[0] = 21 [ 195.762741][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.771333][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.779507][ T7622] device bridge_slave_0 entered promiscuous mode [ 195.796757][ T7622] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.804146][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.812963][ T7622] device bridge_slave_1 entered promiscuous mode 11:15:37 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x16001, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000040)="5d0b01ccbbeaff8931d5cb6c0775b118c5e61b0da99d58b05c67649a02b83e031fa4862c65a150ca0c2ee27a4a86f45718bfe1117d99ca1a1badf9b562521d0c835f74ea0bba79076a7bec28df07811c8225e6c8ecd85f79f5a9dfee2f1b0390754104c939a92cc68f07daa1882e762ad1276ac135eaa42f40106197cef3cb8c486a8e5adabbbcad9e9f1eba648a35c11b263815ac53a98ea2a51e858b80", &(0x7f0000000100)=""/105}, 0x18) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x12) r2 = getpgrp(0x0) r3 = getuid() r4 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r0, 0x0, 0x20, &(0x7f0000000440)='cgroup+)ppp1systemeth1)em0wlan0\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xe8) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000f80)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000fc0)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000010c0)=0xe8) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0)={0x0}, &(0x7f0000001200)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001240)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000001340)=0xe8) stat(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001440)={0x0}, &(0x7f0000001480)=0xc) lstat(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f00000017c0)={0x0, 0x0}) r18 = getuid() r19 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001800)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000001940)=0xe8) fstat(r0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001a00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001a40)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000001b40)=0xe8) r25 = getegid() sendmmsg$unix(r0, &(0x7f0000001c00)=[{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="a5deb68346507b1cb38fa9b0e41a123b802ec53facf30fa245c44cc1103d7887102e323a", 0x24}, {&(0x7f0000000280)="89fb4f31c5c3126f46dd65eee522fa098902771a636742d9638319d6acb2fbe9fee4a2004ec6d363b04ae0f3c6334b47f50b9e902f42e3bf15486befc53d224b917dbaa9232d07de55efbcb73d5b13570ba7960caf7306fb0f87274cb267507ce691995b164e92dbc4357dcefca980365e15a3ead43d292f66916be3b29451aca6240bea2271aa8ee3927faac9ced4845f7ec02fbe7db710fb642059ddc40b3e68c35a3436456616222493eb", 0xac}, {&(0x7f0000000340)="6e8cfbc4c5a3014316c38f0b36a2b186ab21182553290d68a7f37c6e274ce45aa5b2a763722fe25db9e885bd886527f37ef8c5be66a26264581698c2aa4a4ec9d7d571be302fec25a5021e82d4c05041262fdae17794d18f17f023e96c3765d4d5d00a02231d2f1b8d9475dac7cc21a5fa7004182f55d8bf74d7ec", 0x7b}], 0x3, &(0x7f00000006c0)=[@rights={0x28, 0x1, 0x1, [r0, r0, r1, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}], 0x140, 0x20000014}, {&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000880)="be47ff60becb2173df0aa5b0649cfd9ecce63c6b99b18c1156ea605684286c5176551c778f565f7e4c7a964ac23a224be9e6e41ab5a28160cdfe53cda60213ad8d12a60e6b3a001390aa491e15401f94c36f5a89e9f7450d5166a00df3c233653737f1b3480fc3a360954595dcac4119911cd0fad01baeb03b4c68700cad0c37bb1398c087bb1dd4952e0672f7a3e343d9951f2d8655dfdbdbc891", 0x9b}, {&(0x7f0000000940)='_', 0x1}, {&(0x7f0000000980)="d544e7f280362686747ed4aa3153da3fb9a4d998e193d83c25e75db8", 0x1c}], 0x3, &(0x7f0000000a00)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0x38, 0x4000000}, {&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000ac0)="b9e7fffebf31a5b0320981e5f7556c44a7fc826f29109b7d313f07a326d5f42245bed5a759c9361a71929066a208ded40a8f6cf56dd2fa8b2bbed6b8c50a0773dab8d9c0fe716cfb9c08b9f7574faf2f3ea13418bb8672ca725c0928dc84b041fd7ddc60eccf29a5d3c48bd63100d23214c4903ffb5054b6d924008cd4f123db5f7d73562faae12737aa1016df6280c4cb678d0fdbe4495b054aad0b01", 0x9d}, {&(0x7f0000000b80)="f4bcf8ea98", 0x5}, {&(0x7f0000000bc0)="62c0d3d51f0ca249500d81ee58b87b6e7efacf7b2ad9165251e43813de99f2ee6c22447e2627a8aefff62268580cf2b9eb055c86fa75c051f6fda6d7d844fd64a5d2a5cfa1e1a8fb9be370cd0421697e19eea66489", 0x55}, {&(0x7f0000000c40)="62b9fadad9c60a5c5ed8c7905f969978c9f52adb11ed9a7beed18b61b93cff89f6f22baff7e84ff1428e5979963f2cd8d232fd85", 0x34}, {&(0x7f0000000c80)="14db1b9bd88cbaf42da64726e2a7fdac5f3fcef37e31d5e15cf32eae3d912a44f6bb524192ab8bfb469253ed80a8fb50ee78e14b98b6e9a74a84b946de1b99b5c17074c39271", 0x46}, {&(0x7f0000000d00)="93d290b2b3db5bfa663ec0fd2ba0d86046f82f00688594427dbbd37c6756b89d3b5bbded8e275fdfa6c885d057eb01bd20aa5f7a4b652f3a2308c2e783ac1f4957bc488202e962c58c933bef0fee4870db3adc7d20300092fc5fe477e45d5f99614705e60cb9a1384fc8b29e9f8c92914bc6185488139065d4b180b2075df540bb229f8da19a5070f011928aa86247af62e80fdab5b58f9c333bda278e38b36fbcb1e7ab1237740ef9c27cbdb5937cb82ed08a0d42cf2575d8a0478a3a1c3347f2ffed39dd58a522073faf775edb02470de3", 0xd2}, {&(0x7f0000000e00)="ab392deaff5c4c9955729b44f32d6e6f36db77ff3d3738e817cfa24215c316914478812d7f84726daa0ced095960a0a852b3275400da659a50c4526100c7fe85ad6787b83df785083214b21920b92d71d481314a37b32acb1686f63f7073787301f2d13baff16254072cfe3afc0a4c4a740a02feaedff4e756df330de8fb43d2579f3be98d200fe033c9a8ee4f900b270257383d0c75c4da65222a00ef56e1cb5515a783fdd4b3b87992864d44b0b1856f69f325a7879fbfaaa6464e3c11f8451d08ce6bc08cbc63beb498939afbed74a8a4fbbe77ba004e37e7b265df1a40b805f05f145648763276e572b6d4", 0xed}], 0x7, &(0x7f0000001600)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0xd8}, {&(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780), 0x0, &(0x7f0000001b80)=[@cred={0x20, 0x1, 0x2, r17, r18, r19}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @cred={0x20, 0x1, 0x2, r23, r24, r25}], 0x78, 0x4010}], 0x4, 0x8000) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000001d00)="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", 0x1000) setxattr$security_smack_entry(&(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)='security.SMACK64IPOUT\x00', &(0x7f0000002d80)='@}self-mime_typeppp0trustedmd5sumtrusted\x00', 0x29, 0x2) [ 195.867246][ T7622] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 195.899426][ T7622] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 195.914165][ T7625] chnl_net:caif_netlink_parms(): no params data found [ 195.981055][ T7622] team0: Port device team_slave_0 added [ 196.003283][ T7622] team0: Port device team_slave_1 added [ 196.027879][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.035212][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.043189][ T7625] device bridge_slave_0 entered promiscuous mode [ 196.057047][ T7630] IPVS: ftp: loaded support on port[0] = 21 [ 196.068386][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.076001][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.083944][ T7625] device bridge_slave_1 entered promiscuous mode 11:15:37 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) fstat(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r0, r1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000180)=""/87) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)={"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"}) write$binfmt_script(r2, &(0x7f0000000600)={'#! ', './file0', [{0x20, '%em0'}, {0x20, ']em0em1cgroup'}, {0x20, '[security)em1\xa3-'}, {0x20, '['}, {0x20, '%:\xc8proc'}, {0x20, '(nodevmime_type)Nnodev$eth0'}], 0xa, "a60d2eccf2f81b2d6da02504029e0b7902eab5"}, 0x67) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000700)={0x3, 0x6, 0x10000, 0x10000, 0x7, 0x2, 0x4, 0x1, 0x3f, 0xffffffff}) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000740)={0x0, 0xff, 0xcf67, 0x9, 0x8, 0x8, 0x20, "1d62865e3aa0d34d5a71960fcf04b9790cb3234e", "f411ed293ea3ffad2dd372c815ad112f4f9aad6f"}) readahead(r3, 0x82, 0x1f) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780)='/dev/ptmx\x00', 0x400000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800006}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r5, 0xf00, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff8}]}, 0x48}}, 0x8000) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000940)={'filter\x00'}, &(0x7f00000009c0)=0x78) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000a00)={r3}) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000bc0)={&(0x7f0000000a40), 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xd4, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x45c}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ifb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x559}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000c00)=[@in6={0xa, 0x4e24, 0x3ff, @remote, 0x4000000000000}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @loopback}], 0x3c) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000c40)=""/121) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d00)={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x18}, 0x10) syz_open_dev$evdev(&(0x7f0000000d40)='/dev/input/event#\x00', 0x1, 0x4000) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000d80)=@assoc_value={0x0, 0x5}, &(0x7f0000000dc0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000e00)=@sack_info={r7, 0x80000001}, &(0x7f0000000e40)=0xc) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000fc0)={0x3, @null, r0}) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000001000)={0x3, 0x9}) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000001040)={0x31, 0x4, 0x0, {0x1, 0x8000, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000001080)=""/118) [ 196.142718][ T7622] device hsr_slave_0 entered promiscuous mode [ 196.240521][ T7622] device hsr_slave_1 entered promiscuous mode 11:15:37 executing program 4: r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x800) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x3) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x101000, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f00000005c0)=[0xee01, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0, 0xee00, 0xee00, 0xffffffffffffffff, 0x0]) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) r12 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000800)=0xe8) getgroups(0x7, &(0x7f0000000840)=[0x0, 0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0xee00, 0x0]) fstat(0xffffffffffffff9c, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000980)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) r18 = getegid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000000ac0)={0x568, 0x0, 0x1, [{{0x2, 0x2, 0x4, 0x1, 0x7, 0x5, {0x3, 0x7, 0xbd, 0x15, 0x7, 0xe63, 0x7, 0x3, 0x401, 0x3, 0x4be, r3, r4, 0xc0d, 0x400}}, {0x1, 0x4, 0x7, 0x7, 'keyring'}}, {{0x1, 0x3, 0xbc0000000000, 0x8001, 0x55f, 0x7, {0x5, 0x4, 0x5, 0x20, 0x8, 0x100000001, 0x1, 0x0, 0x3, 0x10001, 0x400, r5, r6, 0x3, 0x3}}, {0x5, 0x0, 0x0, 0x3}}, {{0x6, 0x0, 0x4, 0xfffffffffffffff7, 0x7, 0x7fffffff, {0x1, 0x3, 0x6, 0x0, 0x8, 0x8, 0x8, 0x6, 0x1000, 0x81, 0x80000000, r7, r8, 0x9, 0x8}}, {0x2, 0x6, 0xb, 0x11ee99ff, 'nodevvmnet0'}}, {{0x4, 0x3, 0x4, 0x6, 0x2, 0x6, {0x3, 0x8, 0x28c, 0x6, 0x80, 0x9b, 0xe7de, 0x0, 0x1, 0x100, 0x5, r9, r10, 0x3, 0x2}}, {0x3, 0x5, 0x19, 0x4, 'trusted.overlay.redirect\x00'}}, {{0x4, 0x3, 0x3, 0x3, 0x1, 0xe2a, {0x6, 0x100, 0xdab, 0x6, 0x3, 0x67, 0x7, 0x5, 0x200, 0x9, 0x9, r11, r12, 0x4000000, 0x3}}, {0x4, 0x5, 0x8, 0x9, '\xe8selinux'}}, {{0x2, 0x2, 0x7, 0x2, 0x0, 0x3, {0x5, 0x8001, 0x0, 0x9, 0x100000000, 0x10000, 0xff, 0xfffffffffffffffd, 0x9, 0x3ff, 0x2b31, r13, r14, 0xffff}}, {0x3, 0x3, 0x12, 0x200, '.md5sumeth0keyring'}}, {{0x3, 0x1, 0x7, 0x200, 0x5, 0x80000000, {0x0, 0x8, 0x80, 0x4, 0x7fffffff, 0x5, 0x7fff, 0x8, 0x7, 0x2, 0x617a, r15, r16, 0x4, 0x10001}}, {0x3, 0x8, 0x27, 0x5, '^em1@,vmnet1vmnet1md5sum!\xd9\x00md5sumvmnet1'}}, {{0x4, 0x0, 0x1f, 0x400, 0x0, 0x80, {0x0, 0x8, 0x2, 0x1f, 0x7eae, 0x8, 0x0, 0x24000000000, 0x5, 0x2, 0x9, r17, r18, 0x7}}, {0x5, 0x622a, 0x18, 0x1, '/dev/infiniband/rdma_cm\x00'}}]}, 0x568) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001040)=0x7) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000001080)={0x1, @remote}) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000010c0)={0x4, @multicast2, 0x4e22, 0x4, 'lblcr\x00', 0x11, 0x20000, 0x10}, 0x2c) r19 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001100)='/dev/dlm-control\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001340)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000013c0)={0x5, 0x10, 0xfa00, {&(0x7f0000001140), r20, 0x2}}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xf0, 0xf0, 0xf0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, &(0x7f0000001400), {[{{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x18000}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x2, 0x7ff}}, @common=@eui64={0x28, 'eui64\x00'}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3ff, 0x5ca7, 0x9}, {0x3, 0x8, 0x4}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) accept4$rose(r19, &(0x7f00000017c0)=@full={0xb, @remote, @bcast, 0x0, [@bcast, @default, @default, @remote, @remote, @default]}, &(0x7f0000001800)=0x40, 0x800) [ 196.303296][ T7632] IPVS: ftp: loaded support on port[0] = 21 [ 196.323028][ T7625] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 196.338433][ T7622] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.345702][ T7622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.353486][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.360589][ T7622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.406334][ T7625] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 196.554835][ T7625] team0: Port device team_slave_0 added 11:15:37 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) ioctl$KDADDIO(r0, 0x4b34, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xffff, 0xcf8, 0x6ee, 0x8, 0x0, 0x1800000, 0x2000, 0x6, 0xffffffffffffff66, 0xffffffffffffffff, 0x2, 0x8, 0x2, 0x6, 0x5, 0x8, 0x0, 0x6e, 0x3e4, 0x6, 0x3, 0x4, 0x215, 0x7, 0xbf8, 0x26, 0x1, 0x8000, 0x7, 0x7, 0x8, 0x9, 0x101, 0xfffffffffffffffd, 0x8, 0x2f, 0x0, 0xda12, 0x2, @perf_config_ext={0x3, 0x3}, 0x800, 0x1f, 0x5, 0x1, 0x4, 0x6b, 0x6}, r1, 0x7, r0, 0x2) bind$ax25(r0, &(0x7f0000000140)={{0x3, @null, 0x1}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @default]}, 0x48) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x200, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000200)=0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r4, 0x700, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0xb0}}, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x3, 0x4) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) setfsuid(r5) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) r6 = add_key(&(0x7f00000005c0)='.dead\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)="394d3bd40f667234aa67cc8e777b0e2b389f7ba12c2d018d164e906f2ddbd7c8d8b8ff53fb2554df3ed971bb96b359dcf962e72bbd3ab1909214b3743ca6bb3f53", 0x41, 0xfffffffffffffffd) keyctl$describe(0x6, r6, &(0x7f00000006c0)=""/27, 0x1b) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000700)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000740)={0x1000000, 0x0, 0x0, 0x2, '\x00', 0xb974}) accept4$rose(r3, 0x0, &(0x7f0000000780), 0x80800) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f00000007c0)='\x00', &(0x7f0000000800)) open$dir(&(0x7f0000000840)='./file0/file0\x00', 0x10000, 0x2) getsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000880)=""/4096, &(0x7f0000001880)=0x1000) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000018c0)=0x4, 0x4) creat(&(0x7f0000001900)='./file0\x00', 0x84) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001940)='/dev/video37\x00', 0x2, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001980)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f00000019c0)={@null=' \x00', 0x0, 'veth1\x00'}) mknod(&(0x7f0000001ac0)='.\x00', 0x80, 0x2d6) perf_event_open(&(0x7f0000001b00)={0x0, 0x70, 0x100, 0x9, 0x5, 0x6dc, 0x0, 0x9, 0x830, 0x2, 0x6, 0x2, 0xfff, 0xae4, 0x1000, 0x9, 0x8, 0x71fe53, 0x3, 0x3, 0x7fffffff, 0x8, 0x0, 0x1, 0x800, 0x0, 0xa0, 0x39, 0x7, 0x40, 0xffff, 0x5, 0x7, 0x20, 0xfffffffffffffff9, 0x18b, 0x9, 0x400, 0x0, 0xc00000000000000, 0x2, @perf_config_ext={0x7, 0x4}, 0x2004, 0x68a, 0x5, 0xcfd9f762af7c4ad2, 0x1, 0x3f, 0x9}, 0x0, 0x3, r0, 0x8) [ 196.607542][ T7635] IPVS: ftp: loaded support on port[0] = 21 [ 196.614595][ T7625] team0: Port device team_slave_1 added [ 196.625537][ T7632] chnl_net:caif_netlink_parms(): no params data found [ 196.648031][ T7622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.698689][ T7622] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.714233][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.726733][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.744991][ T7626] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.753626][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 196.764279][ T7630] chnl_net:caif_netlink_parms(): no params data found [ 196.822397][ T7625] device hsr_slave_0 entered promiscuous mode [ 196.860525][ T7625] device hsr_slave_1 entered promiscuous mode [ 196.926487][ T7638] IPVS: ftp: loaded support on port[0] = 21 [ 196.951088][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.959619][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.969619][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.976749][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.997675][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.008272][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.018061][ T7632] device bridge_slave_0 entered promiscuous mode [ 197.027327][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.034502][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.043197][ T7632] device bridge_slave_1 entered promiscuous mode [ 197.086533][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.095110][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.103623][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.110701][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.118163][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.131272][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.142134][ T7630] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.149173][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.158466][ T7630] device bridge_slave_0 entered promiscuous mode [ 197.167983][ T7630] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.176746][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.184480][ T7630] device bridge_slave_1 entered promiscuous mode [ 197.201467][ T7632] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.233830][ T7632] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.245580][ T7630] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.257171][ T7630] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.267972][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.276742][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.285211][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.293995][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.302510][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.348582][ T7632] team0: Port device team_slave_0 added [ 197.369815][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.378140][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.388361][ T7632] team0: Port device team_slave_1 added [ 197.394270][ T7635] chnl_net:caif_netlink_parms(): no params data found [ 197.407833][ T7630] team0: Port device team_slave_0 added [ 197.415672][ T7630] team0: Port device team_slave_1 added [ 197.422923][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.431474][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.441444][ T7622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.480902][ T7625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.541882][ T7630] device hsr_slave_0 entered promiscuous mode [ 197.592195][ T7630] device hsr_slave_1 entered promiscuous mode [ 197.692096][ T7632] device hsr_slave_0 entered promiscuous mode [ 197.730979][ T7632] device hsr_slave_1 entered promiscuous mode [ 197.819037][ T7635] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.826434][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.835062][ T7635] device bridge_slave_0 entered promiscuous mode [ 197.849498][ T7635] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.856654][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.864543][ T7635] device bridge_slave_1 entered promiscuous mode [ 197.872934][ T7622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.895707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.903670][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.914237][ T7625] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.931545][ T7638] chnl_net:caif_netlink_parms(): no params data found [ 197.944885][ T7635] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.956869][ T7635] bond0: Enslaving bond_slave_1 as an active interface with an up link 11:15:39 executing program 0: [ 198.019528][ T7635] team0: Port device team_slave_0 added [ 198.026870][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.036571][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.045181][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.052272][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.060806][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 11:15:39 executing program 0: [ 198.081619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.099770][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.106878][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state 11:15:39 executing program 0: [ 198.130000][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.151916][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 11:15:39 executing program 0: [ 198.178013][ T7635] team0: Port device team_slave_1 added 11:15:39 executing program 0: [ 198.206263][ T7632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.223071][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.236330][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 11:15:39 executing program 0: [ 198.257848][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 11:15:39 executing program 0: r0 = socket$inet(0x2, 0x3, 0x19) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x400, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, &(0x7f0000000300)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000280)={r1, r1}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={0x0, r4, 0x9, 0x2}, 0x14) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ustat(0x3, &(0x7f00000002c0)) [ 198.299022][ T7638] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.322564][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.334155][ T7638] device bridge_slave_0 entered promiscuous mode [ 198.344052][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.352311][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.361209][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.379545][ T7625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.394445][ T7661] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 198.395574][ T7625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.429271][ T7638] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.436601][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.445023][ T7638] device bridge_slave_1 entered promiscuous mode [ 198.458541][ T7635] device hsr_slave_0 entered promiscuous mode [ 198.466915][ T7635] device hsr_slave_1 entered promiscuous mode [ 198.482131][ T7632] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.490969][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.499267][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.508016][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.516758][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.525105][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.533062][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.540161][ C0] hrtimer: interrupt took 34625 ns [ 198.540826][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.553960][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.562330][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.569378][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.577186][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.584870][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.596414][ T7630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.645820][ T7625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.659684][ T7630] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.678315][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.687065][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.702029][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.709086][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.722564][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.733447][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.742476][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.751173][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.759386][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.768026][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.776539][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.784488][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.793988][ T7638] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.844997][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.863746][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.887495][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 11:15:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000d0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000019c0)={0x20}, 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001880)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000001980)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001a00)={r5, @local, @remote}, 0xc) fdatasync(r0) ioctl$int_in(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000500)=0x40, 0x4) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000540)) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000200)={@mcast2, 0x62, r6}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000280), 0x4) r7 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x401, 0x400000) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0xff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x710, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0x4, 0x3e98, 0x848}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000040)={0x8879, 0x800, 0x8000, 0x7}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) fcntl$dupfd(r3, 0x3, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2012, r4, 0x0) unshare(0x40000000) [ 198.899654][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.923564][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.938370][ T7626] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.940325][ C0] sched: DL replenish lagged too much [ 198.950927][ T7626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.964491][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.974602][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.978338][ T7672] IPVS: ftp: loaded support on port[0] = 21 [ 198.987338][ T7626] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.998118][ T7626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.012959][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.025291][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.037725][ T7632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.049742][ T7632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.058503][ T7638] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.298932][ T7672] IPVS: ftp: loaded support on port[0] = 21 [ 199.307794][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.316189][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.324543][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.333144][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.341721][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.349937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.358447][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.367215][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.389832][ T7635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.455794][ T7638] team0: Port device team_slave_0 added [ 199.464270][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.475732][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.485399][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.494596][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.507108][ T7630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.536034][ T7632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.544584][ T7638] team0: Port device team_slave_1 added [ 199.595471][ T7630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.629776][ T7635] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.714591][ T7638] device hsr_slave_0 entered promiscuous mode [ 199.760936][ T7638] device hsr_slave_1 entered promiscuous mode [ 199.832580][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.844662][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.870867][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.885454][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.894178][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.901285][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.909757][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.918687][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.927572][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.934672][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.995275][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.015111][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.037675][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.053637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.065545][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.088022][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 11:15:41 executing program 2: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x4002000, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(0x0, 0x0, 0x301800) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') getcwd(0x0, 0x0) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYRESDEC], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYPTR]], 0x10}, 0x0) getgid() setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0xffffffff, 0x1, 0x7ff, 0x1, 0xffff, 0x1f, 0x1, 0x52c, 0x2, 0x7f}, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) eventfd2(0x7, 0x80800) preadv(r2, &(0x7f00000017c0), 0x1b1, 0x400000000074) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) bind$x25(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) ftruncate(r2, 0x5) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) execveat(r1, &(0x7f0000000180)='./file1\x00', &(0x7f0000000380)=[&(0x7f00000001c0)='bdev\\md5sumwlan1\x00', &(0x7f0000000240)='overlay\x00', &(0x7f0000000340)='system\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='overlay\x00', &(0x7f0000000400)='overlay\x00', &(0x7f0000000440)='overlay\x00'], 0x1c00) rmdir(&(0x7f0000000000)='./file0/file0\x00') sendfile(r0, r2, 0x0, 0x0) 11:15:41 executing program 0: r0 = socket$inet(0x2, 0x3, 0x19) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x400, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, &(0x7f0000000300)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000280)={r1, r1}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={0x0, r4, 0x9, 0x2}, 0x14) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ustat(0x3, &(0x7f00000002c0)) [ 200.096201][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.105327][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.114248][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.123113][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.132687][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.165701][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.241989][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.391223][ T7635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.436046][ T7692] overlayfs: filesystem on './file0' not supported as upperdir [ 200.497071][ T7638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.524411][ T7638] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.549839][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.583897][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.652236][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.676750][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.699007][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.706182][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.714947][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.723718][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.732941][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.740031][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.748090][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.756791][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.766898][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.787112][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.805723][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.823667][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.838519][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.847651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.860078][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.868319][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.884530][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.896472][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 11:15:42 executing program 4: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x4002000, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(0x0, 0x0, 0x301800) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') getcwd(0x0, 0x0) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYRESDEC], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYPTR]], 0x10}, 0x0) getgid() setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0xffffffff, 0x1, 0x7ff, 0x1, 0xffff, 0x1f, 0x1, 0x52c, 0x2, 0x7f}, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) eventfd2(0x7, 0x80800) preadv(r2, &(0x7f00000017c0), 0x1b1, 0x400000000074) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) bind$x25(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) ftruncate(r2, 0x5) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) execveat(r1, &(0x7f0000000180)='./file1\x00', &(0x7f0000000380)=[&(0x7f00000001c0)='bdev\\md5sumwlan1\x00', &(0x7f0000000240)='overlay\x00', &(0x7f0000000340)='system\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='overlay\x00', &(0x7f0000000400)='overlay\x00', &(0x7f0000000440)='overlay\x00'], 0x1c00) rmdir(&(0x7f0000000000)='./file0/file0\x00') sendfile(r0, r2, 0x0, 0x0) [ 200.905619][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.928189][ T7638] 8021q: adding VLAN 0 to HW filter on device batadv0 11:15:42 executing program 2: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x4002000, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(0x0, 0x0, 0x301800) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') getcwd(0x0, 0x0) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYRESDEC], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYPTR]], 0x10}, 0x0) getgid() setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0xffffffff, 0x1, 0x7ff, 0x1, 0xffff, 0x1f, 0x1, 0x52c, 0x2, 0x7f}, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) eventfd2(0x7, 0x80800) preadv(r2, &(0x7f00000017c0), 0x1b1, 0x400000000074) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) bind$x25(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) ftruncate(r2, 0x5) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) execveat(r1, &(0x7f0000000180)='./file1\x00', &(0x7f0000000380)=[&(0x7f00000001c0)='bdev\\md5sumwlan1\x00', &(0x7f0000000240)='overlay\x00', &(0x7f0000000340)='system\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='overlay\x00', &(0x7f0000000400)='overlay\x00', &(0x7f0000000440)='overlay\x00'], 0x1c00) rmdir(&(0x7f0000000000)='./file0/file0\x00') sendfile(r0, r2, 0x0, 0x0) 11:15:42 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0xe280165459372428) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000000c0)={0x1, 0x0, 0x7, 'queue1\x00', 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="075313ee4c2002af000000000000000000009a1dcf00fea3cf4027c2611a27a3dc5e09f909f6c26f073968cd84cedb95a8ededdbe310470f63ac30d32e9ad15ead7b661041aeb5af778475380bde4a268ddde777aeb81c43a9c1911ee02cfad60197010cf5fe623c111a426fb7300f6dd9fbbcc4fe11164094c8abb153fedc943eb4afeef96726f83cba0fc4f463c67af167b0fbf5d8aca2c75afab0"], 0x14}}, 0x0) 11:15:42 executing program 5: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, [0x8, 0x0, 0x70000, 0xfff]}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)=0x3) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10010, r0, 0x0) modify_ldt$write2(0x11, &(0x7f00000002c0), 0x10) 11:15:42 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x2, 0xfffffffffffffde4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000), 0x10) 11:15:42 executing program 0: r0 = socket$inet(0x2, 0x3, 0x19) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x400, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, &(0x7f0000000300)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000280)={r1, r1}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={0x0, r4, 0x9, 0x2}, 0x14) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ustat(0x3, &(0x7f00000002c0)) 11:15:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000d0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000019c0)={0x20}, 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001880)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000001980)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001a00)={r5, @local, @remote}, 0xc) fdatasync(r0) ioctl$int_in(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000500)=0x40, 0x4) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000540)) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000200)={@mcast2, 0x62, r6}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000280), 0x4) r7 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x401, 0x400000) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0xff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x710, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0x4, 0x3e98, 0x848}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000040)={0x8879, 0x800, 0x8000, 0x7}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) fcntl$dupfd(r3, 0x3, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2012, r4, 0x0) unshare(0x40000000) 11:15:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000d0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000019c0)={0x20}, 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001880)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000001980)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001a00)={r5, @local, @remote}, 0xc) fdatasync(r0) ioctl$int_in(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000500)=0x40, 0x4) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000540)) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000200)={@mcast2, 0x62, r6}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000280), 0x4) r7 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x401, 0x400000) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0xff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x710, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0x4, 0x3e98, 0x848}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000040)={0x8879, 0x800, 0x8000, 0x7}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) fcntl$dupfd(r3, 0x3, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2012, r4, 0x0) unshare(0x40000000) 11:15:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3fe, 0x400000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 11:15:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20080, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @remote}, @in6=@ipv4={[], [], @multicast2}}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000080)=0xe8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x3, &(0x7f0000000000), 0x4) [ 201.351847][ T7725] IPVS: ftp: loaded support on port[0] = 21 11:15:42 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4000000000e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000c2b57e8d25ffffff7f000000714a568ebb9910b00c00120000950000009405c2a1"], &(0x7f0000f6bffb)='GPL\x1d', 0x80, 0x4e1, &(0x7f00001a7f05)=""/251}, 0x48) [ 201.619557][ T7734] IPVS: ftp: loaded support on port[0] = 21 11:15:43 executing program 5: syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6, 0x0) 11:15:43 executing program 4: r0 = accept$ax25(0xffffffffffffff9c, &(0x7f0000000040)={{0x3, @default}, [@netrom, @default, @netrom, @rose, @bcast, @remote, @null, @default]}, &(0x7f00000000c0)=0x48) socket$isdn(0x22, 0x3, 0x40000026) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{r2, r3/1000+30000}, {0x77359400}}) fcntl$setflags(r0, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x80008, &(0x7f0000000140)) close(r5) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000000)={r5}) 11:15:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000006c0)) bind$alg(r4, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xffffff2e) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="a95600000400fbab65d8b4ac2c9c5c6e", 0x10) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@sco={0x1f, {0x521, 0x401, 0x8001, 0x101, 0x1, 0x8}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="e4ce1a5171854d64daae6807cb333c43eaede6aa4bda46f156704086196d9a98ac710e944b99a6d78918af5dd32aae761a8ea6d6b8799ad30c19331c6f9e38f4", 0x40}, {&(0x7f0000000240)="2ae86e3e922acdbb04eb3935ec3841c134595100b0ba7da5bff23ec573eb5145558ac5d1f42a8039dfc4cad92a8be6cde5f26110de84f6fd6e7b4cd42893eb37d9e84bfff24f2cdb2df618ede54d6d054c89f04b5dc415184264140f94de59137ac426dd09a21afeb675db05870f9ab86cd832ffb39e621c2722ca0b428b6cbf3bee4c370220a9364be81cd43b0c8ed069d4ace4a21bfa41ed419b2bfd2f0c644e11707326e7d8a8ea24dfb4f7b58a22b247645fcf07e0d67bf1affbc2af287a0537e946fd7e74841803413fbb945212ac8cb3964d189eca5092fcca7544345c", 0xe0}, {&(0x7f0000000340)="f5584a8d4624e96f45433fbc5394aeb5f5254297462f62a0ce376d0b982b35229d34f680afc40f145f47268440b496d7e757918a4a77baf777a38cd0ef43c1fa99cc9f608b2c46b222eca0741c9de94bf221de574b43c99d8562943d0b0c5944e724d9dd3c1665d70abfccc760413f520cdef77e8705ea05a86375a66747ce86d9c9e26f7d1c4877050cfdae4de59a4bc5be659a912455c624f2f259036c23bbb1abbd6b60eaea1ae6182159c744bfc399c6ee422151d7f08584a5915b2cbed9b37dcf38", 0xc4}, {&(0x7f0000000100)="ca8b3e5fad65524e61ffac342695d782b6fb40bc65a36ae323029c65400ab12b33110f7b7edd07021dda39eecafb8551b9af8cd528ef9204", 0x38}], 0x4, &(0x7f0000000440)=[{0x60, 0x10b, 0x6, "110042a33cf105a63d4e6e57458b05d1c967acd0f63b97c29025e462d0c9146a94a8f5946bc3a4583a91f801fa54441640d5b239e43cc105fa9116aaf63a6291737b3a1e07ecf03de0e6a499e04acf5e"}, {0xa0, 0x103, 0x0, "b51f6e77149ff13b14c386f318f43d0cf9abb59eccab5dadf149b07ee536acb283733e1ff2e1a537dac198ce369347882e705b0eebf15e4203d7ab6c40ef3e9f7a55ee2ff1afd8c03ff6cd339936a1bbdadc36be437a035833b090bfb6e9f3c970176ac4d5d2f2aadee51c09367793e77b0311475f6997722729792c6ba2c733dc0ab2883e0bda74d27b9de2d6a1"}, {0xd0, 0x119, 0x4, "cc543920fbe22515e3a226f4bb1ba592c33fe9d8bee5625dce39e3577f7bb45f12b21663d8de4e28734e0c3d4090f37bae1130c64278990c16945d92793de59adfdedb694118dc53953940b5e89729ed6165d0325560d04a2413746c7f96eda48bff1360367d8304d014df238a8bb143b71e2cb5651380bd17bf3caf81ab896649e623270f74edd109c015e6f32f9e61882198d676c1f62a3d6ab5c27eb2947a9bbb319bd5f3d2b474227dfb8c657ae0ed239d8d1e478ae243"}, {0x68, 0x11b, 0x1, "7214ded23fb4417d0f42649a72039c9dad687bce5a1c13284b7959f1ac6bf6d319e71004c47a17545c18e558c2753eead03c585732d1d67b3165dee0f5364f8e940c5f6d5147634f97f7447f788fee000e3d0377ecd328ab"}], 0x238}, 0x40040) splice(r2, 0x0, r5, 0x0, 0x80800510, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 11:15:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") unshare(0x7fd) setsockopt(r0, 0xb44b, 0x9, &(0x7f00000010c0)="4ed41a6d5c71d1c0990e02eabcb3be0f2c382f54826cb749dbdf10d6eeaf77e126", 0x21) r1 = socket$inet_sctp(0x2, 0x800000000801, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000001340)={r0}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000001380)=0x2, 0x4) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4ea5, @dev}, 0x10) ioctl$SG_IO(r3, 0x2285, &(0x7f00000012c0)={0x0, 0xfffffffffffffffc, 0xa8, 0x3, @scatter={0x1, 0x0, &(0x7f0000001140)=[{&(0x7f0000001100)=""/50, 0x32}]}, &(0x7f0000001180)="b135ec4294244b02f0d1add4ba0f3a1aac7e1204d81c327142640498afcd203b79fe28fd0acb8aea4da8647e340bd6b3d384f88dcc401258ad132fd0885f33d70dc4c7236f2507f6d408e99740cca9d57b3c12d7c533f20b4c754ce54248a36ed8bbe97390c2f437c88840d76d1f69400d5cca6d3b11af58891a83aa486ba37ac08d03744e7d90fdf3d65da2caa242805118ac1c2754d3b54cbd264994e8e3ffc3dbcd2087f383a7", &(0x7f0000001240)=""/37, 0x6, 0x11, 0x3, &(0x7f0000001280)}) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000013c0)=""/53, &(0x7f0000001400)=0x35) 11:15:43 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2098, 0x0, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) fdatasync(r0) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0xa, 0x0, @local={0xac, 0x2c0}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000180)=[{0x20, 0x84, 0x7}], 0x20}, 0xfc) 11:15:43 executing program 0: r0 = socket$inet(0x2, 0x3, 0x19) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x400, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, &(0x7f0000000300)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000280)={r1, r1}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={0x0, r4, 0x9, 0x2}, 0x14) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ustat(0x3, &(0x7f00000002c0)) 11:15:43 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000100)) prctl$PR_GET_KEEPCAPS(0x7) 11:15:43 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x659b68e45d20aca4, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x2, 0x1ff}) bind(r0, &(0x7f00000003c0)=@rc={0x1f, {0x1f, 0xbce, 0x2, 0xfffffffffffffffa, 0x9, 0x8001}, 0x1}, 0x80) unlink(&(0x7f0000000380)='./file1\x00') r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2000000040, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/154, 0x9a, 0xac520f7695cd9c4e, &(0x7f0000000280)=@in6={0xa, 0x4e24, 0x401, @loopback, 0x6}, 0x80) mknod$loop(&(0x7f0000000180)='./file1\x00', 0x6003, 0x1) r2 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r2, 0x401070ca, 0x0) accept4$nfc_llcp(r2, &(0x7f0000000080), &(0x7f0000000140)=0x60, 0x800) 11:15:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x3ff, 0x5}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x4, 0x1}, 0x90) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e22, @remote}}}, 0x90) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x77, 0x20100c0, [0x40000003]}) 11:15:43 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x480000, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000700)=""/246) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e21, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4dbfa7ba}}}, 0x84) 11:15:43 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xfffffeb4, 0x0, &(0x7f0000000000)="e460cdfbef24080000000a9386dd6a00000000072ceb3014cd3ec8a755c1e1380081ffad000000e8d500000001000000140000050024", 0x0, 0x7}, 0x28) 11:15:43 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000001c0)='./file0\x00', 0x14143f, 0x0) fcntl$setlease(r0, 0x400, 0x6) 11:15:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x51, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000200)="0804e7d4a5cd1d8caaa9b49042360586f8c5248c9ebe6b6f8d3a809272377b028539829337ef154a1ca464a9edee767d83c93076bb842e9af4c686c1100fc15d35004516df187d35baf3474e1f879231066e533e689cf8855a4a0a576cdf4efc78e05cea5d016ef2e6f8f0e8f6a2ec85f7bb41a05745befb6f72085c8873a3ba394acee7b8144b7d9d3fb9401e2ece913de960d69affd8c1d9e73169f19361354b0c6429f3b12b15fcaa00000000000000000000000000", &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000040)}, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) 11:15:43 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x3, 0x5, 0x204, 0x4, 0x60, 0x705ccf74, 0xff, 0xe7b6, 0x0}, &(0x7f00000003c0)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000400)={r1, 0x1}, &(0x7f0000000440)=0x8) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @remote}}, 0xffffffffffff0000, 0xfffffffffffffff9, 0xfffffffffffffff7, 0xfffffffffffffff8, 0x80}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e22, 0x1ff, @ipv4={[], [], @multicast1}, 0x4}}, [0x539, 0x337, 0x0, 0x0, 0x3f, 0x4, 0x8, 0xfffffffffffffffc, 0x5, 0x80000000, 0x100000001, 0x5, 0x3, 0x3ff, 0x1]}, &(0x7f0000000100)=0x100) dup2(r0, r2) 11:15:44 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) read(r0, &(0x7f0000000000)=""/250, 0x560) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 11:15:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x3ff, 0x5}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x4, 0x1}, 0x90) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e22, @remote}}}, 0x90) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x77, 0x20100c0, [0x40000003]}) 11:15:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x9, {{0xa, 0x78c, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80}}, 0x0, 0x2, [{{0xa, 0x4e20, 0xffffffff00000001, @mcast1, 0x2}}, {{0xa, 0x4e24, 0x51, @empty, 0x9}}]}, 0x190) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) 11:15:44 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x100000001, 0x200000) syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'bcsh0\x00'}}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000200), 0x4) ioctl$PPPIOCGMRU(r0, 0x80047437, &(0x7f0000000100)) 11:15:44 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x3, 0x5, 0x204, 0x4, 0x60, 0x705ccf74, 0xff, 0xe7b6, 0x0}, &(0x7f00000003c0)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000400)={r1, 0x1}, &(0x7f0000000440)=0x8) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @remote}}, 0xffffffffffff0000, 0xfffffffffffffff9, 0xfffffffffffffff7, 0xfffffffffffffff8, 0x80}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e22, 0x1ff, @ipv4={[], [], @multicast1}, 0x4}}, [0x539, 0x337, 0x0, 0x0, 0x3f, 0x4, 0x8, 0xfffffffffffffffc, 0x5, 0x80000000, 0x100000001, 0x5, 0x3, 0x3ff, 0x1]}, &(0x7f0000000100)=0x100) dup2(r0, r2) 11:15:44 executing program 5: mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x6004, 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_gettime(r0, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000100)='./bus\x00') socket$inet6(0xa, 0xffffffffffffffff, 0x8) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) creat(&(0x7f0000000440)='./bus\x00', 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f00000000c0)=0x202, 0xdd) 11:15:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x400000000000003) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2903) r0 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0xdcefab80a63b0641, 0x0) read$FUSE(r0, &(0x7f0000008500), 0x10d5) write$P9_RREADLINK(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000017010007006f2f66696c6530a18c9841bea13b3959ec1254d242f0509729486cb7d392e0cb2e8e8386a8a21ce51de049e00e7b139afed1d2ae61eff9a2360b70e6ce4eec2976111c33e2f3ec82412ec8be449abe30b54deeace217bcc9cf613d9528946a4a1afcb248a86e1d2ccc4a3c"], 0x10) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000180)={r2, 0x2}) 11:15:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000240)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0xffffffff, 0x4) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x20000000600000, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)) setitimer(0x0, 0x0, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = socket(0x840000000002, 0x0, 0xff) fcntl$setstatus(r3, 0x4, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x100000001) 11:15:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x600000, 0x0) write$capi20_data(r1, &(0x7f0000000080)={{0x10, 0xfffffffffffffc00, 0x1, 0x83, 0x8, 0x974}, 0x13, "34ef3155929c9a4895ad51cdcc9bb743eb99e1"}, 0x25) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000140)=0x9) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 203.197261][ T7838] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 203.257876][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 11:15:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x6, 0x8201) fallocate(r1, 0x0, 0x0, 0x3fffffe) flock(r1, 0x0) pwritev(r1, &(0x7f0000003440)=[{&(0x7f0000000440)='I', 0x1}], 0x1, 0x40000) fallocate(r1, 0x8, 0x0, 0x8000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 11:15:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x10000000004}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x400, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}], 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x28e, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000140)={0x1f, 0x7, 0x1, {{0x12, '/dev/snd/pcmC#D#c\x00'}, 0x8}}, 0x1f) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) 11:15:44 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x8c', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001700), 0x1000) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f00000016c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) fcntl$setflags(r0, 0x2, 0x0) tkill(r1, 0x15) [ 203.337244][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 11:15:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x400000000000003) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2903) r0 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0xdcefab80a63b0641, 0x0) read$FUSE(r0, &(0x7f0000008500), 0x10d5) write$P9_RREADLINK(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000017010007006f2f66696c6530a18c9841bea13b3959ec1254d242f0509729486cb7d392e0cb2e8e8386a8a21ce51de049e00e7b139afed1d2ae61eff9a2360b70e6ce4eec2976111c33e2f3ec82412ec8be449abe30b54deeace217bcc9cf613d9528946a4a1afcb248a86e1d2ccc4a3c"], 0x10) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000180)={r2, 0x2}) 11:15:44 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x58, 0x80000) sendto$netrom(r1, &(0x7f0000000080)="931193adff8b2b020b1609b25dded2f01f17c89f5c21181224e11883dff26359bf032a11f7294255e4a1d8b69f4ecfa7c0d2006a99004e973e69a47a0f46525dc1a601adcf98065aa4219f21abbbd3b16afbf5b29e52a8b71fefe6a6194ee25d69a002845f8568a9a35777ad3370ce9919f6014a34ee6bb250d907eeb61418dda2694c3945b3ac119cf3ca00636ab83b798ebdc5744a7c08240e251f230a477f340281de4d74442648c1574961ce7e34bed9302ec3a8ef901d9c1402", 0xbc, 0x44010, 0x0, 0x0) bind$llc(r0, &(0x7f0000000000), 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:15:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init1(0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000040)={0x8, 0x0, [], {0x0, @bt={0x64, 0x6, 0x0, 0x2, 0x75e, 0x6, 0x24, 0x7fffffff, 0x1, 0x2, 0x5, 0x10000, 0x2, 0x7c, 0x0, 0xc}}}) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000007c0)=0x9) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) r5 = getuid() lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() r8 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010007000000000002000100", @ANYRES32=r3, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r5, @ANYBLOB="020087a9", @ANYRES32=r6, @ANYBLOB="0200cf39", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r9, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r10, @ANYBLOB="08000500", @ANYRES32=r11, @ANYBLOB="08000400", @ANYRES32=r12, @ANYBLOB="10000600000000002000010000000000"], 0x74, 0x2) ioctl$RTC_VL_CLR(r2, 0x7014) 11:15:44 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r0 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000002000)='/', 0x1) syz_mount_image$reiserfs(&(0x7f0000000440)='reiserfs\x00', &(0x7f0000000480)='./file0\x00', 0x186cbb944000, 0x8, &(0x7f0000000ac0)=[{&(0x7f00000004c0)="6385742d21a1d644f23710926e20f668c011d5a085c909f978410cc82a9d6bcdc918fcf4cd5eaccb6f083e8fae789c41b127738912c0726e9d7f5dd2782133807a18eccdbd03aedff7750253647dacd8d0325f8c57819cd9f1b38935fe390afad2a2e1cf67db3f1d38839ce2cc9566b493acb661023248376cb4ea6fcb6a3597b578e8cdc8b9b69d42ad12df1c5630b87f55552c1c1b937c5b9f67bafe81f2256a646f27a4fae4683fd1dbd520bde3e6bb213b131b4f49f618c979601f19c7161d0cf4fb50965b82b0930867390017a4e7fbbd0d3979970fd2703d1e8239ca21fa27", 0xe2}, {&(0x7f00000005c0)="8ad5d546f2f3bc33ea225538252aab22ac2d939ceed11980154af85623304da93f222aaf2115129a48f71d07669f3c53d14056da11797c2ed4b1739170b84cb0ca54b9a4324a261459e144a54974281cd3ab2ae80d7ab76cd4af2068b1d04389dc2fb91754bc9969ded50a88667b6b9c0bb7bc782467d45f3742d4f06f05b0de054a2df092f09e0776afb71a048303d97aee750eba91063f4f6bdefbe2a05be1b4aabdba9b", 0xa5, 0xcbd9}, {&(0x7f0000000680)="cf7c00d35e72474bf274edca0a578f5fe2464b6585a76a93ce2146f3a9f8603e863bae6ed01c82a77ee98e4f01bbed686c5b376e70b6a937349fca2245518a5cfce6b5a1a021d92e3359d8a1f09cc04ed458309f795f58adf344bb2dfb2a52c1cd9edde3e6a572", 0x67, 0x101}, {&(0x7f0000000700)="36da2a4b4f15f85599b483afe1157baab4b92bb3b1bd704c2f27", 0x1a}, {&(0x7f0000000740)="c4c3801325cfe04795be7e77e30cf61008e765e31056a0a86c71e5d9b09dde7b980bb8472dae345b0b10f1055797e1a907d0b97637201fdd0cf6ac5eaa6da2ac9e25dd6e8d27e535d7c79dfa687ef2eacd74cb5c5fbab7036b7d16c7d0f20c17099cedaafc422eb3d87d9f6d513dda3f8623deed1cf122b112ed7b8308e6646a22e17e8036427aab7fcc6f66e34842e9174484707f790c749d882132c630e3db680744d584af2e5de0ebc1973927a152dc26a2a3076c221f026783d9e394376edc020cd158a02e845f75f4356cf85fb68f56b1919fc9bc1c1be8b61263", 0xdd, 0x1}, {&(0x7f0000000840)="cd6094b34fd766ba53586a9396f943126533044a9404190b64c60fb31cf32cca56a56c093c6007c6c0ef892cfc46fd4a3420f615a1ef69dd6c8897cce54fd959a04341c2fea4960f85d34a0b0e35f98a61aec47f536133225201d704d4b7f2cf88d26816fb135d4b9afd3fe202793656ebbbfc97a869385646194846a372a715827413984811c78aefedc5b842f2aa68626817ddd3402f6fb1da1a09f99e779a8685cff7bc9a54f7eea4f21b279a06e655967abc7f6f3b7517c24e8c1607d6740e87f0bc2cb8", 0xc6, 0x3ff}, {&(0x7f0000000940)="d5dcc4ff9a3bdbce61f21adc4c0f96c119adccb15298d69072c84b63b46eaf617e19a493a37129804bc4ccdaa501f4db58fc3298de620e92ae72a2f05e4b118fb74974de7d419fd922a7bbc4c6cb056afabc9c67a314b74a6a95c0c3f569bd934da385d8c6e2de50a4860fc4e25c9bc05ca2e1133bd1cfeb942f2e5635a9c9367fcb1880fdd96e01d6b09f09253659840f82b64778020343499dfdb691308869b040d4018fa42ac4796589db04a6838c5c25cb03925627e11b633d29512e0955b76c", 0xc2, 0x2}, {&(0x7f0000000a40)="28ce685ec3fb3ad81696c322edc5468607938421dab214afbaa563dbee69f8fe65915191410409930e3bcb52841d69a4f30aac1c01e264352fc58b5b3942805e9643b8b46e3e22be180b78d817da491f9fcd59626fed83dd0ad07dc340135999592cb58595ec3098c0934f1270e190649407b5f1e98665", 0x77, 0x800}], 0x80, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7065726d69745f646972656374696f2c7063723d303030ec6da97166debc690a98912dfecd30303030308feceed209373cd614bc9c"]) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000300)={0x7f, 0x1ff}, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000003c0)={0x3, 0x0, [{}, {}, {}]}) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000340)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x77359400}}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="c999ac46ef26236b401292982711afd27cecbafd00fbdd19d8d3cb17e5be770b984cb5adaf34024d935ecd3bac1e14dfa856bd7e9ff45a3222f4794722cb2706efd5b564f92a43c0bbfb87ecd85701809e9ddc9f129447c83f9a8b9a86dd", 0x5e, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000c00)="ea428601dc7c1b0ea70fadb0d3845c53bf55acde3eefabf18569efb5d74aa3cec17c1ce1a482c0044da4fa090fa10762f6fbade51a24a03c704a73d97793bd859b86da15178320e79888de9759d8cd829d8122bc5fee4bb593fca474540a785af44f0ad274bbbd74b0bd3c51") setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000240)=0xfffffffffffffeba, 0x4) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 11:15:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x6c00000000000000, &(0x7f00000003c0)}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="01000600000200000000db7ed8336755"], &(0x7f00000002c0)=0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x5, 0x1}, 0x8) [ 203.681544][ T7876] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "permit_directio" 11:15:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev}, {@in6=@mcast2, 0x0, 0x2b}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x331}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 11:15:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, &(0x7f0000000000)) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x1cf, 0xd1, 0xfffffffffffffffb, 0xa4, 0x31c, 0x9, 0x2f2, 0x9}, "1a5ce94e54ed092971b3d2fadec37f1d84fcb56f198df81f8fd0bebbbc5cc89f0b8479a7dec47465793cf1afc18127ce093046e723081ae959775da7039ac74284a28ef02ee22dbc8288925646be07b9023ab314230be7793d8aac0c7109ddebb0db3e7155543c852fde348e2d64f01b80085201ad3b94d2330b454d0ccfe088565bb1adf891a0d7693753d007fc60", [[]]}, 0x1af) [ 203.829754][ T7891] binder: 7889:7891 transaction failed 29189/-22, size 24-8 line 2994 [ 203.851231][ T7891] binder: 7889:7891 ioctl c0306201 20000440 returned -14 11:15:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x7fffffff, @initdev}}, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, &(0x7f0000000580)="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", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)="175be26c0870d17c89e4564d6fe99c807c844080f8e3568fcf32e6137648a369bb435cf674360e4c1eae54ac9c0395bd328c239ffe0b62edb681166a06c1d8be1b7f3d5f68c5bfdd04e2bb7b875b8d9bedc271e5a0b6c8f3359a1a58f9b9e00d11aa967dc98adb767dd23ab275faa1953861f3e0852bb89d0b8764d09c73ec928a8dd8bd0aeb0cb16a8699ac3cfb479e2518b7b53bc50f531b715432de545900918ee75dc77460e74d5d66851b88ed88f5149c4878e8fd448ed5aec88a440932b16578b1115f8bb1d88efe4c1f8ef9c8cfb0e174c92c4548eb6500d5143874acabcbed13270b") ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000200)=0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 203.921912][ T7891] binder: 7889:7891 transaction failed 29189/-22, size 24-8 line 2994 11:15:45 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x4788}}}}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:15:45 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='gretap0\x00'}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x40, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000140)={0x9, 0x2, 0x8f, 0x0, 0x6, 0x1f}) bind$inet6(r1, &(0x7f0000cb8fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x47) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="a519422a6f2f221a9697f1d927d0f14845ca1b39582c0d24ba4a61151b826eabe15c609e8ff8410e62af0c643b30f396b112a5d31949b2edc5f1743007a41f71783be0eefcb789d7e351a7", @ANYRES16=r3, @ANYBLOB="00042cbd7000fbdbdf25020000000c00080003000000000000000c00020000000000000000000c0005000200000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) listen(r1, 0xfffffffffffffffd) listen(r0, 0x0) [ 203.963206][ T7898] binder: 7895:7898 ioctl c018620c 20000000 returned -22 [ 203.979664][ T7883] Invalid option length (646) for dns_resolver key [ 203.998308][ T7903] binder: 7895:7903 ioctl c018620c 20000000 returned -1 [ 203.998324][ T7898] binder: BINDER_SET_CONTEXT_MGR already set [ 204.025440][ T7891] binder: 7889:7891 ioctl c0306201 20000440 returned -14 11:15:45 executing program 0: r0 = creat(&(0x7f0000000080)='./fi.e1\x8c/file0\x00', 0x100000000000c2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x1f, 0x4) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x25, 0x40000002, r1, &(0x7f0000000040)='./fi.e1\x8c\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x350, 0x100000000, 0x8, 'queue1\x00', 0x1}) [ 204.156114][ T7898] binder: 7895:7898 ioctl 40046207 0 returned -16 11:15:45 executing program 5: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev={[], 0x8864}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) 11:15:45 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0010512}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc000) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="24000000100001000000fd946fa2830020200a0009000300001c85680c1ba3a20400ff5e28000000090affffba16a0aa1c0009c001da5a80d1090000000000000029090000000cd37eaa0e9e", 0x4c}], 0x1}, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x2400, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f0000000240)={{0x77359400}, {r4, r5+10000000}}, &(0x7f0000000280)) [ 204.242961][ T7915] kvm: emulating exchange as write 11:15:45 executing program 3: membarrier(0x2, 0x0) 11:15:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000180)=""/157, 0x9d}], 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/anycast6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000240)=""/28, 0x3c}, {&(0x7f0000000540)=""/26}], 0x304, 0x0) [ 204.337298][ T7928] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.370987][ T7883] REISERFS warning (device loop1): reiserfs_fill_super: Cannot allocate commit workqueue [ 204.435512][ T7933] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 11:15:45 executing program 5: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev={[], 0x8864}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) 11:15:45 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r0 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000002000)='/', 0x1) syz_mount_image$reiserfs(&(0x7f0000000440)='reiserfs\x00', &(0x7f0000000480)='./file0\x00', 0x186cbb944000, 0x8, &(0x7f0000000ac0)=[{&(0x7f00000004c0)="6385742d21a1d644f23710926e20f668c011d5a085c909f978410cc82a9d6bcdc918fcf4cd5eaccb6f083e8fae789c41b127738912c0726e9d7f5dd2782133807a18eccdbd03aedff7750253647dacd8d0325f8c57819cd9f1b38935fe390afad2a2e1cf67db3f1d38839ce2cc9566b493acb661023248376cb4ea6fcb6a3597b578e8cdc8b9b69d42ad12df1c5630b87f55552c1c1b937c5b9f67bafe81f2256a646f27a4fae4683fd1dbd520bde3e6bb213b131b4f49f618c979601f19c7161d0cf4fb50965b82b0930867390017a4e7fbbd0d3979970fd2703d1e8239ca21fa27", 0xe2}, {&(0x7f00000005c0)="8ad5d546f2f3bc33ea225538252aab22ac2d939ceed11980154af85623304da93f222aaf2115129a48f71d07669f3c53d14056da11797c2ed4b1739170b84cb0ca54b9a4324a261459e144a54974281cd3ab2ae80d7ab76cd4af2068b1d04389dc2fb91754bc9969ded50a88667b6b9c0bb7bc782467d45f3742d4f06f05b0de054a2df092f09e0776afb71a048303d97aee750eba91063f4f6bdefbe2a05be1b4aabdba9b", 0xa5, 0xcbd9}, {&(0x7f0000000680)="cf7c00d35e72474bf274edca0a578f5fe2464b6585a76a93ce2146f3a9f8603e863bae6ed01c82a77ee98e4f01bbed686c5b376e70b6a937349fca2245518a5cfce6b5a1a021d92e3359d8a1f09cc04ed458309f795f58adf344bb2dfb2a52c1cd9edde3e6a572", 0x67, 0x101}, {&(0x7f0000000700)="36da2a4b4f15f85599b483afe1157baab4b92bb3b1bd704c2f27", 0x1a}, {&(0x7f0000000740)="c4c3801325cfe04795be7e77e30cf61008e765e31056a0a86c71e5d9b09dde7b980bb8472dae345b0b10f1055797e1a907d0b97637201fdd0cf6ac5eaa6da2ac9e25dd6e8d27e535d7c79dfa687ef2eacd74cb5c5fbab7036b7d16c7d0f20c17099cedaafc422eb3d87d9f6d513dda3f8623deed1cf122b112ed7b8308e6646a22e17e8036427aab7fcc6f66e34842e9174484707f790c749d882132c630e3db680744d584af2e5de0ebc1973927a152dc26a2a3076c221f026783d9e394376edc020cd158a02e845f75f4356cf85fb68f56b1919fc9bc1c1be8b61263", 0xdd, 0x1}, {&(0x7f0000000840)="cd6094b34fd766ba53586a9396f943126533044a9404190b64c60fb31cf32cca56a56c093c6007c6c0ef892cfc46fd4a3420f615a1ef69dd6c8897cce54fd959a04341c2fea4960f85d34a0b0e35f98a61aec47f536133225201d704d4b7f2cf88d26816fb135d4b9afd3fe202793656ebbbfc97a869385646194846a372a715827413984811c78aefedc5b842f2aa68626817ddd3402f6fb1da1a09f99e779a8685cff7bc9a54f7eea4f21b279a06e655967abc7f6f3b7517c24e8c1607d6740e87f0bc2cb8", 0xc6, 0x3ff}, {&(0x7f0000000940)="d5dcc4ff9a3bdbce61f21adc4c0f96c119adccb15298d69072c84b63b46eaf617e19a493a37129804bc4ccdaa501f4db58fc3298de620e92ae72a2f05e4b118fb74974de7d419fd922a7bbc4c6cb056afabc9c67a314b74a6a95c0c3f569bd934da385d8c6e2de50a4860fc4e25c9bc05ca2e1133bd1cfeb942f2e5635a9c9367fcb1880fdd96e01d6b09f09253659840f82b64778020343499dfdb691308869b040d4018fa42ac4796589db04a6838c5c25cb03925627e11b633d29512e0955b76c", 0xc2, 0x2}, {&(0x7f0000000a40)="28ce685ec3fb3ad81696c322edc5468607938421dab214afbaa563dbee69f8fe65915191410409930e3bcb52841d69a4f30aac1c01e264352fc58b5b3942805e9643b8b46e3e22be180b78d817da491f9fcd59626fed83dd0ad07dc340135999592cb58595ec3098c0934f1270e190649407b5f1e98665", 0x77, 0x800}], 0x80, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7065726d69745f646972656374696f2c7063723d303030ec6da97166debc690a98912dfecd30303030308feceed209373cd614bc9c"]) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000300)={0x7f, 0x1ff}, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000003c0)={0x3, 0x0, [{}, {}, {}]}) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000340)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x77359400}}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="c999ac46ef26236b401292982711afd27cecbafd00fbdd19d8d3cb17e5be770b984cb5adaf34024d935ecd3bac1e14dfa856bd7e9ff45a3222f4794722cb2706efd5b564f92a43c0bbfb87ecd85701809e9ddc9f129447c83f9a8b9a86dd", 0x5e, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000c00)="ea428601dc7c1b0ea70fadb0d3845c53bf55acde3eefabf18569efb5d74aa3cec17c1ce1a482c0044da4fa090fa10762f6fbade51a24a03c704a73d97793bd859b86da15178320e79888de9759d8cd829d8122bc5fee4bb593fca474540a785af44f0ad274bbbd74b0bd3c51") setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000240)=0xfffffffffffffeba, 0x4) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 11:15:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0xba0, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0xa331, 0xfffffffffffffffb, 0x1, 0xff, 0x2, [{0x9, 0x8b, 0x3}, {0x4, 0x7, 0x6, 0x0, 0x0, 0x104}]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x1) 11:15:45 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0xc63b) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) [ 204.921350][ T7951] Invalid option length (646) for dns_resolver key 11:15:46 executing program 5: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000181000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0x7, 0x7, 0xfffffffffffff819, 0x8}, 0x3b, [0x4, 0x4, 0x5, 0xfffffffffffffffb, 0x101, 0x3f, 0x0, 0x4, 0x2800, 0x5, 0xad3, 0xb4c1, 0x5, 0x0, 0xfffffffffffeffff, 0x72ff, 0x2, 0x6, 0x7, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x7, 0x7, 0x628, 0x10001, 0x33, 0x9, 0x100, 0x5, 0x8, 0x9, 0x401, 0x4, 0x379, 0x8, 0x6cdf, 0x4, 0x4, 0x0, 0x2, 0x3, 0xd113, 0x1, 0x80, 0x60, 0xfffffffffffffc76, 0x5, 0x80000001, 0x7, 0x2, 0x0, 0x8, 0xe91, 0x1, 0x7, 0x3, 0x7, 0x5, 0x8001, 0xfffffffffffffff9, 0x80, 0x7], [0x0, 0x6, 0x2, 0x917, 0x5, 0x100, 0x20, 0x0, 0x63, 0x5, 0x1ff, 0x6, 0x9, 0x6, 0x0, 0xf0d, 0xfff, 0x3970, 0xc97a, 0x8000, 0x2, 0x8001, 0x6, 0x1000, 0x80000001, 0xe000000000000000, 0x2, 0x380000, 0x0, 0x2, 0x2c9, 0xa30, 0x5, 0x800, 0x1d6, 0x1, 0x0, 0x7, 0x7fff, 0x2, 0x10001, 0x80000001, 0x8, 0x53, 0x0, 0x32e, 0x8, 0xfffffffffffffff8, 0x1000, 0xffffffffffffff01, 0x2, 0x1ab0, 0x0, 0x759c00e1, 0x8, 0xfffffffffffffffc, 0x6, 0x5, 0x3, 0x3, 0x9, 0x8, 0x10000, 0x1f], [0x6, 0x47a, 0x2, 0x4, 0x1, 0x97, 0x80, 0x7fffffff, 0x7, 0xc8d, 0x101, 0x8, 0x4, 0x2, 0x2, 0xff, 0x43b99022, 0xf276, 0xfffffffffffffff9, 0x100, 0x2, 0x77a, 0x81, 0x0, 0x80000001, 0x3, 0x40, 0x2, 0x2, 0x0, 0x1, 0x3, 0x9, 0xfffffffffffffff8, 0xa644, 0xfffffffffffff093, 0x3, 0x0, 0x0, 0x822, 0x7, 0xdf, 0x8, 0x4, 0x0, 0x9, 0x5, 0x1, 0x3, 0xffffffffffffffff, 0x6, 0x5, 0x5, 0x80000000, 0x2, 0x1, 0x20, 0x40a, 0x1ff, 0xff, 0x1, 0x100, 0x10001, 0x6], [0x5, 0x3, 0x3, 0x6, 0xca, 0x0, 0xffff, 0xfb50, 0xffff, 0x100000001, 0x0, 0x8, 0x7, 0x100, 0xff, 0x5, 0x7fff, 0x7, 0x10000, 0x4, 0x6, 0x80000001, 0x2e, 0x80, 0x3, 0x1, 0x7, 0x7, 0x100, 0x8, 0x100000001, 0xff, 0x80, 0x20, 0x4, 0x0, 0x3b21b889, 0x5, 0xd67, 0x1000, 0x7686, 0x9de7, 0x6, 0x1, 0x10001, 0x0, 0x3c14d741, 0x9, 0x40, 0x7fffffff, 0x8, 0x2, 0x2, 0x3f, 0x1, 0x8, 0x0, 0xd0, 0xff, 0x7ff, 0x3, 0xfffffffffffffffd, 0x3]}, 0x45c) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x4000, 0x0, 0x7, 0x0, 0x0, r1, &(0x7f0000000200), 0xfffffdcc}]) 11:15:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00\xb5\xc6.\x9e\x8d\xe9\xf2Cd\n\xdf\x800x0, @in6={{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x18}, 0x7}}}, &(0x7f0000000200)=0x84) r2 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0xce, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000e00)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000940)={0x2, 0xeab2, 0x4, 'queue0\x00', 0x7ff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in={{0x2, 0x4e20, @broadcast}}, 0x5, 0x4}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x8, @loopback, 0x8}}, 0x0, 0xfffffffffffffffb, 0xffff, 0x0, 0x4}, &(0x7f0000000080)=0x98) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000900)=0x8) 11:15:46 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000000)={0x0, @data}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0xfff, 0xfffffffb, 0x2, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x0, {0x0, @raw_data="2085f3072c9b42f03f10be83b68ebcf014a0409fdf8be3d3e82c747c7f79f7cee00b443f02000000a91ca25441677d169fb75a152d6eebf4bef6c96076d67f243aebaac6430c9ef1a788e60eb3d0a7c29a5e3416871c8a51df55701a05e0a2f09883c482efaf6dc9e1695038733a23bbf0faf76a1d3fae5c251c4fad507b2ead2f1581057e3f84f3e8503ee570d8069eb53a897d2dd5f3d89629917fb171132181e9f3c510ac5229a6b6096547977578c5795d84cf23fe1d042df97dbd37a4b3d0e338a1b611e3ae"}}) 11:15:46 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x7, 0x70, 0xffffffff, 0x3, 0xfff, 0xd2b, 0x0, 0x7, 0x0, 0x2, 0x12, 0x2, 0x3c, 0x0, 0xed, 0xcd, 0x8, 0xa90, 0x240, 0x800, 0x9, 0x100000001, 0x40e4, 0x8, 0x50c9, 0x6, 0x2, 0x8, 0x4, 0x1, 0xfe84, 0x1, 0x1, 0x9, 0xfffffffffffffff8, 0x7, 0x1, 0x2ed2, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x2440, 0x0, 0x0, 0x9, 0x8000, 0x9, 0x8001}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x10) listen(r0, 0xfc0004) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") recvmmsg(r1, &(0x7f00000000c0), 0x40000000000017d, 0x0, 0x0) 11:15:46 executing program 4: r0 = socket$inet6(0xa, 0xa, 0x80000001) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x100000001}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x8001) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000080)={0x4, 0x9}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @mcast1, 0x300000003}, 0x8) [ 205.192763][ T7982] use of bytesused == 0 is deprecated and will be removed in the future, 11:15:46 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x3f, &(0x7f0000000240)="7861819d4f59f3a89081767b60bc21d888768bc84815662a91be3e603db53553f1efb1160984fcd978bedc0c6fad62d010f3e0fea689732887aa2a1593c685a467d2a3199017aaf7452d72c01c3f4f77952dd111730aff71a390", 0x5a) read(r2, &(0x7f0000001900)=""/4096, 0xfec5) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000000)=0x1) ftruncate(r3, 0x8007d) sendfile(r2, r3, 0x0, 0x2008000fffffffd) recvfrom$ax25(r3, &(0x7f00000000c0)=""/249, 0xf9, 0x1, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 11:15:46 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x21, &(0x7f0000e62000)={@broadcast, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast2}, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/49) [ 205.276782][ T7982] use the actual size instead. 11:15:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20000, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) ioctl$TIOCSTI(r0, 0x5412, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x40000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) set_mempolicy(0x4001, &(0x7f00000000c0)=0xffffffffffffff81, 0xfb) userfaultfd(0xfbffffd) 11:15:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000380)=0x80, 0x4) pkey_alloc(0x0, 0x1e26a7c80ae9a9eb) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c562c84ed7a80ffe0060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) 11:15:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0x400000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) listen(r0, 0x9) listen(0xffffffffffffffff, 0x0) 11:15:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x20000000080002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000106000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000eb1692a412000c000100626f6e64000000000c00020008000900ffffffff"], 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000340)={r2, 0x303c49fe, 0x1}, 0x8) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x4924924924929cb, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x10000, 0x2) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000000c0)={0x101, 0x1000}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='rose0\x00') 11:15:46 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x3f, &(0x7f0000000240)="7861819d4f59f3a89081767b60bc21d888768bc84815662a91be3e603db53553f1efb1160984fcd978bedc0c6fad62d010f3e0fea689732887aa2a1593c685a467d2a3199017aaf7452d72c01c3f4f77952dd111730aff71a390", 0x5a) read(r2, &(0x7f0000001900)=""/4096, 0xfec5) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000000)=0x1) ftruncate(r3, 0x8007d) sendfile(r2, r3, 0x0, 0x2008000fffffffd) recvfrom$ax25(r3, &(0x7f00000000c0)=""/249, 0xf9, 0x1, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 11:15:46 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) tgkill(r1, r2, 0x2f) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xc8880, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 11:15:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0xc0040) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e22, 0x1, @empty, 0x7fffffff}, {0xa, 0x4e20, 0x6, @mcast1, 0x5}, 0x9, [0x7f, 0x1, 0x7, 0x8, 0xffffffff, 0x20, 0x2, 0x7]}, 0x5c) 11:15:46 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)=@hci, 0x80, 0x0, 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0}}], 0x2, 0x0) capset(&(0x7f00000003c0), &(0x7f0000000400)={0xe609, 0xfffffffffffff026, 0x5, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x0, 0x8, 0x2}}, 0x28) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="080000003900bfd41a61cb37648499e2c3d56bfcadcadcf9e43197f0c042f32a050e55f790b932d1fb4881f9a27fdf70feffbad1cde2d842e2b4539f39a657d51f3faeaec417096db13d5cf2a74a9c25bd3554611eff8633794c80a8d1d7d1083a3e89c2b74a88448c432e95f8b98330b4b9825b5d3b3912eacd7bf53e76a755feacf14c33250b9aac6e81ec005ea0752c6db96e393c891ddac0790406029d977da27d22133c2d31572359947d1e72aeaa7d5bb75b043d1676eb1d055e2f3404f796aaa0ac1d58d69bb41d1a7a5e22dc701402428d8e81adb17d8fec12cb192e5fc389007afa7714c8ec2d71820dbc75"]) 11:15:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0x400000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) listen(r0, 0x9) listen(0xffffffffffffffff, 0x0) [ 205.582220][ T8028] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 11:15:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0x400000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) listen(r0, 0x9) listen(0xffffffffffffffff, 0x0) 11:15:47 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) tgkill(r1, r2, 0x2f) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xc8880, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 11:15:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0xc0040) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e22, 0x1, @empty, 0x7fffffff}, {0xa, 0x4e20, 0x6, @mcast1, 0x5}, 0x9, [0x7f, 0x1, 0x7, 0x8, 0xffffffff, 0x20, 0x2, 0x7]}, 0x5c) 11:15:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0x400000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) listen(r0, 0x9) listen(0xffffffffffffffff, 0x0) 11:15:47 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/156) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7c976d59, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000040)={0xf45}) 11:15:47 executing program 0: setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getpgrp(0x0) getresgid(0x0, &(0x7f0000001940), 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) lstat(0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000001bc0)={{}, 0x0, 0x100000000, 0x3}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x32f, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) gettid() r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000140)={0x0, 0x1, 0xfffffffffffffff7, 0x5, 0x2, 0x5, 0x22, "40c5e2fe078f7f33043112ae0d04f9a12aa02ea1", "b7a07f1da24712f5b1f4531c7fd659d688b4e17b"}) process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/213, 0xd5}], 0x2, &(0x7f0000001600)=[{&(0x7f0000000500)=""/224, 0xe0}, {0x0}, {0x0}], 0x3, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) close(0xffffffffffffffff) 11:15:47 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xf0ffff, &(0x7f0000005d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="dc88dee400000000000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c00010069703667726500001800020014000600ff0109000000000000000000000000010c000200aaaaaaaaaaaa000008000a00", @ANYRES32=0x33e0], 0x5c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7fffffff, 0x20000) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000240)) 11:15:47 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x12) write$9p(r0, &(0x7f0000000040)="03ac", 0x2) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000200)=""/246, 0xf6) 11:15:47 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x2000000000008040, 0x0) fcntl$setsig(r0, 0xa, 0x11) prctl$PR_SET_TSC(0x1a, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) fcntl$setlease(r0, 0x400, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 11:15:47 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2400000004061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0xdd01, 0xb1, 0x1000, 0x20}, {0x9, 0xfffffffeffffffff, 0x9, 0x6}]}) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, r3) [ 206.272018][ T27] audit: type=1804 audit(1552994147.531:31): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir650073917/syzkaller.JVyElo/15/file0" dev="sda1" ino=16169 res=1 [ 206.389160][ T8088] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 206.410288][ T27] audit: type=1804 audit(1552994147.531:32): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir650073917/syzkaller.JVyElo/15/file0" dev="sda1" ino=16169 res=1 [ 206.412209][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 206.517443][ T27] audit: type=1804 audit(1552994147.531:33): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir650073917/syzkaller.JVyElo/15/file0" dev="sda1" ino=16169 res=1 [ 206.547435][ T8088] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 206.566191][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 11:15:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x7) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmmsg(r1, &(0x7f0000005fc0), 0x28e, 0x0) 11:15:49 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @dev, [{[{0x9100, 0x401, 0x4, 0x4}], {0x8100, 0x80, 0x5, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0xfeffffff, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x883e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 11:15:49 executing program 0: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 11:15:49 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_SIOCOUTQNSD(r0, 0x400448c8, &(0x7f0000000000)) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000, 0x2) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x2, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x159, 0x1, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 11:15:49 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0xe1, 0x5, 0x40, &(0x7f0000ffd000/0x2000)=nil, 0x7fff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000110000006c000000000000009500000000000000db19d6340b6df234a5bf615506d25e7b7563189723271faccf664d08bfe6248c5864b67d06e98aa710ff208fab44f77b76e14dee9d0d3ac104688fbd006ba06526d1888baa595f25a250ac3079dca3471bfb283121563f4b44ac8ce3356014636949"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000140)={r1}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xffffffffa0008000, 0xe, 0x0, &(0x7f0000000040)="2504f2ff1f002c6176c5f3343dbe", 0x0, 0xf0ffff00000855}, 0x28) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) connect(r1, &(0x7f00000004c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1}, 0x3}}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$unix(r1, &(0x7f0000000540)=@abs, &(0x7f00000000c0)=0x6e) 11:15:49 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0x176]}) 11:15:49 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000000)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x103601, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000001c0)={0x3c, @multicast2, 0x4e24, 0x4, 'nq\x00', 0xe, 0x3f, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'sed\x00'}, 0x2c) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000280)={r2, 0x3}) 11:15:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rtc0\x00', 0x0, 0x0) r2 = accept4$bt_l2cap(r1, &(0x7f0000000300), &(0x7f0000000340)=0xe, 0x80000) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000002200230000000000020065d40798cde01c36f5a614096f1e8ed0"], 0x18}}, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x4, 0x20ca00) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x9, @loopback, 0x7}}}, &(0x7f0000000200)=0x84) readahead(r2, 0xffffffff80000000, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000240)={r4, 0x2}, &(0x7f0000000280)=0x8) prctl$PR_SET_SECUREBITS(0x1c, 0x2) r5 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x2000) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000040)="e411434dad22c8d80f591753b44a92ad7eb1ee5ff76be62f2a14aa43669c", 0x1e) getsockname(r0, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setitimer(0x2, &(0x7f00000003c0)={{r6, r7/1000+10000}, {0x77359400}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000400)) 11:15:49 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000002c0)=""/239) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x400000, 0x0) unlinkat(r3, &(0x7f0000000100)='./file0\x00', 0x200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x45, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001645e49a"], 0x0, 0x0, 0x0}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000180)=0x3, 0x4) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000080)) pipe(&(0x7f0000000140)) 11:15:49 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000200)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) ppoll(&(0x7f0000000000)=[{r1, 0x600}, {r1}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={0xb2f}, 0x8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x402, 0x0) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, 0x0, r3) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x1, {0xa000000000000000, 0x1, 0xfffffffffffffffc, 0x3, 0x8, 0x1, 0x200, 0x4, 0x1ff}}, 0x43) 11:15:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x30800, 0x0) mmap(&(0x7f00009b3000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x813, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x8000000000001, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140), 0x10) r2 = dup2(r1, r0) ioctl$RTC_UIE_ON(r2, 0x7003) [ 208.617590][ T8136] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 208.649302][ T8138] binder: 8134:8138 got transaction with unaligned buffers size, 154 11:15:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x3, r3, 0x8}) r4 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x20000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000180)={0x9, 0x0, 0x200f, 0x48, 0xa45, 0xffff, 0x3, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x40000000000000, 0x0, 0x2, r3, 0x7}) [ 208.707492][ T8138] binder: 8134:8138 transaction failed 29201/-22, size 0-0 line 3210 11:15:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x800032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x4001) fdatasync(r1) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 11:15:50 executing program 2: r0 = socket(0x848000000015, 0x805, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x7, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x9, 0x3, 0x7fff, 0x81}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x101, 0x24080) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000200)=""/81) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000001c0)={0x800, 0x0, r2, 0x0, r3, 0x0, 0x1, 0x7d1}) [ 208.780823][ T8138] binder: BINDER_SET_CONTEXT_MGR already set [ 208.801075][ T8144] binder_alloc: 8134: binder_alloc_buf, no vma 11:15:50 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="301cf56cb4e6d49732341f98de2bca14", 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) fadvise64(r0, 0x0, 0x5, 0x3) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x802, 0x18, 0xfa11, {0x10, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) [ 208.832397][ T8138] binder: 8134:8138 ioctl 40046207 0 returned -16 11:15:50 executing program 2: r0 = socket$inet(0x10, 0xb, 0x3) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000004e0007131dfffd946fa2830020090a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 11:15:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = userfaultfd(0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) r3 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in6=@rand_addr="4ba698cfc45014be6843d8a61a6b926e", 0x4e22, 0x5, 0x4e21, 0x1, 0x2, 0x20, 0xa0, 0x0, r2, r3}, {0x401, 0x2, 0x0, 0xffff, 0x7, 0x9f, 0x7f, 0x8}, {0x7, 0x48d336a7, 0x2, 0x8a}, 0x5, 0x6e6bbe, 0x1, 0x1, 0x3, 0x1}, {{@in=@multicast1, 0x4d4, 0x7e}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x34ff, 0x3, 0x0, 0x5, 0x3f, 0x10000, 0x8000}}, 0xe8) close(r1) [ 208.877701][ T8144] binder: 8134:8144 transaction failed 29189/-3, size 0-0 line 3147 [ 208.880624][ T22] binder: undelivered TRANSACTION_ERROR: 29201 11:15:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0xfffffffffffffffc}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6}}, 0xe8) dup2(r0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) [ 208.943603][ T7640] binder: undelivered TRANSACTION_ERROR: 29189 11:15:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0xc, 0x209e1e, 0x408000000001}, 0x2c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r2, 0x310, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x81) bpf$MAP_CREATE(0x2, &(0x7f00000001c0)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) r3 = dup(r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@int=0x7ff, 0x4) 11:15:50 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x7, 0x401) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x200000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x4000, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x220841, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, 0x0) readahead(r0, 0xff, 0x0) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x1, 0x0) msgrcv(r2, &(0x7f0000000040)={0x0, ""/4}, 0xc, 0x0, 0x0) r3 = dup(r0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000680)={0xfff, 0x2, 0x6fb, 0xffff, [], [], [], 0x7108, 0x1, 0x84, 0x3, "237c1395d3094b3d80fe8886c920a248"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, &(0x7f0000000140)) r5 = semget$private(0x0, 0x3, 0x100) semtimedop(r5, &(0x7f00000003c0)=[{0x0, 0x2, 0x1000}, {0x3, 0x8, 0x1000}, {0x5, 0x5, 0x1800}], 0x3, &(0x7f0000000600)={0x0, 0x1c9c380}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x8, 0x4]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x0, 0x64f}, 0x2c) r6 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x400000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0x268, r8, 0x408, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0x8, 0x4, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @mcast2, 0x1000}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x85d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000}, 0x24004014) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x24, r7, 0x201, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x261}, 0x1, 0x0, 0x0, 0x1}, 0x80) write$FUSE_ENTRY(r6, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x0, 0xa0, 0x851, 0x7, 0xbbf, {0x0, 0x800, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x800, 0x7f, 0x0, 0x0, 0x8, 0x6283cb1d}}}, 0x90) msgrcv(0x0, &(0x7f0000000000), 0x8, 0x2, 0x1000) 11:15:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0xfffffffffffffffc}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6}}, 0xe8) dup2(r0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) 11:15:51 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b700000000000100bfa30000000000001703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000013d4003000000320f00000000000000001c040000000000006f460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='P\\\x88\x1c'}, 0x48) 11:15:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2307d, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2003, 0x0) 11:15:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0xfffffffffffffffc}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6}}, 0xe8) dup2(r0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) 11:15:51 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x9, 0x1) r2 = dup2(r0, r0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000200)={r3, 0x7, &(0x7f0000000100)=[0x7, 0x8, 0x4, 0xc64, 0xfffffffffffeffff, 0x8, 0x1f], &(0x7f0000000140)=[0x80, 0x5], 0x2, 0x1, 0x7fffffff, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x2, 0xa3, 0xdd, 0x2, 0x8, 0x5, 0x5, 0x45, 0x9717]}) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) 11:15:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0xc, 0x209e1e, 0x408000000001}, 0x2c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r2, 0x310, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x81) bpf$MAP_CREATE(0x2, &(0x7f00000001c0)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) r3 = dup(r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@int=0x7ff, 0x4) 11:15:51 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="301cf56cb4e6d49732341f98de2bca14", 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) fadvise64(r0, 0x0, 0x5, 0x3) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x802, 0x18, 0xfa11, {0x10, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) 11:15:51 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}, {0x0}, {&(0x7f0000001740)=""/155, 0x9b}, {0x0}, {&(0x7f0000000080)=""/102, 0x66}], 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5c}, {0x0, 0x281}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x3, @remote, 'nr0\x00'}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1}}], 0x1, 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 11:15:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='rdma.current\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x9032662}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800779c73abe39954c107a2f6732d1a1ad02e91fb6378b66498e8f6f79e1e3a0e0a1e863395eeaab75a414c5ca43c2907f412fd4060dc414c7039e517e90057d899854e2aabe4791ab51f00", @ANYRES16=r2, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000580)={0x0, 0x0}) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x5, 0xfffffffffffffffc, 0x82, 0xf9c, 0x0, 0x31, 0x40000, 0x2, 0xfffffffffffffffd, 0x583b2d7d, 0x200, 0x3, 0x8001, 0x7fff, 0x401, 0x5, 0x6, 0x8, 0x80000001, 0x8, 0x2, 0x8, 0x80, 0x5, 0xbfe, 0x9, 0x4, 0x47, 0x7, 0x1, 0x2000000000000000, 0xbbae, 0xffffffffffff7819, 0x1f, 0x2, 0x3, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000300), 0x9}, 0x100, 0x480, 0x9, 0x0, 0x9411, 0x8, 0x5}, r4, 0x1, 0xffffffffffffff9c, 0xa) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f00000000c0)={0x8, 0x0, {0x3, 0x3, 0x1, 0x3, 0x2}}) unshare(0x0) syz_open_dev$media(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) finit_module(r5, &(0x7f0000000440)='B\'security]&9\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="eb000000000000", @ANYRESHEX, @ANYBLOB="2c003730a9ccbcd99b00166872c0a100d39dd321424bf53082843bd5f7c0519898a8177304f97d45e2f80698cec7bb48e88f1e"]) perf_event_open(&(0x7f000001d000)={0x801, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000200)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fcntl$setpipe(r6, 0x407, 0x7ff) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f00000004c0)=0x9, 0x2, 0x3) 11:15:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000440)=""/4096) connect$inet(r0, 0x0, 0x8e) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2100, 0x7ff, &(0x7f0000001440)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x4, @ipv4={[], [], @remote}, 0x1c000000000}}, [0x71a, 0x4, 0x0, 0x0, 0x9, 0x0, 0x6, 0x1a4f, 0x0, 0x6, 0x6, 0xca, 0x0, 0xff, 0x6]}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x201, 0x9, 0x73, 0x280, 0xfffffffffffffbff, @remote}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x15, 0x0, 0x0) clock_getres(0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 11:15:52 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000340)='\x00') syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x8, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000), 0xffd7) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000840)) clock_nanosleep(0x5, 0x0, 0x0, &(0x7f0000000580)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000440)={{0x5, 0x2}, 'port1\x00', 0xbe, 0x80000, 0x20, 0x1, 0x1, 0x7, 0x8a95, 0x0, 0x2, 0x8}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) write$binfmt_elf32(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x972) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x1, 0x0) r4 = getpid() ptrace$cont(0xb19552ff48654b5c, r4, 0x0, 0x0) pwritev(r1, &(0x7f0000000100)=[{&(0x7f00000005c0)="0f37d6a0bc7bc37038424e6b2482cafc1cb3c2ff62f3cf9c2a49c97fe5cb7c9d83e0d2349c0445957b0e8f3da36bfb4ccebdbffeeff5b0a8c37614ed04c0b45de7998f7907e483356bc65e7328358c33693728365cd5", 0x56}], 0x1, 0x0) 11:15:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)="95", 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x40) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x8, 0x7ff}, 0xc) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) dup3(r1, r0, 0x0) 11:15:52 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x10001, 0x0, &(0x7f0000ffb000/0x4000)=nil}) sendto$inet(r0, 0x0, 0x17d, 0xfffffffffffffffc, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x0) [ 210.866526][ T8227] 9pnet: Insufficient options for proto=fd 11:15:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_vs\x00') ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280)='./file1\x00') chdir(&(0x7f0000000240)='./file0\x00') ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000480)=0x100000000) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000700)=ANY=[@ANYPTR, @ANYPTR]) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000500)={0xff, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000540)={0x7ff, r2}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="0472616e733d7463702c706f72743d3078303030303030303030303030346532342c756e616d653d6e65742f69705f7673002c6163636573733d616e792c63616368653d6d6d61702c6d6d61702c7365636c6162656c2c646f6e745f686173682c6d61736b3d4d41595f415050454e442c646f6e745f61707072616973"]) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000004c0), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) creat(&(0x7f0000000740)='./bus\x00', 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x8) clock_gettime(0x0, &(0x7f0000000580)) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10013c941) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) 11:15:52 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80200, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000000)=0x54) dup3(r1, r2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448dd, &(0x7f00000000c0)={0xffffffffffffffc0, 0x0}) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @empty}}, 0x1e) 11:15:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='\xedemoryt\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x8004, 0x6b67, 0x3, 0x0}, &(0x7f00000001c0)=0x10) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x20000000) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r2, 0x401}, 0x8) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) sendmsg$nl_crypto(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@alg={0xe8, 0x10, 0x100, 0x70bd2b, 0x25dfdbfb, {{'cbc(aes-aesni)\x00'}, [], [], 0x400, 0x2000}, [{0x8, 0x1, 0xffff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x841}, 0x800) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000400)={0x0, 0x200000009, 0x4}) r4 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7f, 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000000c0)) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x5, 0x3, 0x0, 0x0, 0x0, 0x4, 0xd, 0xfffffffffffffffc}}) 11:15:52 executing program 4: r0 = socket(0x22, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}}}, 0x80000001, 0xfffffffffffffa11, 0x53, 0x9, 0x9}, &(0x7f00000000c0)=0x98) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/139, &(0x7f0000000180)=0x8b) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r1, 0x5, 0x3a7}, 0x8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000080) sendto$isdn(r0, &(0x7f00000002c0)={0x160, 0x400}, 0x8, 0x4080, &(0x7f0000000300)={0x22, 0x7, 0x5, 0xfffffffffffffff8, 0x5}, 0x6) 11:15:52 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) recvmmsg(r0, &(0x7f0000001140)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=""/234, 0xea}, 0xfffffffffffffff9}], 0x1, 0x3, &(0x7f0000001240)) r1 = accept(r0, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0x80) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000180)={'icmp\x00'}, &(0x7f0000000500)=0x21c) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000540)) r3 = dup2(r1, r1) getpeername$tipc(r3, &(0x7f0000000480)=@name, &(0x7f00000003c0)=0x10) r4 = add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="4277419c4684dc7b077fec2a1acf4fb2050536f01d57bcb956d49173d5cad8c27c0c663780b9eb2414e013d1440fc40024b42fe24a46490a7ffc5462756132182f285fb841b0d1164687331c4c6007dca9894e253347fb9f", 0x58, 0xffffffffffffffff) keyctl$update(0x2, r4, &(0x7f0000000c40)="cd3c25369e87278822c0eecd3c", 0xd) r5 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = shmget$private(0x0, 0x4000, 0x54000040, &(0x7f0000ffa000/0x4000)=nil) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000940)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) r9 = getegid() fstat(r6, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() timerfd_gettime(r3, &(0x7f0000000b80)) r12 = getpgrp(0xffffffffffffffff) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000004c0)=0x0) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000ac0)={{0x44, r8, r9, r10, r11, 0x84, 0x2}, 0xcd, 0x80000001, 0x7, 0x3ff, r12, r13, 0x2496}) dup2(r5, r0) pread64(r5, &(0x7f0000002480)=""/4096, 0x1000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001180)={'vcan0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x44014) r14 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r14, 0x15) 11:15:52 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8080, 0x0) r2 = syz_open_pts(r0, 0x4000c0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 11:15:52 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") sendmsg$key(r1, &(0x7f0000000280)={0x1000000efffffff, 0xe00000000000000, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="020d000510000000000000d30000000003000600252000000200046ac00200010000000001000000080012000200030000000000fa0000003000000002030000050000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde0000000003000500002000000200ebf2df0000210008000002000000"], 0x80}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffffe, 0x4000) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000040)={0x80000001, 0x2, 0x100000000}) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x4, 0x0, 0x4) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x8}]}, 0xc, 0x3) 11:15:52 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = gettid() fcntl$lock(r1, 0x0, &(0x7f0000000040)={0x2, 0x3, 0x10001, 0x0, r2}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(r0, &(0x7f00000001c0), &(0x7f0000000240)=0xe, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000800), 0x4) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) write(r3, &(0x7f0000000400)="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", 0x200) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file1\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x1) sendfile(r3, r4, 0x0, 0x10000) 11:15:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x10, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000eaffffff000000000061103c2400c02a755dc21bf823510000000562000000000000090000007405"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x7d6e1c153f5cfcce, 0x0) semget$private(0x0, 0x1, 0x80000000000004) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x8, 0x1, @loopback, 0x8}, @in={0x2, 0x4e23, @rand_addr=0xfff}], 0x2c) accept4$inet(0xffffffffffffff9c, &(0x7f0000000480)={0x2, 0x0, @dev}, &(0x7f00000004c0)=0x10, 0x80800) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x8900, 0x0) write$P9_RAUTH(r1, &(0x7f0000000280)={0x14, 0x67, 0x1, {0x80, 0x3}}, 0x14) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x780b938b04ff2850, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 211.494106][ T27] audit: type=1800 audit(1552994152.751:34): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=3 res=0 11:15:52 executing program 2: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = open(0x0, 0x2, 0x20) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) unshare(0x20600) getsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000002c0)=""/206, &(0x7f00000003c0)=0xce) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000000)={0xffff, {{0x2, 0x4e23, @multicast2}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x3, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x3f}}}, {&(0x7f0000000140)=""/141, 0x8d}, &(0x7f00000000c0), 0x20}, 0xa0) [ 211.602408][ T27] audit: type=1804 audit(1552994152.751:35): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir416719251/syzkaller.EEZCc1/24/file0/file0" dev="loop4" ino=3 res=1 11:15:52 executing program 0: writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000540)='!', 0x1}], 0x1) [ 211.683408][ T27] audit: type=1804 audit(1552994152.921:36): pid=8293 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir416719251/syzkaller.EEZCc1/24/file0/file0" dev="loop4" ino=3 res=1 11:15:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0xba0, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) 11:15:53 executing program 4: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}) clock_nanosleep(0x1, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8840, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 11:15:53 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x10, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000eaffffff000000000061103c2400c02a755dc21bf823510000000562000000000000090000007405"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x7d6e1c153f5cfcce, 0x0) semget$private(0x0, 0x1, 0x80000000000004) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x8, 0x1, @loopback, 0x8}, @in={0x2, 0x4e23, @rand_addr=0xfff}], 0x2c) accept4$inet(0xffffffffffffff9c, &(0x7f0000000480)={0x2, 0x0, @dev}, &(0x7f00000004c0)=0x10, 0x80800) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x8900, 0x0) write$P9_RAUTH(r1, &(0x7f0000000280)={0x14, 0x67, 0x1, {0x80, 0x3}}, 0x14) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x780b938b04ff2850, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 11:15:53 executing program 0: r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x800000000000, 0xffffffff, 0x10000000a6ba0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) [ 211.758018][ T27] audit: type=1804 audit(1552994152.931:37): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir416719251/syzkaller.EEZCc1/24/file0/file0" dev="loop4" ino=3 res=1 [ 211.831516][ T8307] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) 11:15:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='veno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x4a8, 0x2f0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0x98, 0xd0}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @remote, @remote, @icmp_id=0x66, @gre_key=0x52}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @common=@socket0={0x20, 'socket\x00'}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @broadcast, @multicast1, @icmp_id=0x66, @port=0x4e20}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x6, [0x1, 0x6, 0x3f, 0x0, 0x8000, 0xffffffff], 0xfffffffffffffffe, 0xfffffffffffffffd}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @empty, @broadcast, @gre_key, @icmp_id=0x67}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffffff, 'ipddp0\x00', 'gre0\x00', {0xff}, {0xff}, 0x29, 0x3, 0x4}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x5ecd, 0x8, 0x1, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @rand_addr=0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66, @port=0x4e20}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = getuid() getgroups(0x5, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, 0xee00, 0xee00, 0xee00]) fchown(r0, r1, r2) sendmmsg(r0, &(0x7f00000020c0)=[{{&(0x7f0000002000)=@isdn={0x22, 0x0, 0x8, 0x6, 0x9}, 0x80, &(0x7f0000002080)=[{&(0x7f0000002600)="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", 0x1000}], 0x1}, 0x2}], 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x480900, 0x0) 11:15:53 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) 11:15:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) bind$packet(r2, &(0x7f0000000000)={0x11, 0xffffffffffffffff, 0x0, 0x1, 0x7f, 0x6, @remote}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000fc0)=[{r2}], 0xf, 0x0) 11:15:53 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6465762f6e756c6c623000e17b1ea3c36121e6c72cedd7b911b118a6b435b2b333b6712d1aea5ffc14143b6892ee20e6175f0f1c1fb6acc8328599520d85b0e84c998a4ed1ee40372fbe87ec31b49025b4f0772cd2f49d2ac12f52a244cea59005f9dbfd571f845ab681513805cf7bf38734dd14af37327357358a9c51554eccfcb364d7dca8c028471833f3c931e9a55ffd358aaddab927bc374d1c6f6a24d0dbe2b7062695b4416d"], 0x0, &(0x7f0000000200)='ubifs\x00', 0x0, &(0x7f0000000240)='usernodev\x00') r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000280)) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/16, 0x10) r2 = request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='em1$Y\\wlan0uservmnet1\x00', 0xfffffffffffffffe) keyctl$assume_authority(0x10, r2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) mkdir(&(0x7f0000000080)='./file1\x00', 0x1f0) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:tpm_device_t:s0\x00', 0x22) socket$inet6_udp(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 11:15:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x2000, 0x264, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000400)=""/19) r4 = socket$inet(0x2, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, r5, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r6, &(0x7f0000000340)=@ipx, &(0x7f00000001c0)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1a00001}, 0xc, &(0x7f0000000580)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x10000001, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3040000, 0x110, r6, 0x7fffffff) r7 = dup2(r2, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x100000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000240)) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000740)={0xc, 0xecc3aadb5d6b339, 0xfa00, {&(0x7f0000000d00)}}, 0x907b3fc4954fa586) openat$md(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/md0\x00', 0x4001, 0x0) 11:15:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) 11:15:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0), 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=""/15, &(0x7f0000000100)=""/172, &(0x7f00000001c0)=""/116, 0x2000}) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000240)={0x4, 0x2}, 0x2) 11:15:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc00, 0x0) accept4$nfc_llcp(r1, &(0x7f0000000200), &(0x7f00000000c0)=0x60, 0x80800) r2 = socket(0x15, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xfe88}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 11:15:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) 11:15:53 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0xffffffff, @dev, 0x55b}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) listen(r0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r2, 0x1ff, 0x18}, 0xc) 11:15:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000480)=""/173) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x5, 0x2081) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x40010, r1, 0x180000000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) r2 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) open$dir(&(0x7f0000000100)='./file0\x00', 0x404100, 0xa) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x20000, &(0x7f00000002c0)={[{@index_on='index=on'}, {@default_permissions='default_permissions'}, {@index_on='index=on'}, {@index_off='index=off'}, {@nfs_export_off='nfs_export=off'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'cpusetGPL,@vboxnet0).'}}, {@permit_directio='permit_directio'}, {@audit='audit'}]}) r4 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="46ac5128da090e4899c34a28efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c1805c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a1b67f6c3d7605eab3b675b6c061e6ef32b7ea8847b6f84da1334d35322b94447bfaca74b152eb64cfa54cb63126c2cc662e7898e6459ed40c4566403f303d341c9c34c6049d9f8e1c2a9483f003c20e66886d0e1629f498668c202f183de294d03da07c9f5feb65bc196554a79a2f255828c1f1cf9a09654f9df849443e8d290debcc78efbdca391a348b33f18ef618011273faa1f095298dd71db08a90e177a1e9a0c771deca3b51670a26850b89d4439574328c19d9e91766dd52169e0ad5011e4acc005861b3b3146d67445e6f6c75ce4af9d8db6963887d79113613267c5bc42fb0aca828590fb291ce8836d3cd391d364efdbb7015d8ec643d83b623380c21c6ebbf774498c94e60838a45d4692bfe73aaea2bbcecb6dcec20e5aa48a950428e2372009212f2f6be608cdec5ff84108f3f3d2e42c99a6d4cd4577ec9f39a51533efe71d494ccadb66eddd4cc0e56b33eefb0ada68ae36c905a977d9042a63299d2130f4e85357b0078c31bc45b00f5ccd879a6735d85882bfddbc6f2cff4a2b976b29e5a8adc74893c748b297a660ba0f64ad8a6ac6fcf180b6a4357ad6733cb75035cd58631142bd720cf52bcd1438647cbe1058e32d33c38f1327bef3f6b1c815ab4f2d47366473ae37c65a2d1df88823dd4c326d640c50e5bddfa976f04cd034331b632cd7a8bbc838081f28f6e24ed646721cea36e56501f9085e428a6c94b7ba5431f59651f36c8f715e4547ffed53c03cc58d2d4382193625cf69c197c4eb3c3c86c291d693837ab7eb23d61d2518379f0c61acf67425afa1ff8d1fac196a7ef9f6f9b514a2028ae010d1bf10833940294c400401ec706ce366dc4c62f6c55c6985a31592360cc7e6cc30a90cae1891b4cffb882b0329457503055db6a8e3b651b3302c24e6d149e8368ee6d3bafbc417256d042b4b87cb1bf46169ad1a593da66b2c6f453180f2c51be35c431e1af07e54c1251334415135422fa81b015a7a746c1979827e3d32057d408016cdc2b641a42626bbf8b7970a5638e9e48783ff80ded5b5184b69d41e60ba9e2ff7ef3e85b4419db2b064d64f833dc2035a6cc3ea28335ad94eb5ba974d9799ce94565559e6a7636b725c4c3dc1702af3c0f3d9dc77f6d404b7c8ff2cec1b4e703451a1d2750d9a22e9f4b5e27da765d228f09bbd30088ac9dff793ec759161849cf4217f5684bff8eddd65be61d3ed2dcc7bae8ab5e1260c3a90cdb37626c4871098802b34f271d8a091b0517bd1588b43cf21b2e3fe676e34d115a56d450d50a97ac7e2ea5904f9695dbde822dba41ac3a1190d63ef486a1829d38b005f9458a82533a555a2f674eea95af7ef7f0cf9654e0ed8d2ab722ca065fd97e6518b76a39cc1b04dc49c395f3aad5e05c76c1881f6a85fee6c6fba8340692eb0b7f3f948350e6947dac635cfef9e4ff4d3f756802cbd97e8c5845b25bc5a021d9875277f197d1bce55661e6961dd788a444962e33fa582a01d0bd61aaa22a76adf68b3169d3f", 0x4bf, r2) keyctl$read(0xb, r4, &(0x7f0000005340)=""/4096, 0xd900) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000200)={@my=0x1}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) write$tun(r3, &(0x7f00000006c0)=ANY=[], 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) 11:15:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xa0040, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f0000000200)={0x92, 0x7d, 0x2, {{0x0, 0x7c, 0x1000000000000, 0x18d, {0xc0, 0x1, 0x3}, 0x100000, 0x80, 0x2, 0x5, 0x3, 'GPL', 0x17, 'cpuset}vboxnet1security', 0x29, 'nodeveth0*vmnet1ppp1eth0ppp0[proc\'.]user}', 0x6, ':,bdev'}, 0x1, '(', r2, r3, r4}}, 0x92) sendto$inet(r0, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) shutdown(r0, 0x400000000000001) 11:15:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) 11:15:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3f00000000000000, 0x80, &(0x7f0000000080)=@nat={'nat\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x170, [0x20000680, 0x0, 0x0, 0x200006b0, 0x200006e0], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000082ea6a73da96997efeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000300000000000000000063616866300000000000000087edbc33f7a8d8ef660c3bc121fdfc0027772d8339b800e0000000627071300000000000000000000000006263736834000000000000000000000065727370616e30000000000000000000000000000000000000000000aaaaaaaaaa000000000000000000a8000000a8000000e00000007265616c6d00001e0000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000006172707265706c79000000000000000000000000000000000000000000000000100000000000000001"]}, 0x1f0) 11:15:54 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f00004fd000), 0x4) socket$unix(0x1, 0x1, 0x0) dup3(r0, r1, 0x0) sched_yield() pause() 11:15:54 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) 11:15:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) 11:15:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r2, 0x115, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x80000) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000001c0)=""/214) r4 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) 11:15:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) recvfrom$unix(r1, &(0x7f0000000240)=""/163, 0xfffffffffffffdda, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) 11:15:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x2000, 0x264, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000400)=""/19) r4 = socket$inet(0x2, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, r5, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r6, &(0x7f0000000340)=@ipx, &(0x7f00000001c0)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1a00001}, 0xc, &(0x7f0000000580)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x10000001, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3040000, 0x110, r6, 0x7fffffff) r7 = dup2(r2, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x100000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000240)) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000740)={0xc, 0xecc3aadb5d6b339, 0xfa00, {&(0x7f0000000d00)}}, 0x907b3fc4954fa586) openat$md(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/md0\x00', 0x4001, 0x0) 11:15:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000080)="c137419a", 0x4) sendto$inet6(r0, &(0x7f0000000280)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524009ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe9bc88fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f400582bd95e5ad802050d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae0a0adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5b4967904daf833d91ae9461ef10036f8be000000", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @mcast2}, 0x1c) splice(r0, &(0x7f00000001c0), r0, &(0x7f0000000840), 0x0, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x118, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)=""/80, 0x50}, 0x0) futex(&(0x7f0000000100)=0x2, 0x1, 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)=0x1, 0x0) 11:15:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) recvfrom$packet(r1, &(0x7f0000000380)=""/199, 0xc7, 0x2000, &(0x7f0000000140)={0x11, 0x1f, r2, 0x1, 0x80000001, 0x6, @dev={[], 0x10}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="850000100500000015000000000000009581000000000000a81ec2e399a50b1cb494e1522dc8000215a6129a632fa115eb8bff0f4d039bb8734d545199329c2cf2278c304073e7726512d164c758babc1e3bc71a6e7a8c10984690dcef4c3c1397c5460f38810d34e902e3dfa2d0d888b3902fff4d6436c1319ce49f275035e6cb0dba40ab888a2dc75d5469089bd9be29ad09864fdcc4e00a40bce0fe4220df53397adbf753ae3f712c846be6127fe711307946d3c20adc1e4eb27266d24abd94b05a1334ca5ccf7411dc7b23a0e2cc735bca6fc26d772f25882f3f1631a2ac6ce5e08327f4b3948b607aead8901f7ec3e7c1b6112cf2966cf4a8cbfef4eafb3d2b7ec4db4a8a57b04e70853e4f4c6b91b1"], &(0x7f0000000200)='GPL\x00', 0x5, 0xff7b, &(0x7f00000006c0)=""/195}, 0x48) 11:15:54 executing program 3: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xffffffff00000001, 0x8, 0x2}, 0x2f) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20) read$eventfd(r0, &(0x7f00000000c0), 0x8) 11:15:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7c7e, 0x801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x58, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x1ff, @dev={0xfe, 0x80, [], 0x2b}, 0x4}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x6, @local, 0x8}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={r2, 0x3}, &(0x7f0000000240)=0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000000c0)={{}, 'port1\x00'}) 11:15:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 11:15:54 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in={{0x2, 0x4e22, @remote}}}, &(0x7f0000000100)=0x84) 11:15:55 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setsig(r1, 0xa, 0x33) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f00000000c0)) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000240)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r2, r3, 0x0, 0x1ffe09) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) semget(0xffffffffffffffff, 0x0, 0x10) creat(&(0x7f0000000880)='./file0/f.le.\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getgroups(0x2, &(0x7f0000000480)=[0xee01, 0xee00]) mount$fuse(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000003c0)='fuse\x00', 0x1000020, &(0x7f0000000780)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}], [{@audit='audit'}, {@obj_user={'obj_user', 0x3d, '-'}}, {@dont_hash='dont_hash'}, {@appraise='appraise'}]}}) mkdirat(r4, &(0x7f0000000740)='./file0\x00', 0x0) mkdirat(r4, &(0x7f0000000580)='.//ile0\x00', 0x0) renameat(r4, &(0x7f0000000240)='.//ile0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/../file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) 11:15:55 executing program 4: r0 = socket$inet6(0xa, 0x6, 0xfffffffffffffef7) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x0f\x00\x00\x00\x0f\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000b1d3000000000000000000000000000000000000000082c1bc38c1e1cdaa8b92e5179044805b77fbc29fc8b7725ccc660508206aaaa1611dd0f8597fb8dff368448e58a7a8ca8ebff7895a15ce5ee1ad9f681fdc"]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 11:15:55 executing program 3: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000540)={0x4, 0x0, [{}, {}, {}, {}]}) mount$9p_tcp(&(0x7f0000000140)='\n-7.0.0.\n\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=tcp,', {'port'}}) ioctl$RTC_AIE_ON(r0, 0x7001) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x7, [0x92c8, 0x7ffffffc, 0x928, 0x3, 0xfff, 0x7, 0x1]}, &(0x7f0000000040)=0x12) fgetxattr(r0, &(0x7f00000000c0)=@random={'os2.', '\x00'}, &(0x7f0000000240)=""/184, 0x4b) 11:15:55 executing program 5: write$capi20_data(0xffffffffffffffff, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'bond_slave_0\x00'}}, 0x297) geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000003c0)=0xc) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000340)="0557c82f8b42a95ed82afbb81c7d546ccfcfde476059603e3e94e94fd9e78903ace66807e6079607b92adc84ecd20cc7e502437850e9bbcd7c8834760a1635", 0x3f}], 0x1, 0x0, 0x0, 0x80c0}, 0x40000) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x9, 0x0, 0x2, @discrete={0x1, 0x81}}) 11:15:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 11:15:55 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x2000, 0x264, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000400)=""/19) r4 = socket$inet(0x2, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, r5, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r6, &(0x7f0000000340)=@ipx, &(0x7f00000001c0)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1a00001}, 0xc, &(0x7f0000000580)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x10000001, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3040000, 0x110, r6, 0x7fffffff) r7 = dup2(r2, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x100000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000240)) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000740)={0xc, 0xecc3aadb5d6b339, 0xfa00, {&(0x7f0000000d00)}}, 0x907b3fc4954fa586) openat$md(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/md0\x00', 0x4001, 0x0) 11:15:55 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) r2 = gettid() io_pgetevents(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0xffffffff, 0x5, 0x5, 0x9, 0x0, 0x1, 0x30000, 0x4, 0x1, 0x6, 0x3, 0x7, 0x1, 0x1, 0x40, 0x7fd4, 0xfffffffffffffffe, 0x0, 0x24, 0x0, 0x0, 0x8abd, 0x7, 0x3fe000000, 0x80, 0x7ff, 0x2, 0x60, 0x2a, 0x1, 0x5, 0xffffffff, 0x7, 0x0, 0x100, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1, 0x0, 0xaba3, 0x7, 0x9, 0xd10f, 0x1000}, r2, 0x5, r5, 0xb) r6 = dup3(r5, r1, 0x80000) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000300)) kcmp(r2, r2, 0x0, r4, r3) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f00000004c0)={0x0, @capture={0x1000, 0x1, {0x5, 0x101}}}) recvfrom$inet(r0, &(0x7f0000000280)=""/98, 0x62, 0x40, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x6, &(0x7f00000000c0)=0x1) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000440)) close(r3) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000005c0)={'filter\x00', 0x1000, "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"}, &(0x7f0000000080)=0x1024) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) 11:15:55 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0xfffffffffffffffa, 0x0, 0x2, 0x9885}, &(0x7f0000000140)=0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc008ae05, &(0x7f0000000180)=ANY=[@ANYBLOB="11"]) 11:15:55 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x4, 0x3d, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x100000001, 0x77fffa, 0x0, 0x820005, r0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000100), 0x0}, 0x18) 11:15:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:15:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000380)={0x0, 0x400}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xffffffff, 0x400000) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000440)={0x610f4c72, {{0x2, 0x4e23, @multicast2}}}, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x80000, 0xfffffffffffffffd) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x800) connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0x0, @host}, 0xfffffffffffffdf1) ioctl$BLKIOOPT(r1, 0x1279, 0x0) r4 = dup2(r3, r3) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000000)) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x20042, 0x0) getpeername$inet(r4, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000400)=0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x4}, 0x68) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r3, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in=@broadcast, 0x4e20, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x4000}, {0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x38dc}, {}, 0x0, 0x0, 0x1, 0x2}, {{@in6=@local, 0x4d5, 0x36}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x1, 0x0) setsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000000080)=0xfff, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000600)={0x1, 0x0, {0xe8, 0x41f0012, 0x300e, 0xe, 0xf, 0x7, 0x1, 0x3}}) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) ioctl$SIOCAX25CTLCON(r6, 0x89e8, 0x0) 11:15:55 executing program 4: syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xffffffff, 0x101000) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="3702041423b7c736f5f8d43b2172d123", 0x2a2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x1, 0x70, 0xffffffff, 0x6, 0x8, 0x2, 0x0, 0x101, 0x5004, 0x4, 0x3, 0xff, 0x3, 0x9, 0x8000, 0x9, 0x9, 0x8e51, 0x467, 0x3, 0x3, 0xffff, 0x9, 0x86, 0x3d2a, 0xba, 0x3, 0x6, 0xfff, 0x4, 0xffffffffffffff62, 0x7, 0x1, 0x1dcf, 0x20000000000000, 0x7e00000000000, 0x4, 0x6, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x4000, 0x4, 0x6, 0x7, 0x6, 0x1ff, 0x2}) [ 214.346416][ T8491] Unknown ioctl 35304 11:15:55 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setsig(r1, 0xa, 0x33) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f00000000c0)) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000240)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r2, r3, 0x0, 0x1ffe09) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) semget(0xffffffffffffffff, 0x0, 0x10) creat(&(0x7f0000000880)='./file0/f.le.\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getgroups(0x2, &(0x7f0000000480)=[0xee01, 0xee00]) mount$fuse(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000003c0)='fuse\x00', 0x1000020, &(0x7f0000000780)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}], [{@audit='audit'}, {@obj_user={'obj_user', 0x3d, '-'}}, {@dont_hash='dont_hash'}, {@appraise='appraise'}]}}) mkdirat(r4, &(0x7f0000000740)='./file0\x00', 0x0) mkdirat(r4, &(0x7f0000000580)='.//ile0\x00', 0x0) renameat(r4, &(0x7f0000000240)='.//ile0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/../file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) 11:15:55 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x2000, 0x264, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000400)=""/19) r4 = socket$inet(0x2, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, r5, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r6, &(0x7f0000000340)=@ipx, &(0x7f00000001c0)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1a00001}, 0xc, &(0x7f0000000580)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x10000001, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3040000, 0x110, r6, 0x7fffffff) r7 = dup2(r2, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x100000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000240)) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000740)={0xc, 0xecc3aadb5d6b339, 0xfa00, {&(0x7f0000000d00)}}, 0x907b3fc4954fa586) openat$md(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/md0\x00', 0x4001, 0x0) 11:15:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:15:55 executing program 4: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@enter_looper, @register_looper], 0x6c, 0x0, 0x0}) 11:15:55 executing program 5: syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000280)=0x2) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r0, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0xffffffff, @empty, 0x3}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x6, 0x1, 0x44, 0x8, r1}, &(0x7f0000000480)=0x10) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x3c, 0x0, {"f0a0e5286d0b37e4d0068c57e1b77d347e57d3c097454121e1dda5acc79d7ffacf6c15"}}, {0x0, "6416a33c169a89924b7abfe362124dc8fd42f9a94ff24f7ba641eb436cf0bc0a236d8fc04541d40bba4242ebf6fee164b007710ec0be179fd77c531f2231f8da941be1643ffe64b6a75b3b1c535eb446c8a21a74a3a5d08fc45f35d6c2971b5eed54ef47568514ead406038c2f90c5009d9b4628d355a5fef37826f4664e77e94e301e253ae2a91382"}}, &(0x7f00000006c0)=""/179, 0xc7, 0xb3, 0x1}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000780)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000007c0)=0x14) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x400}) ptrace$setregset(0x4209, r3, 0x20000004, &(0x7f0000000040)={0x0}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) 11:15:55 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000240)=0x9, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f00000001c0)=0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x400, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x8, 0x4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) [ 214.451953][ T8503] binder: 8499:8503 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 214.479684][ T8503] binder: 8499:8503 ioctl c0306201 200002c0 returned -14 11:15:55 executing program 5: syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000280)=0x2) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r0, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0xffffffff, @empty, 0x3}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x6, 0x1, 0x44, 0x8, r1}, &(0x7f0000000480)=0x10) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x3c, 0x0, {"f0a0e5286d0b37e4d0068c57e1b77d347e57d3c097454121e1dda5acc79d7ffacf6c15"}}, {0x0, "6416a33c169a89924b7abfe362124dc8fd42f9a94ff24f7ba641eb436cf0bc0a236d8fc04541d40bba4242ebf6fee164b007710ec0be179fd77c531f2231f8da941be1643ffe64b6a75b3b1c535eb446c8a21a74a3a5d08fc45f35d6c2971b5eed54ef47568514ead406038c2f90c5009d9b4628d355a5fef37826f4664e77e94e301e253ae2a91382"}}, &(0x7f00000006c0)=""/179, 0xc7, 0xb3, 0x1}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000780)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000007c0)=0x14) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x400}) ptrace$setregset(0x4209, r3, 0x20000004, &(0x7f0000000040)={0x0}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) 11:15:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:15:55 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x4, 0x4) setsockopt(r0, 0x1ff, 0x7117, &(0x7f0000001100)="dc431b29496678ba8c26b0498081a4848950b2802141288bafa91a0d7863021f1e45d3f5cc3388300484cc03aa2f7a83507ce3ecfe911b29bc0dbd87d4a8fb06e0693f2540a2911cc8cdb13d22e4250e3ee56a33a9481766fd3ec84187da0f4a055cd81d62b2082b870d5abfcb2d275da5fb59ca2313b82801a89829b024b88a817369dbbbbb479c38398a4de71c257d002f8ffb75249b9862c6f1443ee99ca8fa99bbdab5042613541d733ad0be45b3c181b91719990aa4518dded2a0c75635ccedf7ec4a6c53d4fa74093061f324f2e2f964797b6a7e5fdcdb12", 0xdb) r1 = syz_open_dev$vcsa(&(0x7f0000001080)='/dev/vcsa#\x00', 0x100000001, 0x200000) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000010c0)=0x5ee) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000001200)={0x4, 0x9, [{0x7}, {0x0, 0x0, 0x2c}, {0xbee, 0x0, 0x3}, {0x8c7e, 0x0, 0x8}]}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r2 = semget$private(0x0, 0x0, 0x40000000002) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000000080)=""/4096) 11:15:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x4000000000000) getsockname$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 11:15:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x8000, 0x10, 0x8000}, 0x3c3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f00000000c0)=0x47, 0xdf) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000040)='cgroup+\x00', 0x8, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='\x00', 0x3b3, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) syz_extract_tcp_res$synack(&(0x7f00000004c0)={0x41424344, 0x41424344}, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @remote}, {0x2, 0x4, @empty}, 0xfd, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x1000, 0x0, 0xfffffffffffffffc}) prctl$PR_GET_SECUREBITS(0x1b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000780)='uid\x00\x00\x00\x00\xbc\xa5\x8c\xc4\xf1\xa65\x99\x1aX\xfd\xb1bz\x03r\x00') setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000740)=@req3={0x101, 0xfffffffffffffffa, 0x0, 0x0, 0x8000, 0x6, 0x5}, 0x103bb) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000700)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYPTR=&(0x7f00000008c0)=ANY=[@ANYPTR=&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=r6]]], 0x8}}, 0x0) fcntl$setsig(r3, 0xa, 0x35) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x0, 0x70, 0x401, 0x45b, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0xffffffff, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3d6, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000540)={0x4, 0x200000000000, 0x1}, 0xc) tee(r9, r5, 0x6, 0x6) fcntl$setown(r5, 0x8, r7) 11:15:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) getdents64(0xffffffffffffffff, 0x0, 0x0) [ 214.898304][ T8538] Dead loop on virtual device ip6_vti0, fix it urgently! [ 214.961635][ T8538] Dead loop on virtual device ip6_vti0, fix it urgently! [ 214.982314][ T8538] Dead loop on virtual device ip6_vti0, fix it urgently! [ 214.998627][ T8538] Dead loop on virtual device ip6_vti0, fix it urgently! 11:15:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8001) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="230000005e0081aee4d8273e7a0ec2b20b2e00000000001779aaee9e2d45eec04781d6", 0x23}], 0x1}, 0x0) sync_file_range(r1, 0x1f, 0xffff, 0x1) recvmsg$kcm(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) [ 215.023402][ T8538] Dead loop on virtual device ip6_vti0, fix it urgently! 11:15:56 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x980000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f90a, 0x800, [], @value=0x70a000}}) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x40000) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x54, 0x101000) timerfd_create(0x1, 0x80800) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000000)={0xc5, "5c4e32dbe0fc5c6824b16cd6e3f08f99b213083e9749a27e87ec975d1890eff7", 0x0, 0x1}) 11:15:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:15:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x8000, 0x10, 0x8000}, 0x3c3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f00000000c0)=0x47, 0xdf) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000040)='cgroup+\x00', 0x8, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='\x00', 0x3b3, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) syz_extract_tcp_res$synack(&(0x7f00000004c0)={0x41424344, 0x41424344}, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @remote}, {0x2, 0x4, @empty}, 0xfd, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x1000, 0x0, 0xfffffffffffffffc}) prctl$PR_GET_SECUREBITS(0x1b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000780)='uid\x00\x00\x00\x00\xbc\xa5\x8c\xc4\xf1\xa65\x99\x1aX\xfd\xb1bz\x03r\x00') setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000740)=@req3={0x101, 0xfffffffffffffffa, 0x0, 0x0, 0x8000, 0x6, 0x5}, 0x103bb) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000700)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYPTR=&(0x7f00000008c0)=ANY=[@ANYPTR=&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=r6]]], 0x8}}, 0x0) fcntl$setsig(r3, 0xa, 0x35) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x0, 0x70, 0x401, 0x45b, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0xffffffff, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3d6, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000540)={0x4, 0x200000000000, 0x1}, 0xc) tee(r9, r5, 0x6, 0x6) fcntl$setown(r5, 0x8, r7) [ 215.078882][ T8538] Dead loop on virtual device ip6_vti0, fix it urgently! 11:15:56 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x2, 0x2, &(0x7f0000000640)=[{0x0, 0x0, 0x1}, {0x0}], 0x8000, &(0x7f00000006c0)={[{@nosuiddir='nosuiddir'}, {@spectator='spectator'}, {@hostdata={'hostdata', 0x3d, '/dev/video#\x00'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x72, 0x38], 0x2d, [0x7d, 0x77, 0x37, 0x37], 0x2d, [0x0, 0x0, 0x0, 0x65], 0x2d, [0x0, 0x7f, 0x77], 0x2d, [0x0, 0x65, 0x0, 0x0, 0x0, 0x36]}}}]}) userfaultfd(0x80000) mmap(&(0x7f0000070000/0x3000)=nil, 0x3000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x40, 0x4) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, r0}) r4 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xffffffffffffffff, 0x42680) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={r3, 0x80000, r4}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) 11:15:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000280)=0x80) fstatfs(r0, &(0x7f0000000480)=""/173) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x5, 0x2081) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r2, 0x180000000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x4c1, r3) keyctl$read(0xb, r4, &(0x7f0000005340)=""/4096, 0xd900) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000200)={@my=0x1}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) [ 215.251371][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 215.257933][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:16:56 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0) close(r0) 11:16:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:16:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x81, 0x9, 0x2, 0xb59, 0xc, 0x0, 0x34660dd1, 0xea3a, 0xffffffff, 0x6, 0x7ff, 0x2}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8e8, 0x2, 0x9, 0x1f80, 0x10, 0x16ce8fec, 0x6, 0x1, 0x8, 0x0, 0xffffffff, 0x3f}) syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x3, 0x0, 0x7fff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x860}) 11:16:56 executing program 1: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x67, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7fff}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x3c) io_setup(0x40000000004ed4, &(0x7f0000000100)=0x0) io_submit(r1, 0x23, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 11:16:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x8000, 0x10, 0x8000}, 0x3c3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f00000000c0)=0x47, 0xdf) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000040)='cgroup+\x00', 0x8, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='\x00', 0x3b3, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) syz_extract_tcp_res$synack(&(0x7f00000004c0)={0x41424344, 0x41424344}, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @remote}, {0x2, 0x4, @empty}, 0xfd, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x1000, 0x0, 0xfffffffffffffffc}) prctl$PR_GET_SECUREBITS(0x1b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000780)='uid\x00\x00\x00\x00\xbc\xa5\x8c\xc4\xf1\xa65\x99\x1aX\xfd\xb1bz\x03r\x00') setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000740)=@req3={0x101, 0xfffffffffffffffa, 0x0, 0x0, 0x8000, 0x6, 0x5}, 0x103bb) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000700)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYPTR=&(0x7f00000008c0)=ANY=[@ANYPTR=&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=r6]]], 0x8}}, 0x0) fcntl$setsig(r3, 0xa, 0x35) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x0, 0x70, 0x401, 0x45b, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0xffffffff, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3d6, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000540)={0x4, 0x200000000000, 0x1}, 0xc) tee(r9, r5, 0x6, 0x6) fcntl$setown(r5, 0x8, r7) 11:16:56 executing program 2: memfd_create(&(0x7f0000000180)='/dev/sequencer2\x00', 0x4000005) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x40c0, 0x0) renameat2(r0, &(0x7f0000000440)='./file0\x00', r1, &(0x7f00000004c0)='./file0/../file0\x00', 0x1) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xff, 0x101000) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000540)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0, 0x1c4000000000000, 0x3, [0xd6, 0x5, 0x7ff]}, &(0x7f0000000340)=0xe) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000380)={r5, 0x6}, &(0x7f00000003c0)=0x8) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', 0x0, &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000680)=0x0) rt_sigqueueinfo(r7, 0x37, &(0x7f00000006c0)={0x19, 0x100000000, 0x5}) accept4$llc(r2, &(0x7f0000000500)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000640)=0x10, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000740)=""/119) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r6}}, 0xc) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000040)=@bcast) [ 274.973402][ T8585] mmap: syz-executor.2 (8585) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 275.032021][ T8585] e sysfs: Unknown parameter 'sysfs' [ 275.089429][ T8587] e sysfs: Unknown parameter 'sysfs' 11:16:56 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 11:16:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:16:56 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x7f14e8cc) r1 = gettid() write$cgroup_type(0xffffffffffffffff, 0x0, 0xffffffffffffff37) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r2 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) tkill(r1, 0x1000000000016) 11:16:56 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x715371) fchown(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)) 11:16:56 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40002, 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x7f14e8cc) r0 = getpid() capset(&(0x7f0000000000)={0x399f1736, r0}, &(0x7f00000000c0)={0x7, 0x72d200000, 0x0, 0x3, 0xff, 0x1}) r1 = gettid() write$cgroup_type(0xffffffffffffffff, 0x0, 0xffffffffffffff37) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 11:16:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 275.570220][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 275.576061][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 276.743398][ T21] device bridge_slave_1 left promiscuous mode [ 276.749903][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.816052][ T21] device bridge_slave_0 left promiscuous mode [ 276.822321][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.482426][ T21] device hsr_slave_1 left promiscuous mode [ 278.535436][ T21] device hsr_slave_0 left promiscuous mode [ 278.596306][ T21] team0 (unregistering): Port device team_slave_1 removed [ 278.607862][ T21] team0 (unregistering): Port device team_slave_0 removed [ 278.622251][ T21] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 278.654550][ T21] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 278.751959][ T21] bond0 (unregistering): Released all slaves [ 278.857435][ T8619] IPVS: ftp: loaded support on port[0] = 21 [ 278.913954][ T8619] chnl_net:caif_netlink_parms(): no params data found [ 278.948244][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.955428][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.963361][ T8619] device bridge_slave_0 entered promiscuous mode [ 278.971001][ T8619] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.978097][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.986005][ T8619] device bridge_slave_1 entered promiscuous mode [ 279.001164][ T8619] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 279.012261][ T8619] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 279.029053][ T8619] team0: Port device team_slave_0 added [ 279.036191][ T8619] team0: Port device team_slave_1 added [ 279.092871][ T8619] device hsr_slave_0 entered promiscuous mode [ 279.130561][ T8619] device hsr_slave_1 entered promiscuous mode [ 279.211326][ T8619] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.218409][ T8619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.225800][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.232887][ T8619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.303893][ T8619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.314495][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.322929][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.330562][ T7626] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.343959][ T8619] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.354594][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.363517][ T7626] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.370614][ T7626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.392010][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.401340][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.408394][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.417027][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.434043][ T8619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.444799][ T8619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.457376][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.466219][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.475164][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.484428][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.503422][ T8619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.511219][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 11:17:00 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001600)='/dev/audio#\x00', 0x1, 0x20000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001680)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4200000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x4c, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x180000000000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @empty, 'batadv0\x00'}}, 0x1e) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) fcntl$setlease(r0, 0x400, 0x3) r4 = syz_open_dev$usb(&(0x7f0000001580)='/dev/bus/usb/00#/00#\x00', 0x8, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000015c0)={0x0, 0x100, 0x2}) sendmmsg(r0, &(0x7f0000001540)=[{{&(0x7f0000000180)=@can={0x1d, r3}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000200)="273419c30595b940c91dac79c94098acaff756951480857addf93631e235fd6847c4922901ca740f96ae8dbfe274fa2cc414d65dd2c657956428ae7fa5bdf8e34149a77fee565e1513b9a73a1f261a4d79c3cc131fe8b798093385cff8e04ba7439d7d27ab2598bdf8e25a717499717686e14289a6592b7f872563", 0x7b}, {&(0x7f0000000280)="b9e0c4c7c9cbb5081408c9f265c8b5408462cb5e49ad291bf3f52d", 0x1b}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="16df2077c7bbcc2d5a185625e26669ec1d9277725bd637e503ae2e37134d0bd9877f62c3d2c16a0172e111e7d5d13ac5757e24555bd5e4b4907b0230bb9fda23eaaca10b08b1b022da89aa0ee9661df02adc8ce69766215c5035703fb8ba278a968640505af22bbe727561d17085ed7547420512e2038f328fe7471c0ca365dacfbcfe7897c1f45d082cbd3ea61c551d7c6cf933ad20c81991564607bc10735ac9331e51425ab23f7ac2b5f9e68a36f205b21620c4bbd6270c3f1752141a77b79172595a08a7fe37ce116aa40a0e7cb8f0d48c931dafbeed37d8242cac3019df05b2c66eb1800a4168b6e2012b", 0xed}, {&(0x7f00000013c0)="d197ac96c3fd3f8cc65f55bd57c42015c0b1a6c42ab8634c5e", 0x19}, {&(0x7f0000001400)="e9c5438f7004e19179b2ead146f1f6e26aade1dad6", 0x15}, {&(0x7f0000001440)="081557a9329f74f85262dcc17ca6b21d119948650dd75e66ff2b9c61e70baa6697d0bdf44842", 0x26}, {&(0x7f0000001480)="9c7ca8b22d9fbe48060ab9d151e0928b26825afc157576adb75c7980f5e778f130c331d5253ab14a87cacd723ae6f22cc96c37", 0x33}], 0x8}, 0x2}], 0x4000227, 0x0) 11:17:00 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) 11:17:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:00 executing program 3: memfd_create(&(0x7f0000000180)='/dev/sequencer2\x00', 0x4000005) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x40c0, 0x0) renameat2(r0, &(0x7f0000000440)='./file0\x00', r1, &(0x7f00000004c0)='./file0/../file0\x00', 0x1) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xff, 0x101000) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000540)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0, 0x1c4000000000000, 0x3, [0xd6, 0x5, 0x7ff]}, &(0x7f0000000340)=0xe) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000380)={r5, 0x6}, &(0x7f00000003c0)=0x8) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', 0x0, &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000680)=0x0) rt_sigqueueinfo(r7, 0x37, &(0x7f00000006c0)={0x19, 0x100000000, 0x5}) accept4$llc(r2, &(0x7f0000000500)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000640)=0x10, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000740)=""/119) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r6}}, 0xc) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000040)=@bcast) 11:17:00 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x715371) fchown(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)) 11:17:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x8000, 0x10, 0x8000}, 0x3c3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f00000000c0)=0x47, 0xdf) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000040)='cgroup+\x00', 0x8, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='\x00', 0x3b3, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) syz_extract_tcp_res$synack(&(0x7f00000004c0)={0x41424344, 0x41424344}, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @remote}, {0x2, 0x4, @empty}, 0xfd, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x1000, 0x0, 0xfffffffffffffffc}) prctl$PR_GET_SECUREBITS(0x1b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000780)='uid\x00\x00\x00\x00\xbc\xa5\x8c\xc4\xf1\xa65\x99\x1aX\xfd\xb1bz\x03r\x00') setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000740)=@req3={0x101, 0xfffffffffffffffa, 0x0, 0x0, 0x8000, 0x6, 0x5}, 0x103bb) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000700)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYPTR=&(0x7f00000008c0)=ANY=[@ANYPTR=&(0x7f0000000b40)=ANY=[@ANYBLOB="c841ab168855073dbd641dc751217750481ea3dc876bbe66091fcd2065099fd22bc4104c97e3de8f0729d92606ce0732a735da184464ad2dfa290e21d2ff6ccfff345dd28e705c94b220dca9c2a9acc1f3a6e9dd7ae3bee9bbccfda8e38fc0d5061a4be01dfb87da15482a1e6690dd3d83fff340030f8eac1266b7be4e3f020df8b5a45fb498c34a4651cc5d51c966e165d41d270937202f7891027cb180b7b7a87e80e2a0e42ae415c6b2bedeef01fa6f27f38025dbf37ada1d592a6c54e7eca40ee9474239aac4bea90219bf82e6a2ed1c45c674583fbee1d34c65e2e5675e562b365adf783ac865edde53b010eb446b0bc6cceeaa6ad2cb57e1da065512c57bc568392a1fc0f5eafc8fdd31416490b099962e090dadeac53d9ed8eb7359c7eed5995e0d40abc421f5c025fb98c76b2bedc374b0162a9b93854ee5467418bcee19a74ef8f2d43d29d92908727e4910920300e4e342000000000000169a9fdaf3807ad46287611b9d4087ce30b552defcf6d134a803d6b06fefd71e74c135ba146d8d46b300000000000000000000", @ANYRES32=r6]]], 0x8}}, 0x0) fcntl$setsig(r3, 0xa, 0x35) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x0, 0x70, 0x401, 0x45b, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0xffffffff, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3d6, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000540)={0x4, 0x200000000000, 0x1}, 0xc) tee(r9, r5, 0x6, 0x6) fcntl$setown(r5, 0x8, r7) [ 279.668467][ T8632] e sysfs: Unknown parameter 'sysfs' 11:17:01 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000380)='threaded\x00', 0x27) clone(0x1000140, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/205, &(0x7f0000000000)=0xcd) creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xffff, 0x2) tkill(r1, 0x26) socketpair$unix(0x1, 0x803, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 11:17:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000001c0)=@ipx, 0x80, 0x0, 0x15e}}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000480)=""/13, 0xd}, {&(0x7f0000000940)=""/71, 0x47}], 0x8, 0x0) 11:17:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="168c09eeece7788d50463efc2009c0a3d3b292899287d3a46779153465d22876c3f8f4129fed7487d14ce59c5f28af2cfbc5fc094bb037e80d72b4893caf8322bcc3678fe1b65ac13cccc53365ab01b63e05c45bca51351a286fdbfff636c65e918b7e5944207cfbb9c9f06b9fe3197181", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040003,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000600)=r1) 11:17:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:01 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f00000003c0)={0x3, r1}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x40050f3, 0xb55d8c2bba0f83b9) sched_setaffinity(0x0, 0xfffffff5, &(0x7f0000000540)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x6b, 0x102) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0xffffffffffffff73) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0xa0000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r7 = dup(r6) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000180)={0x0, 0x2000000001}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000840)={0x0, 0xfffffffffffffffc, 0x67, 0x0, @buffer={0x0, 0xb9, &(0x7f00000005c0)=""/185}, &(0x7f0000000700)="e1c8f8578015ffdbc37273bc3ca688a55c6fe120e6cb67e4742c0f1d020faefa35509c006094a8619fe72b1076cfb42a7fedc9cddca1b8b25bf17f57963d0e7f0c8bafee7c2f05aa76cf1a6637b48c125c4ba286875ddec694282c64e42335ea2569700c30ed8c", &(0x7f0000000780)=""/58, 0xeebc0000, 0x20, 0x3, &(0x7f0000000800)}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x23a}, 0x100) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000280)={0x2, 0xd97d, 0x80000000, 0x0, 0xffff}, 0xd06920eba2573fcb) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x10000, 0x100) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000680)={0x3, 0x70, 0xffffffffffffffff, 0x9, 0x7ff, 0x3f, 0x0, 0x1f, 0x21000, 0x0, 0x7, 0x3, 0x7fff, 0xfffffffffffffffa, 0x5, 0x7fffffff, 0x0, 0x7, 0x4, 0x100000000, 0xff, 0x3, 0x81, 0x9, 0x8, 0x9, 0x5, 0x80000001, 0x8000, 0x2, 0x0, 0x1000000000000, 0x73f8, 0x8, 0x0, 0x0, 0x10000, 0x4, 0x0, 0xfffffffffffffff7, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x20000, 0x1, 0x1, 0x1, 0x6, 0x15a, 0x100000000}, r8, 0x4, r3, 0x9) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000000440)={0x1, "cd342d3f29fbc50f88a50546cf809ad60fe7e20f550ac3ab6ee35aacb39d32b6", 0x3, 0x1}) 11:17:01 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f00000002c0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, 0x9}, 0x5c) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x141000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40d5b78ecbe505e2, r3, 0x308, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10001}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffffb}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) 11:17:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0xb605, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 11:17:01 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl(0xffffffffffffffff, 0x4, &(0x7f00000000c0)="d7510911b4bc752c896ee22110f137e6e93a26d7e79ee7873a446c5fe714f3d86320e10222e0730b74") openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) epoll_create1(0x80000) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = semget$private(0x0, 0x6, 0x1) semtimedop(r3, &(0x7f0000000800)=[{0x0, 0x0, 0x1000}, {0xffffffffffffffff, 0x1}], 0x2, &(0x7f0000000840)={0x77359400}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000140)) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="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", 0x159, 0x10000}], 0x0, 0x0) 11:17:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() mkdir(0x0, 0x40) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x8000008200) open(0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x7, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x4, 0x4}, 0xb) openat$cgroup_ro(r0, &(0x7f0000000780)='memory.stat\x00', 0x2761, 0x4) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x2, 0x8000) [ 280.287935][ T8678] Unknown ioctl 1077171762 11:17:01 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x715371) fchown(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)) 11:17:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 280.631178][ T27] audit: type=1804 audit(1552994221.881:38): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir038513528/syzkaller.Ba54yX/4/bus" dev="sda1" ino=16130 res=1 11:17:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000180)={0x0, 0x6, 0x9, &(0x7f0000000100)=0xdbe}) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1ac, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x671c5d69}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4a}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x56dc5a9e}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2b}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="050afed0bb9c8b2f397945164bf4836d"}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r1, 0x201, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) 11:17:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:02 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x80241) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) 11:17:02 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000500)={{0x80, 0x3, 0x0, 0x101}, 'syz0\x00', 0x1d}) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r3, 0x2}}, 0x10) sendto$inet(r2, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0) accept4$unix(r2, &(0x7f0000000440), &(0x7f0000000340)=0x6e, 0x800) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000001bc0)="0adc1f023c123f3188a070") openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 11:17:02 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x715371) fchown(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)) 11:17:02 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() mkdir(0x0, 0x40) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x8000008200) open(0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x7, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x4, 0x4}, 0xb) openat$cgroup_ro(r0, &(0x7f0000000780)='memory.stat\x00', 0x2761, 0x4) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x2, 0x8000) 11:17:02 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x6f1a, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r1, r0, 0xd}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x400800, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000240)={0x0, 0x20}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x9, 0x10001, 0xe9, 0x8, 0x3}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) 11:17:02 executing program 1: r0 = memfd_create(&(0x7f0000000100)='m\x815\x1e9\xcf\xc2(\xa4\xc6r\x00', 0x5) lseek(r0, 0x1ffffffffffffff, 0x10000000001) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[0x9, 0x7fff, 0x4, 0x72, 0x3d, 0x8, 0x1, 0x7]}) 11:17:02 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() mkdir(0x0, 0x40) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x8000008200) open(0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x7, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x4, 0x4}, 0xb) openat$cgroup_ro(r0, &(0x7f0000000780)='memory.stat\x00', 0x2761, 0x4) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x2, 0x8000) 11:17:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0xfffffffffffffdf6) r4 = accept4(r3, 0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xffffff2e) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="a95600000400fbab65d8b4ac2c9c5c6e", 0x10) splice(r1, 0x0, r4, 0x0, 0x80000510, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:17:02 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000500)={{0x80, 0x3, 0x0, 0x101}, 'syz0\x00', 0x1d}) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r3, 0x2}}, 0x10) sendto$inet(r2, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0) accept4$unix(r2, &(0x7f0000000440), &(0x7f0000000340)=0x6e, 0x800) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000001bc0)="0adc1f023c123f3188a070") openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 11:17:02 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000500)={{0x80, 0x3, 0x0, 0x101}, 'syz0\x00', 0x1d}) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r3, 0x2}}, 0x10) sendto$inet(r2, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0) accept4$unix(r2, &(0x7f0000000440), &(0x7f0000000340)=0x6e, 0x800) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000001bc0)="0adc1f023c123f3188a070") openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 11:17:02 executing program 4: r0 = socket(0x2, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x9]}, &(0x7f0000000040)=0x6) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0xa5d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000000000000000000002008000000000000000000002500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e3af10ecdd21c14831141880000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff0000000000000000000000000000000031faaf0253b26e909a8cd772e7d69c4a15e6d5dce51c956ccd83efa06827f3b6a25586eb67daf8f001f814b2b51ce5115c6c07053f9e89f6a1aad4e23373bf658b00a73ef1831b22bbed75fe0261a67b0400dee8b28eb9d2e7b56f57e55d7bde4e0b2df29f3b8a04083808b08e2e8bfb7a73a469abe8f1166bc6b3f2c2c0f273b02a7b88c8521ec79583154cea6a715b98"]}, 0xad5) 11:17:03 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x715371) fchown(r1, 0x0, 0x0) 11:17:03 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000500)={{0x80, 0x3, 0x0, 0x101}, 'syz0\x00', 0x1d}) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r3, 0x2}}, 0x10) sendto$inet(r2, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0) accept4$unix(r2, &(0x7f0000000440), &(0x7f0000000340)=0x6e, 0x800) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000001bc0)="0adc1f023c123f3188a070") openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 11:17:03 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000500)={{0x80, 0x3, 0x0, 0x101}, 'syz0\x00', 0x1d}) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r3, 0x2}}, 0x10) sendto$inet(r2, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0) accept4$unix(r2, &(0x7f0000000440), &(0x7f0000000340)=0x6e, 0x800) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000001bc0)="0adc1f023c123f3188a070") openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 11:17:03 executing program 5: open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c728c495a14edca000000000000000000000000000000000000000000000000000000000022000000000000000000000000000000000000000000000000000003000000"], 0x2a8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000"], 0x90) truncate(0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) 11:17:03 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000500)={{0x80, 0x3, 0x0, 0x101}, 'syz0\x00', 0x1d}) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r3, 0x2}}, 0x10) sendto$inet(r2, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0) accept4$unix(r2, &(0x7f0000000440), &(0x7f0000000340)=0x6e, 0x800) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000001bc0)="0adc1f023c123f3188a070") openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 11:17:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:03 executing program 4: request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='dns_resolver\x00', 0x0) r0 = add_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="1a64beb9053dec917ff4f5fc906edbd3c50fcebd67c1ee1abb812aed933e638c0b3f89e3610e16ebe51bb7d4a6b96d5330222ca4aefb0dee5c3aa540be738206fdc0ecce7742f59a6c136a545b34a447beb0ae66ad3b892c39f5d38e74286417f1e547d6f891d0d644459643d0db3ea1d4f8c8311fc7a9d28fd44f6c71737168918cc4cf4e455542b80fff54ddf80a939e32685434f064777465de8e15466e456a0ce1eb2784167d4c34d4a5dee9b18a49cb708fc396bb55c6554dc1632d9136f7fff3a596cdbb33", 0xc8, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r1) 11:17:03 executing program 5: open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c728c495a14edca000000000000000000000000000000000000000000000000000000000022000000000000000000000000000000000000000000000000000003000000"], 0x2a8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000"], 0x90) truncate(0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) 11:17:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000340)={0x0, 0x12}, &(0x7f0000000300)) ioprio_get$pid(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) write$P9_RLOPEN(r2, &(0x7f0000000240)={0x18, 0xd, 0x1, {{0x0, 0x3, 0x6}, 0x2}}, 0x18) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) write$P9_RSTATu(r2, &(0x7f00000001c0)={0x7c, 0x7d, 0x1, {{0x0, 0x67, 0x8, 0x1f, {0x24, 0x2, 0x8}, 0x80000, 0x570d, 0x4, 0x2aa, 0x6, 'md5sum', 0xc, '[$#vboxnet0/', 0x20, 'cpuset!$em1vmnet0-cpuset{,system', 0x2, '@%'}, 0x0, '', r3, r4, r5}}, 0x7c) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:17:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x240, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x100000000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0x3ff, 0x3ff}, &(0x7f0000000180)=0xc) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 11:17:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 11:17:03 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="240000001e00070400fffd946f6105000a0000001f00000000000800080008000400ff7e", 0x24}], 0x1}, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0xaf1e}]}, 0xc, 0x3) 11:17:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:03 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x715371) fchown(r1, 0x0, 0x0) [ 282.473261][ T8809] binder: 8808:8809 ioctl 40046205 0 returned -22 [ 282.484415][ T8813] binder: 8808:8813 ioctl 40046205 0 returned -22 11:17:03 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffb, 0x400000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000400), &(0x7f0000000440)=0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x586, 0x800) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$update(0x2, r2, &(0x7f00000000c0)="2dd07106f5d02cecc2285f4675701c4b0ab0372c435f60a14b59a6abd2f6ed2f8e3f68d6ed5c37bda9b2e9b13a01c2ba160f05d4156975fd4d04631ef3d851ac85dd4ffc0cb083c3486221865abf5c224e8aba7206f7d15666647ae083984aa7ecd39311aabfa0712a70", 0x6a) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280)=0x1, 0x4) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0xfffffffffffffce7) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x800) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000480)) read$alg(r3, &(0x7f00000001c0)=""/163, 0xa3) 11:17:03 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x22) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x7fff) 11:17:03 executing program 4: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="757064607465206175bfa84ff6b96c00000000000000000000"], 0xffffffffffffffed, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000003c0)=""/107) 11:17:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000240)=""/251, 0xfb) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x21, 0xfffffffffffffff8}) 11:17:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000200)={"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"}) [ 282.676444][ T27] audit: type=1804 audit(1552994223.931:39): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir296142210/syzkaller.0oHWNK/45/bus" dev="sda1" ino=16302 res=1 [ 282.678524][ T8835] encrypted_key: master key parameter 'au¿¨Oö¹l' is invalid 11:17:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000140)={0xa5, &(0x7f0000000080)=""/165}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000fffeffffffffffff00000000001c000000"], 0x14}}, 0x0) [ 282.767819][ T27] audit: type=1804 audit(1552994223.971:40): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir296142210/syzkaller.0oHWNK/45/bus" dev="sda1" ino=16302 res=1 11:17:04 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000004060501fffa205d287e64deeb0000800c000100060000007d5572000c000200ff0022ff02f10000"], 0x2c}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @default, @netrom={'nr', 0x0}, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}) 11:17:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f0000000300)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x8000) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x2, 0x102, "d72809856e2ab756956a0a2ef3a1b1aadee3cf99ecc3b05ce63f1c8c7f82859d", 0x7, 0x1, 0x100000001, 0x4, 0x28}) r2 = socket(0x200000000000013, 0x3, 0x4be) sendmmsg$nfc_llcp(r2, &(0x7f0000000e40)=[{&(0x7f0000000b00)={0x27, 0x1, 0x1, 0x0, 0x0, 0x0, "8ef8d806536d404d328363c814192b1279f3b37c653dfe89e8c64eb5d942b61e8889da086a65ed9165bd13e14191063cd4225e78f989007ffb984afa11491a"}, 0x60, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x3, 0x101000) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendmmsg$inet_sctp(r2, &(0x7f0000871fc8), 0x71, 0x0) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@nodots='nodots'}, {@dots='dots'}, {@fat=@check_normal='check=normal'}]}) [ 282.908982][ T27] audit: type=1804 audit(1552994223.971:41): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir296142210/syzkaller.0oHWNK/45/bus" dev="sda1" ino=16302 res=1 [ 282.932828][ T8857] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 11:17:04 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 283.008258][ T8857] Unknown ioctl 35084 [ 283.038659][ T8857] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 11:17:04 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x715371) fchown(r1, 0x0, 0x0) 11:17:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000240)=""/251, 0xfb) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x21, 0xfffffffffffffff8}) 11:17:04 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:04 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000004060501fffa205d287e64deeb0000800c000100060000007d5572000c000200ff0022ff02f10000"], 0x2c}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @default, @netrom={'nr', 0x0}, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}) 11:17:04 executing program 0: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:04 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 283.216076][ T8875] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 11:17:04 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:04 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 283.326719][ T8875] Unknown ioctl 35084 11:17:04 executing program 0: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:04 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:04 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:04 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) fchown(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)) 11:17:04 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffff, 0x3d5101) sendmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)}, {&(0x7f00000001c0)="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", 0xff}, {&(0x7f00000002c0)="26da9639ba7c53d35106f91f76ab7007f654cf3edd0bd14efec8bd7be00edf18dfd3a95249286daaca348db882a6c3bebfd5184ccb2377e84544111e315c031d60badb807fb70e91d0c1a15752da2b6bdfc601d06ed7dcf617d4f2e5ee470ce2a7b4faf6abb2bd911a1a5bd27d5ff61c1a5fffc6cf3f6eca5c26df1b6616e8e672b40d709c0c2e0cfdc445f0083f7e", 0x8f}, {&(0x7f0000000100)}, {&(0x7f0000000380)="4127cd38ab8113ef801ff3ee1653c0dd80d8682d9d4313c80e334cc38dd088df4921307c6536ec5d9402fe1e20926ec912c2f504d0f232e4cd5480cd6640e386842f2538b75cee0e1d654c2f84c376f178c475", 0x53}], 0x5, &(0x7f0000000140), 0x0, 0xf1d6cae3f2bc20ab}, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write(r0, &(0x7f00000004c0)="c52d3ac18b25a2aaa6e520a1211b73bfb36ee75c0ef02fa4383f83c227a40b9128d515a4131fe56c9a7beb2c3068cfcfa244a4486d22564b3e2aed8f0931acf70a402a90d0", 0x45) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f00000000c0)}, 0x10) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000013d000/0x18000)=nil, 0x0, 0x38, 0x0, 0x0, 0x0) 11:17:04 executing program 0: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:04 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000180)=@generic={0x0, 0x9, 0x7}) epoll_wait(r2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x3a64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="de08000100", @ANYRES32=r3, @ANYBLOB="3c00020038000200240001006d636173745f72656a6f696e5f696e74657276616c000000000006000000000008000300030000000800040000000000eb6b72bd0d6ac2b567fe8fafbaa401ed8f7f247c47765cc85127d249494086fbc50597fb5a2345555ca67b2bf9f5e6e9d4b94050ec59f811908da9717a894f24a84fbbbbcf88f08391eb0624c2ca860b10cb3024b4ca93ef6ef14eb29baa9a"], 0x58}}, 0x0) 11:17:05 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:05 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="ec5e6c24", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000200)=0x24) r1 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x0, 0x80000000000) sigaltstack(&(0x7f0000003000/0x2000)=nil, &(0x7f0000000240)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x1d, 0x1, 0x40, 0xfffffffffffffffb, 0x81, 0xff, 0x17}}, 0x50) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000000)) 11:17:05 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:05 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:17:05 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:17:05 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8000, 0x0) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x19c, 0x3c, 0x0, 0x70bd2d, 0x25dfdbff, {0x16}, [@typed={0x8, 0x54, @ipv4=@multicast2}, @nested={0x160, 0x16, [@generic="d967e68f3237bdfa8379c43d26482f418106d0437f2be6ca63fedcdb784cd95a011daa7d6f63fdc598efb0835f4a489e80407cd11ac7aefd35993b73073f1bae853ada9226c28a01a44e9fc899cfd419572c391efd506a7245cd", @generic="8649a94ae4058fb12a55a6d507cfe226c613ea59528f06221ee9d5614aced6513d8e8cd4350ce5b83e026f6aa0a52429bff51e4acf2cd06b66b9a6a6c180365e24bdcad231b763e57122f542a091b3f0fb39c38343ea184c91e88d0871d58eb4bc58ba434ff73fcf236ebfad79b63b2c9bdcf7aff0eeb0a2a0612173520dc69fef536c", @typed={0x4, 0x90}, @generic="60d8a9a4ade79664510fae20f8c687a21448bb1c5c5daa78317106941fdc9483234215e9bcd28554e526e5926f5fcbdf3ffdcb2b66780679ca68f6769fd144f392b2753ad49ead0538b3514bc0dcc6b2492ab6ea0e736e3b7506e710d38db929e372702b1e9fe9f20cfc576873c37ed43458c669119c543970ec"]}, @typed={0x8, 0x22, @pid=r1}, @nested={0x18, 0x43, [@typed={0x8, 0x15, @u32=0x2}, @typed={0xc, 0x8e, @u64=0x9}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4}, 0x10) poll(&(0x7f0000000000)=[{}], 0x1, 0x2) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) close(0xffffffffffffffff) 11:17:05 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) fchown(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)) 11:17:05 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:17:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffff, 0x3d5101) sendmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)}, {&(0x7f00000001c0)="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", 0xff}, {&(0x7f00000002c0)="26da9639ba7c53d35106f91f76ab7007f654cf3edd0bd14efec8bd7be00edf18dfd3a95249286daaca348db882a6c3bebfd5184ccb2377e84544111e315c031d60badb807fb70e91d0c1a15752da2b6bdfc601d06ed7dcf617d4f2e5ee470ce2a7b4faf6abb2bd911a1a5bd27d5ff61c1a5fffc6cf3f6eca5c26df1b6616e8e672b40d709c0c2e0cfdc445f0083f7e", 0x8f}, {&(0x7f0000000100)}, {&(0x7f0000000380)="4127cd38ab8113ef801ff3ee1653c0dd80d8682d9d4313c80e334cc38dd088df4921307c6536ec5d9402fe1e20926ec912c2f504d0f232e4cd5480cd6640e386842f2538b75cee0e1d654c2f84c376f178c475", 0x53}], 0x5, &(0x7f0000000140), 0x0, 0xf1d6cae3f2bc20ab}, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write(r0, &(0x7f00000004c0)="c52d3ac18b25a2aaa6e520a1211b73bfb36ee75c0ef02fa4383f83c227a40b9128d515a4131fe56c9a7beb2c3068cfcfa244a4486d22564b3e2aed8f0931acf70a402a90d0", 0x45) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f00000000c0)}, 0x10) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000013d000/0x18000)=nil, 0x0, 0x38, 0x0, 0x0, 0x0) 11:17:05 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:05 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:17:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x20000000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) 11:17:05 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:17:05 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:05 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) fchown(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)) 11:17:05 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:17:05 executing program 0: syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:05 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x715371) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)) 11:17:05 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:05 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}]}}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r1, r2/1000+10000}}) 11:17:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffff, 0x3d5101) sendmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)}, {&(0x7f00000001c0)="7939c093bffb2221e5fdda501bb264c608c106c7766a7b16a6b52c01fa11d4c431d8b8bf1d1102d23d7f6425583a731863971d773a9558c5878d762336c7b59fbfef7447a0e8f427ce2a63ccce984ac19fbc4ce341d561313291dd44d9b0553040b682c0301c86c64544f717c28a8d157c5924d7099488962307a54f2ed1b9147e305ccd79a8267da244bd66b4658b9b3edfca79c610f436139300e857f02bca9810896024a8b39be544a9d60707fb957f2f10230574aadfd906b3c45f23a78d27626b963121ad015fce643d08b1cbaa53db587c06ae731799105fd9579c08cee3f5a92a3919d6e8394ed7176ea06bd6745ba9f67c72f0fce7ad31b05cd52a", 0xff}, {&(0x7f00000002c0)="26da9639ba7c53d35106f91f76ab7007f654cf3edd0bd14efec8bd7be00edf18dfd3a95249286daaca348db882a6c3bebfd5184ccb2377e84544111e315c031d60badb807fb70e91d0c1a15752da2b6bdfc601d06ed7dcf617d4f2e5ee470ce2a7b4faf6abb2bd911a1a5bd27d5ff61c1a5fffc6cf3f6eca5c26df1b6616e8e672b40d709c0c2e0cfdc445f0083f7e", 0x8f}, {&(0x7f0000000100)}, {&(0x7f0000000380)="4127cd38ab8113ef801ff3ee1653c0dd80d8682d9d4313c80e334cc38dd088df4921307c6536ec5d9402fe1e20926ec912c2f504d0f232e4cd5480cd6640e386842f2538b75cee0e1d654c2f84c376f178c475", 0x53}], 0x5, &(0x7f0000000140), 0x0, 0xf1d6cae3f2bc20ab}, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write(r0, &(0x7f00000004c0)="c52d3ac18b25a2aaa6e520a1211b73bfb36ee75c0ef02fa4383f83c227a40b9128d515a4131fe56c9a7beb2c3068cfcfa244a4486d22564b3e2aed8f0931acf70a402a90d0", 0x45) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f00000000c0)}, 0x10) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000013d000/0x18000)=nil, 0x0, 0x38, 0x0, 0x0, 0x0) 11:17:05 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:05 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:05 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x715371) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)) 11:17:05 executing program 0: syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:05 executing program 1: openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x800, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x145) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000080)={0x3, 0x1, [0x3, 0x9, 0x9, 0x6, 0x6, 0x1, 0x2, 0x3f]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x1c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}}, 0x1c}}, 0x0) 11:17:06 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:06 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x0, 0x989680}) exit(0x3fc000000000000) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000008c0)=0xe8) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0, r1, r2}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x5d9d, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaa4aaaa0180c200000008000500d71b0000000200009033b41314bbac1414aa00009078ffff"], 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000340)=0x4) r6 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000480)={{{@in6, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) setsockopt$sock_int(r3, 0x1, 0x3d, &(0x7f00000003c0)=0x401, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000300)) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) fgetxattr(r6, 0x0, &(0x7f0000000580)=""/151, 0x97) openat$audio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio\x00', 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0) 11:17:06 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:06 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x715371) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)) 11:17:06 executing program 0: syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:06 executing program 2: getpid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:06 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4900, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0='/dev/sr0\x00', &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = getuid() syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x4, 0x4, &(0x7f00000015c0)=[{&(0x7f0000000380)="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", 0x1000, 0x5}, {&(0x7f0000001380)="9c65eda4025077376b1f76899b25fd01b8f5133d774deaa5ae51cbd11b798d2c12208a4711cd5b3cea234a91d3397da4a85e537779c17e99df3936e1845b5c0650f6f743d55a8ed074d183d09630f88feeb606a08afda11806bda7c08bc8bfd27938555d43ae317e102d0b176b69c86f3f9e2e7d145bb3225d818c9ffabd9bc894ebf6", 0x83, 0x8bd}, {&(0x7f0000001440)="5ea18af65a0b0e8fda6ee4d0ab7c72eee7f2a5f49a64ce7a66b1d1638b2dfc0c1002f4e07c9f13c717a068a8440ad1011544c5999d465dd98a06ca011608eca50c6bfcd13192e03e078edc84e81da1616ba207893de34a2790fc630051b17ad74ce938c763b25d85218fa780b2341f1837e5a541664f32cfa5f5ae5a04c2bd352213aac03fde3b319fd22b424fefc7a7d8a70ebff03eedc086c3f20c1945", 0x9e, 0x6}, {&(0x7f0000001500)="515a8aadc367858b316290003ef12141f19def44818869c641c982171f90964b7d3c5951d5db4cc6bd1fd03c8d851a76b7c5f50ea9edeb4b6e637808ed8228c83cd6e1d231df5586aa93250f548234526bb775adda7390edcf9fec1cecbf14a62f7cacc60947d1eb6e203fe49ffb8fbe95eba0e05db4ab90af2c9208a0b6edec5e73", 0x82, 0x3ff}], 0x2c8020, &(0x7f0000001640)={[{@nouuid='nouuid'}, {@sysvgroups='sysvgroups'}, {@norecovery='norecovery'}, {@uquota='uquota'}, {@uquota='uquota'}, {@sysvgroups='sysvgroups'}, {@prjquota='prjquota'}, {@swidth={'swidth', 0x3d, 0x9}}, {@noikeep='noikeep'}, {@nouuid='nouuid'}], [{@uid_gt={'uid>', r0}}, {@hash='hash'}]}) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="338656abf70813a91e1e760d5167ea92152c3096af38aedb377101990dbed2f0b4605233c9ae065dac4a6635249aa430348cfb8fc72ff299aeac2cdd226c8b9a0643cbd48f3c6cd730ebb4f10f12b6ac064d984308c4b50df3a9564e258d19483ff0c302d9ee26d528b51a05ec19674532a2ab4762fdb04e470e676129c8ec8bec1ce7894dfc30c5f594b8ac040bc55e7b5938960d706db9df7d29fb34582db66500ac19d6fa45c785808775eb14dad61eaad0bb07f807d61115"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000008c0)=0xe8) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0, r1, r2}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x5d9d, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaa4aaaa0180c200000008000500d71b0000000200009033b41314bbac1414aa00009078ffff"], 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000340)=0x4) r6 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000480)={{{@in6, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) setsockopt$sock_int(r3, 0x1, 0x3d, &(0x7f00000003c0)=0x401, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000300)) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) fgetxattr(r6, 0x0, &(0x7f0000000580)=""/151, 0x97) openat$audio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio\x00', 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0) 11:17:07 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:07 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:07 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:07 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4900, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0='/dev/sr0\x00', &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = getuid() syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x4, 0x4, &(0x7f00000015c0)=[{&(0x7f0000000380)="796223edbc81bf50430ed69423addac0cc8af1d6f9caf7811b0aba136a9f6b66745d137c97caefcc5cc7d20a40cede9f2fc3a2d47e04ae67658b10e8e75370679e7afc311f20cdaed6596df884f4843c2510f5031601d391af37e70fc0392dc91d43b56a66d18bded5bb330eb89a7e1a04ba19835f8cec3113e172e420d2269666afa02cd008d9cbf83925de150cba7995bcefe93f275b56daeabf60dbe398512733f9172b8a22aaebc5b40b7387fd62a889f601970c000c68a941eb4618b67139856c3862a18e2147c95a34fb89685d721d65d592ec525d401cd5196559f4499937e118aac8508e9d0f87c66e17f59c0b754a33555b82e58bbb46f1fde19ebb5f9cc3a2b0423102985674f10262c20cf6fd4282e56c04171c78b257a1ff43edcef29cb05d22f7d718b74a9a0844e53094ae1e9fa1397596b27d69f326b48e920d171fb1c4aea8e7a7e94d388cf2e4993db31e0f51048c6829c2869e6153c42681ca5963266d4d11bc9cc6f0416d30370948d4863abd82e2a9e9a631ae7abe706eda7060b7e6e398281cf41c033f4833e8ce993241fc386f7a31e70116860e5487538fdf9ea07a8f1f89f11d0d254acd76c1d82a4bb785b2721ab84db920b3db8414149108dad8d49ca516181c31cca7804b3c193fb03ad12a0b7f6728a4dfb7820037ad1482b054372e43aa411b74fa36b39f274b4c7498f19abfd60d7c7e56c5d462d62072420b3388eb0ce6919a4bbf6a61211e097bc70f09c32dd07f8bbe414e2af9e8e5191eed16bd7adc2187b8d8e2cc72ce07f2b2de10bf21ab1dca2b56904c1d3378a7ca9174f6871bf09b65df8c5e541751e61b04dc163a994ad45efb61a0da901155d0770057a94c3b1390b173a0532d1dee681b76b03190acd4a5941dc46b502a89dfa97bf3e7008c19ee3411aeef65664d48233804db6f73a6e6ade400b9530fab0fc9e82a6bf59ac334647c57a5e0713229c60798b1563aee67112c2c3ffbd7955b6da62971e8383bb8959d98741ef40cebb60e8937eb42c8335721780c21187b330a4fea9574e31e747371ea76d570d88a3ff68f1e8ed96d9c2e30cbcab16ef7605ea6a5335d0bdf27dfbcd5f9e2207fabb5747332259c03d3d12ca3c4c2ac2bc2916a3dbfb639ddfedca623bce63a435a3ac22f23d3d16b20f0bafb773b1f9690c266d72d39a0b9d6a1a0c4a278b55d3286d865f368baabfb02a22f0f9749537e7178ce199c5c56cb5b3ee38647952871482a57f8a98f28e2834d24fd7525f5061f6610b87575dd6853b3bd66a5c5c13c5c126f199c8e1e260554c2729e0e4df531707091ce540de39accf351bddf78d5d14f878bbfb9c145febee07d122d82eec68df7d91f8772f8b0e6b267fc7eb93f4414d7d7eba7a9a99206fe505a018c3407ab2a8c763376b002f154b9095a88f664f251011b8337a5c8035188174ffff81331149c43d8a7e35d065a178237206a7b16f45f5311e6633cf44dddd4bbf51b50cb8d8f64f244841e0d45e374fc7d55ce11d1666396f05ffe1354383f968f7a887e6d713e48cba2d48fe146c3b0b7872b813ce5aab8f77faa0376e415bbc191bb72e44c8502066a6663c34d181211638735a69e99281a97198637cb6c60b4158705a4341a304801c44fbff20568d8d317df88bbd640a033f9a0d1f0de4d9052b0529a8a0937f3fdb264a8d9c4842951d248aa0adca3b208453ba7846212afefd628f9d3c6d34973b99f110e9b01969e6476be8786f32c061674520392865d63ba38fcd8630495ddba40f663b6a84aaf6d0c869a001d1a249402aaa7c9b56951de8e5e469cdfb79c2220a831fa4979c5fface26bd73240b80f8a4656ee18938d10a488dc988ec97c00d5686bd2e0a7ab29da0378d22c269ca5961a67fbf02f88a5b9a64649820b63d1e88a29a81821cf71189cfc4aabe4f9d29f5a93b4bb10152dd1b49af089dfd73b7ffc5905946777052ea40ae988d6d7960a2786f944d5a2cec5f45dd77626f63e3c431d05afbaefd8b7297806855139bbc0c7fb129bf89a39ee0dc15c8f1642d4bd424aa63c80162a15450245b533f5a0e173402318039acaa0624767326e0d4628c2ef1a8a84f7192e20a262efb5ccc1dd9d86349008b605742f34fd635c7fbad3dbf7c953c3b97629519866822b9b317cb39572039d7c1fde9e55ef0d01b5f188546886428a3ba165191eff5e25b65a039ebb5f7d374053f78602f2492bf09fc2f143d4a758d7a2e87b738441375b83fe25c26d5e15af56546779ab49dd288df95023c183e6947bf6bac2c98027d4672271a179a710340085b4e0d4f18f42002cb7ddcbd5258b2c223108abd7ed1ccb885dd015fbafb74392be09fc2d0cf4e4dced9c82779aa3b49f2b58f3c8d5240a927582b4952a436d462867c0d12826c89d068aabc922241c76d3b779530ec0454aa2580568cd3b890f61ca054b1f9959642e8c53347c8acf703ffb6f82ca87947ef42e4fcea00cfdbe633ad2abf17a1c81cfa2ee0c631f958e3005749d9655208bc4ba4459a5730c10b45bd05a7fddffda5678199b5570c5cae97af8a11646f0980db77a363160639a39e0f149d1de566c1139bdf61c9cb7117f0cf51f504165f1c584ca320b120f9ec0df78191ff29c7a62dc6bb70e82bcddef6796c56d722b37a01ad82bd5c523da3d56a2801c4af410546cebf36d10e1e3f08b1315aa9ecd4683a5f65e63362fb4fec9967454edf134f430b0bda7d991460b913522c9b28bfe43e98cb200405d5ae674daff2ca70d94bb1d9ad5649b5b0a427313a5cbfac52330bb46bbdf50f5d010c441592b4a4042a4a8ec6cdfd36a2d194b53dc23b6a481ea28d028d74a50c3ce1771957908c4d79cfade0abe79c3263669c024e4ad3ae37ce13de7a79d0ea24f8c958be06b1363d56af6c470cf895213fa10035020bf731a7a901d362010271251ad66af5d6eb3872742ff2e4b8e843c9bd0a71592bbf3f245c9c5ac2211e6467c70529f0a1441e88ed78dec823c61362761a3b5506f4f0fd4e009342e615b33de75977b5ffa7f9f275c6366762a3df83cb5c737774d92cbb4ea2333c00867e5e3d53e064961be8a574d4e35051eab28830aced0d7ec17f7618ec56cfd2df8bfb6da134b57abdc22056d73477b36171caff502d393c97e3534c5ab0a642110ea1764a2e8cb277d00fc916c470c7326d9bb9c2e76f7d39e13b9a39c2423662836157860d00793911e6d9f6bcc8cea7b1bc1df47ba839a3959508f084e2bc0ec8ef73ae84aad4a416e27ab600bc314e25ac9e0a44c25b5b5bbdbd3c400f9deeb1d1945309da984ee006eaf0ca80591502381d377ee43db62e2d7f6e20b2c09f1bf0f47c12132138b95e1522de541b041ecba1a07a7bf96d9fb2de87c01f892f1bd0681e181b52bc5c729703579f9f94bd52b7f8bdd6bf708361a5e8ec3ca10631eea8586a68de35ecb89aa06bfead28774da02257f6c3a2642548a586045a3de8ba09d29c16d524ff362199d4829db1c60567c4885768e4cf6fb3042386b55746ebe30124cc7a31eeb202733bceb47129cfd2c0f41b512aa22f65af4a276c071ef6f30f01c682bc7cec3764a75b56971ba6c3842125c06d77aab209fab29e6d0f0f6c00befc7175657f425f3a4aa36035fa19d06e310d07bfdb4e28ab1019424a69c230cee8c675a5ea848b3986a27f83670f569e7412b6f16d1968657f8c95f6795174d80b31a785cc0e2b55ccf52405a80332b6e5c15906dd2c9facbf4e400ce8146fa72ba226b43f2f2584c8a4aa5ebcd0ad101402846405846a6568a210b9c83922fe84c1e7f3078198dd9524f4dffee919b196180d6a4954e5729d0d11804e42ca13094ad23b51ae176da9da6da06ec44527a30bd6123d36b4dcbaa840efad6edf7a880f52e73535e97b963a84eb023866789995a6ed2d5435bf4c5532df5713b3359a2749c026f4590f9c022e8f5fa3e01c8097f22295d89e348a2ae2928957f8399be3829dce81e671be241037fe5f8939eb8464d8a1d9f2f58c5ba201ac44485d10a8dd0778e21299724276ee043cb9903c12b7a1401446cd6fe925e0dafd1c6707ad349dcb53c63124173e52146dcd1d01aed74c8ecc930e01dbbe13895687dd9b89d84b71932d5bedfd63fcaae25921f2870dd4717b6f2522b7667bf31fea77b862f28b4ef65eeace7da448d70fb8173c4af0157275b25b9e3430e5c47b0b3cd2ded16b8f7c33498d911bdd31eecd461c66da8519d97e26f6d8e64e087cec507a5f6848a9309e547c4f5593a7a61cb63a0882c49d2e12262c9c7c63936aa2cf56cf826f87ddc0345c64cc808f896bb9f93c9b7f18dc8a6d59d9fad899223006e1a58738542fad20c24bf0f7fa5de05fa280a2f240d2a56d27056afc1aff7455b41d7316eb2505c1ba0d7561e47d3853ae4b5afc7d182c3a0579617de1133e7022f89f93e8b4cb9223f6f4dca46f2e32277514ef4fd55e78df91164dce151cb99e8704468eee06edb17201b83d59b4b8da9349b399aa4e3d653047ddbeeba141f8782ce858fca4e5c7a23acd8b49ae6e9a6f545fa4b76bce6764641d9a4bd7b348e3c0bc139dcb8f40c249e8e90731e0fe3bd5be881f28f287ddadf3e19185e8f8332b19a44f6e46dba137931ea58cf062fec36ddd03a5f6f68cf91ddcdaa4a17821fb8a4635fbb74b117c6b5cbd1c38e76439dbb46d405d317df51ad359ac74f4db77ed1d204a3437c78a59acee49d302b7b7c47f190c57c9033bae56d9c8685ef577e8283a4e3ba7bbf06d2481781dfb5b0a907b20d44216fcdcdc85a7a2c28ae80b81f0c617c84c3408b111c12fbf18151b257c86e945cd16998e24aca8ba25ba02e36136470c9cefc9149d575f084df36fb61081e383395383adfc75a6d561a7aab295ac33b08fec1e5c0a788bed64a0296d0cafba04defd8315ca97a0b61bcf0d2fb36af89fe5a5b6788b6758d96210205f88b6abdd5b0ed5c34f70d4cd7ad6774741b56b16effbda48e64ac3886006179c85136490fe322d2ab3092d4563558a02542bfe64749ad5c01d84e1d0fc78377e00088189fb7c0730d657e9ff07b8cfb957f7b6ddfe5d4b36f9909fb8dbcf5091c68b57310d2e0582d6893eb4326b0051051d6d88a72ea6e35473900260e1ba05064a507ad8142f93d7c740deed8dba827e3b5530b6e37d5c65e161ac0f2657245e7b2371a2371ca1d351c81164af5d7f5519b7bb91be1e83dc150c4b4ac8bc53b606937e11f7ebe41411ad1325b11a4aeb2643ad80bec5682b34d94510cca427cac1d64929e169ff6f48f8aed5f4441221d831ee0bd3da3784e8d9d82b30ae4cf501d3c8210be3849da820f7607666af3d8f945d4f5cb7031d0439bf50b49a00e18ff2d04737d99934978cbc009cfe70892a093c33390fa8745167b7a4c7b52ec9bffa65c8d8b8701bf5483ab4cd345b0bcb87c24c3564f0481848e82aed6757c880ea4ebb9c513cd88f7997ebf6e904d124c222e244c124385389a1b305d8dd64ab045415904c83bdf92518246c7c003b01f1ab8c448f7c40f400283317597effbe9896bebbfe40a6026656778703644498af6b392c90b9801d34dac91c63dc88617180cecd6c656da47d5b40b2b0d48e04424b2a026510659c3f987e2051856bcf686a9a6d9b4b1fcdf7643d2c5e94ede29a127d32927bc09f0800c3f129b0991b1e0f049551fee43da2ff922e140f734c0e70b7ea1080dbfca07eeac03c87312102ddb0c30aa388c3d9ab670b772fad253072bc6583e401b074e16c2", 0x1000, 0x5}, {&(0x7f0000001380)="9c65eda4025077376b1f76899b25fd01b8f5133d774deaa5ae51cbd11b798d2c12208a4711cd5b3cea234a91d3397da4a85e537779c17e99df3936e1845b5c0650f6f743d55a8ed074d183d09630f88feeb606a08afda11806bda7c08bc8bfd27938555d43ae317e102d0b176b69c86f3f9e2e7d145bb3225d818c9ffabd9bc894ebf6", 0x83, 0x8bd}, {&(0x7f0000001440)="5ea18af65a0b0e8fda6ee4d0ab7c72eee7f2a5f49a64ce7a66b1d1638b2dfc0c1002f4e07c9f13c717a068a8440ad1011544c5999d465dd98a06ca011608eca50c6bfcd13192e03e078edc84e81da1616ba207893de34a2790fc630051b17ad74ce938c763b25d85218fa780b2341f1837e5a541664f32cfa5f5ae5a04c2bd352213aac03fde3b319fd22b424fefc7a7d8a70ebff03eedc086c3f20c1945", 0x9e, 0x6}, {&(0x7f0000001500)="515a8aadc367858b316290003ef12141f19def44818869c641c982171f90964b7d3c5951d5db4cc6bd1fd03c8d851a76b7c5f50ea9edeb4b6e637808ed8228c83cd6e1d231df5586aa93250f548234526bb775adda7390edcf9fec1cecbf14a62f7cacc60947d1eb6e203fe49ffb8fbe95eba0e05db4ab90af2c9208a0b6edec5e73", 0x82, 0x3ff}], 0x2c8020, &(0x7f0000001640)={[{@nouuid='nouuid'}, {@sysvgroups='sysvgroups'}, {@norecovery='norecovery'}, {@uquota='uquota'}, {@uquota='uquota'}, {@sysvgroups='sysvgroups'}, {@prjquota='prjquota'}, {@swidth={'swidth', 0x3d, 0x9}}, {@noikeep='noikeep'}, {@nouuid='nouuid'}], [{@uid_gt={'uid>', r0}}, {@hash='hash'}]}) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="338656abf70813a91e1e760d5167ea92152c3096af38aedb377101990dbed2f0b4605233c9ae065dac4a6635249aa430348cfb8fc72ff299aeac2cdd226c8b9a0643cbd48f3c6cd730ebb4f10f12b6ac064d984308c4b50df3a9564e258d19483ff0c302d9ee26d528b51a05ec19674532a2ab4762fdb04e470e676129c8ec8bec1ce7894dfc30c5f594b8ac040bc55e7b5938960d706db9df7d29fb34582db66500ac19d6fa45c785808775eb14dad61eaad0bb07f807d61115"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000280)={@empty, 0x74, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') getsockopt$packet_buf(r0, 0x107, 0x1f, &(0x7f0000000400)=""/17, &(0x7f0000000440)=0x11) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x104, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000002c0)={0xd, @raw_data="bccd1915535abcf9d70f28448dd98aa5f701d8ecd0e421d0bb9a25e92edaa73ab5cabd7fb4b64eb19e5312544a49bcb948fbf946ee33ff8721404ed85c1d03bf5822b341be99fa2f9b6b40c3dad5e180ad75695b7e17002c5d4bbceb73a166fb694d3430a0f3e02d0ac6244e7e596aff468c29cd8ca4c38a79ca606b0fa984a8454252ef1d0eef93aadabad135c4d448679de2d49f6b817de75491d39c03c5c798559152b892336c48b141404d522e994b68a4a5be96dbe80fe37eb65c11a8ce40fe83017a814be7"}) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xffffffffffffe0d6, 0x101040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000480)=0x5) mlockall(0xfc) unshare(0x40000000) 11:17:07 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:07 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 286.206583][ T9095] IPVS: ftp: loaded support on port[0] = 21 [ 286.456257][ T9095] IPVS: ftp: loaded support on port[0] = 21 11:17:07 executing program 1: syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000001a40)={[{@uid={'uid'}}, {@usrquota='usrquota'}, {@resize='resize'}, {@usrquota='usrquota'}, {@uid={'uid'}}, {@grpquota='grpquota'}, {@nodiscard='nodiscard'}, {@gid={'gid'}}, {@resize_size={'resize', 0x3d, 0x6}}], [{@smackfshat={'smackfshat', 0x3d, '/dev/radio#\x00'}}, {@fsname={'fsname', 0x3d, 'vmnet0md5sumem0mime_type\x00'}}, {@uid_lt={'uid<'}}]}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000100)={0x3}) 11:17:07 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:07 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:07 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:07 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x404000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket(0x3, 0x5, 0xffeffffffffffffe) unshare(0x20000000) r4 = getpid() capget(&(0x7f0000000100)={0x20080522, r4}, &(0x7f00000000c0)={0x10001, 0x9, 0x20000, 0x9, 0x9, 0x6}) clone(0xa0718a6924206ffc, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000400)=""/33, &(0x7f0000000440)=0x21) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f00000003c0)) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000180)=0xfffffffffffffd7f) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a2, &(0x7f0000000380)={'bridge0\x00', 0x200000000b}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000480), 0x1000000000000103, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x4, {0x9, @sliced}}) clone(0x800200, &(0x7f0000000200)="7d39353c0211b0ba7b6b8fa855bd4a4277a5408e8d403ff25c2c36d4364c4adf5f1e72dff7707d4ee642179521f86e05e0d57fb57b1df40e8fc4357436067fef877b0fd0cbb7b9", 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x201, 0x0) poll(&(0x7f0000000340)=[{r6, 0x8}, {r6, 0x100}, {r5, 0x400}], 0x3, 0x4d) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) fcntl$dupfd(r3, 0x0, r5) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) 11:17:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f00000000c0), &(0x7f00000002c0)=0xfffffffffffffeb0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, &(0x7f0000000780)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000007c0)={r4, 0x7}, 0x8) bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x400401}, 0xfffffffffffffffc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r0}) r5 = getpgrp(0x0) setxattr$security_smack_entry(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='security.SMACK64\x00', &(0x7f0000000940)='team0\x00', 0x6, 0x1) ioprio_set$pid(0x1, r5, 0xc3) fallocate(r1, 0x20000000200004, 0x1, 0xffffffdffffffc00) r6 = socket$inet6(0xa, 0x3, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000980)={0x6, 0x1, 0x7, 0x3, 0x3, 0x4000000000000000, 0x7, 0x1, 0x9, 0x9, 0x8}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000003e000002000000000000000020000000"], 0x14}}, 0xa1a80ebfc9a59709) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x10000001) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) getpeername$inet(r0, &(0x7f0000000840)={0x2, 0x0, @multicast1}, &(0x7f0000000880)=0x10) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000200)={@remote={0xfe, 0x80, [0x0, 0x2a8, 0x0, 0x0, 0x8000a0ffffffff, 0x16f, 0x0, 0x0, 0x6]}, 0x8, r7}) signalfd4(r6, &(0x7f0000000280)={0xffffffffffffffc0}, 0x8, 0x80804) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000640)={{0xa, 0x4e22, 0x4, @ipv4={[], [], @multicast2}, 0xfffffffffffffff9}, {0xa, 0x4e23, 0x96, @remote, 0xffffffffffffff17}, 0x8, [0x4f0, 0xfc, 0x3, 0x5, 0x10001, 0xfff, 0x2, 0x81bb]}, 0x5c) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000800)={0x9, 0x3}) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) [ 286.790072][ T9109] IPVS: length: 33 != 8 11:17:08 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:08 executing program 3: syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:08 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1bd, 0x9, 0x8}, 0xc) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:08 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:08 executing program 4: syz_open_dev$cec(0x0, 0x1, 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:08 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x0, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:08 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 287.249853][ T9150] IPVS: length: 33 != 8 11:17:08 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x404000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket(0x3, 0x5, 0xffeffffffffffffe) unshare(0x20000000) r4 = getpid() capget(&(0x7f0000000100)={0x20080522, r4}, &(0x7f00000000c0)={0x10001, 0x9, 0x20000, 0x9, 0x9, 0x6}) clone(0xa0718a6924206ffc, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000400)=""/33, &(0x7f0000000440)=0x21) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f00000003c0)) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000180)=0xfffffffffffffd7f) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a2, &(0x7f0000000380)={'bridge0\x00', 0x200000000b}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000480), 0x1000000000000103, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x4, {0x9, @sliced}}) clone(0x800200, &(0x7f0000000200)="7d39353c0211b0ba7b6b8fa855bd4a4277a5408e8d403ff25c2c36d4364c4adf5f1e72dff7707d4ee642179521f86e05e0d57fb57b1df40e8fc4357436067fef877b0fd0cbb7b9", 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x201, 0x0) poll(&(0x7f0000000340)=[{r6, 0x8}, {r6, 0x100}, {r5, 0x400}], 0x3, 0x4d) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) fcntl$dupfd(r3, 0x0, r5) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) 11:17:08 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x0, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 287.586632][ T9166] IPVS: length: 33 != 8 [ 287.623358][ T9126] syz-executor.1 (9126) used greatest stack depth: 22776 bytes left 11:17:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:08 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:08 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:09 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x0, 0x1bd, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f00000000c0), &(0x7f00000002c0)=0xfffffffffffffeb0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, &(0x7f0000000780)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000007c0)={r4, 0x7}, 0x8) bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x400401}, 0xfffffffffffffffc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r0}) r5 = getpgrp(0x0) setxattr$security_smack_entry(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='security.SMACK64\x00', &(0x7f0000000940)='team0\x00', 0x6, 0x1) ioprio_set$pid(0x1, r5, 0xc3) fallocate(r1, 0x20000000200004, 0x1, 0xffffffdffffffc00) r6 = socket$inet6(0xa, 0x3, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000980)={0x6, 0x1, 0x7, 0x3, 0x3, 0x4000000000000000, 0x7, 0x1, 0x9, 0x9, 0x8}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000003e000002000000000000000020000000"], 0x14}}, 0xa1a80ebfc9a59709) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x10000001) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) getpeername$inet(r0, &(0x7f0000000840)={0x2, 0x0, @multicast1}, &(0x7f0000000880)=0x10) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000200)={@remote={0xfe, 0x80, [0x0, 0x2a8, 0x0, 0x0, 0x8000a0ffffffff, 0x16f, 0x0, 0x0, 0x6]}, 0x8, r7}) signalfd4(r6, &(0x7f0000000280)={0xffffffffffffffc0}, 0x8, 0x80804) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000640)={{0xa, 0x4e22, 0x4, @ipv4={[], [], @multicast2}, 0xfffffffffffffff9}, {0xa, 0x4e23, 0x96, @remote, 0xffffffffffffff17}, 0x8, [0x4f0, 0xfc, 0x3, 0x5, 0x10001, 0xfff, 0x2, 0x81bb]}, 0x5c) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000800)={0x9, 0x3}) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 11:17:09 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x404000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket(0x3, 0x5, 0xffeffffffffffffe) unshare(0x20000000) r4 = getpid() capget(&(0x7f0000000100)={0x20080522, r4}, &(0x7f00000000c0)={0x10001, 0x9, 0x20000, 0x9, 0x9, 0x6}) clone(0xa0718a6924206ffc, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000400)=""/33, &(0x7f0000000440)=0x21) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f00000003c0)) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000180)=0xfffffffffffffd7f) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a2, &(0x7f0000000380)={'bridge0\x00', 0x200000000b}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000480), 0x1000000000000103, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x4, {0x9, @sliced}}) clone(0x800200, &(0x7f0000000200)="7d39353c0211b0ba7b6b8fa855bd4a4277a5408e8d403ff25c2c36d4364c4adf5f1e72dff7707d4ee642179521f86e05e0d57fb57b1df40e8fc4357436067fef877b0fd0cbb7b9", 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x201, 0x0) poll(&(0x7f0000000340)=[{r6, 0x8}, {r6, 0x100}, {r5, 0x400}], 0x3, 0x4d) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) fcntl$dupfd(r3, 0x0, r5) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) 11:17:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:09 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:09 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:09 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 287.946642][ T9185] IPVS: length: 33 != 8 11:17:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, 0x0, 0x0) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:09 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:09 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:09 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, 0x0, 0x0) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:09 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:09 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x404000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket(0x3, 0x5, 0xffeffffffffffffe) unshare(0x20000000) r4 = getpid() capget(&(0x7f0000000100)={0x20080522, r4}, &(0x7f00000000c0)={0x10001, 0x9, 0x20000, 0x9, 0x9, 0x6}) clone(0xa0718a6924206ffc, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000400)=""/33, &(0x7f0000000440)=0x21) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f00000003c0)) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000180)=0xfffffffffffffd7f) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a2, &(0x7f0000000380)={'bridge0\x00', 0x200000000b}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000480), 0x1000000000000103, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x4, {0x9, @sliced}}) clone(0x800200, &(0x7f0000000200)="7d39353c0211b0ba7b6b8fa855bd4a4277a5408e8d403ff25c2c36d4364c4adf5f1e72dff7707d4ee642179521f86e05e0d57fb57b1df40e8fc4357436067fef877b0fd0cbb7b9", 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x201, 0x0) poll(&(0x7f0000000340)=[{r6, 0x8}, {r6, 0x100}, {r5, 0x400}], 0x3, 0x4d) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) fcntl$dupfd(r3, 0x0, r5) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) 11:17:09 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000980)='/dev/input/mouse#\x00', 0x2, 0x80000) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f00000009c0)={"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"}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000040)=""/179) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) sendmsg$unix(r2, &(0x7f0000000940)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000280)="bc045137748eb2955f20e941f8637152513bf551da19ef4349a1223ffbfb105212e692ae04ba8ce2429b5bed4fdb9a657f8312f7c05ec285186236479b942f67cc7eeca5480fb1dea5174796f88c4584041ee5d82a", 0x55}, {&(0x7f0000000300)="a8bea2bef27b6a9615b47d7451d50cb18fdcc6de630da7773a03288c7ef85716c6fce3281bb24bc9e2b360da11e38e92c06c29a43d1ddd2924a88f2a966c639312258fb42b75c0a74f63a49d3103bd650040fe27cbe4e653179d3b9b3e6d6b999251b29aedb548ebc6ad680f195afad4bf211f5ffccb8fe98af731ebdcfe36b91b74b5d5d2c0708559e7ea2b882d82f40d9a", 0x92}, {&(0x7f00000003c0)="94a73402a87e0b94d53ed225b929f97cb081ee90516b19d9b98834484356ab16e344d6748c41debc8e04695b542e922fe4afdfb6ca43e2d402e22b1a2b73541f5181bae638f6e730390df799b8493661e0c969046ba0feb7d404f101c5293f8f6d809e880c628ba0d7ce47c946f8a44aa31df5b09627858f18ff3b06b73b8da13976e6c0fb4af961059a93b1c90945f63ced31cb96fbf2630d9d8d5ef7231ac0acf12b57e6", 0xa5}, {&(0x7f00000001c0)="e47b16fee980e53e45b00e270a2ead6dc547a7cf1f46a794948e6815c1c1992d437fd2143e3b6389384ee76560579a550d", 0x31}, {&(0x7f0000000480)="b4a263cfaeab563f35c27b6c183a28f6d582b955094ed70d128514128cc634b7d33c2a45c895fddd0ddf26863bd03cd2a5bf5f9ac48c2d38b940aa11de35c0dfcaf8843da4b9f9348cc005d4cf3d78b4d515dfeb10a6932fb85a7f2437bcb8986d34e2ea6f9acc6994d079e277b5f27abe69827022f19938b4dba9e411c1d7dc11ac90f00da799bdffb4c33b6de0eef6d800c0bca7c23ca3da43d619526d2e68b287f108bcf66f30a6e8019f7e5b49dd28f73788b28c88cc52a94fb4eee7dd2f0db6592191a26cb4de8ebb502592b6ef953ebfaff014bea9448cb989e3c2212e467f787284c9b42d0ce359c04b57ef6672de", 0xf2}, {&(0x7f0000000580)="2ba41d9335136f3af40faedb1c9f7031af89ea8dedd693ac239d8bd5ddbd161b788e099f0fd45ffaabfb951f7ac0d63333727f9c3d1c81761fd8594688689f066fe56081ab102a44a1d07dd1cc8b438117a4cb74557e187c77c7129264e639869080a69d9cda60cfa4fd9ad33512aa7bfa308a61a4377d5af1d72c4d4307a35bf4f4b353c059a7646cc28c76250e161756f441b6bf6f7f23e3e791060b294172fb37eb28198d7dc4a128324c8317a3007d36c8e4b900651ebcc8839744b7d5b89bad397488bc0481aa7575507c16890a6c73c0c23ad988c1e5819578431739ebfba6d755dc45905517937b18d4cd2c2f8e9cca0bcf2c91572b8b6726ebca1c", 0xff}, {&(0x7f0000000680)="4b54917271c0865ea6a1007f7298e5eb9f678c97180acda6d9b82013dc5d627b1fe68050e330398295aff09e690846cf747a1940b8db11aae41505b80587415a7dae4aabe1c81deff8a0ed1cfd2d6f85a6221bd954aa16b50eb83556c391687d05220faa8cef0b6a7cb4f53495e4dccfb5691808f39bf89bd21d", 0x7a}, {&(0x7f0000000700)="f95207431075b6c3448ea9aa697789cf3958d202937a469477a13f", 0x1b}, {&(0x7f0000000740)="c0d3a3458fad8261d14eb4e3c3b1898a49cefb6b2fc3ac2ded5dbb3c55fd482c6f284a94adef2264dd3821d65536b77a2f277084054109ed6b33ba732434ded3ed387aa3a4279b6c1eea4998c29242093425e084b8a68c1918b370430d6c7cd99175ef6b31770ee2e97fff86933def18f4861200aa20335631f0cd0a63869ed98931ff20b13e49b6408500e8fcb38f1141a47eca1659aea1d07675e62917d46ea08e7dc6ef130034a2237afc3ff0648d783dce3c6f6761070bf639b88361d6d9101b29d28c18dc358a1349bac5902b58a587721a53", 0xd5}], 0x9, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r0, r2]}], 0x18, 0x10}, 0x4000000) getitimer(0x0, &(0x7f0000000180)) 11:17:09 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:09 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, 0x0, 0x0) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:09 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:09 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:09 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x0, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:09 executing program 5: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x3}, &(0x7f0000000140)=0x8) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000015e, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14, 0x0) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) [ 288.579627][ T9221] IPVS: length: 33 != 8 11:17:10 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:10 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:10 executing program 1: socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) capget(&(0x7f00000001c0)={0x20080522, r2}, &(0x7f0000000200)={0x9, 0x81, 0xffffffff, 0x6, 0x3ff, 0x8001}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) fsync(r0) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000280)={0x6, 0x4}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000240)={&(0x7f0000000740)="eee831c4c55ec237f036e607532e6be515e0ff59eb07ca967784d01655a33a563c297579808c05c2a32773aa52580871a379712644cd3fe309a095938a2699f285daf00f0c5072970a04d508e74dce8d091b9a0d946312e9543ffaf5c41d7507c95443fb0c4d26a2411c4684267a142a2db6dc35d80807e4b29643daa044b555ae0533296509e0fda89f", 0x8a}) ioctl$int_in(r4, 0x5452, &(0x7f0000000580)=0xe2e) fcntl$lock(r1, 0xa, &(0x7f0000000380)={0x802000001, 0x0, 0x200005, 0x3, r2}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10) bind$unix(r3, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ptrace$setregset(0x4205, r2, 0x3, 0x0) io_setup(0x20, &(0x7f0000000300)=0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100)=0x80000001, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000840)=""/200, &(0x7f0000000340)=0xc8) perf_event_open(0x0, r2, 0x2, r3, 0x1) io_cancel(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xa, 0x423, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 11:17:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x10000, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x5, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0xd) 11:17:10 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x0, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:10 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:10 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:10 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x0, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x54, 0x7, 0x1, {0x2, 0x5}, {0x2, 0xf37}, @period={0x5d, 0x5, 0x0, 0x4, 0x9, {0x0, 0x401, 0x3, 0x9}, 0x1, &(0x7f0000000080)=[0x0]}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) close(r0) [ 289.093060][ T9272] IPVS: length: 200 != 24 [ 289.116534][ T9272] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:17:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:10 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:10 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:10 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:10 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 289.563602][ T9301] IPVS: length: 200 != 24 11:17:11 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:11 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:11 executing program 5: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000240)='net/sockstat\x00') ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x7ff}) unshare(0x22000000) socket$tipc(0x1e, 0x5, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) 11:17:11 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:11 executing program 1: socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) capget(&(0x7f00000001c0)={0x20080522, r2}, &(0x7f0000000200)={0x9, 0x81, 0xffffffff, 0x6, 0x3ff, 0x8001}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) fsync(r0) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000280)={0x6, 0x4}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000240)={&(0x7f0000000740)="eee831c4c55ec237f036e607532e6be515e0ff59eb07ca967784d01655a33a563c297579808c05c2a32773aa52580871a379712644cd3fe309a095938a2699f285daf00f0c5072970a04d508e74dce8d091b9a0d946312e9543ffaf5c41d7507c95443fb0c4d26a2411c4684267a142a2db6dc35d80807e4b29643daa044b555ae0533296509e0fda89f", 0x8a}) ioctl$int_in(r4, 0x5452, &(0x7f0000000580)=0xe2e) fcntl$lock(r1, 0xa, &(0x7f0000000380)={0x802000001, 0x0, 0x200005, 0x3, r2}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10) bind$unix(r3, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ptrace$setregset(0x4205, r2, 0x3, 0x0) io_setup(0x20, &(0x7f0000000300)=0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100)=0x80000001, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000840)=""/200, &(0x7f0000000340)=0xc8) perf_event_open(0x0, r2, 0x2, r3, 0x1) io_cancel(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xa, 0x423, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 11:17:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:11 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:11 executing program 5: syz_emit_ethernet(0x19, &(0x7f00000000c0)={@remote, @broadcast, [], {@llc_tr={0x11, {@llc={0xfe, 0xe0, "8b", "dbafd33eca2b4689"}}}}}, 0x0) 11:17:11 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:11 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 289.976813][ T9319] IPVS: length: 200 != 24 11:17:11 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:11 executing program 5: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x13) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffff6, 0x1) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000200)=0x80, 0xfffffeb3) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{0x1, 0x2}, {0x7, 0x5}, {0x5, 0x7}]}) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xa, 0x16, 0x1, "9c99ba8eaf27f1981c60db1c89911c7a309488839e864826fe13189cf1f1e839b7dc6dbec3effa12b2c6fe3f84e7c07661a5ad8662b3dff50d2cdde885e50816", "4b8c4a6baa7dc2912a92ad41ea2ba322f5a80499f89e6fc935cbe0109393e3af", [0xfffffffffffffff9, 0x7331]}) 11:17:11 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:11 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:11 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'nr0\x01\x00', 0x4005}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x200001) getsockname$ax25(r2, &(0x7f0000000040)={{0x3, @default}, [@netrom, @netrom, @rose, @netrom, @netrom, @netrom, @default, @rose]}, &(0x7f00000000c0)=0x48) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000081000000000001e149f8b6670321bbc8"], 0x12) 11:17:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fallocate(r0, 0x12, 0x73, 0x3) r1 = socket(0x5, 0x806, 0x100000001) write(r1, &(0x7f0000000000)="fc0000004a000700ab092500090007000aab80ff01000000000036932100e0d2ac6ab2710100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe000000070002000000000000006c6c256f1a272f900e2e117c22efc205214000000000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2c000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d09b0350b0041f0d48f6f0000080548deac270e33429fd3000175e664e9d38a873cf10000", 0xfc) chdir(&(0x7f0000000100)='./file0\x00') ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000140)=""/72) 11:17:11 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:11 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:11 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)) 11:17:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0xc) chdir(&(0x7f0000000240)='./file0\x00') sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000b0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) recvfrom$inet(r1, &(0x7f0000000100)=""/197, 0xc5, 0x10000, 0x0, 0x0) r2 = socket(0x0, 0x7, 0xfffffffffffffffa) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x101, 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x100, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'ip6gre0\x00'}}, 0x1e) getsockopt$ax25_int(r3, 0x101, 0x9, &(0x7f0000000080), &(0x7f0000000200)=0x4) [ 290.650218][ T9362] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 290.658511][ T9362] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 11:17:11 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:12 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:12 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 290.817952][ T9382] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:17:12 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 290.858176][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 11:17:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x1) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)) syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x400) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x8080000000000011, &(0x7f0000000140), 0x0) 11:17:12 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:12 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80040, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x67fc, 0x5, 0x1, 0x401, 0xd72, 0x0, 0x8, 0x9, 0x401], 0x9, 0x0, 0x3, 0x9, 0x2, 0x5, {0x1, 0x0, 0xfffffffffffeffff, 0x1f, 0x0, 0x4, 0x49, 0x40, 0xd, 0x23a, 0x63171543, 0x7, 0x8, 0x100, "32b183cb9461c26c8b253e4aeed85e94b2a058d097a6aed197d22c3bcddbfe9c"}}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f00000001c0)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xf, 0x8, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000240)=0x4) shmctl$IPC_STAT(0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x140000, @ipv4={[], [], @remote}, 0x4}, @in={0x2, 0x4e24, @rand_addr=0x9}], 0x2c) 11:17:12 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 291.046346][ T9404] overlayfs: missing 'lowerdir' 11:17:12 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:12 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)) 11:17:12 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:12 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:12 executing program 5: syslog(0x2, &(0x7f0000000480), 0x0) add_key(&(0x7f0000000540)='id_resolver\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key(&(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)="12c96dfb1ced2d956aaf4d0df3d70f7995e2d30c1c76de4f5ce64fec91aabc074df4e2578c0522835a980665dfb34163790669c934588fc0a988c1063e593fea2c1f192a9c9b0d1dd4e5856ae6f81d22051aab3d9844c4fb1a3818867f6067a3ba2774f867723e85ccc98cc38cfbf2c39597c84b415f049f59e8ea97037374c8fa086d82a1612509939536df118ee5ba67e66419203dcafe1651447fcb55e8bf94a97ad28491d90a1faae82bd99981664f", 0xb1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000003c0)="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", 0xfffffffffffffdf1, r0) r2 = request_key(&(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='system\\self,\'}eth1posix_acl_accessvmnet1*usermime_type\x00', 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x202, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000340)={0x4c52, 0x7ff}) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$instantiate(0xc, r1, &(0x7f0000000180)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', 'vmnet1#'}, 0x20, r2) 11:17:12 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x7fff, 0x4) sendmmsg(r0, &(0x7f0000009180), 0x400000000000221, 0x0) [ 291.361203][ T9422] overlayfs: missing 'lowerdir' [ 291.381040][ T9425] overlayfs: missing 'lowerdir' 11:17:12 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x1, 0x1, "01"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@can, 0x2c3, &(0x7f0000000180), 0x0, &(0x7f00000003c0)=""/237, 0xfffffffffffffd10}, 0x0) 11:17:12 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:12 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 291.478005][ T9432] overlayfs: missing 'lowerdir' 11:17:12 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 291.558724][ T9438] overlayfs: missing 'lowerdir' [ 291.582302][ T9442] overlayfs: missing 'lowerdir' 11:17:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000400)={'nlmon0\x00', 0x0}) clock_gettime(0x7, &(0x7f0000003f80)={0x0, 0x0}) recvfrom(r0, &(0x7f0000006880)=""/4096, 0x1000, 0x100, &(0x7f0000000200)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80) recvmmsg(0xffffffffffffff9c, &(0x7f0000003d40)=[{{&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f0000000500)=""/60, 0x3c}, {&(0x7f0000000540)=""/2, 0x2}], 0x3, &(0x7f00000005c0)=""/70, 0x46}, 0x6}, {{&(0x7f0000000640)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/132, 0x84}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/2, 0x2}, {&(0x7f00000007c0)=""/145, 0x91}, {&(0x7f0000000880)=""/237, 0xed}, {&(0x7f0000000980)=""/167, 0xa7}], 0x7, &(0x7f0000000a40)=""/15, 0xf}, 0x7}, {{&(0x7f0000002b40)=@alg, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/4, 0x4}], 0x1, &(0x7f0000002c40)=""/85, 0x55}, 0x2}, {{&(0x7f0000002cc0)=@hci, 0x80, &(0x7f0000002d40)}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002d80)=""/228, 0xe4}, {&(0x7f0000002e80)=""/135, 0x87}, {&(0x7f0000002f40)=""/132, 0x84}, {&(0x7f0000003000)=""/70, 0x46}, {&(0x7f0000003080)=""/16, 0xffffffffffffffa0}], 0x5, &(0x7f0000003140)=""/8, 0x8}, 0x3}, {{0x0, 0xfffffffffffffce7, &(0x7f0000003400)=[{&(0x7f0000003180)=""/198, 0xc6}, {&(0x7f0000003280)=""/27, 0x1b}, {&(0x7f00000032c0)=""/21, 0x15}, {&(0x7f0000003300)=""/254, 0xfe}], 0x4, &(0x7f0000003440)=""/255, 0xff}, 0x9}, {{&(0x7f0000003540)=@hci, 0x80, &(0x7f0000003640)=[{&(0x7f00000035c0)=""/105, 0x69}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003680)=""/204, 0xcc}, {&(0x7f0000003780)=""/80, 0x50}, {&(0x7f0000003800)=""/188, 0xbc}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000003900)=""/139, 0x8b}, {&(0x7f00000039c0)=""/25, 0x19}], 0x6, &(0x7f0000003a80)=""/157, 0x9d}, 0xffffffff}, {{0x0, 0xffffffffffffff8d, &(0x7f0000003c80)=[{&(0x7f0000003b40)=""/174, 0xae}, {&(0x7f0000003c00)=""/72, 0x48}], 0x10000000000001db, &(0x7f0000003cc0)=""/99, 0x63}, 0x637}], 0x9, 0x2, &(0x7f0000003fc0)={r3, r4+30000000}) recvmmsg(0xffffffffffffffff, &(0x7f0000006480)=[{{&(0x7f00000040c0)=@caif=@dbg, 0x80, &(0x7f0000005280)=[{&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/159, 0x9f}, {&(0x7f0000004240)=""/40, 0x28}, {&(0x7f0000004280)=""/4096, 0x1000}], 0x4, &(0x7f00000052c0)=""/191, 0xbf}, 0x8001}, {{&(0x7f0000005380)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005400)=""/50, 0x32}], 0x1, &(0x7f0000005480)=""/198, 0xc6}, 0x9a7}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005580)=""/58, 0x3a}, {&(0x7f00000055c0)=""/131, 0x83}, {&(0x7f0000005680)=""/107, 0x6b}], 0x3}, 0x1}, {{&(0x7f0000005740)=@generic, 0x80, &(0x7f0000005800)=[{&(0x7f00000057c0)=""/53, 0x35}], 0x1}, 0x32ebc05b}, {{&(0x7f0000005840)=@ipx, 0x80, &(0x7f0000005a80)=[{&(0x7f00000058c0)=""/24, 0x18}, {&(0x7f0000005900)=""/230, 0xe6}, {&(0x7f0000005a00)}, {&(0x7f0000005a40)=""/29, 0x1d}], 0x4}, 0x951}, {{&(0x7f0000005ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005b40)=""/139, 0x8b}, {&(0x7f0000005c00)=""/11, 0xb}, {&(0x7f0000005c40)=""/255, 0xff}], 0x3, &(0x7f0000005d80)=""/219, 0xdb}, 0x4}, {{0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000005e80)=""/223, 0xdf}, {&(0x7f0000005f80)=""/132, 0x84}, {&(0x7f0000006040)=""/65, 0x41}], 0x3, &(0x7f0000006100)=""/100, 0x64}, 0x4}, {{&(0x7f0000006180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000006440)=[{&(0x7f0000006200)=""/84, 0x54}, {&(0x7f0000006280)=""/212, 0xd4}, {&(0x7f0000006380)=""/33, 0x21}, {&(0x7f00000063c0)=""/116, 0x74}], 0x4}, 0x100000000000}], 0x8, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000006840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11040010}, 0xc, &(0x7f0000006800)={&(0x7f0000006680)={0x170, r1, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r5}, {0xd4, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6e}}, {0x8, 0x6, r6}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x6, 0x100000001, 0x82}, {0x401, 0x6, 0x6, 0x1}, {0x200, 0x0, 0x7, 0xfffffffffffffffa}, {0x5, 0x1, 0xf06f, 0xa25}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000804}, 0x2000c080) r7 = syz_open_dev$dspn(&(0x7f0000000a80)='/dev/dsp#\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x16}, 0x459}) socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x0, 0x0) connect(r8, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r7, 0x4040ae72, &(0x7f0000000080)={0x9, 0x7, 0x3, 0x1, 0x2}) rename(&(0x7f0000000380)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, 0x0, 0x0) 11:17:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)) 11:17:13 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) finit_module(r0, &(0x7f0000000380)='/dev/midi#\x00', 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="00de19000000ffff060000") syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r1, 0x7) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) ioprio_get$pid(0x2, r5) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x3, 0x4882) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x300, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0305602, &(0x7f0000000080)={0x0, 0xfffffffffffffff9, 0x2004, 0x1}) 11:17:13 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:13 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:13 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x620281, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1, 0x200000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x100, 0x438, 0x310, 0x310, 0x438, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x2, 0xfffffffffffffff7}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x80000001, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e21}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x2028, 0x2}}}, {{@ip={@multicast2, @multicast2, 0x0, 0xffffffff, 'lo\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x100, 0x0, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x100000001, [0x1, 0x6, 0x5, 0x4, 0x3], 0x0, 0x8}, {0x1, [0x7ff, 0x6, 0xb2c4, 0x9, 0x464f71fa], 0x100000000, 0xe0000000}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x3}}, @common=@ttl={0x28, 'ttl\x00', 0x0, {0x0, 0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x2000000, @ipv4=@multicast1, 0x4e24}}}, {{@ip={@loopback, @loopback, 0xffffff00, 0xffffffff, 'ip6erspan0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x6f, 0x2, 0x40}, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f0) accept$packet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xd1, &(0x7f0000000040)=0xffffffa4, 0x4) 11:17:13 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 291.876739][ T9463] overlayfs: missing 'lowerdir' [ 291.884941][ T9465] overlayfs: missing 'lowerdir' [ 291.913544][ T9467] Unknown ioctl -1070574078 11:17:13 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 291.940723][ T9467] Unknown ioctl -1070574078 11:17:13 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) finit_module(r0, &(0x7f0000000380)='/dev/midi#\x00', 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="00de19000000ffff060000") syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r1, 0x7) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) ioprio_get$pid(0x2, r5) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x3, 0x4882) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x300, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0305602, &(0x7f0000000080)={0x0, 0xfffffffffffffff9, 0x2004, 0x1}) 11:17:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xf, 0x1, 0x5) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000094b67fb3bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000006f460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x108009}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x204, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x800) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, [{}], {@ipv4={0x800, {{0x3a, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) ioctl$sock_proto_private(r1, 0x89e3, &(0x7f0000000200)="8da6fe9202dc5c8774504bbde245bf08214ad1b301b3672855383c212b56e2e3f3e85a7974ef1afe2c4762a25825288f4d100706d0a2e6d9ccaa842bccd90d5dd1a88beda1df6ab6a9a0ef823ebb15271e4e7503445856cd55fb881dbdf7f868d7f9dc059f615ebac9543c3a7077631fda8a551e5f179eab37bbb528d8d7ead9f88ca8494c2178e9a70058a681ec2f2d096c3224472c0a2da16dfad4de083efd63044ba538e039b9d99a939bbba23fb82110") [ 292.037002][ T9478] overlayfs: missing 'lowerdir' 11:17:13 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 292.193731][ T9489] Unknown ioctl -1070574078 [ 292.225291][ T9495] overlayfs: missing 'lowerdir' 11:17:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 11:17:13 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:13 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 292.526263][ T9505] overlayfs: missing 'lowerdir' 11:17:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xf, 0x1, 0x5) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000094b67fb3bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000006f460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x108009}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x204, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x800) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, [{}], {@ipv4={0x800, {{0x3a, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) ioctl$sock_proto_private(r1, 0x89e3, &(0x7f0000000200)="8da6fe9202dc5c8774504bbde245bf08214ad1b301b3672855383c212b56e2e3f3e85a7974ef1afe2c4762a25825288f4d100706d0a2e6d9ccaa842bccd90d5dd1a88beda1df6ab6a9a0ef823ebb15271e4e7503445856cd55fb881dbdf7f868d7f9dc059f615ebac9543c3a7077631fda8a551e5f179eab37bbb528d8d7ead9f88ca8494c2178e9a70058a681ec2f2d096c3224472c0a2da16dfad4de083efd63044ba538e039b9d99a939bbba23fb82110") 11:17:13 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x8, 0x2d, 0x5, 0x7fff, 0x400, 0x7}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fadvise64(r1, 0x0, 0x40, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/241) getsockopt$inet_udp_int(r2, 0x11, 0x6f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write(r1, &(0x7f0000000200)="1f0000000104fffffd3b000007110000f30501000b000100020423ca0000cf", 0x309) 11:17:13 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:13 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 292.686483][ T9512] overlayfs: missing 'lowerdir' 11:17:13 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x100000001, 0x100) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r0, r1) readv(r1, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/52, 0x34}], 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000000c0)=0x9, 0x4) 11:17:14 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 292.708623][ T9520] overlayfs: missing 'lowerdir' 11:17:14 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:14 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x9, 0x40000) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='\x00', &(0x7f0000000040)={0x73, 0x7fffffff, "184950ebd112aeab972b93eda03e1adfc32658cf712016364bdd5a7f64b92f0d50285efbd7f2ac0370efb49dfe057769fa715b673e00d6bee8e77a63dc6e440e1e85d8600d1f4797615dfec91463568baeeb1e3df3dfe253d6b70e71e7cdd9ffcfe76ceb68637f0aefb977"}, &(0x7f00000000c0), 0x1000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) [ 292.874579][ T9534] overlayfs: missing 'lowerdir' [ 292.917600][ T9536] overlayfs: missing 'lowerdir' 11:17:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 11:17:14 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x100000001, 0x100) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r0, r1) readv(r1, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/52, 0x34}], 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000000c0)=0x9, 0x4) 11:17:14 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:14 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:14 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000240)) [ 293.197134][ T9549] overlayfs: missing 'lowerdir' [ 293.205250][ T9548] overlayfs: missing 'lowerdir' 11:17:14 executing program 1: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20002, 0x4) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0xfff, 0x7, 0x5, 0x3, 0x5, 0x3, 0x3f, 0x0, 0x3b7, 0x40, 0x353, 0x3, 0x4, 0x38, 0x1, 0x1, 0xff, 0x1ff}, [{0x6474e553, 0x9, 0xb3, 0x9, 0x3, 0x7f, 0x7, 0x1}], "a3d034b0eed1ddce5c2ba6ab2bfeb77541629287afd5e37fc9799cebd43e474afd59649672da1af58bf12f0c50c9ddc9cb777ffee43890aab45863fc40c1d8a1506ae6ce513070", [[], []]}, 0x2bf) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40000, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x7fff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x5, 0x800c, 0x1, 0x48e11e81, r5}, 0x10) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x2, r4}) splice(r2, 0x0, r2, &(0x7f00000000c0), 0x400000000005, 0x0) 11:17:14 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:14 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:14 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x111401, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0800000000000000eabc0000000000000600000000000000d6e4aa146672da3f39268c9e8fa6d34b01010000000000007d501ae001000000010000000000000002"]) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x9a3]) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) truncate(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000140)) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000340)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00\x00\x000\xdf\xaa_(\x00'}}) 11:17:14 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x3d1, &(0x7f000000cf3d)=""/195}, 0x48) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) [ 293.370255][ T9561] overlayfs: unrecognized mount option "lowerdir" or missing value [ 293.396940][ T9568] overlayfs: unrecognized mount option "lowerdir" or missing value 11:17:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 11:17:15 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:15 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:15 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:15 executing program 5: r0 = dup(0xffffffffffffff9c) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1b, &(0x7f0000000100)=""/209, &(0x7f0000000000)=0xd1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b97000)={0x2, &(0x7f0000000080)=[{}, {0x6}]}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x8200, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f00000000c0)=""/1, &(0x7f0000561ffc)=0x1) 11:17:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) 11:17:15 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 293.772983][ T9590] overlayfs: unrecognized mount option "lowerdir" or missing value [ 293.794742][ T9594] overlayfs: unrecognized mount option "lowerdir" or missing value 11:17:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000640)=""/80, 0x50}], 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) 11:17:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) 11:17:15 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:15 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 293.967133][ T9610] overlayfs: unrecognized mount option "lowerdir" or missing value 11:17:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0xfffffffffffff65e, 0xffff, 0x3, 0x8, 0x7fa}, 0x14) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mlock(&(0x7f0000b96000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xd) [ 294.033419][ T9620] overlayfs: unrecognized mount option "lowerdir" or missing value 11:17:15 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x6, 0x4) 11:17:15 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:15 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:15 executing program 1: socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom(r1, &(0x7f0000000140)=""/101, 0x65, 0x60, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002200006008, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r3, 0x1279, &(0x7f0000000000)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x4ea, @rand_addr="56bc8cd41559d77f559baff86b38d1f9", 0x800}, 0x1c) 11:17:15 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) [ 294.380431][ T9637] overlayfs: missing 'lowerdir' [ 294.388177][ T9640] overlayfs: failed to resolve 'f': -2 [ 294.395447][ T9642] overlayfs: failed to resolve 'f': -2 11:17:15 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f0000000080)="0adc1f123c123f522535f2") socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000540)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000004c0)='/dev/swradio#\x00', 0x1, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x400, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) stat(&(0x7f0000004980)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='overlay\x00', 0x2806021, &(0x7f0000000480)=ANY=[@ANYBLOB="78696e6f3d6175746f2c6c6f7769726469723d2e2f66696c65302c696e6465783d6f66662c78696e6f3d6f66662c7065726d698189646972656374696f2c00"]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) close(r4) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) r5 = getpgid(0x0) getpgrp(r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040), 0x52d) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000340)={0x55, 0x200, 0xfff, {0x4, 0x7}, {0x2, 0x7}, @const={0x522f, {0xffffffff, 0x0, 0xf201, 0x7ee6}}}) rmdir(&(0x7f00000002c0)='./file0\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='overlay\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @multicast2}, 0x8, 0x0, 0x0, 0x0, 0xdb86, &(0x7f00000000c0)='veth0_to_bridge\x00', 0x8000, 0x1}) r6 = socket$unix(0x1, 0x5, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x100000001, 0x10000000000420}}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000440)=r4, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) setfsuid(r7) 11:17:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1ff, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)={0x3ff, 0x79d}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000180)={0x3, 0x8, 0xffff, 0xfff, 0x3, 0xb4b3, 0x1, 0x7, 0x3, 0x5}) 11:17:15 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:15 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 294.569731][ T9655] overlayfs: missing 'lowerdir' 11:17:15 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 294.592801][ T9658] overlayfs: failed to resolve 'f': -2 [ 294.613981][ T9662] overlayfs: failed to resolve 'f': -2 11:17:15 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:15 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 294.724676][ T9669] overlayfs: failed to resolve 'f': -2 11:17:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f0000000080)="0adc1f123c123f522535f2") socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000540)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000004c0)='/dev/swradio#\x00', 0x1, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x400, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) stat(&(0x7f0000004980)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='overlay\x00', 0x2806021, &(0x7f0000000480)=ANY=[@ANYBLOB="78696e6f3d6175746f2c6c6f7769726469723d2e2f66696c65302c696e6465783d6f66662c78696e6f3d6f66662c7065726d698189646972656374696f2c00"]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) close(r4) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) r5 = getpgid(0x0) getpgrp(r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040), 0x52d) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000340)={0x55, 0x200, 0xfff, {0x4, 0x7}, {0x2, 0x7}, @const={0x522f, {0xffffffff, 0x0, 0xf201, 0x7ee6}}}) rmdir(&(0x7f00000002c0)='./file0\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='overlay\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @multicast2}, 0x8, 0x0, 0x0, 0x0, 0xdb86, &(0x7f00000000c0)='veth0_to_bridge\x00', 0x8000, 0x1}) r6 = socket$unix(0x1, 0x5, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x100000001, 0x10000000000420}}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000440)=r4, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) setfsuid(r7) 11:17:16 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 294.794090][ T9676] overlayfs: missing 'lowerdir' [ 294.810944][ T9679] overlayfs: failed to resolve 'f': -2 [ 294.811545][ T9680] overlayfs: failed to resolve 'f': -2 [ 294.939926][ T9688] overlayfs: missing 'lowerdir' 11:17:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:16 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4e6, 0x41) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f00000000c0)={0xf000, 0x4000}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0x1f, 0x0, 0x1}, 0x2c) syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 11:17:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:16 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c59397d9f1ea26b4c5036f733402000000ae250800") syz_emit_ethernet(0x300b00, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60b40900003053ff51dff725cb5d70e7d83b86e81947c502024300600000000000ffffe0000002ff8fc5b3111c7700410000000000000000907893419aeb0007040060b680fa0000000000000000000000fa42da081df5bc110602ffffffffffff00000000000000000000ffffac1400080000"], 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x10000, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000300)={0x43, 0x9, 0x0, {0xfff, 0x1, 0xd8d, 0x1, 0xffffffffffffff7f, 0x9, 0x1, 0x80, 0x100}}, 0x43) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x1000008000000280, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000500), &(0x7f00000000c0)=0x68) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000380)={0x9, @capture={0x1000, 0x1, {0x1, 0x1f}, 0x1, 0x8001}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000480)={0x0, 0xe}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x101, 0x30}, &(0x7f0000000280)=0xc) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x1000000, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={r3, 0x89, "fd883a0f53851e812ad4723af9ed53e91112dc76b86315804598e99136bb150dbce42c33ab3f9adb73a36cea58471ffddafa026f575b852441da038269a75fac49d214a0198cc65dc2fd4473eb810c1e1022c316e81be6d1e45a0d2f4cab3216cf29656715855803fd4b6e460d3873523bf1cd2c998f40df20f0b263f897d3c82405f7091d6b1b92df"}, &(0x7f0000000040)=0x91) [ 295.149870][ T9697] overlayfs: missing 'lowerdir' [ 295.159976][ T9701] overlayfs: failed to resolve 'fil': -2 [ 295.168509][ T9703] overlayfs: failed to resolve 'fil': -2 11:17:16 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:16 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:16 executing program 1: perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000, 0x44) ioctl$TIOCSTI(r1, 0x5412, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 11:17:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:16 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096102, &(0x7f0000000100)) [ 295.326076][ T9717] overlayfs: failed to resolve 'fil': -2 [ 295.347475][ T9716] overlayfs: missing 'lowerdir' [ 295.359560][ T9724] overlayfs: failed to resolve 'fil': -2 11:17:16 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 295.493533][ T9735] overlayfs: failed to resolve 'fil': -2 11:17:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:16 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000000)={0x0, 0xfffffffffffffffb}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='./file0/file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000001840)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYRESHEX, @ANYPTR=&(0x7f0000000780)=ANY=[@ANYPTR], @ANYRESHEX], @ANYPTR, @ANYRES64]) io_pgetevents(0x0, 0x3, 0x4, &(0x7f0000000500)=[{}, {}, {}, {}], &(0x7f00000005c0), &(0x7f0000000640)={&(0x7f0000000600)={0x20}, 0x8}) 11:17:16 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x1e165) process_vm_writev(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x1001) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r1, 0x35, 0x8, 0x5) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f00000000c0)) dup(r2) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) read(r0, &(0x7f0000000900)=""/4096, 0xfffffffffffffd95) ftruncate(r3, 0x8007d) sendfile(r2, r3, 0x0, 0x3) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) 11:17:16 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:16 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x3c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 'nq\x00', 0x10, 0xae, 0x22}, 0x2c) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x7, 0x1) close(r0) r2 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x10000) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) r3 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000100)="4060d20a", 0x4) r5 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x200000) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x5, 0x4, 0x100000000}}, 0x30) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0xf}, 0x5}}, 0x7f, 0x5, 0x1, 0xf512, 0x4}, &(0x7f0000000440)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000480)={r6, 0x4}, 0xc) io_setup(0x7, &(0x7f0000000240)=0x0) read(r3, &(0x7f0000000080)=""/76, 0x4c) io_submit(r7, 0x200001a0, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) pread64(r5, &(0x7f00000002c0)=""/192, 0xc0, 0x0) [ 295.648155][ T9743] overlayfs: failed to resolve 'fil': -2 [ 295.655433][ T9744] overlayfs: missing 'lowerdir' [ 295.661238][ T9746] overlayfs: failed to resolve 'file': -2 11:17:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:16 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:17 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000640)=""/124) ioctl$int_in(r0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r4}}, 0x18) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8001, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0='bpq0\x00', 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_dev$usb(&(0x7f00000005c0)='/dev/bus/usb/00#/00#\x00', 0x40, 0x2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0xfffffffffffffdb0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r7, &(0x7f0000000000), 0x10000) r8 = dup3(r6, r6, 0x80000) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000240)={{0x7f, @multicast1, 0x4e22, 0x2, 'dh\x00', 0x22, 0xfffffffffffff72a, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2000, 0x0, 0xadd7, 0x3}}, 0x44) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f00000000c0)={0x1f, 0x6, {}, 0x0, 0x2}, 0xe) llistxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/158, 0x9e) [ 295.806339][ T9761] overlayfs: failed to resolve 'file': -2 [ 295.812842][ T9765] overlayfs: failed to resolve 'file': -2 [ 295.823340][ T9766] overlayfs: missing 'lowerdir' 11:17:17 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:17 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:17 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 295.991674][ T9780] overlayfs: failed to resolve 'file': -2 [ 295.991734][ T9778] overlayfs: missing 'lowerdir' [ 296.025028][ T9782] overlayfs: failed to resolve 'file': -2 11:17:17 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4500b091e5fb02a45fcbf9c9c86a32e1286ec7ad5269a445251954d4895f2b460900006602899f17bf3243d03db2717aeb5719ee70dd179bc6dd3954c3031659eab8d6efefa19fbc9994b538b6dfbd9a444a0ae36b231be666702002f91846b4c756915faf2b7b097d23b2529aa0f06f71aa64704f815a9804ba08c064976d574d9ee58cbb43b070a84f9158bc3c02c7b410f96cf65aa169fba4ec431c98470d03816322bfa2b048f58cb44a86794c9ff6b2b2681d490074d89a36b8239be161b361e5aed2b129027ab611bf6b562789a135d0c0acc2a71d8ae3"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="0000000040000000000092130200098dfe492f9ec30e4ff22e7dc55933acd8da6ef4acff21c867b6f5e44d7a8434f867d759d8078a0857858997d94c5ab0d06db0bf473547e4746aeaf69c2d87ada7d666d76f9e29205d5350c46c6a9bc7cabe1b6b4bbc74a86b3c201fb2e8df9f12102271207725bcf889bd73d0cb7eebb2e7dbf0711d8e37347a775ef681d718c8755fac6aad80fb0cb5c2435d4c"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x10c, 0x0, 0x321, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0xda6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8d, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xbc, @dev={0xfe, 0x80, [], 0x14}, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @loopback}, 0xa}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xac8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}]}, 0x10c}}, 0x40080) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) write$evdev(r3, &(0x7f0000000100)=[{{}, 0x12, 0xf0, 0x1f}, {{}, 0x15, 0x0, 0xfffffffffffffff7}, {{0x0, 0x7530}, 0x15, 0x4, 0x40}], 0x48) ioctl$FS_IOC_FSGETXATTR(r3, 0x802c550a, &(0x7f0000000080)={0x2, 0x4c, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 11:17:17 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:17 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 296.182349][ T9793] overlayfs: failed to resolve 'file': -2 [ 296.392790][ T9791] vhci_hcd: invalid port number 255 [ 296.398649][ T9791] vhci_hcd: default hub control req: 0000 vff00 i00ff l65535 11:17:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000140)={0x4, "4a031d9b9d0c3c63594c6a2d1b2952a06cdc891920c51d3e1474d13965bbd1e5", 0x10, 0x7, 0x6, 0x5, 0x7}) 11:17:17 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000640)=""/124) ioctl$int_in(r0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r4}}, 0x18) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8001, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0='bpq0\x00', 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_dev$usb(&(0x7f00000005c0)='/dev/bus/usb/00#/00#\x00', 0x40, 0x2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0xfffffffffffffdb0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r7, &(0x7f0000000000), 0x10000) r8 = dup3(r6, r6, 0x80000) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000240)={{0x7f, @multicast1, 0x4e22, 0x2, 'dh\x00', 0x22, 0xfffffffffffff72a, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2000, 0x0, 0xadd7, 0x3}}, 0x44) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f00000000c0)={0x1f, 0x6, {}, 0x0, 0x2}, 0xe) llistxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/158, 0x9e) 11:17:17 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:17 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 296.516313][ T9808] overlayfs: unrecognized mount option "lowerdir" or missing value 11:17:17 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:17 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:17 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:18 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) [ 296.737413][ T9824] overlayfs: unrecognized mount option "lowerdir" or missing value 11:17:18 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4500b091e5fb02a45fcbf9c9c86a32e1286ec7ad5269a445251954d4895f2b460900006602899f17bf3243d03db2717aeb5719ee70dd179bc6dd3954c3031659eab8d6efefa19fbc9994b538b6dfbd9a444a0ae36b231be666702002f91846b4c756915faf2b7b097d23b2529aa0f06f71aa64704f815a9804ba08c064976d574d9ee58cbb43b070a84f9158bc3c02c7b410f96cf65aa169fba4ec431c98470d03816322bfa2b048f58cb44a86794c9ff6b2b2681d490074d89a36b8239be161b361e5aed2b129027ab611bf6b562789a135d0c0acc2a71d8ae3"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="0000000040000000000092130200098dfe492f9ec30e4ff22e7dc55933acd8da6ef4acff21c867b6f5e44d7a8434f867d759d8078a0857858997d94c5ab0d06db0bf473547e4746aeaf69c2d87ada7d666d76f9e29205d5350c46c6a9bc7cabe1b6b4bbc74a86b3c201fb2e8df9f12102271207725bcf889bd73d0cb7eebb2e7dbf0711d8e37347a775ef681d718c8755fac6aad80fb0cb5c2435d4c"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x10c, 0x0, 0x321, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0xda6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8d, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xbc, @dev={0xfe, 0x80, [], 0x14}, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @loopback}, 0xa}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xac8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}]}, 0x10c}}, 0x40080) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) write$evdev(r3, &(0x7f0000000100)=[{{}, 0x12, 0xf0, 0x1f}, {{}, 0x15, 0x0, 0xfffffffffffffff7}, {{0x0, 0x7530}, 0x15, 0x4, 0x40}], 0x48) ioctl$FS_IOC_FSGETXATTR(r3, 0x802c550a, &(0x7f0000000080)={0x2, 0x4c, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 11:17:18 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:17:18 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000640)=""/124) ioctl$int_in(r0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r4}}, 0x18) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8001, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0='bpq0\x00', 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_dev$usb(&(0x7f00000005c0)='/dev/bus/usb/00#/00#\x00', 0x40, 0x2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0xfffffffffffffdb0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r7, &(0x7f0000000000), 0x10000) r8 = dup3(r6, r6, 0x80000) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000240)={{0x7f, @multicast1, 0x4e22, 0x2, 'dh\x00', 0x22, 0xfffffffffffff72a, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2000, 0x0, 0xadd7, 0x3}}, 0x44) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f00000000c0)={0x1f, 0x6, {}, 0x0, 0x2}, 0xe) llistxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/158, 0x9e) 11:17:18 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 11:17:18 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) [ 297.090874][ T9847] overlayfs: unrecognized mount option "lowerdir" or missing value 11:17:18 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:17:18 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4500b091e5fb02a45fcbf9c9c86a32e1286ec7ad5269a445251954d4895f2b460900006602899f17bf3243d03db2717aeb5719ee70dd179bc6dd3954c3031659eab8d6efefa19fbc9994b538b6dfbd9a444a0ae36b231be666702002f91846b4c756915faf2b7b097d23b2529aa0f06f71aa64704f815a9804ba08c064976d574d9ee58cbb43b070a84f9158bc3c02c7b410f96cf65aa169fba4ec431c98470d03816322bfa2b048f58cb44a86794c9ff6b2b2681d490074d89a36b8239be161b361e5aed2b129027ab611bf6b562789a135d0c0acc2a71d8ae3"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="0000000040000000000092130200098dfe492f9ec30e4ff22e7dc55933acd8da6ef4acff21c867b6f5e44d7a8434f867d759d8078a0857858997d94c5ab0d06db0bf473547e4746aeaf69c2d87ada7d666d76f9e29205d5350c46c6a9bc7cabe1b6b4bbc74a86b3c201fb2e8df9f12102271207725bcf889bd73d0cb7eebb2e7dbf0711d8e37347a775ef681d718c8755fac6aad80fb0cb5c2435d4c"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x10c, 0x0, 0x321, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0xda6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8d, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xbc, @dev={0xfe, 0x80, [], 0x14}, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @loopback}, 0xa}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xac8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}]}, 0x10c}}, 0x40080) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) write$evdev(r3, &(0x7f0000000100)=[{{}, 0x12, 0xf0, 0x1f}, {{}, 0x15, 0x0, 0xfffffffffffffff7}, {{0x0, 0x7530}, 0x15, 0x4, 0x40}], 0x48) ioctl$FS_IOC_FSGETXATTR(r3, 0x802c550a, &(0x7f0000000080)={0x2, 0x4c, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 11:17:18 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:18 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4500b091e5fb02a45fcbf9c9c86a32e1286ec7ad5269a445251954d4895f2b460900006602899f17bf3243d03db2717aeb5719ee70dd179bc6dd3954c3031659eab8d6efefa19fbc9994b538b6dfbd9a444a0ae36b231be666702002f91846b4c756915faf2b7b097d23b2529aa0f06f71aa64704f815a9804ba08c064976d574d9ee58cbb43b070a84f9158bc3c02c7b410f96cf65aa169fba4ec431c98470d03816322bfa2b048f58cb44a86794c9ff6b2b2681d490074d89a36b8239be161b361e5aed2b129027ab611bf6b562789a135d0c0acc2a71d8ae3"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="0000000040000000000092130200098dfe492f9ec30e4ff22e7dc55933acd8da6ef4acff21c867b6f5e44d7a8434f867d759d8078a0857858997d94c5ab0d06db0bf473547e4746aeaf69c2d87ada7d666d76f9e29205d5350c46c6a9bc7cabe1b6b4bbc74a86b3c201fb2e8df9f12102271207725bcf889bd73d0cb7eebb2e7dbf0711d8e37347a775ef681d718c8755fac6aad80fb0cb5c2435d4c"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x10c, 0x0, 0x321, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0xda6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8d, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xbc, @dev={0xfe, 0x80, [], 0x14}, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @loopback}, 0xa}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xac8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}]}, 0x10c}}, 0x40080) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) write$evdev(r3, &(0x7f0000000100)=[{{}, 0x12, 0xf0, 0x1f}, {{}, 0x15, 0x0, 0xfffffffffffffff7}, {{0x0, 0x7530}, 0x15, 0x4, 0x40}], 0x48) ioctl$FS_IOC_FSGETXATTR(r3, 0x802c550a, &(0x7f0000000080)={0x2, 0x4c, 0x0, 0x740005, 0xffffffff7ff0bdbe}) [ 297.303286][ T9862] overlayfs: failed to resolve 'f': -2 11:17:18 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:17:18 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:18 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4500b091e5fb02a45fcbf9c9c86a32e1286ec7ad5269a445251954d4895f2b460900006602899f17bf3243d03db2717aeb5719ee70dd179bc6dd3954c3031659eab8d6efefa19fbc9994b538b6dfbd9a444a0ae36b231be666702002f91846b4c756915faf2b7b097d23b2529aa0f06f71aa64704f815a9804ba08c064976d574d9ee58cbb43b070a84f9158bc3c02c7b410f96cf65aa169fba4ec431c98470d03816322bfa2b048f58cb44a86794c9ff6b2b2681d490074d89a36b8239be161b361e5aed2b129027ab611bf6b562789a135d0c0acc2a71d8ae3"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="0000000040000000000092130200098dfe492f9ec30e4ff22e7dc55933acd8da6ef4acff21c867b6f5e44d7a8434f867d759d8078a0857858997d94c5ab0d06db0bf473547e4746aeaf69c2d87ada7d666d76f9e29205d5350c46c6a9bc7cabe1b6b4bbc74a86b3c201fb2e8df9f12102271207725bcf889bd73d0cb7eebb2e7dbf0711d8e37347a775ef681d718c8755fac6aad80fb0cb5c2435d4c"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x10c, 0x0, 0x321, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0xda6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8d, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xbc, @dev={0xfe, 0x80, [], 0x14}, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @loopback}, 0xa}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xac8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}]}, 0x10c}}, 0x40080) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) write$evdev(r3, &(0x7f0000000100)=[{{}, 0x12, 0xf0, 0x1f}, {{}, 0x15, 0x0, 0xfffffffffffffff7}, {{0x0, 0x7530}, 0x15, 0x4, 0x40}], 0x48) ioctl$FS_IOC_FSGETXATTR(r3, 0x802c550a, &(0x7f0000000080)={0x2, 0x4c, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 11:17:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000640)=""/124) ioctl$int_in(r0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r4}}, 0x18) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8001, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0='bpq0\x00', 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_dev$usb(&(0x7f00000005c0)='/dev/bus/usb/00#/00#\x00', 0x40, 0x2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0xfffffffffffffdb0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r7, &(0x7f0000000000), 0x10000) r8 = dup3(r6, r6, 0x80000) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000240)={{0x7f, @multicast1, 0x4e22, 0x2, 'dh\x00', 0x22, 0xfffffffffffff72a, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2000, 0x0, 0xadd7, 0x3}}, 0x44) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f00000000c0)={0x1f, 0x6, {}, 0x0, 0x2}, 0xe) llistxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/158, 0x9e) 11:17:18 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:17:18 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000640)=""/124) ioctl$int_in(r0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r4}}, 0x18) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8001, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0='bpq0\x00', 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_dev$usb(&(0x7f00000005c0)='/dev/bus/usb/00#/00#\x00', 0x40, 0x2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0xfffffffffffffdb0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r7, &(0x7f0000000000), 0x10000) r8 = dup3(r6, r6, 0x80000) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000240)={{0x7f, @multicast1, 0x4e22, 0x2, 'dh\x00', 0x22, 0xfffffffffffff72a, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2000, 0x0, 0xadd7, 0x3}}, 0x44) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f00000000c0)={0x1f, 0x6, {}, 0x0, 0x2}, 0xe) llistxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/158, 0x9e) [ 297.520420][ T9875] overlayfs: failed to resolve 'f': -2 [ 297.730448][ T9889] vhci_hcd: invalid port number 255 11:17:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5}) 11:17:19 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000640)=""/124) ioctl$int_in(r0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r4}}, 0x18) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8001, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0='bpq0\x00', 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_dev$usb(&(0x7f00000005c0)='/dev/bus/usb/00#/00#\x00', 0x40, 0x2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0xfffffffffffffdb0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r7, &(0x7f0000000000), 0x10000) r8 = dup3(r6, r6, 0x80000) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000240)={{0x7f, @multicast1, 0x4e22, 0x2, 'dh\x00', 0x22, 0xfffffffffffff72a, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2000, 0x0, 0xadd7, 0x3}}, 0x44) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f00000000c0)={0x1f, 0x6, {}, 0x0, 0x2}, 0xe) llistxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/158, 0x9e) 11:17:19 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:19 executing program 1 (fault-call:4 fault-nth:0): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 297.804942][ T9889] vhci_hcd: default hub control req: 0000 vff00 i00ff l65535 [ 297.876734][ T9895] overlayfs: failed to resolve 'f': -2 [ 297.887370][ T9896] FAULT_INJECTION: forcing a failure. [ 297.887370][ T9896] name failslab, interval 1, probability 0, space 0, times 1 [ 297.918007][ T9896] CPU: 1 PID: 9896 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 297.926963][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.937018][ T9896] Call Trace: [ 297.940435][ T9896] dump_stack+0x172/0x1f0 [ 297.944838][ T9896] should_fail.cold+0xa/0x15 [ 297.949445][ T9896] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 297.955303][ T9896] ? ___might_sleep+0x163/0x280 [ 297.960201][ T9896] __should_failslab+0x121/0x190 [ 297.965180][ T9896] should_failslab+0x9/0x14 [ 297.969723][ T9896] kmem_cache_alloc_trace+0x2d1/0x760 [ 297.975152][ T9896] ? ovl_test_flag+0x12/0x20 [ 297.979776][ T9896] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 297.985509][ T9896] ovl_iterate+0x69f/0xc60 [ 297.989978][ T9896] iterate_dir+0x20d/0x5f0 [ 297.994407][ T9896] ksys_getdents64+0x187/0x2e0 [ 297.999182][ T9896] ? __ia32_sys_getdents+0x350/0x350 [ 298.004969][ T9896] ? ksys_write+0x166/0x1f0 [ 298.009473][ T9896] ? iterate_dir+0x5f0/0x5f0 [ 298.014101][ T9896] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 298.019569][ T9896] ? do_syscall_64+0x26/0x610 [ 298.024306][ T9896] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.030377][ T9896] ? do_syscall_64+0x26/0x610 [ 298.035084][ T9896] __x64_sys_getdents64+0x73/0xb0 [ 298.040116][ T9896] do_syscall_64+0x103/0x610 [ 298.044720][ T9896] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.050609][ T9896] RIP: 0033:0x458079 [ 298.054502][ T9896] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:17:19 executing program 3 (fault-call:4 fault-nth:0): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000640)=""/124) ioctl$int_in(r0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r4}}, 0x18) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8001, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0='bpq0\x00', 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_dev$usb(&(0x7f00000005c0)='/dev/bus/usb/00#/00#\x00', 0x40, 0x2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0xfffffffffffffdb0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r7, &(0x7f0000000000), 0x10000) r8 = dup3(r6, r6, 0x80000) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000240)={{0x7f, @multicast1, 0x4e22, 0x2, 'dh\x00', 0x22, 0xfffffffffffff72a, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2000, 0x0, 0xadd7, 0x3}}, 0x44) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f00000000c0)={0x1f, 0x6, {}, 0x0, 0x2}, 0xe) llistxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/158, 0x9e) 11:17:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xb4, &(0x7f0000000140)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x4}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0x8001, @empty, 0x55c}, @in6={0xa, 0x4e21, 0xfffffffffffffffc, @local, 0xff}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f00000000c0)=0x10) openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.mems\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r2, 0x4, 0x9}, 0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r2, 0x82, 0x3}, 0xc) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000240)=""/114) [ 298.074097][ T9896] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 298.074125][ T9896] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 [ 298.074133][ T9896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 298.074141][ T9896] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 298.074150][ T9896] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 298.074157][ T9896] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 11:17:19 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 298.147611][ T9904] FAULT_INJECTION: forcing a failure. [ 298.147611][ T9904] name failslab, interval 1, probability 0, space 0, times 0 [ 298.229819][ T9904] CPU: 1 PID: 9904 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 298.238792][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.248850][ T9904] Call Trace: [ 298.252148][ T9904] dump_stack+0x172/0x1f0 [ 298.256487][ T9904] should_fail.cold+0xa/0x15 [ 298.261090][ T9904] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 298.266915][ T9904] ? ___might_sleep+0x163/0x280 [ 298.271774][ T9904] __should_failslab+0x121/0x190 [ 298.276698][ T9904] should_failslab+0x9/0x14 [ 298.281183][ T9904] kmem_cache_alloc_trace+0x2d1/0x760 [ 298.286539][ T9904] ? ovl_test_flag+0x12/0x20 [ 298.291122][ T9904] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 298.296825][ T9904] ovl_iterate+0x69f/0xc60 [ 298.301230][ T9904] iterate_dir+0x20d/0x5f0 [ 298.305629][ T9904] ksys_getdents64+0x187/0x2e0 [ 298.310372][ T9904] ? __ia32_sys_getdents+0x350/0x350 [ 298.315639][ T9904] ? ksys_write+0x166/0x1f0 [ 298.320123][ T9904] ? iterate_dir+0x5f0/0x5f0 [ 298.324715][ T9904] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 298.330156][ T9904] ? do_syscall_64+0x26/0x610 [ 298.334817][ T9904] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.340862][ T9904] ? do_syscall_64+0x26/0x610 [ 298.345524][ T9904] __x64_sys_getdents64+0x73/0xb0 [ 298.350625][ T9904] do_syscall_64+0x103/0x610 [ 298.355199][ T9904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.361069][ T9904] RIP: 0033:0x458079 [ 298.364944][ T9904] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.384537][ T9904] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 298.392932][ T9904] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 [ 298.400885][ T9904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 298.408836][ T9904] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 298.416787][ T9904] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 [ 298.424745][ T9904] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 298.453202][ T9912] overlayfs: failed to resolve 'fil': -2 11:17:19 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$sndctrl(0x0, 0x6, 0x402) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000380)) getgroups(0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0xffffffff80000001, &(0x7f0000000580)=""/220) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) fsetxattr$trusted_overlay_origin(r1, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x20000003) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x7f) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={r1, 0xfffffffffffffff7, 0x1, r1}) fstat(r1, &(0x7f0000000080)) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) 11:17:19 executing program 1 (fault-call:4 fault-nth:1): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:19 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:19 executing program 3 (fault-call:4 fault-nth:1): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 298.553412][ T9919] overlayfs: failed to resolve 'fil': -2 [ 298.591400][ T9922] FAULT_INJECTION: forcing a failure. 11:17:19 executing program 5: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x200}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8840, 0x0) [ 298.591400][ T9922] name failslab, interval 1, probability 0, space 0, times 0 [ 298.617081][ T9925] FAULT_INJECTION: forcing a failure. [ 298.617081][ T9925] name failslab, interval 1, probability 0, space 0, times 0 11:17:19 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 298.650011][ T9922] CPU: 0 PID: 9922 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 298.658971][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.669027][ T9922] Call Trace: [ 298.672327][ T9922] dump_stack+0x172/0x1f0 [ 298.676670][ T9922] should_fail.cold+0xa/0x15 [ 298.681269][ T9922] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 298.687086][ T9922] ? ___might_sleep+0x163/0x280 [ 298.691952][ T9922] __should_failslab+0x121/0x190 [ 298.696897][ T9922] should_failslab+0x9/0x14 [ 298.701402][ T9922] kmem_cache_alloc+0x2b2/0x6f0 [ 298.706340][ T9922] ? lock_downgrade+0x880/0x880 [ 298.711192][ T9922] __alloc_file+0x27/0x300 [ 298.715608][ T9922] alloc_empty_file+0x72/0x170 [ 298.720372][ T9922] dentry_open+0x70/0x1d0 [ 298.724697][ T9922] ovl_path_open+0x56/0x70 [ 298.729107][ T9922] ovl_dir_read_merged+0x104/0x500 [ 298.734215][ T9922] ? ovl_dir_open+0x310/0x310 [ 298.738896][ T9922] ? ovl_fill_real+0x2d0/0x2d0 [ 298.743668][ T9922] ? kmem_cache_alloc_trace+0x354/0x760 [ 298.749219][ T9922] ? ovl_test_flag+0x12/0x20 [ 298.753811][ T9922] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 298.759545][ T9922] ovl_iterate+0x75a/0xc60 [ 298.763983][ T9922] iterate_dir+0x20d/0x5f0 [ 298.768403][ T9922] ksys_getdents64+0x187/0x2e0 [ 298.773174][ T9922] ? __ia32_sys_getdents+0x350/0x350 [ 298.778554][ T9922] ? ksys_write+0x166/0x1f0 [ 298.783057][ T9922] ? iterate_dir+0x5f0/0x5f0 [ 298.787655][ T9922] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 298.793113][ T9922] ? do_syscall_64+0x26/0x610 [ 298.797792][ T9922] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.803855][ T9922] ? do_syscall_64+0x26/0x610 [ 298.808545][ T9922] __x64_sys_getdents64+0x73/0xb0 [ 298.813571][ T9922] do_syscall_64+0x103/0x610 [ 298.818168][ T9922] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.824057][ T9922] RIP: 0033:0x458079 [ 298.827950][ T9922] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.849041][ T9922] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 298.857453][ T9922] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 [ 298.865422][ T9922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 298.873385][ T9922] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 298.881355][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 298.889404][ T9922] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 298.919492][ T9925] CPU: 1 PID: 9925 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 298.928451][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.938512][ T9925] Call Trace: [ 298.941808][ T9925] dump_stack+0x172/0x1f0 [ 298.946143][ T9925] should_fail.cold+0xa/0x15 [ 298.950746][ T9925] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 298.956559][ T9925] ? ___might_sleep+0x163/0x280 [ 298.961436][ T9925] __should_failslab+0x121/0x190 [ 298.966487][ T9925] should_failslab+0x9/0x14 [ 298.971003][ T9925] kmem_cache_alloc+0x2b2/0x6f0 [ 298.975969][ T9925] ? lock_downgrade+0x880/0x880 [ 298.980822][ T9925] __alloc_file+0x27/0x300 [ 298.981620][ T9939] PKCS8: Unsupported PKCS#8 version [ 298.985234][ T9925] alloc_empty_file+0x72/0x170 [ 298.985258][ T9925] dentry_open+0x70/0x1d0 [ 298.985275][ T9925] ovl_path_open+0x56/0x70 [ 298.985288][ T9925] ovl_dir_read_merged+0x104/0x500 [ 298.985305][ T9925] ? ovl_dir_open+0x310/0x310 [ 298.985320][ T9925] ? ovl_fill_real+0x2d0/0x2d0 [ 298.997890][ T9941] PKCS8: Unsupported PKCS#8 version [ 298.999721][ T9925] ? kmem_cache_alloc_trace+0x354/0x760 [ 298.999740][ T9925] ? ovl_test_flag+0x12/0x20 [ 298.999765][ T9925] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 299.014598][ T9925] ovl_iterate+0x75a/0xc60 [ 299.014626][ T9925] iterate_dir+0x20d/0x5f0 [ 299.014647][ T9925] ksys_getdents64+0x187/0x2e0 [ 299.024750][ T9925] ? __ia32_sys_getdents+0x350/0x350 [ 299.024764][ T9925] ? ksys_write+0x166/0x1f0 [ 299.024776][ T9925] ? iterate_dir+0x5f0/0x5f0 [ 299.024796][ T9925] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 299.073992][ T9925] ? do_syscall_64+0x26/0x610 [ 299.078676][ T9925] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.084746][ T9925] ? do_syscall_64+0x26/0x610 [ 299.089431][ T9925] __x64_sys_getdents64+0x73/0xb0 [ 299.094458][ T9925] do_syscall_64+0x103/0x610 [ 299.099070][ T9925] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.104964][ T9925] RIP: 0033:0x458079 11:17:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknodat(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) 11:17:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000611864000000000095f6000016200000"], 0x0, 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 11:17:20 executing program 4: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x80000000002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) syz_open_procfs(0x0, &(0x7f0000001100)='numa_maps\x00') 11:17:20 executing program 1 (fault-call:4 fault-nth:2): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 299.108854][ T9925] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.128454][ T9925] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 299.136873][ T9925] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 [ 299.144848][ T9925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 299.152811][ T9925] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 299.160772][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 11:17:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x800}) 11:17:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x19) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0xf, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) [ 299.160781][ T9925] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 11:17:20 executing program 3 (fault-call:4 fault-nth:2): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:20 executing program 5: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x200001b8) close(r0) [ 299.229256][ T9953] overlayfs: failed to resolve 'fil': -2 [ 299.235974][ T9955] FAULT_INJECTION: forcing a failure. [ 299.235974][ T9955] name failslab, interval 1, probability 0, space 0, times 0 [ 299.288996][ T9961] FAULT_INJECTION: forcing a failure. [ 299.288996][ T9961] name failslab, interval 1, probability 0, space 0, times 0 [ 299.301827][ T9955] CPU: 1 PID: 9955 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 299.310776][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.320835][ T9955] Call Trace: [ 299.324124][ T9955] dump_stack+0x172/0x1f0 [ 299.328449][ T9955] should_fail.cold+0xa/0x15 [ 299.333053][ T9955] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 299.333074][ T9955] ? ___might_sleep+0x163/0x280 [ 299.333096][ T9955] __should_failslab+0x121/0x190 [ 299.348647][ T9955] should_failslab+0x9/0x14 [ 299.353148][ T9955] kmem_cache_alloc+0x2b2/0x6f0 [ 299.358060][ T9955] ? rcu_read_lock_sched_held+0x110/0x130 [ 299.358080][ T9955] ? kmem_cache_alloc+0x32e/0x6f0 [ 299.368864][ T9955] security_file_alloc+0x39/0x170 [ 299.373903][ T9955] __alloc_file+0xac/0x300 [ 299.378321][ T9955] alloc_empty_file+0x72/0x170 [ 299.383089][ T9955] dentry_open+0x70/0x1d0 [ 299.387426][ T9955] ovl_path_open+0x56/0x70 [ 299.391856][ T9955] ovl_dir_read_merged+0x104/0x500 [ 299.396963][ T9955] ? ovl_dir_open+0x310/0x310 [ 299.396980][ T9955] ? ovl_fill_real+0x2d0/0x2d0 [ 299.397007][ T9955] ? kmem_cache_alloc_trace+0x354/0x760 [ 299.411942][ T9955] ? ovl_test_flag+0x12/0x20 [ 299.416531][ T9955] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 299.416551][ T9955] ovl_iterate+0x75a/0xc60 [ 299.416574][ T9955] iterate_dir+0x20d/0x5f0 [ 299.431082][ T9955] ksys_getdents64+0x187/0x2e0 [ 299.435855][ T9955] ? __ia32_sys_getdents+0x350/0x350 [ 299.441141][ T9955] ? ksys_write+0x166/0x1f0 [ 299.445648][ T9955] ? iterate_dir+0x5f0/0x5f0 [ 299.450248][ T9955] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 299.455709][ T9955] ? do_syscall_64+0x26/0x610 [ 299.460389][ T9955] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.466467][ T9955] ? do_syscall_64+0x26/0x610 [ 299.471157][ T9955] __x64_sys_getdents64+0x73/0xb0 [ 299.476187][ T9955] do_syscall_64+0x103/0x610 [ 299.480794][ T9955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.486686][ T9955] RIP: 0033:0x458079 [ 299.490579][ T9955] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.510185][ T9955] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 299.518604][ T9955] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 [ 299.526576][ T9955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 11:17:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, 0x0, 0xffffff89, 0x20048044, &(0x7f0000000540)={0x2, 0x2004e20}, 0x10) [ 299.534546][ T9955] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 299.542516][ T9955] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 299.550488][ T9955] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 299.558481][ T9961] CPU: 0 PID: 9961 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 299.567418][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.577482][ T9961] Call Trace: [ 299.580781][ T9961] dump_stack+0x172/0x1f0 [ 299.585123][ T9961] should_fail.cold+0xa/0x15 11:17:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4104fe71d08dd6a9, 0x0) pwritev(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0) [ 299.589725][ T9961] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 299.593603][ T9977] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 299.595537][ T9961] ? ___might_sleep+0x163/0x280 [ 299.595559][ T9961] __should_failslab+0x121/0x190 [ 299.595575][ T9961] should_failslab+0x9/0x14 [ 299.595590][ T9961] kmem_cache_alloc+0x2b2/0x6f0 [ 299.595603][ T9961] ? rcu_read_lock_sched_held+0x110/0x130 11:17:20 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 299.595623][ T9961] ? kmem_cache_alloc+0x32e/0x6f0 [ 299.595644][ T9961] security_file_alloc+0x39/0x170 [ 299.648833][ T9961] __alloc_file+0xac/0x300 [ 299.653258][ T9961] alloc_empty_file+0x72/0x170 [ 299.658023][ T9961] dentry_open+0x70/0x1d0 [ 299.662357][ T9961] ovl_path_open+0x56/0x70 [ 299.666777][ T9961] ovl_dir_read_merged+0x104/0x500 [ 299.671889][ T9961] ? ovl_dir_open+0x310/0x310 [ 299.676567][ T9961] ? ovl_fill_real+0x2d0/0x2d0 [ 299.681338][ T9961] ? kmem_cache_alloc_trace+0x354/0x760 [ 299.686890][ T9961] ? ovl_test_flag+0x12/0x20 [ 299.691480][ T9961] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 299.697214][ T9961] ovl_iterate+0x75a/0xc60 [ 299.701644][ T9961] iterate_dir+0x20d/0x5f0 [ 299.706070][ T9961] ksys_getdents64+0x187/0x2e0 [ 299.710845][ T9961] ? __ia32_sys_getdents+0x350/0x350 [ 299.716130][ T9961] ? ksys_write+0x166/0x1f0 [ 299.720634][ T9961] ? iterate_dir+0x5f0/0x5f0 [ 299.725234][ T9961] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 299.730714][ T9961] ? do_syscall_64+0x26/0x610 [ 299.735399][ T9961] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.741472][ T9961] ? do_syscall_64+0x26/0x610 [ 299.746165][ T9961] __x64_sys_getdents64+0x73/0xb0 [ 299.751194][ T9961] do_syscall_64+0x103/0x610 [ 299.755794][ T9961] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.761696][ T9961] RIP: 0033:0x458079 [ 299.765594][ T9961] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:17:21 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x1000, 0x0, 0x0, 0x3f}, 0x6) 11:17:21 executing program 1 (fault-call:4 fault-nth:3): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 299.785194][ T9961] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 299.785208][ T9961] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 [ 299.785216][ T9961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 299.785224][ T9961] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 299.785233][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 [ 299.785240][ T9961] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 11:17:21 executing program 3 (fault-call:4 fault-nth:3): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:21 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1000000001000001) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000340)={0x40000000a2, 0xfffffffffffffffe}) [ 299.905929][ T9987] overlayfs: failed to resolve 'file': -2 [ 299.955430][ T9995] FAULT_INJECTION: forcing a failure. [ 299.955430][ T9995] name failslab, interval 1, probability 0, space 0, times 0 [ 299.974684][ T9991] FAULT_INJECTION: forcing a failure. [ 299.974684][ T9991] name failslab, interval 1, probability 0, space 0, times 0 11:17:21 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 300.019178][ T9995] CPU: 0 PID: 9995 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 300.028161][ T9995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.028193][ T9995] Call Trace: [ 300.041529][ T9995] dump_stack+0x172/0x1f0 [ 300.045872][ T9995] should_fail.cold+0xa/0x15 [ 300.050473][ T9995] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 300.056289][ T9995] ? ___might_sleep+0x163/0x280 [ 300.061152][ T9995] __should_failslab+0x121/0x190 11:17:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x4, @local, 0x3}}}, 0x30) [ 300.066090][ T9995] should_failslab+0x9/0x14 [ 300.070587][ T9995] kmem_cache_alloc_trace+0x2d1/0x760 [ 300.076051][ T9995] ? aa_file_perm+0x432/0xeb0 [ 300.080733][ T9995] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 300.087063][ T9995] ext4_readdir+0x2297/0x3490 [ 300.091832][ T9995] ? aa_path_link+0x460/0x460 [ 300.096530][ T9995] ? __ext4_check_dir_entry+0x350/0x350 [ 300.102086][ T9995] ? lock_acquire+0x16f/0x3f0 [ 300.106768][ T9995] ? iterate_dir+0xd8/0x5f0 [ 300.111284][ T9995] iterate_dir+0x489/0x5f0 [ 300.115702][ T9995] ovl_dir_read_merged+0x199/0x500 [ 300.120808][ T9995] ? ovl_dir_open+0x310/0x310 [ 300.125488][ T9995] ? ovl_fill_real+0x2d0/0x2d0 [ 300.130260][ T9995] ? kmem_cache_alloc_trace+0x354/0x760 [ 300.135814][ T9995] ? ovl_test_flag+0x12/0x20 [ 300.140418][ T9995] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 300.146133][ T9995] ovl_iterate+0x75a/0xc60 [ 300.150548][ T9995] iterate_dir+0x20d/0x5f0 [ 300.150568][ T9995] ksys_getdents64+0x187/0x2e0 [ 300.150584][ T9995] ? __ia32_sys_getdents+0x350/0x350 [ 300.150598][ T9995] ? ksys_write+0x166/0x1f0 [ 300.150614][ T9995] ? iterate_dir+0x5f0/0x5f0 [ 300.174196][ T9995] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 300.179666][ T9995] ? do_syscall_64+0x26/0x610 [ 300.184347][ T9995] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.190420][ T9995] ? do_syscall_64+0x26/0x610 [ 300.195102][ T9995] __x64_sys_getdents64+0x73/0xb0 [ 300.200123][ T9995] do_syscall_64+0x103/0x610 [ 300.204718][ T9995] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.210611][ T9995] RIP: 0033:0x458079 [ 300.214504][ T9995] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.234107][ T9995] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 300.242523][ T9995] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 [ 300.250496][ T9995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 300.258463][ T9995] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 300.266432][ T9995] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 [ 300.274412][ T9995] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 300.282490][ T9991] CPU: 1 PID: 9991 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 300.291428][ T9991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.301485][ T9991] Call Trace: [ 300.304780][ T9991] dump_stack+0x172/0x1f0 [ 300.309115][ T9991] should_fail.cold+0xa/0x15 [ 300.313712][ T9991] ? fault_create_debugfs_attr+0x1e0/0x1e0 11:17:21 executing program 3 (fault-call:4 fault-nth:4): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 300.319526][ T9991] ? ___might_sleep+0x163/0x280 [ 300.324396][ T9991] __should_failslab+0x121/0x190 [ 300.329342][ T9991] should_failslab+0x9/0x14 [ 300.333851][ T9991] kmem_cache_alloc_trace+0x2d1/0x760 [ 300.339227][ T9991] ? aa_file_perm+0x432/0xeb0 [ 300.343904][ T9991] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 300.350154][ T9991] ext4_readdir+0x2297/0x3490 [ 300.354830][ T9991] ? aa_path_link+0x460/0x460 [ 300.359528][ T9991] ? __ext4_check_dir_entry+0x350/0x350 [ 300.365087][ T9991] ? lock_acquire+0x16f/0x3f0 [ 300.369759][ T9991] ? iterate_dir+0xd8/0x5f0 [ 300.374245][ T9991] iterate_dir+0x489/0x5f0 [ 300.378659][ T9991] ovl_dir_read_merged+0x199/0x500 [ 300.383759][ T9991] ? ovl_dir_open+0x310/0x310 [ 300.388411][ T9991] ? ovl_fill_real+0x2d0/0x2d0 [ 300.393158][ T9991] ? kmem_cache_alloc_trace+0x354/0x760 [ 300.398679][ T9991] ? ovl_test_flag+0x12/0x20 [ 300.403249][ T9991] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 300.408949][ T9991] ovl_iterate+0x75a/0xc60 [ 300.413354][ T9991] iterate_dir+0x20d/0x5f0 [ 300.417771][ T9991] ksys_getdents64+0x187/0x2e0 [ 300.422516][ T9991] ? __ia32_sys_getdents+0x350/0x350 [ 300.427784][ T9991] ? ksys_write+0x166/0x1f0 [ 300.432284][ T9991] ? iterate_dir+0x5f0/0x5f0 [ 300.436867][ T9991] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 300.442312][ T9991] ? do_syscall_64+0x26/0x610 [ 300.446974][ T9991] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.453015][ T9991] ? do_syscall_64+0x26/0x610 [ 300.457688][ T9991] __x64_sys_getdents64+0x73/0xb0 [ 300.462700][ T9991] do_syscall_64+0x103/0x610 [ 300.467277][ T9991] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.473147][ T9991] RIP: 0033:0x458079 [ 300.477062][ T9991] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.496642][ T9991] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 300.505030][ T9991] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 [ 300.512977][ T9991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 300.520933][ T9991] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 300.528886][ T9991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 300.536852][ T9991] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 11:17:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x57, 0x7, 0x7, {0x7, 0x100000000}, {0x2, 0x2}, @const={0x7, {0x1, 0x7, 0x1, 0x81}}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0xa1, 0x8) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) getuid() [ 300.564128][T10015] overlayfs: failed to resolve 'file': -2 11:17:21 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe84, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="01", 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffb5, 0xc0, 0x0, 0xffffffff00000000) 11:17:21 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 300.611043][T10017] FAULT_INJECTION: forcing a failure. [ 300.611043][T10017] name failslab, interval 1, probability 0, space 0, times 0 [ 300.686083][T10017] CPU: 1 PID: 10017 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 300.695144][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.705200][T10017] Call Trace: [ 300.708501][T10017] dump_stack+0x172/0x1f0 [ 300.712847][T10017] should_fail.cold+0xa/0x15 [ 300.717453][T10017] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 300.723278][T10017] ? ___might_sleep+0x163/0x280 [ 300.728151][T10017] __should_failslab+0x121/0x190 [ 300.733105][T10017] should_failslab+0x9/0x14 [ 300.737612][T10017] __kmalloc+0x2dc/0x740 [ 300.741864][T10017] ? str2hashbuf_unsigned+0x2a0/0x2a0 [ 300.747236][T10017] ? ext4_htree_store_dirent+0x8a/0x650 [ 300.752789][T10017] ext4_htree_store_dirent+0x8a/0x650 [ 300.758237][T10017] htree_dirblock_to_tree+0x4fe/0x910 [ 300.763628][T10017] ? dx_probe+0x1120/0x1120 [ 300.768135][T10017] ? __lock_acquire+0x548/0x3fb0 [ 300.773085][T10017] ? __lock_acquire+0x548/0x3fb0 [ 300.778045][T10017] ext4_htree_fill_tree+0x252/0xa50 [ 300.783244][T10017] ? find_held_lock+0x35/0x130 [ 300.788089][T10017] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 300.793736][T10017] ? do_split+0x1f10/0x1f10 [ 300.798321][T10017] ? intel_dvo_init+0x1c0/0x12a0 [ 300.803274][T10017] ? ext4_readdir+0x2297/0x3490 [ 300.808134][T10017] ? rcu_read_lock_sched_held+0x110/0x130 [ 300.813859][T10017] ? kmem_cache_alloc_trace+0x354/0x760 [ 300.819410][T10017] ? aa_file_perm+0x432/0xeb0 [ 300.824206][T10017] ext4_readdir+0x1999/0x3490 [ 300.828885][T10017] ? aa_path_link+0x460/0x460 [ 300.833583][T10017] ? __ext4_check_dir_entry+0x350/0x350 [ 300.839696][T10017] ? lock_acquire+0x16f/0x3f0 [ 300.844382][T10017] ? iterate_dir+0xd8/0x5f0 [ 300.851650][T10017] iterate_dir+0x489/0x5f0 [ 300.857496][T10017] ovl_dir_read_merged+0x199/0x500 [ 300.862613][T10017] ? ovl_dir_open+0x310/0x310 [ 300.867292][T10017] ? ovl_fill_real+0x2d0/0x2d0 [ 300.872078][T10017] ? kmem_cache_alloc_trace+0x354/0x760 [ 300.877637][T10017] ? ovl_test_flag+0x12/0x20 [ 300.882232][T10017] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 300.887962][T10017] ovl_iterate+0x75a/0xc60 [ 300.892395][T10017] iterate_dir+0x20d/0x5f0 [ 300.896828][T10017] ksys_getdents64+0x187/0x2e0 [ 300.901603][T10017] ? __ia32_sys_getdents+0x350/0x350 [ 300.906895][T10017] ? ksys_write+0x166/0x1f0 [ 300.911398][T10017] ? iterate_dir+0x5f0/0x5f0 [ 300.916128][T10017] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 300.921587][T10017] ? do_syscall_64+0x26/0x610 [ 300.926267][T10017] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.932437][T10017] ? do_syscall_64+0x26/0x610 11:17:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0xe45) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 11:17:22 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:22 executing program 4: syz_open_dev$sndpcmp(0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x6000000]}, 0x2c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 11:17:22 executing program 1 (fault-call:4 fault-nth:4): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 300.937232][T10017] __x64_sys_getdents64+0x73/0xb0 [ 300.942263][T10017] do_syscall_64+0x103/0x610 [ 300.946863][T10017] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.952838][T10017] RIP: 0033:0x458079 [ 300.956908][T10017] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.976548][T10017] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 300.984972][T10017] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 [ 300.992974][T10017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 301.000951][T10017] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 301.009692][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 [ 301.017668][T10017] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 11:17:22 executing program 4: [ 301.062717][T10038] [ 301.065320][T10038] ============================= 11:17:22 executing program 4: [ 301.118092][T10045] overlayfs: failed to resolve 'file': -2 [ 301.125043][T10047] FAULT_INJECTION: forcing a failure. [ 301.125043][T10047] name failslab, interval 1, probability 0, space 0, times 0 [ 301.129603][T10038] WARNING: suspicious RCU usage [ 301.154996][T10038] 5.1.0-rc1-next-20190319 #6 Not tainted [ 301.172654][T10047] CPU: 0 PID: 10047 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 301.181780][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.185992][T10038] ----------------------------- [ 301.192003][T10047] Call Trace: [ 301.192030][T10047] dump_stack+0x172/0x1f0 [ 301.192053][T10047] should_fail.cold+0xa/0x15 [ 301.192072][T10047] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 301.192098][T10047] ? ___might_sleep+0x163/0x280 [ 301.196969][T10038] net/xfrm/xfrm_user.c:1080 suspicious rcu_dereference_check() usage! [ 301.200294][T10047] __should_failslab+0x121/0x190 [ 301.200321][T10047] should_failslab+0x9/0x14 [ 301.200337][T10047] __kmalloc+0x2dc/0x740 [ 301.200355][T10047] ? str2hashbuf_unsigned+0x2a0/0x2a0 [ 301.200371][T10047] ? ext4_htree_store_dirent+0x8a/0x650 [ 301.200392][T10047] ext4_htree_store_dirent+0x8a/0x650 [ 301.200412][T10047] htree_dirblock_to_tree+0x4fe/0x910 [ 301.200440][T10047] ? dx_probe+0x1120/0x1120 [ 301.209431][T10038] [ 301.209431][T10038] other info that might help us debug this: [ 301.209431][T10038] [ 301.215109][T10047] ? __lock_acquire+0x548/0x3fb0 [ 301.215128][T10047] ? __lock_acquire+0x548/0x3fb0 [ 301.215152][T10047] ext4_htree_fill_tree+0x252/0xa50 [ 301.215167][T10047] ? find_held_lock+0x35/0x130 [ 301.220013][T10038] [ 301.220013][T10038] rcu_scheduler_active = 2, debug_locks = 1 [ 301.228124][T10047] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 301.228143][T10047] ? do_split+0x1f10/0x1f10 [ 301.228171][T10047] ? ext4_readdir+0x2297/0x3490 [ 301.228186][T10047] ? rcu_read_lock_sched_held+0x110/0x130 [ 301.228203][T10047] ? kmem_cache_alloc_trace+0x354/0x760 [ 301.228221][T10047] ? aa_file_perm+0x432/0xeb0 [ 301.228242][T10047] ext4_readdir+0x1999/0x3490 [ 301.237843][T10038] 1 lock held by syz-executor.5/10038: [ 301.241933][T10047] ? aa_path_link+0x460/0x460 [ 301.241967][T10047] ? __ext4_check_dir_entry+0x350/0x350 [ 301.241990][T10047] ? lock_acquire+0x16f/0x3f0 [ 301.247354][T10038] #0: 00000000dbad1d86 (&net->xfrm.xfrm_cfg_mutex){+.+.}, at: xfrm_netlink_rcv+0x61/0x90 [ 301.252857][T10047] ? iterate_dir+0xd8/0x5f0 [ 301.252883][T10047] iterate_dir+0x489/0x5f0 [ 301.252903][T10047] ovl_dir_read_merged+0x199/0x500 [ 301.252915][T10047] ? ovl_dir_open+0x310/0x310 [ 301.252930][T10047] ? ovl_fill_real+0x2d0/0x2d0 [ 301.252954][T10047] ? kmem_cache_alloc_trace+0x354/0x760 [ 301.252971][T10047] ? ovl_test_flag+0x12/0x20 [ 301.252984][T10047] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 301.253000][T10047] ovl_iterate+0x75a/0xc60 [ 301.263406][T10038] [ 301.263406][T10038] stack backtrace: [ 301.263703][T10047] iterate_dir+0x20d/0x5f0 [ 301.425854][T10047] ksys_getdents64+0x187/0x2e0 [ 301.430618][T10047] ? __ia32_sys_getdents+0x350/0x350 [ 301.435899][T10047] ? ksys_write+0x166/0x1f0 [ 301.440398][T10047] ? iterate_dir+0x5f0/0x5f0 [ 301.444987][T10047] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 301.450442][T10047] ? do_syscall_64+0x26/0x610 [ 301.455117][T10047] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.461182][T10047] ? do_syscall_64+0x26/0x610 [ 301.465861][T10047] __x64_sys_getdents64+0x73/0xb0 [ 301.470890][T10047] do_syscall_64+0x103/0x610 [ 301.475480][T10047] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.481383][T10047] RIP: 0033:0x458079 [ 301.485284][T10047] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 301.504987][T10047] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 301.513403][T10047] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 11:17:22 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 301.521478][T10047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 301.529451][T10047] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 301.537428][T10047] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 301.545399][T10047] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 301.553396][T10038] CPU: 1 PID: 10038 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190319 #6 [ 301.562426][T10038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 11:17:22 executing program 3 (fault-call:4 fault-nth:5): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:22 executing program 1 (fault-call:4 fault-nth:5): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 301.572483][T10038] Call Trace: [ 301.575783][T10038] dump_stack+0x172/0x1f0 [ 301.580123][T10038] lockdep_rcu_suspicious+0x153/0x15d [ 301.585500][T10038] xfrm_alloc_userspi+0x7d5/0xa80 [ 301.590535][T10038] ? xfrm_state_netlink+0x140/0x140 [ 301.595742][T10038] ? nla_parse+0x45/0x60 [ 301.599994][T10038] ? xfrm_state_netlink+0x140/0x140 [ 301.605201][T10038] xfrm_user_rcv_msg+0x458/0x770 [ 301.610148][T10038] ? xfrm_dump_sa_done+0xf0/0xf0 [ 301.615096][T10038] ? mark_held_locks+0xf0/0xf0 [ 301.619945][T10038] ? lockdep_hardirqs_on+0x418/0x5d0 11:17:22 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x39) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) fchown(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x102, 0x0, 0x4, 0x6bad}) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x8000, 0x800, 0x7ff, 0x6, 0x7, 0x3}) ioctl$KDADDIO(r1, 0x4b34, 0x13) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KDSKBLED(r1, 0x4b65, 0x100000001) [ 301.625270][T10038] ? __mutex_lock+0x3cd/0x1310 [ 301.630070][T10038] ? xfrm_netlink_rcv+0x61/0x90 [ 301.635046][T10038] netlink_rcv_skb+0x17a/0x460 [ 301.639819][T10038] ? xfrm_dump_sa_done+0xf0/0xf0 [ 301.644760][T10038] ? netlink_ack+0xb50/0xb50 [ 301.649372][T10038] xfrm_netlink_rcv+0x70/0x90 [ 301.654057][T10038] netlink_unicast+0x536/0x720 [ 301.658831][T10038] ? netlink_attachskb+0x770/0x770 [ 301.664020][T10038] ? _copy_from_iter_full+0x259/0x8f0 [ 301.669400][T10038] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 301.675120][T10038] ? __check_object_size+0x3d/0x42f [ 301.680327][T10038] netlink_sendmsg+0x8ae/0xd70 [ 301.685098][T10038] ? netlink_unicast+0x720/0x720 [ 301.690042][T10038] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 301.695592][T10038] ? apparmor_socket_sendmsg+0x2a/0x30 [ 301.695607][T10038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 301.695625][T10038] ? security_socket_sendmsg+0x93/0xc0 [ 301.707294][T10038] ? netlink_unicast+0x720/0x720 [ 301.707401][T10038] sock_sendmsg+0xdd/0x130 11:17:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='lo\x00', 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x4100, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) [ 301.722199][T10038] ___sys_sendmsg+0x806/0x930 [ 301.726884][T10038] ? copy_msghdr_from_user+0x430/0x430 [ 301.732364][T10038] ? kasan_check_read+0x11/0x20 [ 301.737275][T10038] ? __fget+0x381/0x550 [ 301.741450][T10038] ? ksys_dup3+0x3e0/0x3e0 [ 301.745877][T10038] ? lock_downgrade+0x880/0x880 [ 301.750849][T10038] ? __fget_light+0x1a9/0x230 [ 301.755533][T10038] ? __fdget+0x1b/0x20 [ 301.759602][T10038] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 301.765865][T10038] __sys_sendmsg+0x105/0x1d0 [ 301.765881][T10038] ? __ia32_sys_shutdown+0x80/0x80 [ 301.765914][T10038] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 301.781126][T10038] ? do_syscall_64+0x26/0x610 [ 301.785809][T10038] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.792651][T10038] ? do_syscall_64+0x26/0x610 [ 301.792672][T10038] __x64_sys_sendmsg+0x78/0xb0 [ 301.802105][T10038] do_syscall_64+0x103/0x610 [ 301.806708][T10038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.812603][T10038] RIP: 0033:0x458079 [ 301.816504][T10038] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 301.836113][T10038] RSP: 002b:00007fa4e232bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.844530][T10038] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 301.852504][T10038] RDX: 0000000800004084 RSI: 00000000200003c0 RDI: 0000000000000005 [ 301.860491][T10038] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 301.868462][T10038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa4e232c6d4 [ 301.876433][T10038] R13: 00000000004c56c3 R14: 00000000004d95f0 R15: 00000000ffffffff 11:17:23 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:23 executing program 4: 11:17:23 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 301.969008][T10069] FAULT_INJECTION: forcing a failure. [ 301.969008][T10069] name failslab, interval 1, probability 0, space 0, times 0 [ 301.983607][T10071] FAULT_INJECTION: forcing a failure. [ 301.983607][T10071] name failslab, interval 1, probability 0, space 0, times 0 [ 302.012946][T10069] CPU: 1 PID: 10069 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 302.022007][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.032057][T10069] Call Trace: [ 302.035364][T10069] dump_stack+0x172/0x1f0 [ 302.039709][T10069] should_fail.cold+0xa/0x15 [ 302.044321][T10069] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 302.050873][T10069] ? ___might_sleep+0x163/0x280 [ 302.050901][T10069] __should_failslab+0x121/0x190 [ 302.060677][T10069] should_failslab+0x9/0x14 [ 302.065184][T10069] __kmalloc+0x2dc/0x740 11:17:23 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 302.069442][T10069] ? str2hashbuf_unsigned+0x2a0/0x2a0 [ 302.074820][T10069] ? ext4_htree_store_dirent+0x8a/0x650 [ 302.080366][T10069] ext4_htree_store_dirent+0x8a/0x650 [ 302.085748][T10069] htree_dirblock_to_tree+0x4fe/0x910 [ 302.091140][T10069] ? dx_probe+0x1120/0x1120 [ 302.095652][T10069] ? __lock_acquire+0x548/0x3fb0 [ 302.100599][T10069] ? __lock_acquire+0x548/0x3fb0 [ 302.105550][T10069] ext4_htree_fill_tree+0x252/0xa50 [ 302.110749][T10069] ? find_held_lock+0x35/0x130 11:17:23 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 302.115530][T10069] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 302.121173][T10069] ? do_split+0x1f10/0x1f10 [ 302.125692][T10069] ? ext4_readdir+0x2297/0x3490 [ 302.130543][T10069] ? rcu_read_lock_sched_held+0x110/0x130 [ 302.136286][T10069] ? kmem_cache_alloc_trace+0x354/0x760 [ 302.141841][T10069] ? aa_file_perm+0x432/0xeb0 [ 302.146522][T10069] ext4_readdir+0x1999/0x3490 [ 302.151205][T10069] ? aa_path_link+0x460/0x460 [ 302.155913][T10069] ? __ext4_check_dir_entry+0x350/0x350 [ 302.161466][T10069] ? lock_acquire+0x16f/0x3f0 11:17:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdmi.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f00000001c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000240)=0xc) fchown(r0, r2, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) close(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x214000, 0x0) 11:17:23 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 302.166142][T10069] ? iterate_dir+0xd8/0x5f0 [ 302.170658][T10069] iterate_dir+0x489/0x5f0 [ 302.175087][T10069] ovl_dir_read_merged+0x199/0x500 [ 302.180221][T10069] ? ovl_dir_open+0x310/0x310 [ 302.184902][T10069] ? ovl_fill_real+0x2d0/0x2d0 [ 302.189677][T10069] ? kmem_cache_alloc_trace+0x354/0x760 [ 302.195236][T10069] ? ovl_test_flag+0x12/0x20 [ 302.199828][T10069] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 302.205555][T10069] ovl_iterate+0x75a/0xc60 [ 302.209997][T10069] iterate_dir+0x20d/0x5f0 [ 302.214434][T10069] ksys_getdents64+0x187/0x2e0 11:17:23 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 302.219202][T10069] ? __ia32_sys_getdents+0x350/0x350 [ 302.224496][T10069] ? ksys_write+0x166/0x1f0 [ 302.229000][T10069] ? iterate_dir+0x5f0/0x5f0 [ 302.233597][T10069] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 302.239065][T10069] ? do_syscall_64+0x26/0x610 [ 302.243746][T10069] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.249813][T10069] ? do_syscall_64+0x26/0x610 [ 302.254494][T10069] __x64_sys_getdents64+0x73/0xb0 [ 302.259517][T10069] do_syscall_64+0x103/0x610 [ 302.264121][T10069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.270017][T10069] RIP: 0033:0x458079 [ 302.273914][T10069] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.293607][T10069] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 302.302021][T10069] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 [ 302.309995][T10069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 302.310010][T10069] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 302.325929][T10069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 [ 302.333897][T10069] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 302.342206][T10071] CPU: 0 PID: 10071 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 302.351236][T10071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.361292][T10071] Call Trace: [ 302.364585][T10071] dump_stack+0x172/0x1f0 [ 302.369048][T10071] should_fail.cold+0xa/0x15 [ 302.373656][T10071] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 302.379486][T10071] ? ___might_sleep+0x163/0x280 [ 302.384351][T10071] __should_failslab+0x121/0x190 [ 302.389297][T10071] should_failslab+0x9/0x14 [ 302.393810][T10071] __kmalloc+0x2dc/0x740 [ 302.398062][T10071] ? str2hashbuf_unsigned+0x2a0/0x2a0 [ 302.403443][T10071] ? ext4_htree_store_dirent+0x8a/0x650 [ 302.409001][T10071] ext4_htree_store_dirent+0x8a/0x650 [ 302.414384][T10071] htree_dirblock_to_tree+0x4fe/0x910 [ 302.419774][T10071] ? dx_probe+0x1120/0x1120 [ 302.424282][T10071] ? __lock_acquire+0x548/0x3fb0 [ 302.429238][T10071] ? __lock_acquire+0x548/0x3fb0 [ 302.434198][T10071] ext4_htree_fill_tree+0x252/0xa50 [ 302.439401][T10071] ? find_held_lock+0x35/0x130 [ 302.444170][T10071] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 302.449815][T10071] ? do_split+0x1f10/0x1f10 [ 302.454332][T10071] ? ext4_readdir+0x2297/0x3490 [ 302.459193][T10071] ? rcu_read_lock_sched_held+0x110/0x130 [ 302.464916][T10071] ? kmem_cache_alloc_trace+0x354/0x760 [ 302.470475][T10071] ? aa_file_perm+0x432/0xeb0 [ 302.475161][T10071] ext4_readdir+0x1999/0x3490 [ 302.479848][T10071] ? aa_path_link+0x460/0x460 [ 302.484544][T10071] ? __ext4_check_dir_entry+0x350/0x350 [ 302.490101][T10071] ? lock_acquire+0x16f/0x3f0 [ 302.494780][T10071] ? iterate_dir+0xd8/0x5f0 [ 302.499301][T10071] iterate_dir+0x489/0x5f0 [ 302.503732][T10071] ovl_dir_read_merged+0x199/0x500 [ 302.508846][T10071] ? ovl_dir_open+0x310/0x310 [ 302.513531][T10071] ? ovl_fill_real+0x2d0/0x2d0 [ 302.518309][T10071] ? kmem_cache_alloc_trace+0x354/0x760 [ 302.523860][T10071] ? ovl_test_flag+0x12/0x20 [ 302.528459][T10071] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 302.534192][T10071] ovl_iterate+0x75a/0xc60 [ 302.538622][T10071] iterate_dir+0x20d/0x5f0 [ 302.543049][T10071] ksys_getdents64+0x187/0x2e0 [ 302.547818][T10071] ? __ia32_sys_getdents+0x350/0x350 [ 302.553104][T10071] ? ksys_write+0x166/0x1f0 [ 302.557610][T10071] ? iterate_dir+0x5f0/0x5f0 [ 302.562216][T10071] ? trace_hardirqs_on_thunk+0x1a/0x1c 11:17:23 executing program 3 (fault-call:4 fault-nth:6): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 302.567677][T10071] ? do_syscall_64+0x26/0x610 [ 302.572361][T10071] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.578429][T10071] ? do_syscall_64+0x26/0x610 [ 302.583124][T10071] __x64_sys_getdents64+0x73/0xb0 [ 302.583143][T10071] do_syscall_64+0x103/0x610 [ 302.583164][T10071] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.583183][T10071] RIP: 0033:0x458079 11:17:23 executing program 1 (fault-call:4 fault-nth:6): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:23 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:23 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11:17:23 executing program 4: [ 302.583197][T10071] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.583205][T10071] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 302.583218][T10071] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 [ 302.583226][T10071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 302.583234][T10071] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 302.583242][T10071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 302.583250][T10071] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 11:17:23 executing program 4: [ 302.808666][T10100] FAULT_INJECTION: forcing a failure. [ 302.808666][T10100] name failslab, interval 1, probability 0, space 0, times 0 [ 302.832380][T10107] FAULT_INJECTION: forcing a failure. [ 302.832380][T10107] name failslab, interval 1, probability 0, space 0, times 0 11:17:24 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:17:24 executing program 4: 11:17:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) fchown(r0, r1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) [ 302.873516][T10100] CPU: 1 PID: 10100 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 302.882567][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.892716][T10100] Call Trace: [ 302.901851][T10100] dump_stack+0x172/0x1f0 [ 302.906205][T10100] should_fail.cold+0xa/0x15 [ 302.910807][T10100] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 302.916626][T10100] ? ___might_sleep+0x163/0x280 11:17:24 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 302.921494][T10100] __should_failslab+0x121/0x190 [ 302.926438][T10100] should_failslab+0x9/0x14 [ 302.931034][T10100] __kmalloc+0x2dc/0x740 [ 302.935282][T10100] ? str2hashbuf_unsigned+0x2a0/0x2a0 [ 302.940665][T10100] ? ext4_htree_store_dirent+0x8a/0x650 [ 302.946233][T10100] ext4_htree_store_dirent+0x8a/0x650 [ 302.951607][T10100] htree_dirblock_to_tree+0x4fe/0x910 [ 302.956990][T10100] ? dx_probe+0x1120/0x1120 [ 302.961492][T10100] ? __lock_acquire+0x548/0x3fb0 [ 302.966437][T10100] ? __lock_acquire+0x548/0x3fb0 [ 302.971386][T10100] ext4_htree_fill_tree+0x252/0xa50 [ 302.976583][T10100] ? find_held_lock+0x35/0x130 [ 302.981344][T10100] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 302.986974][T10100] ? do_split+0x1f10/0x1f10 [ 302.991586][T10100] ? ext4_readdir+0x2297/0x3490 [ 302.996516][T10100] ? rcu_read_lock_sched_held+0x110/0x130 [ 303.002997][T10100] ? kmem_cache_alloc_trace+0x354/0x760 [ 303.008626][T10100] ? aa_file_perm+0x432/0xeb0 [ 303.013305][T10100] ext4_readdir+0x1999/0x3490 [ 303.017976][T10100] ? aa_path_link+0x460/0x460 [ 303.022660][T10100] ? __ext4_check_dir_entry+0x350/0x350 [ 303.028210][T10100] ? lock_acquire+0x16f/0x3f0 [ 303.032882][T10100] ? iterate_dir+0xd8/0x5f0 [ 303.037415][T10100] iterate_dir+0x489/0x5f0 [ 303.041829][T10100] ovl_dir_read_merged+0x199/0x500 [ 303.046933][T10100] ? ovl_dir_open+0x310/0x310 [ 303.051693][T10100] ? ovl_fill_real+0x2d0/0x2d0 [ 303.056456][T10100] ? kmem_cache_alloc_trace+0x354/0x760 [ 303.061996][T10100] ? ovl_test_flag+0x12/0x20 [ 303.066578][T10100] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 303.072296][T10100] ovl_iterate+0x75a/0xc60 [ 303.076718][T10100] iterate_dir+0x20d/0x5f0 [ 303.081139][T10100] ksys_getdents64+0x187/0x2e0 [ 303.085930][T10100] ? __ia32_sys_getdents+0x350/0x350 [ 303.091208][T10100] ? ksys_write+0x166/0x1f0 [ 303.095707][T10100] ? iterate_dir+0x5f0/0x5f0 [ 303.100294][T10100] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 303.105745][T10100] ? do_syscall_64+0x26/0x610 [ 303.110419][T10100] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.116476][T10100] ? do_syscall_64+0x26/0x610 [ 303.121172][T10100] __x64_sys_getdents64+0x73/0xb0 [ 303.126192][T10100] do_syscall_64+0x103/0x610 [ 303.130777][T10100] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.136670][T10100] RIP: 0033:0x458079 [ 303.140556][T10100] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.160154][T10100] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 303.168558][T10100] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 [ 303.176521][T10100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 303.184485][T10100] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 303.192449][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 303.200603][T10100] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 303.208588][T10107] CPU: 0 PID: 10107 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 303.217605][T10107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.227646][T10107] Call Trace: [ 303.227667][T10107] dump_stack+0x172/0x1f0 [ 303.227686][T10107] should_fail.cold+0xa/0x15 [ 303.227710][T10107] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 303.245735][T10107] ? ___might_sleep+0x163/0x280 [ 303.250607][T10107] __should_failslab+0x121/0x190 [ 303.255557][T10107] should_failslab+0x9/0x14 [ 303.260063][T10107] __kmalloc+0x2dc/0x740 [ 303.264310][T10107] ? str2hashbuf_unsigned+0x2a0/0x2a0 [ 303.269691][T10107] ? ext4_htree_store_dirent+0x8a/0x650 [ 303.275255][T10107] ext4_htree_store_dirent+0x8a/0x650 [ 303.280637][T10107] htree_dirblock_to_tree+0x4fe/0x910 [ 303.286022][T10107] ? dx_probe+0x1120/0x1120 [ 303.290527][T10107] ? __lock_acquire+0x548/0x3fb0 [ 303.295460][T10107] ? __lock_acquire+0x548/0x3fb0 [ 303.300407][T10107] ext4_htree_fill_tree+0x252/0xa50 [ 303.305605][T10107] ? find_held_lock+0x35/0x130 [ 303.310377][T10107] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 303.316014][T10107] ? do_split+0x1f10/0x1f10 [ 303.320532][T10107] ? ext4_readdir+0x2297/0x3490 [ 303.325398][T10107] ? rcu_read_lock_sched_held+0x110/0x130 [ 303.331209][T10107] ? kmem_cache_alloc_trace+0x354/0x760 [ 303.336760][T10107] ? aa_file_perm+0x432/0xeb0 [ 303.341449][T10107] ext4_readdir+0x1999/0x3490 [ 303.346134][T10107] ? aa_path_link+0x460/0x460 [ 303.346165][T10107] ? __ext4_check_dir_entry+0x350/0x350 [ 303.356355][T10107] ? lock_acquire+0x16f/0x3f0 [ 303.361039][T10107] ? iterate_dir+0xd8/0x5f0 [ 303.365648][T10107] iterate_dir+0x489/0x5f0 [ 303.365669][T10107] ovl_dir_read_merged+0x199/0x500 [ 303.375163][T10107] ? ovl_dir_open+0x310/0x310 [ 303.379843][T10107] ? ovl_fill_real+0x2d0/0x2d0 [ 303.384620][T10107] ? kmem_cache_alloc_trace+0x354/0x760 [ 303.390171][T10107] ? ovl_test_flag+0x12/0x20 [ 303.394763][T10107] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 303.400481][T10107] ovl_iterate+0x75a/0xc60 [ 303.404915][T10107] iterate_dir+0x20d/0x5f0 [ 303.409346][T10107] ksys_getdents64+0x187/0x2e0 [ 303.414130][T10107] ? __ia32_sys_getdents+0x350/0x350 [ 303.419416][T10107] ? ksys_write+0x166/0x1f0 11:17:24 executing program 2: ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, &(0x7f0000000280)=""/201) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in=@remote}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) [ 303.423922][T10107] ? iterate_dir+0x5f0/0x5f0 [ 303.428523][T10107] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 303.433980][T10107] ? do_syscall_64+0x26/0x610 [ 303.438666][T10107] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.444734][T10107] ? do_syscall_64+0x26/0x610 [ 303.449422][T10107] __x64_sys_getdents64+0x73/0xb0 [ 303.454455][T10107] do_syscall_64+0x103/0x610 [ 303.459054][T10107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.464950][T10107] RIP: 0033:0x458079 [ 303.468845][T10107] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.488478][T10107] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 303.496895][T10107] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 [ 303.504884][T10107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 303.512946][T10107] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 11:17:24 executing program 1 (fault-call:4 fault-nth:7): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 303.520916][T10107] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 [ 303.528888][T10107] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 303.576641][T10127] FAULT_INJECTION: forcing a failure. [ 303.576641][T10127] name failslab, interval 1, probability 0, space 0, times 0 [ 303.612449][T10127] CPU: 0 PID: 10127 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 303.621508][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.631566][T10127] Call Trace: [ 303.634867][T10127] dump_stack+0x172/0x1f0 [ 303.639212][T10127] should_fail.cold+0xa/0x15 [ 303.643815][T10127] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 303.649635][T10127] ? ___might_sleep+0x163/0x280 [ 303.654504][T10127] __should_failslab+0x121/0x190 [ 303.659449][T10127] should_failslab+0x9/0x14 [ 303.663955][T10127] __kmalloc+0x2dc/0x740 [ 303.668298][T10127] ? str2hashbuf_unsigned+0x2a0/0x2a0 [ 303.673679][T10127] ? ext4_htree_store_dirent+0x8a/0x650 [ 303.679235][T10127] ext4_htree_store_dirent+0x8a/0x650 [ 303.684624][T10127] htree_dirblock_to_tree+0x4fe/0x910 [ 303.690011][T10127] ? dx_probe+0x1120/0x1120 [ 303.694516][T10127] ? __lock_acquire+0x548/0x3fb0 [ 303.699461][T10127] ? __lock_acquire+0x548/0x3fb0 [ 303.704412][T10127] ext4_htree_fill_tree+0x252/0xa50 [ 303.720725][T10127] ? find_held_lock+0x35/0x130 [ 303.725498][T10127] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 303.731161][T10127] ? do_split+0x1f10/0x1f10 [ 303.735695][T10127] ? ext4_readdir+0x2297/0x3490 [ 303.740548][T10127] ? rcu_read_lock_sched_held+0x110/0x130 [ 303.746279][T10127] ? kmem_cache_alloc_trace+0x354/0x760 [ 303.751828][T10127] ? aa_file_perm+0x432/0xeb0 [ 303.756512][T10127] ext4_readdir+0x1999/0x3490 [ 303.761312][T10127] ? aa_path_link+0x460/0x460 [ 303.766012][T10127] ? __ext4_check_dir_entry+0x350/0x350 [ 303.771572][T10127] ? lock_acquire+0x16f/0x3f0 [ 303.776260][T10127] ? iterate_dir+0xd8/0x5f0 [ 303.780776][T10127] iterate_dir+0x489/0x5f0 [ 303.785213][T10127] ovl_dir_read_merged+0x199/0x500 [ 303.790330][T10127] ? ovl_dir_open+0x310/0x310 [ 303.795009][T10127] ? ovl_fill_real+0x2d0/0x2d0 [ 303.799786][T10127] ? kmem_cache_alloc_trace+0x354/0x760 [ 303.805358][T10127] ? ovl_test_flag+0x12/0x20 [ 303.809946][T10127] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 303.815667][T10127] ovl_iterate+0x75a/0xc60 [ 303.820105][T10127] iterate_dir+0x20d/0x5f0 [ 303.824526][T10127] ksys_getdents64+0x187/0x2e0 [ 303.829294][T10127] ? __ia32_sys_getdents+0x350/0x350 [ 303.834835][T10127] ? ksys_write+0x166/0x1f0 [ 303.839345][T10127] ? iterate_dir+0x5f0/0x5f0 [ 303.843939][T10127] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 303.849399][T10127] ? do_syscall_64+0x26/0x610 [ 303.854085][T10127] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.860149][T10127] ? do_syscall_64+0x26/0x610 [ 303.864844][T10127] __x64_sys_getdents64+0x73/0xb0 [ 303.869870][T10127] do_syscall_64+0x103/0x610 [ 303.874462][T10127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.880437][T10127] RIP: 0033:0x458079 [ 303.884354][T10127] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.903954][T10127] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 303.912368][T10127] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 [ 303.920345][T10127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 11:17:25 executing program 3 (fault-call:4 fault-nth:7): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:25 executing program 4: 11:17:25 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:17:25 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) r1 = gettid() write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x26, 0x37, 0x2, {0x3, 0x5, 0x7fff, r1, 0x8, 'system*]'}}, 0x26) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) [ 303.928321][T10127] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 303.936282][T10127] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 303.936291][T10127] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 11:17:25 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x9, 0x8}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 11:17:25 executing program 4: 11:17:25 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 303.998564][T10140] FAULT_INJECTION: forcing a failure. [ 303.998564][T10140] name failslab, interval 1, probability 0, space 0, times 0 11:17:25 executing program 4: [ 304.154053][T10140] CPU: 1 PID: 10140 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 304.163118][T10140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.173179][T10140] Call Trace: [ 304.176486][T10140] dump_stack+0x172/0x1f0 [ 304.180834][T10140] should_fail.cold+0xa/0x15 [ 304.185438][T10140] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 304.191256][T10140] ? ___might_sleep+0x163/0x280 [ 304.196134][T10140] __should_failslab+0x121/0x190 [ 304.201083][T10140] should_failslab+0x9/0x14 [ 304.205589][T10140] __kmalloc+0x2dc/0x740 [ 304.209880][T10140] ? str2hashbuf_unsigned+0x2a0/0x2a0 [ 304.215257][T10140] ? ext4_htree_store_dirent+0x8a/0x650 [ 304.220996][T10140] ext4_htree_store_dirent+0x8a/0x650 [ 304.226381][T10140] htree_dirblock_to_tree+0x4fe/0x910 [ 304.231766][T10140] ? dx_probe+0x1120/0x1120 [ 304.236280][T10140] ? __lock_acquire+0x548/0x3fb0 [ 304.241224][T10140] ? __lock_acquire+0x548/0x3fb0 [ 304.246173][T10140] ext4_htree_fill_tree+0x252/0xa50 [ 304.251373][T10140] ? find_held_lock+0x35/0x130 [ 304.256141][T10140] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 304.262225][T10140] ? do_split+0x1f10/0x1f10 [ 304.266743][T10140] ? ext4_readdir+0x2297/0x3490 [ 304.271595][T10140] ? rcu_read_lock_sched_held+0x110/0x130 [ 304.277314][T10140] ? kmem_cache_alloc_trace+0x354/0x760 [ 304.282866][T10140] ? aa_file_perm+0x432/0xeb0 [ 304.287554][T10140] ext4_readdir+0x1999/0x3490 [ 304.292234][T10140] ? aa_path_link+0x460/0x460 [ 304.296934][T10140] ? __ext4_check_dir_entry+0x350/0x350 [ 304.302490][T10140] ? lock_acquire+0x16f/0x3f0 [ 304.307173][T10140] ? iterate_dir+0xd8/0x5f0 [ 304.311739][T10140] iterate_dir+0x489/0x5f0 [ 304.316168][T10140] ovl_dir_read_merged+0x199/0x500 [ 304.321276][T10140] ? ovl_dir_open+0x310/0x310 [ 304.321296][T10140] ? ovl_fill_real+0x2d0/0x2d0 [ 304.330707][T10140] ? kmem_cache_alloc_trace+0x354/0x760 [ 304.330724][T10140] ? ovl_test_flag+0x12/0x20 [ 304.330737][T10140] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 304.330755][T10140] ovl_iterate+0x75a/0xc60 11:17:25 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:25 executing program 4: [ 304.351073][T10140] iterate_dir+0x20d/0x5f0 [ 304.355496][T10140] ksys_getdents64+0x187/0x2e0 [ 304.355514][T10140] ? __ia32_sys_getdents+0x350/0x350 [ 304.355529][T10140] ? ksys_write+0x166/0x1f0 [ 304.355546][T10140] ? iterate_dir+0x5f0/0x5f0 [ 304.374628][T10140] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 304.374645][T10140] ? do_syscall_64+0x26/0x610 [ 304.374659][T10140] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.374676][T10140] ? do_syscall_64+0x26/0x610 [ 304.395533][T10140] __x64_sys_getdents64+0x73/0xb0 [ 304.400566][T10140] do_syscall_64+0x103/0x610 [ 304.405186][T10140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.411084][T10140] RIP: 0033:0x458079 [ 304.414978][T10140] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.434673][T10140] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 304.443104][T10140] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 11:17:25 executing program 1 (fault-call:4 fault-nth:8): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 304.451061][T10140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 304.459019][T10140] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 304.466987][T10140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 [ 304.475059][T10140] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 304.532430][T10165] FAULT_INJECTION: forcing a failure. [ 304.532430][T10165] name failslab, interval 1, probability 0, space 0, times 0 [ 304.557805][T10165] CPU: 0 PID: 10165 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 304.566856][T10165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.577001][T10165] Call Trace: [ 304.577026][T10165] dump_stack+0x172/0x1f0 [ 304.577049][T10165] should_fail.cold+0xa/0x15 [ 304.577070][T10165] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 304.577089][T10165] ? ___might_sleep+0x163/0x280 [ 304.577109][T10165] __should_failslab+0x121/0x190 [ 304.584700][T10165] should_failslab+0x9/0x14 [ 304.584717][T10165] __kmalloc+0x2dc/0x740 [ 304.584738][T10165] ? str2hashbuf_unsigned+0x2a0/0x2a0 [ 304.619120][T10165] ? ext4_htree_store_dirent+0x8a/0x650 [ 304.624692][T10165] ext4_htree_store_dirent+0x8a/0x650 [ 304.630051][T10165] htree_dirblock_to_tree+0x4fe/0x910 [ 304.635420][T10165] ? dx_probe+0x1120/0x1120 [ 304.639917][T10165] ? __lock_acquire+0x548/0x3fb0 [ 304.644843][T10165] ? __lock_acquire+0x548/0x3fb0 [ 304.649767][T10165] ext4_htree_fill_tree+0x252/0xa50 [ 304.654947][T10165] ? find_held_lock+0x35/0x130 [ 304.659694][T10165] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 304.665313][T10165] ? do_split+0x1f10/0x1f10 [ 304.669804][T10165] ? ext4_readdir+0x2297/0x3490 [ 304.674648][T10165] ? rcu_read_lock_sched_held+0x110/0x130 [ 304.680370][T10165] ? kmem_cache_alloc_trace+0x354/0x760 [ 304.685916][T10165] ? aa_file_perm+0x432/0xeb0 [ 304.690606][T10165] ext4_readdir+0x1999/0x3490 [ 304.695272][T10165] ? aa_path_link+0x460/0x460 [ 304.699956][T10165] ? __ext4_check_dir_entry+0x350/0x350 [ 304.705497][T10165] ? lock_acquire+0x16f/0x3f0 [ 304.710260][T10165] ? iterate_dir+0xd8/0x5f0 [ 304.714773][T10165] iterate_dir+0x489/0x5f0 [ 304.719178][T10165] ovl_dir_read_merged+0x199/0x500 [ 304.724282][T10165] ? ovl_dir_open+0x310/0x310 [ 304.728941][T10165] ? ovl_fill_real+0x2d0/0x2d0 [ 304.733689][T10165] ? kmem_cache_alloc_trace+0x354/0x760 [ 304.739217][T10165] ? ovl_test_flag+0x12/0x20 [ 304.743793][T10165] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 304.749495][T10165] ovl_iterate+0x75a/0xc60 [ 304.753917][T10165] iterate_dir+0x20d/0x5f0 [ 304.758318][T10165] ksys_getdents64+0x187/0x2e0 [ 304.763069][T10165] ? __ia32_sys_getdents+0x350/0x350 [ 304.768333][T10165] ? ksys_write+0x166/0x1f0 [ 304.772814][T10165] ? iterate_dir+0x5f0/0x5f0 [ 304.777509][T10165] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 304.782950][T10165] ? do_syscall_64+0x26/0x610 [ 304.787615][T10165] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.793659][T10165] ? do_syscall_64+0x26/0x610 [ 304.798320][T10165] __x64_sys_getdents64+0x73/0xb0 [ 304.803326][T10165] do_syscall_64+0x103/0x610 [ 304.807911][T10165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.813792][T10165] RIP: 0033:0x458079 [ 304.817666][T10165] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.837352][T10165] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 304.845747][T10165] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 [ 304.861951][T10165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 304.869927][T10165] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 11:17:26 executing program 3 (fault-call:4 fault-nth:8): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:26 executing program 4: 11:17:26 executing program 0: 11:17:26 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000200)=""/237, 0xed}, {&(0x7f0000000300)=""/228, 0xe4}], 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000c00000000010000000000800500000074883b8d108a751d66cf9cd76bce667417e7a7f125f4f05a3a3e936a53"]) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) [ 304.877882][T10165] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 304.885845][T10165] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 11:17:26 executing program 1 (fault-call:4 fault-nth:9): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:26 executing program 4: ptrace$getenv(0x4201, 0x0, 0x0, 0x0) 11:17:26 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:26 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mknodat(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x2, 0x0, 0x4, 0x7a}, &(0x7f00000004c0)=0x18) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x7fffffff) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 305.048806][T10180] FAULT_INJECTION: forcing a failure. [ 305.048806][T10180] name failslab, interval 1, probability 0, space 0, times 0 [ 305.086942][T10185] FAULT_INJECTION: forcing a failure. 11:17:26 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$FITRIM(r0, 0xc0185879, 0x0) [ 305.086942][T10185] name failslab, interval 1, probability 0, space 0, times 0 [ 305.145013][T10180] CPU: 0 PID: 10180 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 305.154061][T10180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.164278][T10180] Call Trace: [ 305.167562][T10180] dump_stack+0x172/0x1f0 [ 305.171977][T10180] should_fail.cold+0xa/0x15 [ 305.176556][T10180] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 305.182365][T10180] ? ___might_sleep+0x163/0x280 [ 305.187207][T10180] __should_failslab+0x121/0x190 [ 305.192128][T10180] should_failslab+0x9/0x14 [ 305.196615][T10180] __kmalloc+0x2dc/0x740 [ 305.200931][T10180] ? str2hashbuf_unsigned+0x2a0/0x2a0 [ 305.206289][T10180] ? ext4_htree_store_dirent+0x8a/0x650 [ 305.212032][T10180] ext4_htree_store_dirent+0x8a/0x650 [ 305.217386][T10180] htree_dirblock_to_tree+0x4fe/0x910 [ 305.222758][T10180] ? dx_probe+0x1120/0x1120 [ 305.227240][T10180] ? __lock_acquire+0x548/0x3fb0 [ 305.232170][T10180] ? __lock_acquire+0x548/0x3fb0 [ 305.237096][T10180] ext4_htree_fill_tree+0x252/0xa50 [ 305.242362][T10180] ? find_held_lock+0x35/0x130 [ 305.247107][T10180] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 305.252725][T10180] ? do_split+0x1f10/0x1f10 [ 305.257221][T10180] ? ext4_readdir+0x2297/0x3490 [ 305.262052][T10180] ? rcu_read_lock_sched_held+0x110/0x130 [ 305.267752][T10180] ? kmem_cache_alloc_trace+0x354/0x760 [ 305.273279][T10180] ? aa_file_perm+0x432/0xeb0 [ 305.277948][T10180] ext4_readdir+0x1999/0x3490 [ 305.282617][T10180] ? aa_path_link+0x460/0x460 [ 305.287286][T10180] ? __ext4_check_dir_entry+0x350/0x350 [ 305.292816][T10180] ? lock_acquire+0x16f/0x3f0 [ 305.297475][T10180] ? iterate_dir+0xd8/0x5f0 [ 305.301968][T10180] iterate_dir+0x489/0x5f0 [ 305.306371][T10180] ovl_dir_read_merged+0x199/0x500 [ 305.311477][T10180] ? ovl_dir_open+0x310/0x310 [ 305.316149][T10180] ? ovl_fill_real+0x2d0/0x2d0 [ 305.320901][T10180] ? kmem_cache_alloc_trace+0x354/0x760 [ 305.326435][T10180] ? ovl_test_flag+0x12/0x20 [ 305.331364][T10180] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 305.337064][T10180] ovl_iterate+0x75a/0xc60 [ 305.341480][T10180] iterate_dir+0x20d/0x5f0 [ 305.345881][T10180] ksys_getdents64+0x187/0x2e0 [ 305.350633][T10180] ? __ia32_sys_getdents+0x350/0x350 [ 305.355900][T10180] ? ksys_write+0x166/0x1f0 [ 305.360388][T10180] ? iterate_dir+0x5f0/0x5f0 [ 305.364975][T10180] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 305.370415][T10180] ? do_syscall_64+0x26/0x610 [ 305.375079][T10180] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.381125][T10180] ? do_syscall_64+0x26/0x610 [ 305.385788][T10180] __x64_sys_getdents64+0x73/0xb0 [ 305.390797][T10180] do_syscall_64+0x103/0x610 [ 305.395369][T10180] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.401244][T10180] RIP: 0033:0x458079 [ 305.405120][T10180] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.424802][T10180] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 305.433197][T10180] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 [ 305.441238][T10180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 305.449191][T10180] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 305.457155][T10180] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 [ 305.465111][T10180] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 305.485973][T10185] CPU: 1 PID: 10185 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 11:17:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r0, r1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448dd, 0x0) [ 305.495022][T10185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.505102][T10185] Call Trace: [ 305.508404][T10185] dump_stack+0x172/0x1f0 [ 305.512749][T10185] should_fail.cold+0xa/0x15 [ 305.517350][T10185] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 305.517375][T10185] ? ___might_sleep+0x163/0x280 [ 305.528048][T10185] __should_failslab+0x121/0x190 [ 305.533004][T10185] should_failslab+0x9/0x14 [ 305.533021][T10185] __kmalloc+0x2dc/0x740 11:17:26 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x0, 0x0) [ 305.533041][T10185] ? str2hashbuf_unsigned+0x2a0/0x2a0 [ 305.533071][T10185] ? ext4_htree_store_dirent+0x8a/0x650 [ 305.552672][T10185] ext4_htree_store_dirent+0x8a/0x650 [ 305.558054][T10185] htree_dirblock_to_tree+0x4fe/0x910 [ 305.563437][T10185] ? dx_probe+0x1120/0x1120 [ 305.567955][T10185] ? __lock_acquire+0x548/0x3fb0 [ 305.572925][T10185] ? __lock_acquire+0x548/0x3fb0 [ 305.577876][T10185] ext4_htree_fill_tree+0x252/0xa50 [ 305.583082][T10185] ? find_held_lock+0x35/0x130 [ 305.587855][T10185] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 305.593583][T10185] ? do_split+0x1f10/0x1f10 [ 305.598104][T10185] ? ext4_readdir+0x2297/0x3490 [ 305.602957][T10185] ? rcu_read_lock_sched_held+0x110/0x130 [ 305.608689][T10185] ? kmem_cache_alloc_trace+0x354/0x760 [ 305.614240][T10185] ? aa_file_perm+0x432/0xeb0 [ 305.618931][T10185] ext4_readdir+0x1999/0x3490 [ 305.623611][T10185] ? aa_path_link+0x460/0x460 [ 305.628305][T10185] ? __ext4_check_dir_entry+0x350/0x350 [ 305.633860][T10185] ? lock_acquire+0x16f/0x3f0 [ 305.638536][T10185] ? iterate_dir+0xd8/0x5f0 [ 305.643051][T10185] iterate_dir+0x489/0x5f0 [ 305.647478][T10185] ovl_dir_read_merged+0x199/0x500 [ 305.652584][T10185] ? ovl_dir_open+0x310/0x310 [ 305.657242][T10185] ? ovl_fill_real+0x2d0/0x2d0 [ 305.661996][T10185] ? kmem_cache_alloc_trace+0x354/0x760 [ 305.667524][T10185] ? ovl_test_flag+0x12/0x20 [ 305.672096][T10185] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 305.677796][T10185] ovl_iterate+0x75a/0xc60 [ 305.682202][T10185] iterate_dir+0x20d/0x5f0 [ 305.686603][T10185] ksys_getdents64+0x187/0x2e0 [ 305.691456][T10185] ? __ia32_sys_getdents+0x350/0x350 [ 305.696734][T10185] ? ksys_write+0x166/0x1f0 [ 305.701221][T10185] ? iterate_dir+0x5f0/0x5f0 [ 305.705794][T10185] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 305.711244][T10185] ? do_syscall_64+0x26/0x610 [ 305.715909][T10185] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.721954][T10185] ? do_syscall_64+0x26/0x610 [ 305.726616][T10185] __x64_sys_getdents64+0x73/0xb0 [ 305.731623][T10185] do_syscall_64+0x103/0x610 [ 305.736210][T10185] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.742110][T10185] RIP: 0033:0x458079 [ 305.746020][T10185] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.765603][T10185] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 305.774009][T10185] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 [ 305.781961][T10185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 305.789915][T10185] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 305.797868][T10185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 305.805827][T10185] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 11:17:27 executing program 3 (fault-call:4 fault-nth:9): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:27 executing program 4: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:27 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:27 executing program 1 (fault-call:4 fault-nth:10): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x71557a) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/167) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) [ 305.888843][T10186] PKCS8: Unsupported PKCS#8 version [ 305.956017][T10208] FAULT_INJECTION: forcing a failure. [ 305.956017][T10208] name failslab, interval 1, probability 0, space 0, times 0 [ 305.993879][T10212] FAULT_INJECTION: forcing a failure. 11:17:27 executing program 4: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 305.993879][T10212] name failslab, interval 1, probability 0, space 0, times 0 [ 306.015363][T10208] CPU: 1 PID: 10208 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 306.024405][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.034455][T10208] Call Trace: [ 306.034479][T10208] dump_stack+0x172/0x1f0 [ 306.034501][T10208] should_fail.cold+0xa/0x15 [ 306.034521][T10208] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 306.046805][T10208] ? ___might_sleep+0x163/0x280 [ 306.057424][T10208] __should_failslab+0x121/0x190 [ 306.062367][T10208] should_failslab+0x9/0x14 [ 306.062382][T10208] __kmalloc+0x2dc/0x740 [ 306.062402][T10208] ? str2hashbuf_unsigned+0x2a0/0x2a0 [ 306.071131][T10208] ? ext4_htree_store_dirent+0x8a/0x650 [ 306.071151][T10208] ext4_htree_store_dirent+0x8a/0x650 [ 306.071172][T10208] htree_dirblock_to_tree+0x4fe/0x910 [ 306.071197][T10208] ? dx_probe+0x1120/0x1120 [ 306.097279][T10208] ? __lock_acquire+0x548/0x3fb0 [ 306.102225][T10208] ? __lock_acquire+0x548/0x3fb0 [ 306.107172][T10208] ext4_htree_fill_tree+0x252/0xa50 [ 306.112373][T10208] ? find_held_lock+0x35/0x130 [ 306.117143][T10208] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 306.122784][T10208] ? do_split+0x1f10/0x1f10 [ 306.127301][T10208] ? ext4_readdir+0x2297/0x3490 [ 306.132154][T10208] ? rcu_read_lock_sched_held+0x110/0x130 [ 306.137886][T10208] ? kmem_cache_alloc_trace+0x354/0x760 [ 306.143437][T10208] ? aa_file_perm+0x432/0xeb0 [ 306.148121][T10208] ext4_readdir+0x1999/0x3490 [ 306.152800][T10208] ? aa_path_link+0x460/0x460 [ 306.157501][T10208] ? __ext4_check_dir_entry+0x350/0x350 [ 306.163058][T10208] ? lock_acquire+0x16f/0x3f0 [ 306.167739][T10208] ? iterate_dir+0xd8/0x5f0 [ 306.172256][T10208] iterate_dir+0x489/0x5f0 [ 306.176682][T10208] ovl_dir_read_merged+0x199/0x500 [ 306.181797][T10208] ? ovl_dir_open+0x310/0x310 [ 306.186479][T10208] ? ovl_fill_real+0x2d0/0x2d0 [ 306.191253][T10208] ? kmem_cache_alloc_trace+0x354/0x760 [ 306.196806][T10208] ? ovl_test_flag+0x12/0x20 [ 306.201403][T10208] ? __sanitizer_cov_trace_cmp1+0x17/0x20 11:17:27 executing program 5: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 306.207142][T10208] ovl_iterate+0x75a/0xc60 [ 306.211564][T10208] iterate_dir+0x20d/0x5f0 [ 306.216003][T10208] ksys_getdents64+0x187/0x2e0 [ 306.220774][T10208] ? __ia32_sys_getdents+0x350/0x350 [ 306.226061][T10208] ? ksys_write+0x166/0x1f0 [ 306.230562][T10208] ? iterate_dir+0x5f0/0x5f0 [ 306.230581][T10208] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 306.230599][T10208] ? do_syscall_64+0x26/0x610 [ 306.240617][T10208] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.240631][T10208] ? do_syscall_64+0x26/0x610 11:17:27 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000200)='rdma.current\x00'}, 0x30) signalfd(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x8) r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) kcmp(r0, r1, 0x5, r2, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffffffffffd) write$cgroup_int(r4, &(0x7f0000000100), 0x715371) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000000c0)={0x6, 0x2}, 0x2) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, 0x0, r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)) [ 306.240654][T10208] __x64_sys_getdents64+0x73/0xb0 [ 306.261049][T10208] do_syscall_64+0x103/0x610 [ 306.265656][T10208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.271546][T10208] RIP: 0033:0x458079 [ 306.275441][T10208] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.295042][T10208] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 306.303450][T10208] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 [ 306.311417][T10208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 306.319389][T10208] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 306.327386][T10208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 [ 306.335381][T10208] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 306.343480][T10212] CPU: 0 PID: 10212 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 306.352504][T10212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.362556][T10212] Call Trace: [ 306.365857][T10212] dump_stack+0x172/0x1f0 [ 306.370218][T10212] should_fail.cold+0xa/0x15 [ 306.374815][T10212] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 306.380635][T10212] ? ___might_sleep+0x163/0x280 [ 306.385493][T10212] __should_failslab+0x121/0x190 [ 306.390438][T10212] should_failslab+0x9/0x14 [ 306.394951][T10212] __kmalloc+0x2dc/0x740 [ 306.399209][T10212] ? __lock_acquire+0x548/0x3fb0 [ 306.404152][T10212] ? ovl_cache_entry_new+0x3f/0x550 [ 306.409357][T10212] ovl_cache_entry_new+0x3f/0x550 [ 306.414378][T10212] ? find_held_lock+0x35/0x130 [ 306.414403][T10212] ovl_fill_merge+0x3e5/0xa50 [ 306.423819][T10212] ? do_split+0x1e70/0x1f10 [ 306.423841][T10212] ? ovl_fill_real+0x2d0/0x2d0 [ 306.423868][T10212] call_filldir+0x398/0x630 [ 306.423894][T10212] ext4_readdir+0x26f9/0x3490 [ 306.442360][T10212] ? aa_path_link+0x460/0x460 [ 306.447058][T10212] ? __ext4_check_dir_entry+0x350/0x350 [ 306.452623][T10212] ? lock_acquire+0x16f/0x3f0 11:17:27 executing program 0: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:27 executing program 3 (fault-call:4 fault-nth:10): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:27 executing program 5: semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 306.457491][T10212] ? iterate_dir+0xd8/0x5f0 [ 306.462126][T10212] iterate_dir+0x489/0x5f0 [ 306.466556][T10212] ovl_dir_read_merged+0x199/0x500 [ 306.471670][T10212] ? ovl_dir_open+0x310/0x310 [ 306.476362][T10212] ? ovl_fill_real+0x2d0/0x2d0 [ 306.481136][T10212] ? kmem_cache_alloc_trace+0x354/0x760 [ 306.486687][T10212] ? ovl_test_flag+0x12/0x20 [ 306.491283][T10212] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 306.497181][T10212] ovl_iterate+0x75a/0xc60 [ 306.501700][T10212] iterate_dir+0x20d/0x5f0 [ 306.506134][T10212] ksys_getdents64+0x187/0x2e0 [ 306.510904][T10212] ? __ia32_sys_getdents+0x350/0x350 [ 306.516214][T10212] ? ksys_write+0x166/0x1f0 [ 306.520718][T10212] ? iterate_dir+0x5f0/0x5f0 [ 306.525315][T10212] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 306.530776][T10212] ? do_syscall_64+0x26/0x610 [ 306.535457][T10212] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.541526][T10212] ? do_syscall_64+0x26/0x610 [ 306.546225][T10212] __x64_sys_getdents64+0x73/0xb0 [ 306.551258][T10212] do_syscall_64+0x103/0x610 11:17:27 executing program 0: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 306.555868][T10212] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.561759][T10212] RIP: 0033:0x458079 [ 306.565653][T10212] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.585288][T10212] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 306.593695][T10212] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 11:17:27 executing program 5: semget$private(0x0, 0x2, 0x8a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 306.601664][T10212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 306.609640][T10212] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 306.617628][T10212] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 306.625625][T10212] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 11:17:27 executing program 1 (fault-call:4 fault-nth:11): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:27 executing program 4: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:27 executing program 0: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:28 executing program 4: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x8, 0x12) fchown(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) [ 306.802947][T10248] FAULT_INJECTION: forcing a failure. [ 306.802947][T10248] name failslab, interval 1, probability 0, space 0, times 0 11:17:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:28 executing program 0: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 306.850868][T10252] FAULT_INJECTION: forcing a failure. [ 306.850868][T10252] name failslab, interval 1, probability 0, space 0, times 0 [ 306.879603][T10248] CPU: 0 PID: 10248 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 306.888645][T10248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.898692][T10248] Call Trace: [ 306.898717][T10248] dump_stack+0x172/0x1f0 [ 306.898739][T10248] should_fail.cold+0xa/0x15 [ 306.906369][T10248] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 306.906393][T10248] ? ___might_sleep+0x163/0x280 [ 306.921601][T10248] __should_failslab+0x121/0x190 [ 306.926544][T10248] should_failslab+0x9/0x14 [ 306.931051][T10248] __kmalloc+0x2dc/0x740 [ 306.935453][T10248] ? __lock_acquire+0x548/0x3fb0 [ 306.940461][T10248] ? ovl_cache_entry_new+0x3f/0x550 [ 306.945642][T10248] ovl_cache_entry_new+0x3f/0x550 [ 306.950648][T10248] ? find_held_lock+0x35/0x130 [ 306.955394][T10248] ovl_fill_merge+0x3e5/0xa50 [ 306.960058][T10248] ? do_split+0x1e70/0x1f10 [ 306.964546][T10248] ? ovl_fill_real+0x2d0/0x2d0 [ 306.969299][T10248] call_filldir+0x398/0x630 [ 306.973800][T10248] ext4_readdir+0x26f9/0x3490 [ 306.978474][T10248] ? aa_path_link+0x460/0x460 [ 306.983146][T10248] ? __ext4_check_dir_entry+0x350/0x350 [ 306.988679][T10248] ? lock_acquire+0x16f/0x3f0 [ 306.993335][T10248] ? iterate_dir+0xd8/0x5f0 [ 306.997827][T10248] iterate_dir+0x489/0x5f0 [ 307.002924][T10248] ovl_dir_read_merged+0x199/0x500 [ 307.008031][T10248] ? ovl_dir_open+0x310/0x310 [ 307.012692][T10248] ? ovl_fill_real+0x2d0/0x2d0 [ 307.017441][T10248] ? kmem_cache_alloc_trace+0x354/0x760 [ 307.022997][T10248] ? ovl_test_flag+0x12/0x20 [ 307.027569][T10248] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 307.033272][T10248] ovl_iterate+0x75a/0xc60 [ 307.037678][T10248] iterate_dir+0x20d/0x5f0 [ 307.042093][T10248] ksys_getdents64+0x187/0x2e0 [ 307.046850][T10248] ? __ia32_sys_getdents+0x350/0x350 [ 307.052119][T10248] ? ksys_write+0x166/0x1f0 [ 307.056606][T10248] ? iterate_dir+0x5f0/0x5f0 [ 307.061268][T10248] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 307.066708][T10248] ? do_syscall_64+0x26/0x610 [ 307.071373][T10248] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.077433][T10248] ? do_syscall_64+0x26/0x610 [ 307.082096][T10248] __x64_sys_getdents64+0x73/0xb0 [ 307.087114][T10248] do_syscall_64+0x103/0x610 [ 307.091786][T10248] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.097666][T10248] RIP: 0033:0x458079 [ 307.101563][T10248] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.121148][T10248] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 307.129625][T10248] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 [ 307.137589][T10248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 307.145542][T10248] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 307.153493][T10248] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 [ 307.161563][T10248] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 11:17:28 executing program 0: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 307.226843][T10252] CPU: 0 PID: 10252 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 307.235896][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.245953][T10252] Call Trace: [ 307.249252][T10252] dump_stack+0x172/0x1f0 [ 307.253601][T10252] should_fail.cold+0xa/0x15 [ 307.258196][T10252] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 307.264005][T10252] ? ___might_sleep+0x163/0x280 [ 307.268861][T10252] __should_failslab+0x121/0x190 11:17:28 executing program 3 (fault-call:4 fault-nth:11): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:28 executing program 0: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 307.273813][T10252] should_failslab+0x9/0x14 [ 307.278323][T10252] __kmalloc+0x2dc/0x740 [ 307.282567][T10252] ? __lock_acquire+0x548/0x3fb0 [ 307.287503][T10252] ? ovl_cache_entry_new+0x3f/0x550 [ 307.292706][T10252] ovl_cache_entry_new+0x3f/0x550 [ 307.297738][T10252] ovl_fill_merge+0x3e5/0xa50 [ 307.302430][T10252] ? do_split+0x1e70/0x1f10 [ 307.307111][T10252] ? ovl_fill_real+0x2d0/0x2d0 [ 307.311893][T10252] call_filldir+0x398/0x630 [ 307.316413][T10252] ext4_readdir+0x26f9/0x3490 [ 307.321099][T10252] ? aa_path_link+0x460/0x460 11:17:28 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 307.325801][T10252] ? __ext4_check_dir_entry+0x350/0x350 [ 307.331360][T10252] ? lock_acquire+0x16f/0x3f0 [ 307.336402][T10252] ? iterate_dir+0xd8/0x5f0 [ 307.340944][T10252] iterate_dir+0x489/0x5f0 [ 307.345372][T10252] ovl_dir_read_merged+0x199/0x500 [ 307.350487][T10252] ? ovl_dir_open+0x310/0x310 [ 307.355160][T10252] ? ovl_fill_real+0x2d0/0x2d0 [ 307.355184][T10252] ? kmem_cache_alloc_trace+0x354/0x760 [ 307.355203][T10252] ? ovl_test_flag+0x12/0x20 [ 307.370061][T10252] ? __sanitizer_cov_trace_cmp1+0x17/0x20 11:17:28 executing program 0: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 307.375786][T10252] ovl_iterate+0x75a/0xc60 [ 307.380214][T10252] iterate_dir+0x20d/0x5f0 [ 307.384651][T10252] ksys_getdents64+0x187/0x2e0 [ 307.389416][T10252] ? __ia32_sys_getdents+0x350/0x350 [ 307.394728][T10252] ? ksys_write+0x166/0x1f0 [ 307.399235][T10252] ? iterate_dir+0x5f0/0x5f0 [ 307.403829][T10252] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 307.409306][T10252] ? do_syscall_64+0x26/0x610 [ 307.413995][T10252] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.414023][T10252] ? do_syscall_64+0x26/0x610 [ 307.414049][T10252] __x64_sys_getdents64+0x73/0xb0 [ 307.429774][T10252] do_syscall_64+0x103/0x610 [ 307.434377][T10252] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.434390][T10252] RIP: 0033:0x458079 [ 307.434408][T10252] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.463841][T10252] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 307.472361][T10252] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 [ 307.480333][T10252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 307.488305][T10252] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 307.496283][T10252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 307.504291][T10252] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 307.573958][T10279] FAULT_INJECTION: forcing a failure. [ 307.573958][T10279] name failslab, interval 1, probability 0, space 0, times 0 [ 307.590049][T10279] CPU: 0 PID: 10279 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 307.599084][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.609155][T10279] Call Trace: [ 307.612456][T10279] dump_stack+0x172/0x1f0 [ 307.616839][T10279] should_fail.cold+0xa/0x15 11:17:28 executing program 1 (fault-call:4 fault-nth:12): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:28 executing program 0: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:28 executing program 4: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) 11:17:28 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 307.621457][T10279] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 307.627315][T10279] ? ___might_sleep+0x163/0x280 [ 307.632177][T10279] __should_failslab+0x121/0x190 [ 307.637210][T10279] should_failslab+0x9/0x14 [ 307.641715][T10279] __kmalloc+0x2dc/0x740 [ 307.646141][T10279] ? __lock_acquire+0x548/0x3fb0 [ 307.651086][T10279] ? ovl_cache_entry_new+0x3f/0x550 [ 307.656289][T10279] ovl_cache_entry_new+0x3f/0x550 [ 307.661321][T10279] ovl_fill_merge+0x3e5/0xa50 [ 307.666173][T10279] ? do_split+0x1e70/0x1f10 11:17:28 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 307.670678][T10279] ? ovl_fill_real+0x2d0/0x2d0 [ 307.675460][T10279] call_filldir+0x398/0x630 [ 307.679976][T10279] ext4_readdir+0x26f9/0x3490 [ 307.684659][T10279] ? aa_path_link+0x460/0x460 [ 307.689351][T10279] ? __ext4_check_dir_entry+0x350/0x350 [ 307.694909][T10279] ? lock_acquire+0x16f/0x3f0 [ 307.699590][T10279] ? iterate_dir+0xd8/0x5f0 [ 307.704114][T10279] iterate_dir+0x489/0x5f0 [ 307.708538][T10279] ovl_dir_read_merged+0x199/0x500 [ 307.713645][T10279] ? ovl_dir_open+0x310/0x310 [ 307.718312][T10279] ? ovl_fill_real+0x2d0/0x2d0 11:17:29 executing program 4: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 307.723085][T10279] ? kmem_cache_alloc_trace+0x354/0x760 [ 307.728628][T10279] ? ovl_test_flag+0x12/0x20 [ 307.733215][T10279] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 307.738939][T10279] ovl_iterate+0x75a/0xc60 [ 307.743374][T10279] iterate_dir+0x20d/0x5f0 [ 307.747799][T10279] ksys_getdents64+0x187/0x2e0 [ 307.752570][T10279] ? __ia32_sys_getdents+0x350/0x350 [ 307.757859][T10279] ? ksys_write+0x166/0x1f0 [ 307.762362][T10279] ? iterate_dir+0x5f0/0x5f0 [ 307.766959][T10279] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 307.772430][T10279] ? do_syscall_64+0x26/0x610 [ 307.777108][T10279] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.777123][T10279] ? do_syscall_64+0x26/0x610 [ 307.777144][T10279] __x64_sys_getdents64+0x73/0xb0 [ 307.792873][T10279] do_syscall_64+0x103/0x610 [ 307.797469][T10279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.797481][T10279] RIP: 0033:0x458079 [ 307.797496][T10279] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.797502][T10279] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 307.835266][T10279] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 [ 307.843242][T10279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 307.851217][T10279] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 307.859189][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 [ 307.867162][T10279] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 11:17:29 executing program 4: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 307.931167][T10297] FAULT_INJECTION: forcing a failure. [ 307.931167][T10297] name failslab, interval 1, probability 0, space 0, times 0 [ 307.960197][T10297] CPU: 0 PID: 10297 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 307.969247][T10297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 11:17:29 executing program 3 (fault-call:4 fault-nth:12): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:29 executing program 0: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 307.979314][T10297] Call Trace: [ 307.982613][T10297] dump_stack+0x172/0x1f0 [ 307.986969][T10297] should_fail.cold+0xa/0x15 [ 307.991573][T10297] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 307.997394][T10297] ? ___might_sleep+0x163/0x280 [ 308.002257][T10297] __should_failslab+0x121/0x190 [ 308.007196][T10297] should_failslab+0x9/0x14 [ 308.011709][T10297] __kmalloc+0x2dc/0x740 [ 308.015972][T10297] ? __lock_acquire+0x548/0x3fb0 [ 308.020936][T10297] ? ovl_cache_entry_new+0x3f/0x550 [ 308.026149][T10297] ovl_cache_entry_new+0x3f/0x550 [ 308.031183][T10297] ovl_fill_merge+0x3e5/0xa50 [ 308.035895][T10297] ? do_split+0x1e70/0x1f10 [ 308.040398][T10297] ? ovl_fill_real+0x2d0/0x2d0 [ 308.045182][T10297] call_filldir+0x398/0x630 [ 308.049709][T10297] ext4_readdir+0x26f9/0x3490 [ 308.054390][T10297] ? aa_path_link+0x460/0x460 [ 308.059089][T10297] ? __ext4_check_dir_entry+0x350/0x350 [ 308.064641][T10297] ? lock_acquire+0x16f/0x3f0 [ 308.069318][T10297] ? iterate_dir+0xd8/0x5f0 [ 308.073836][T10297] iterate_dir+0x489/0x5f0 11:17:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 308.078264][T10297] ovl_dir_read_merged+0x199/0x500 [ 308.083381][T10297] ? ovl_dir_open+0x310/0x310 [ 308.088064][T10297] ? ovl_fill_real+0x2d0/0x2d0 [ 308.092846][T10297] ? kmem_cache_alloc_trace+0x354/0x760 [ 308.098395][T10297] ? ovl_test_flag+0x12/0x20 [ 308.098412][T10297] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 308.098429][T10297] ovl_iterate+0x75a/0xc60 [ 308.113422][T10297] iterate_dir+0x20d/0x5f0 [ 308.113445][T10297] ksys_getdents64+0x187/0x2e0 [ 308.113463][T10297] ? __ia32_sys_getdents+0x350/0x350 [ 308.127881][T10297] ? ksys_write+0x166/0x1f0 [ 308.132390][T10297] ? iterate_dir+0x5f0/0x5f0 [ 308.136986][T10297] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 308.142447][T10297] ? do_syscall_64+0x26/0x610 [ 308.147127][T10297] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.153200][T10297] ? do_syscall_64+0x26/0x610 [ 308.157890][T10297] __x64_sys_getdents64+0x73/0xb0 [ 308.162918][T10297] do_syscall_64+0x103/0x610 [ 308.167523][T10297] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.173414][T10297] RIP: 0033:0x458079 [ 308.177310][T10297] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.197006][T10297] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 308.205425][T10297] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 [ 308.213432][T10297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 308.213440][T10297] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 11:17:29 executing program 1 (fault-call:4 fault-nth:13): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:29 executing program 0: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 308.213448][T10297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 308.213456][T10297] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 308.328776][T10317] FAULT_INJECTION: forcing a failure. [ 308.328776][T10317] name failslab, interval 1, probability 0, space 0, times 0 [ 308.329240][T10319] FAULT_INJECTION: forcing a failure. [ 308.329240][T10319] name failslab, interval 1, probability 0, space 0, times 0 [ 308.380253][T10317] CPU: 0 PID: 10317 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 308.389299][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.389306][T10317] Call Trace: [ 308.389328][T10317] dump_stack+0x172/0x1f0 [ 308.389351][T10317] should_fail.cold+0xa/0x15 [ 308.407000][T10317] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 308.407025][T10317] ? ___might_sleep+0x163/0x280 [ 308.422231][T10317] __should_failslab+0x121/0x190 [ 308.427176][T10317] should_failslab+0x9/0x14 [ 308.431690][T10317] __kmalloc+0x2dc/0x740 [ 308.435934][T10317] ? __lock_acquire+0x548/0x3fb0 [ 308.440957][T10317] ? ovl_cache_entry_new+0x3f/0x550 [ 308.446159][T10317] ovl_cache_entry_new+0x3f/0x550 [ 308.451207][T10317] ovl_fill_merge+0x3e5/0xa50 [ 308.455900][T10317] ? do_split+0x1e70/0x1f10 [ 308.460405][T10317] ? ovl_fill_real+0x2d0/0x2d0 [ 308.465182][T10317] call_filldir+0x398/0x630 [ 308.469698][T10317] ext4_readdir+0x26f9/0x3490 [ 308.474377][T10317] ? aa_path_link+0x460/0x460 [ 308.479066][T10317] ? __ext4_check_dir_entry+0x350/0x350 [ 308.484615][T10317] ? lock_acquire+0x16f/0x3f0 [ 308.489382][T10317] ? iterate_dir+0xd8/0x5f0 [ 308.493895][T10317] iterate_dir+0x489/0x5f0 [ 308.498317][T10317] ovl_dir_read_merged+0x199/0x500 [ 308.503452][T10317] ? ovl_dir_open+0x310/0x310 [ 308.508124][T10317] ? ovl_fill_real+0x2d0/0x2d0 [ 308.512889][T10317] ? kmem_cache_alloc_trace+0x354/0x760 [ 308.518433][T10317] ? ovl_test_flag+0x12/0x20 [ 308.523018][T10317] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 308.528739][T10317] ovl_iterate+0x75a/0xc60 [ 308.533163][T10317] iterate_dir+0x20d/0x5f0 [ 308.537579][T10317] ksys_getdents64+0x187/0x2e0 [ 308.542343][T10317] ? __ia32_sys_getdents+0x350/0x350 [ 308.547627][T10317] ? ksys_write+0x166/0x1f0 [ 308.552143][T10317] ? iterate_dir+0x5f0/0x5f0 [ 308.556731][T10317] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 308.562188][T10317] ? do_syscall_64+0x26/0x610 [ 308.566870][T10317] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.572947][T10317] ? do_syscall_64+0x26/0x610 [ 308.577632][T10317] __x64_sys_getdents64+0x73/0xb0 [ 308.582677][T10317] do_syscall_64+0x103/0x610 [ 308.587279][T10317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.593171][T10317] RIP: 0033:0x458079 [ 308.597064][T10317] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.617007][T10317] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 308.625426][T10317] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 [ 308.633404][T10317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 308.641379][T10317] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 308.649348][T10317] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 [ 308.657316][T10317] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 308.665322][T10319] CPU: 1 PID: 10319 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 308.674347][T10319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.684404][T10319] Call Trace: [ 308.687697][T10319] dump_stack+0x172/0x1f0 [ 308.692037][T10319] should_fail.cold+0xa/0x15 [ 308.696670][T10319] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 308.702485][T10319] ? ___might_sleep+0x163/0x280 [ 308.707338][T10319] __should_failslab+0x121/0x190 [ 308.712278][T10319] should_failslab+0x9/0x14 [ 308.716786][T10319] __kmalloc+0x2dc/0x740 [ 308.721068][T10319] ? __lock_acquire+0x548/0x3fb0 [ 308.726014][T10319] ? ovl_cache_entry_new+0x3f/0x550 [ 308.731307][T10319] ovl_cache_entry_new+0x3f/0x550 [ 308.736338][T10319] ovl_fill_merge+0x3e5/0xa50 [ 308.741020][T10319] ? do_split+0x1e70/0x1f10 [ 308.745529][T10319] ? ovl_fill_real+0x2d0/0x2d0 [ 308.750314][T10319] call_filldir+0x398/0x630 [ 308.754835][T10319] ext4_readdir+0x26f9/0x3490 [ 308.759517][T10319] ? aa_path_link+0x460/0x460 [ 308.764212][T10319] ? __ext4_check_dir_entry+0x350/0x350 [ 308.769769][T10319] ? lock_acquire+0x16f/0x3f0 [ 308.774468][T10319] ? iterate_dir+0xd8/0x5f0 [ 308.778990][T10319] iterate_dir+0x489/0x5f0 [ 308.783416][T10319] ovl_dir_read_merged+0x199/0x500 [ 308.788526][T10319] ? ovl_dir_open+0x310/0x310 [ 308.793212][T10319] ? ovl_fill_real+0x2d0/0x2d0 [ 308.798005][T10319] ? kmem_cache_alloc_trace+0x354/0x760 [ 308.803546][T10319] ? ovl_test_flag+0x12/0x20 [ 308.808118][T10319] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 308.813854][T10319] ovl_iterate+0x75a/0xc60 [ 308.818284][T10319] iterate_dir+0x20d/0x5f0 [ 308.822702][T10319] ksys_getdents64+0x187/0x2e0 [ 308.827444][T10319] ? __ia32_sys_getdents+0x350/0x350 [ 308.832705][T10319] ? ksys_write+0x166/0x1f0 [ 308.837802][T10319] ? iterate_dir+0x5f0/0x5f0 [ 308.842380][T10319] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 308.847815][T10319] ? do_syscall_64+0x26/0x610 [ 308.860893][T10319] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.866952][T10319] ? do_syscall_64+0x26/0x610 [ 308.871611][T10319] __x64_sys_getdents64+0x73/0xb0 [ 308.876627][T10319] do_syscall_64+0x103/0x610 [ 308.881197][T10319] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.887062][T10319] RIP: 0033:0x458079 [ 308.891023][T10319] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.910621][T10319] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 308.919291][T10319] RAX: ffffffffffffffda RBX: 00007f31268b7c90 RCX: 0000000000458079 11:17:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x715371) fchown(r0, 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="fe000000ff00030044740000136a13f9705f2c08346ff2a3429c94fef2e4f1e764324da9eb65cc9e6da5b078fa56690e7a"], 0xc) 11:17:30 executing program 4: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:30 executing program 0: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:30 executing program 3 (fault-call:4 fault-nth:13): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 308.927430][T10319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 308.935382][T10319] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 308.943330][T10319] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31268b86d4 [ 308.951277][T10319] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 11:17:30 executing program 1 (fault-call:4 fault-nth:14): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:17:30 executing program 4: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 309.026653][T10332] FAULT_INJECTION: forcing a failure. [ 309.026653][T10332] name failslab, interval 1, probability 0, space 0, times 0 11:17:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) 11:17:30 executing program 0: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 309.120343][T10332] CPU: 0 PID: 10332 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 309.129402][T10332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.139462][T10332] Call Trace: [ 309.142760][T10332] dump_stack+0x172/0x1f0 [ 309.147103][T10332] should_fail.cold+0xa/0x15 [ 309.151814][T10332] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 309.157639][T10332] ? ___might_sleep+0x163/0x280 [ 309.162522][T10332] __should_failslab+0x121/0x190 11:17:30 executing program 4: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 309.167469][T10332] should_failslab+0x9/0x14 [ 309.171977][T10332] __kmalloc+0x2dc/0x740 [ 309.176226][T10332] ? __lock_acquire+0x548/0x3fb0 [ 309.181192][T10332] ? ovl_cache_entry_new+0x3f/0x550 [ 309.186406][T10332] ovl_cache_entry_new+0x3f/0x550 [ 309.187623][T10342] FAULT_INJECTION: forcing a failure. [ 309.187623][T10342] name failslab, interval 1, probability 0, space 0, times 0 [ 309.191436][T10332] ovl_fill_merge+0x3e5/0xa50 [ 309.191453][T10332] ? do_split+0x1e70/0x1f10 [ 309.191467][T10332] ? ovl_fill_real+0x2d0/0x2d0 [ 309.191494][T10332] call_filldir+0x398/0x630 [ 309.191516][T10332] ext4_readdir+0x26f9/0x3490 [ 309.227241][T10332] ? aa_path_link+0x460/0x460 [ 309.231941][T10332] ? __ext4_check_dir_entry+0x350/0x350 [ 309.237502][T10332] ? lock_acquire+0x16f/0x3f0 [ 309.242268][T10332] ? iterate_dir+0xd8/0x5f0 [ 309.246803][T10332] iterate_dir+0x489/0x5f0 [ 309.251231][T10332] ovl_dir_read_merged+0x199/0x500 [ 309.256358][T10332] ? ovl_dir_open+0x310/0x310 [ 309.261038][T10332] ? ovl_fill_real+0x2d0/0x2d0 11:17:30 executing program 4: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 309.265816][T10332] ? kmem_cache_alloc_trace+0x354/0x760 [ 309.271374][T10332] ? ovl_test_flag+0x12/0x20 [ 309.275968][T10332] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 309.281692][T10332] ovl_iterate+0x75a/0xc60 [ 309.286125][T10332] iterate_dir+0x20d/0x5f0 [ 309.290548][T10332] ksys_getdents64+0x187/0x2e0 [ 309.295318][T10332] ? __ia32_sys_getdents+0x350/0x350 [ 309.300625][T10332] ? ksys_write+0x166/0x1f0 [ 309.305128][T10332] ? iterate_dir+0x5f0/0x5f0 [ 309.309719][T10332] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 309.315211][T10332] ? do_syscall_64+0x26/0x610 11:17:30 executing program 0: r0 = semget$private(0x0, 0x2, 0x8a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x80, 0x1000}, {0x3, 0x7, 0x800}, {0x6, 0x800, 0x1800}, {0x2, 0x7}, {0x4, 0x20, 0x1800}, {0x3, 0x421, 0x800}], 0x6, &(0x7f00000000c0)={r1, r2+30000000}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) [ 309.319894][T10332] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.325958][T10332] ? do_syscall_64+0x26/0x610 [ 309.330645][T10332] __x64_sys_getdents64+0x73/0xb0 [ 309.336023][T10332] do_syscall_64+0x103/0x610 [ 309.340722][T10332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.346636][T10332] RIP: 0033:0x458079 [ 309.350533][T10332] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.370246][T10332] RSP: 002b:00007f79eca68c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 309.378682][T10332] RAX: ffffffffffffffda RBX: 00007f79eca68c90 RCX: 0000000000458079 [ 309.386652][T10332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 309.394623][T10332] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 309.402599][T10332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79eca696d4 [ 309.410664][T10332] R13: 00000000004be888 R14: 00000000004cf4b0 R15: 0000000000000004 [ 309.444262][T10342] CPU: 1 PID: 10342 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 309.453408][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.463463][T10342] Call Trace: [ 309.466759][T10342] dump_stack+0x172/0x1f0 [ 309.471098][T10342] should_fail.cold+0xa/0x15 [ 309.475700][T10342] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 309.481510][T10342] ? ___might_sleep+0x163/0x280 [ 309.486368][T10342] __should_failslab+0x121/0x190 [ 309.491328][T10342] should_failslab+0x9/0x14 [ 309.495833][T10342] __kmalloc+0x2dc/0x740 [ 309.500081][T10342] ? ovl_cache_entry_new+0x3f/0x550 [ 309.505279][T10342] ovl_cache_entry_new+0x3f/0x550 [ 309.510320][T10342] ovl_fill_merge+0x3e5/0xa50 [ 309.515000][T10342] ? do_split+0x1e70/0x1f10 [ 309.519519][T10342] ? ovl_fill_real+0x2d0/0x2d0 [ 309.524309][T10342] call_filldir+0x398/0x630 [ 309.528830][T10342] ext4_readdir+0x26f9/0x3490 [ 309.533537][T10342] ? lockdep_hardirqs_on+0x418/0x5d0 [ 309.538857][T10342] ? retint_kernel+0x2d/0x2d [ 309.543472][T10342] ? __ext4_check_dir_entry+0x350/0x350 [ 309.549028][T10342] ? lock_acquire+0x16f/0x3f0 [ 309.553698][T10342] ? iterate_dir+0xd8/0x5f0 [ 309.558188][T10342] iterate_dir+0x489/0x5f0 [ 309.562590][T10342] ovl_dir_read_merged+0x199/0x500 [ 309.567682][T10342] ? ovl_dir_open+0x310/0x310 [ 309.572336][T10342] ? ovl_fill_real+0x2d0/0x2d0 [ 309.577081][T10342] ? kmem_cache_alloc_trace+0x354/0x760 [ 309.582606][T10342] ? ovl_test_flag+0x12/0x20 [ 309.587176][T10342] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 309.592906][T10342] ovl_iterate+0x75a/0xc60 [ 309.597312][T10342] iterate_dir+0x20d/0x5f0 [ 309.601711][T10342] ksys_getdents64+0x187/0x2e0 [ 309.606471][T10342] ? __ia32_sys_getdents+0x350/0x350 [ 309.611742][T10342] ? ksys_write+0x166/0x1f0 [ 309.616224][T10342] ? iterate_dir+0x5f0/0x5f0 [ 309.620816][T10342] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 309.626268][T10342] ? do_syscall_64+0x26/0x610 [ 309.630927][T10342] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.636987][T10342] ? do_syscall_64+0x26/0x610 [ 309.641648][T10342] __x64_sys_getdents64+0x73/0xb0 [ 309.646650][T10342] do_syscall_64+0x103/0x610 [ 309.651223][T10342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.657093][T10342] RIP: 0033:0x458079 [ 309.660976][T10342] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.680772][T10342] RSP: 002b:00007f31268b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 11:17:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0