fff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r3, 0x7}}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r4, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) 03:41:34 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x10000000]}) [ 335.357879][T18590] bridge2: port 1(dummy0) entered blocking state [ 335.364537][T18590] bridge2: port 1(dummy0) entered disabled state [ 335.405854][T18590] device dummy0 entered promiscuous mode [ 336.046910][ T0] NOHZ: local_softirq_pending 08 [ 336.687307][ T0] NOHZ: local_softirq_pending 08 03:41:37 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, r0, 0x0) sendmsg$AUDIT_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x1, 0x70bd2d, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040) r4 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r4, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:41:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x11000000]}) 03:41:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:37 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r3, 0x7}}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r4, 0x0) 03:41:37 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:41:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x12000000]}) 03:41:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x25000000]}) 03:41:37 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r3, 0x7}}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 03:41:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:37 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept(r1, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000000c0)={0xffffffffffffffff, 0x2}) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:41:37 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) r4 = dup3(r3, r0, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) r5 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x220280, 0x0) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b37401028ea5cddaaa91457764d40059edf213d6676924dc3d00", 0x2, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000380)={0xbc8c, 0x3, 0x58, 0x1a, &(0x7f0000000240)=""/26, 0x18, &(0x7f00000002c0)=""/24, 0x7d, &(0x7f0000000300)=""/125}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x82, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, 0xffffffffffffffff) sendto$inet6(r6, &(0x7f00000001c0)="5249add6b9106f4a73ef1b247fa7fb7af547450e4f45f4ab19afcbceb2ac070806d0ee99dc1a251e8013e22589d3cb8971d4012def0a2519030218cef2ce958983d7cf4b527a06166e155ecc9d1f56cbba8eaee1894eeb223dde0f209cfa6a37cff33c8f287a479eab30f9ac4172be39fa", 0x71, 0x44081, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0xff}, 0x1c) 03:41:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x5c000000]}) 03:41:40 executing program 4: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) r6 = dup2(r5, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:41:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:40 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0x10) 03:41:40 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xe7ffffff]}) 03:41:40 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000001480), 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000080)=""/233, 0xe9}], 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:41:40 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff]}) 03:41:40 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) io_uring_setup(0x8e5, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x8f}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:41:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:40 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 03:41:40 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffdfd]}) 03:41:40 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/108) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, 0xffffffffffffffff, 0x0) name_to_handle_at(r3, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0xcf, 0x785, "21ee7074626cd70fb2d54b49a07fcda1a2379947f8891455b59b34a55935cbe1bc4b76047a4495222743a417f3e3aed6ffb7dabfc510cef35cc68b7c4df1bcb1ee23c3210548a5c724994f60cc3a094d9f67d46bb1330bef1f0b84e82ec03a8a8399b7d030b61a739053eefeca5efe5b23f4cd431eb701b2f983e2d914207b9386487edb2aa3d8510ed84475947bac497792d89f923faf16f79ecd48b01d6d0f19cc0d5e13155d5903e7732ec651b3b434a39af6f84237d6a4295537955375d88f0b4e0188bf6d"}, &(0x7f00000004c0), 0x1000) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) dup3(r7, r4, 0x0) sendmsg$tipc(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="a71665fbc7438c0999dd5e5e305451c693455ae59b67251baf53e89d014d3048cee6b9a4172e249106db5a63658c852e7b35a9efed0b567fa703fc3ad770d80285e1889c596c8d208aae5d72b03dc21d67cbf5b0a6a05a2fe169f21c6e435b90cd7eee250cfcdc55810e1f2e0f6a447d0db885ee6eedc18b1cae4befcfe515de37fecd429f2c7c96d24ba37685c827a6d6aebac892529a96034ee1aa39ae396b98789f41381a9c5519296e58d7e8115f857bbaf3f95f556b6e269605a26ab0116063d361c9d07e1a1d218c59ffe77ec099d752c1107893be4ff98ffbb8862d7008dc0bc2162b3a9186072ce769e6", 0xee}, {&(0x7f0000000240)="ddc26f167e9f35fd32e6e94a72a0b832e23e74113acbd5f422484d93237b60ad5a223f1cf1e99f3f1d678fe90bc0ff9262a9c4c06caf82726fd61d56fc04c70efe6353bc00397d2e4b231c7b78f29ff822ec93b0df7933808cd257d5082fb53558dffa9d54417fb16722", 0x6a}], 0x2, &(0x7f0000000300)="343e88d987aa65cfc4", 0x9, 0x84}, 0x4) 03:41:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:40 executing program 4: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_CAPBSET_READ(0x17, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@dev, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) 03:41:40 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffe7]}) 03:41:40 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) write$P9_RLOCK(r6, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f00000000c0)=0x1d, 0x4) 03:41:40 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 03:41:40 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff]}) 03:41:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:41 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:41:41 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2]}) 03:41:41 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', r10, 0x80, 0x8000, 0x1000, 0x6d2062e0, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x64, 0x0, 0x9d, 0x4, 0x0, @multicast1, @multicast1, {[@noop]}}}}}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x3000c104}, 0x0) 03:41:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:41 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3]}) [ 341.839070][T18744] device dummy0 left promiscuous mode [ 341.856429][T18744] bridge2: port 1(dummy0) entered disabled state 03:41:41 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4]}) 03:41:41 executing program 4: process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000040)={0x7, 'veth1\x00', {0x80000000}, 0x401}) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000003540)={{0x14}, [@NFT_MSG_DELRULE={0x2098, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x370, 0x4, 0x0, 0x1, [{0x2c8, 0x1, 0x0, 0x1, [@meta={{0x9, 0x1, 'meta\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @void}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @val={0x23c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0xcc, 0x3, "044306fa78d1e127c42560cda76e528bc42f89e70734d0885f690fb709cead6bb73fa0897778b80b15a3a4860961ae5c702579e645caa31c4daf1e696d0e9a16a7240c2bd6ba90df2f3503fa9974522c08b931c70538c1df23b078523361540dd9581796dcb31849051d4f95b0850948eadc293ff19d6dc4714d72055a6d4afba1cb5d8f85f7e766c42c06c8ebea59cb3c9a9c1f5c0a7579b56ae70322412c0d676a8b2c25bda1388c806af19d8b9b8898b8eba35b4af8091a8fd31a9683676e8218f55963e17d62"}, @NFTA_MATCH_INFO={0x46, 0x3, "1afdae796d83093efa53efeb4348164cd3b8c280d15f7e3846c41946f16c8ef9f862a6841d2b9537bc4111ef1fe9e79b1a73e7409784ef5bf820ac1204b0b7615af5"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_MATCH_NAME={0x13, 0x1, '/dev/dlm_plock\x00'}, @NFTA_MATCH_INFO={0xef, 0x3, "0c546e9dd2eb6b27e098f40cf7fcc2169d5473c703685f113d7a251290ebeda59c8cd471ae430025afbe85a8868b4746190459b0d23ac3392f03c0985195df7f084d0640c89e690aed52dc691ccabf6ba61b646c2d5a26a538b71deb7915ef9b27dfc74c7f297bc93965a9a543961ed7db5f910c78824fa0d2b327802932b45ed16d74e0955d8545fa21751ca6ec7f8272dd56a4cee0f0cb3e6ca440278ed9eb30f88a2c29446536d9fbf20fde4b4cbeeaa5e9a79b46a48efc7f2f7a3819dbc30aeb3c5746cbbc87714851b63d64ab024bfb876272821a4e59241a60a04fdb451063f994d592ca4e12da28"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x8}]}}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}]}, {0x24, 0x1, 0x0, 0x1, [@tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}]}}]}, {0x10, 0x1, 0x0, 0x1, [@payload={{0xc, 0x1, 'payload\x00'}, @void}]}, {0x64, 0x1, 0x0, 0x1, [@reject={{0xb, 0x1, 'reject\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8}]}}]}, {0xc, 0x1, 0x0, 0x1, [@nat={{0x8, 0x1, 'nat\x00'}, @void}]}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x1ccc, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}, @queue={{0xa, 0x1, 'queue\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x40}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @void}]}, {0xdc, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0xf1fb}]}}, @rt={{0x7, 0x1, 'rt\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @hash={{0x9, 0x1, 'hash\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x1ff}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xaf}, @NFTA_HASH_SEED={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x1535}]}}, @masq={{0x9, 0x1, 'masq\x00'}, @void}, @dup_ipv6={{0x8, 0x1, 'dup\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}, @payload={{0xc, 0x1, 'payload\x00'}, @void}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}]}, {0x1738, 0x1, 0x0, 0x1, [@xfrm={{0x9, 0x1, 'xfrm\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}]}}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x166c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x11e8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x97, 0x1, "29917c4ad243dc4c227a320494dee8caccd9581c1214a1ef2dafa4d069664a60f453b8f6acc4140b42f58898520dd565ea5f6be99a323c75079ce65bcb37c854603c589c24ce7b367c01e3af0236a6d7b84edf19b749c9f413deb0c9ed8c63406a2f19420e91e8440df5680a85c8cbd57f25ac88840d2213b1786a10a0682720b9b5bda26d61e7d6d7449a7d1911c7e336d27f"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x31, 0x1, "b8f7b34851bfab2f2b9bea6403713ad75ebc3626478dc7e581c3016bc8b55da4b15dc32ecd9f91f225366bf228"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x20, 0x1, "eeed27702b152a7f0e0ddbe9fbf0d30ad87371e19939b03a42984025"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x79, 0x1, "ca991ec597ee66cc16702bc146650ada7f7e21eba56ff1745ce878010344a011e809f8624e48430ce3eb2bbb968c8640b3fe223ca5362508737e1c0230a003ecc12c9c1881f5e2520972221e912866fcc82aff04e903d4e05fd1949f942fcd5bc3c90342c10e310c1f14aed0260110eb11e21bd1d4"}]}, @NFTA_IMMEDIATE_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7b, 0x1, "21e7aff2163bc3fcf7397a258193f4882444ee04d877692fb20492e4a306e802a41d91a4ba39e145ec6cd50d34c8bd25fa95be72faa9d006ea38339450cb0417b371a5cde16d8a3a6be2946bbb3c508512b9371311e8202973f58d50a09f015fbe6060853a47b0455fee62da0a8e95ab23af689beb68a5"}, @NFTA_DATA_VALUE={0x69, 0x1, "24e81443c184bbc006ed23a2fcbb5034ec3314a038bc18323526f51dab1092d0a396664119fb5185a7b2ce02ce99b5efef8dcada9aa5d0e042be265f65e90b9099cfbfef55c843785934c81e8a1babb509fc2f0360212a4d8a5296dcd6b0fc674659f0c61e"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "8c54e077989e9c0f7dd665f5089be0fcf7150d4e14a7c86b117698625680e7bbe65a16cf1928642b37f17b2e73c97a1a6676e1a4de58efb4d6146a32fbc265a7ee53226a5d0e28bafa2ee2abf088e776bfecac8747af3e176a573e9dee9fcb5e65623df41a83a91fc52dcccd8a47294a743c5b8ff37afa44159b92699a3fc4568cc522144b737e"}, @NFTA_DATA_VALUE={0x17, 0x1, "3a4e23131d8ed725bd4fb1a4412b14ec248f80"}, @NFTA_DATA_VALUE={0x6a, 0x1, "2932260aff3a9bcea638e47d0a1ab1d41723be80b5e502c29424dce6589473ca4e7ec7c82226b918b35669070798f7627121d86ee8095f99471e62170d090571d6fe3c6278b2b732573e3775dc18a816a35daca487a77f8611868315919832bf87848c876617"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x238, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "da7adb2464b1f3dbfb09e6f51b394f3d190c4c03392383e202b98648e23967d5bdc45d493785619e28ce48ecf003"}, @NFTA_DATA_VALUE={0x87, 0x1, "68f21629c47e902b4d9741bc87e9e2572880114ad1374a29e340ce195bec3fc833173034ad70f0dfbf7e11f78641604a07cafec26e598ecf88c4040dd699dba4fb5a789708abdf77c5beaf6f04a2b04f33d5d5df14a1bf7260fcd555d5739a250374a77e1265e47fd5bc2b66800570a508b0b7c6d8a2a9c95ffd621eff853a58ee3fa9"}, @NFTA_DATA_VALUE={0x9e, 0x1, "f8d863f16a398f064c162130b0c3f9f5ffa0d9d7084993faf07d9e9d5ee7a842e5624d026dcb1fd9bad9a50d303d4d3bbcb688eda89064ee337f6a68af73664f1af55ef66000c089129f5564cbd6e3d098cda37f4464ef56b83ba4370e93041214dfb4a8f35c378148b9f97803d809e1ae9431d5a0af6384be11b67ea067e688008087443324826365ea2c36129238f3b8a9b754ea3f633fe367"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "7fc20222a3fde14f4ee9e3daa1595e791ad1c7f9e9a0b0695f3c7c"}, @NFTA_DATA_VALUE={0x5e, 0x1, "1ac4e6929875a71252c603ec3d57b84c9c1a8e06565e1e86735505998329232725abd911a3173933d4fba8b710bcbf66a4e302e76f8db4fd96bffda1a3079bb9837eab1361a918459c867201a6d5d870f2644600bf9a08a874b6"}]}]}}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x4}}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}]}}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}]}, {0x140, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @void}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}]}}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x80000001}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}]}}, @redir={{0xa, 0x1, 'redir\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x9}]}}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xbd}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3c}]}}]}, {0x3c, 0x1, 0x0, 0x1, [@ct={{0x7, 0x1, 'ct\x00'}, @void}, @socket={{0xb, 0x1, 'socket\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}, @ct={{0x7, 0x1, 'ct\x00'}, @void}, @fib={{0x8, 0x1, 'fib\x00'}, @void}]}, {0xc0, 0x1, 0x0, 0x1, [@notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}, @match={{0xa, 0x1, 'match\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6f}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x67}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @dup_ipv6={{0x8, 0x1, 'dup\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}]}, {0x78, 0x1, 0x0, 0x1, [@notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8}]}}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}]}, {0x100, 0x1, 0x0, 0x1, [@limit={{0xa, 0x1, 'limit\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}]}}, @payload={{0xc, 0x1, 'payload\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}]}}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @void}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_MODE={0x8}]}}]}, {0xb0, 0x1, 0x0, 0x1, [@queue={{0xa, 0x1, 'queue\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x8}]}}, @hash={{0x9, 0x1, 'hash\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3ae1353f}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x200}]}}, @queue={{0xa, 0x1, 'queue\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @void}, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}]}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x7a}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x0, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6007}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x39, 0x7, 0x1, 0x0, "7523812e66670b0f929983f08bbcc2d4b11c6a178b1314a892f690a67634e0175abc99cc07da42bd9507efe98dad4fb6acddd17cba"}]}], {0x14}}, 0x2174}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 341.917026][T18744] bridge3: port 1(dummy0) entered blocking state [ 341.923461][T18744] bridge3: port 1(dummy0) entered disabled state [ 341.945078][T18744] device dummy0 entered promiscuous mode 03:41:41 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:43 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000000c0)={0xa0, 0x2, 0x6, 0xc2, 0x7}) mknodat(r2, &(0x7f0000000100)='./file0\x00', 0x8000, 0x5) 03:41:43 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r7, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r8}, 0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x7, r8}, 0x8) dup3(r6, r3, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:41:43 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5]}) 03:41:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000080)={0x1, 0x4, 0x1c08}) r4 = clone3(&(0x7f0000000000)={0x9c029000, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0xfffffd56) process_vm_writev(r4, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500)=[{&(0x7f00000024c0)=""/4110, 0x100e}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x82, 0x0, &(0x7f0000000180)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r8, r7) r9 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 03:41:43 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:43 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 03:41:43 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6]}) 03:41:44 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) dup2(0xffffffffffffffff, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) userfaultfd(0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r4, r0, 0x0) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f00000000c0)=0x1, 0x4) r5 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:41:44 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:44 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7]}) 03:41:44 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x8]}) 03:41:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:44 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x9]}) 03:41:46 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:41:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:46 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xa]}) 03:41:46 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 03:41:46 executing program 4: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r5 = socket(0x11, 0x3, 0x0) bind(r5, &(0x7f00000001c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1c, r4, 0x301, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000042c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f00000043c0)={&(0x7f0000004300)={0x68, r7, 0x300, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'batadv\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, '-wlan1GPLGPL^:\xa1)+-\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r7, 0x20, 0x70bd2b, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="71080001", @ANYRES16=r7, @ANYBLOB="000326bd7000fddbdf250200000006000b001100000014000600fe80000000000000000000000000002e0800040003000000080002000700000006000b000000000008000400000000"], 0x3}, 0x1, 0x0, 0x0, 0x8800}, 0x800) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r7, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '-mime_type\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '/dev/net/tun\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x50}}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x54}}, 0x80) 03:41:46 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xb]}) 03:41:47 executing program 1: ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x82, 0x0, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000140), &(0x7f00000001c0)=0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x608200, 0x0) accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x800) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0xfffffffffffffffb, 0x1c1541) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000240)=0x80) 03:41:47 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xc]}) 03:41:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:47 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xd]}) 03:41:47 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f0000003540)=""/4096, 0x1000}], 0x1, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000000)="a817a6b4e6145950bfdb54ec5f01066751892a59c60d9ef2363411f45ae3e555b53870") ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:41:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x82, 0x0, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'syzkaller0\x00', {0x2, 0x4e20, @private=0xa010102}}) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000380)={0xfff}, 0x4) dup2(r4, r3) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000001c0)={0xff, {{0xa, 0x4e21, 0xfffffffb, @loopback, 0xfffff004}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x1, @empty, 0x1}}, {{0xa, 0x4e21, 0x5, @private2, 0x24e}}]}, 0x190) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000140)=0x1, 0x4) 03:41:47 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe]}) 03:41:47 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000000)) 03:41:47 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:41:47 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) 03:41:47 executing program 4: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x440, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000080)={0x6, 0x4, 0x5, 0x7, 0x2, 0x3, 0x7, 0x9}, &(0x7f00000000c0)={0x80000000, 0x7, 0x31d, 0x10001, 0xde4, 0x2, 0x8c, 0x10001}, &(0x7f0000000100)={0x9, 0x3, 0xfffffffffffffffd, 0x3, 0x1fe000, 0x6, 0x3, 0x3}, &(0x7f0000000180)={r4, r5/1000+60000}) 03:41:47 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x10]}) 03:41:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:47 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000002500)=""/4083, 0xff3}, {&(0x7f0000000000)=""/163, 0xa3}], 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000028c0)={0x30, r4, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "6b9fc579f4f3131692b4ebf6ceb0d73019"}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000011c0)={0x214, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8b}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92cf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5924}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b5a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf36e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc6eb}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @private2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80, @ipv4={[], [], @multicast1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) 03:41:47 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x11]}) 03:41:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000780)) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000740)=0x4) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x4}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_aout(r7, &(0x7f0000000100)={{0xcc, 0x2, 0x4, 0x257, 0x248, 0x80000000, 0x355, 0x4}, "4eba240de43e9006b70bb6bde573545f44", [[], [], [], [], [], []]}, 0x631) 03:41:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:47 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000001740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r3], 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 03:41:47 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x12]}) 03:41:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:48 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:41:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:48 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x25]}) 03:41:48 executing program 4: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000030649500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r1}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='\'(\x00', r1}, 0x30) process_vm_writev(r2, &(0x7f0000002480), 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/231, 0xe7}, {&(0x7f0000000440)=""/130, 0x82}, {&(0x7f0000000500)=""/162, 0xa2}, {&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000000780)=""/232, 0xe8}, {&(0x7f0000000680)=""/192, 0xc0}], 0x6, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:41:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x33}, 0x432c}}, [0xffffffffffffffff, 0x7f, 0x1, 0x7, 0xfffffffffffffff7, 0x80, 0x4, 0x3, 0xb687, 0x1, 0x7f, 0x3, 0x6, 0xb6, 0x7f]}, &(0x7f0000000100)=0x100) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r2, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000140)={0x9, "a5d20e1eaa4d039ddcc0a098681e1b1b3e856cf060cf4fe60d3b920d7a6ec1d4d37fd3b673b51c51986253ee1ae30c9495554748af1320a780923dee0feb2065"}) r7 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f00000011c0)={0x7f, 0x7, 0x9, 0x8, 0x20, 0x7, 0x8, 0x2, 0x7, 0x7fffffff, 0x101, 0x9, 0x7, 0x800, 0x3ff, 0x4, 0x7, 0x9, 0x1, 0x0, 0xffffffff, 0x1, 0xffffffffffff0000, 0x0, 0xfffffffffffffffe, 0x3}) 03:41:48 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5c]}) 03:41:48 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe7]}) 03:41:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0xfffffffe}) 03:41:50 executing program 4: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x8f) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:41:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:50 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x300]}) 03:41:50 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1406, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001001}, 0x20048040) r6 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:41:50 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:41:50 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x500]}) [ 351.585505][T18976] IPVS: length: 143 != 8 03:41:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:51 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x600]}) 03:41:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:51 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x700]}) 03:41:51 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)={r2}, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={r2}, &(0x7f0000000380)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r1) dup3(r4, r0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r6, 0x1}}, 0x18) r7 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) ioctl$int_in(r7, 0x5452, &(0x7f00000000c0)=0x7) 03:41:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone3(&(0x7f0000001680)={0x1ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:51 executing program 4: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f0000003540)=""/4096, 0x1000}], 0x1, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3) 03:41:51 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x900]}) 03:41:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(0x0, 0x0) [ 351.858873][T19009] IPVS: length: 143 != 8 03:41:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(0x0, 0x0) 03:41:53 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xa00]}) 03:41:53 executing program 4: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000002500)=""/4083, 0xff3}, {&(0x7f0000000000)=""/163, 0xa3}], 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000028c0)={0x30, r4, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "6b9fc579f4f3131692b4ebf6ceb0d73019"}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000011c0)={0x214, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8b}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92cf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5924}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b5a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf36e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc6eb}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @private2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80, @ipv4={[], [], @multicast1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) 03:41:53 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:41:53 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x202, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r2, &(0x7f0000002480), 0x0, &(0x7f0000000140), 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x15, &(0x7f0000000000)="589aaba1da4a24aa96304432a0e9bf57ce730ed757", 0x43, 0x0, &(0x7f0000000040)="141234aa10b93fee0d83e9ad881bf2c7278bd534d23cedb574fe06ac4bf5efee3e9b35aaf7c906359073949e2ca96524cba6ea1808ad5c25bef5a65ed6db2ab5088589"}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(0xffffffffffffffff, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 03:41:53 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xb00]}) 03:41:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(0x0, 0x0) 03:41:54 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r3, 0x7}}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 03:41:54 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xc00]}) 03:41:54 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:41:54 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000000)={0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x33, 0x33, 0x7, [@datasec={0x4, 0x2, 0x0, 0xf, 0x3, [{0x5}, {0x5, 0x9, 0x7fffffff}], "c65053"}, @func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x30, 0x30, 0x5f, 0x61]}}, &(0x7f0000003540)=""/4096, 0x53, 0x1000}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={r7, 0x0, r8, 0xfffffff7}) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) 03:41:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:54 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xd00]}) 03:41:54 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x0, {0x14}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x3}]}, 0x34}, 0x1, 0x9effffff00000000}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@private, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x118, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2ca0dad29d1459b2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x24000080}, 0x800) 03:41:54 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:41:54 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r3, 0x7}}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 03:41:54 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe00]}) 03:41:54 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 354.977374][T19067] device dummy0 left promiscuous mode [ 354.994857][T19067] bridge2: port 1(dummy0) entered disabled state [ 355.047069][T19067] bridge4: port 1(dummy0) entered blocking state [ 355.058267][T19067] bridge4: port 1(dummy0) entered disabled state 03:41:54 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1100]}) 03:41:54 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r3, 0x7}}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) [ 355.096163][T19067] device dummy0 entered promiscuous mode 03:41:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:57 executing program 1: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000000140)=@assoc_value={0x0, 0xff}, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="10000000001a000008000a00de56d9f876ba8d8a77697a", @ANYRES32=0x0, @ANYBLOB="2137d964897a16c18437a263b2471e6f5b6e425d22760b0680cfec8fde7229a54442cc022d7357c9b666af38fa8969edd2b022aa4a00fcffffffffffff6cd9abc018bbc4957778b5da85e9c5f8342d1145951295bf473a087df2018d5d28ab0ea83e62a922"], 0x28}}, 0x4004000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r4) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f00000000c0)={r5}) r6 = dup(0xffffffffffffffff) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262c00776424dc3d00", 0x0, 0x0, 0x3, 0x4, 0x4}) 03:41:57 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:41:57 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1200]}) 03:41:57 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:41:57 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0x10) 03:41:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000000)={0x3, "ecb6e35199cedf467034ace82f5c6775320085f06e241d1d9e2f00", 0x2, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x14, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYBLOB="000000df2ed431fde70cb728873900"], 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={r7, 0x81}, &(0x7f0000000080)=0x8) r8 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r8, &(0x7f0000002480), 0x0, &(0x7f0000003500), 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(0xffffffffffffffff, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) 03:41:57 executing program 3: setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080)={0x7, 0x2640, 0x6}, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = dup2(r0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = clone3(&(0x7f00000000c0)={0x102000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0xfffffffffffffeec) process_vm_writev(r6, &(0x7f0000000040)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000000000)=""/30, 0x1e}], 0x2, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x4000, 0x0) write$P9_RWALK(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="3d0000006f0200040000200000000400000000000000810300000006000000000000002003000000070000000000000020040000000000000000502000c6c5594c79c9836ffa27efb849971e8e6eded77ae24e4e9fa7c14be855332714c0d46ae39c5efe7894392c4362486061e8d90d3971c41d5a3ea114060a5bd86ea136ce27a22309405f26b82b0715d14311231e907154e9e68bfa6fb086f095c7fda7f13bb1cc5740e767c0130351a6c8867745cdb83ecf759a2b010e4d4d71989052512b717d78cd33b884a2ec9db2638b4debd0856239b06c6cb8a3df9f7b14a9cbb6edb456b838c3f89131a7701ddfc368bed1ddd802834d58d7c893e6aadeb7e307c4a939f11f86a1d389333484444e02248e609a525258b6a58cb4f42eb194c9a676b0cdf9138626b11a17b619b2f28b62359df816ff84b322c70e9dd11f8c8c85"], 0x3d) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0xd1) 03:41:57 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2500]}) 03:41:57 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x408000) dup2(r0, r2) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f00000000c0)="29a84df26693a2504e50e4765cf374ab59de716e0063e68f0af13f35be8903bad87f75f7e3f0518175fad295f051a6dae5714f99e4edbedef37d021557a9a681d6e25573064aca2bd74e26c14054dc0881d529a05e8f1d9964cd6c0f250eb0ca50ac6e876ea62111a3a6e96b40093916ee8fa83fe781a6734c667ff8d835dfc60663a2bd834900290ffea02875990548be2eaff28b2c480a990ed7739dd7b95a62c97cb3445eb7ea9aea6398d43da7f452bc79cb663c7217fe35c0f493e64f971590604496646ed71b133d9d9c1b8e0d10deee68ebbc7ab3475976b68820548dd2fc71") 03:41:57 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 03:41:57 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:41:57 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5c00]}) 03:41:57 executing program 2: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)) r5 = dup2(r4, r4) dup3(r5, r2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)) r6 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:41:57 executing program 1: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x24000010) 03:41:57 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe7ff]}) 03:41:57 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 358.114975][T19151] device dummy0 left promiscuous mode [ 358.142429][T19151] bridge4: port 1(dummy0) entered disabled state 03:41:57 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfd]}) 03:41:57 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) [ 358.217897][T19151] bridge5: port 1(dummy0) entered blocking state [ 358.229285][T19151] bridge5: port 1(dummy0) entered disabled state [ 358.250702][T19151] device dummy0 entered promiscuous mode [ 358.271428][T19158] device dummy0 left promiscuous mode [ 358.277156][T19158] bridge5: port 1(dummy0) entered disabled state 03:42:00 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:00 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffe7]}) 03:42:00 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="550000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x40, 0x10, 0xa04, 0x0, {{0x18, 0x4, 0x0, 0x5, 0x60, 0x68, 0x0, 0x2e, 0x0, 0x0, @local, @loopback, {[@lsrr={0x83, 0x7, 0x35, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x44, 0xf3, 0x1, 0xc, [{@multicast1, 0x6}, {@multicast2, 0x4}, {@multicast1, 0xfffffc00}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x80}, {@remote, 0x55a}, {@dev={0xac, 0x14, 0x14, 0x3c}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r1, 0x22, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7a91}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x44004010}, 0x20000800) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:00 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 03:42:00 executing program 3: r0 = clone3(&(0x7f00000000c0)={0x4200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r6) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r8, 0x0) setfsgid(r8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000000)={0xa0, 0xffffffffffffffda, 0x7, {{0x0, 0x3, 0x81d, 0x400, 0x20, 0x9, {0x0, 0x40, 0x8, 0x0, 0x0, 0xa1, 0xe478, 0x80000000, 0x6, 0x71, 0x7c, r6, r8, 0xfff, 0x2}}, {0x0, 0x10}}}, 0xa0) 03:42:00 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1000000]}) 03:42:00 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:00 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2000000]}) 03:42:00 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:00 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$midi(r2, &(0x7f00000000c0)="0337d69eb5d0746ba4523f36fda3ed06e8e7dc0c2d33b929bad77c3f7547d9feb9bb6a0f429e7e175b10d628772b6f29a21a438e7df1d5b9954624c8e1d08958da8bfc137fc418ae053768e65a35dc7b197d6f81b6fcfbb265a06c5140fde2af06060874d248a09a123f6d0fe0cecfc66c", 0x71) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000140)={0x7, 0x4, 0x2, 0x7, 'syz1\x00', 0x4a4}) 03:42:00 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000011c0)={&(0x7f00000000c0)={0xfc, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc4df}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x6}}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 03:42:00 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f00000001c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1c, r5, 0x301, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xb6238c99b975b61e}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4040) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r8 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x800000, 0x4000) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000140), 0x4) 03:42:00 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3000000]}) 03:42:00 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:00 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4000000]}) 03:42:01 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 03:42:01 executing program 2: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x6, 0x7729, 0x0, 0x44a, 0xffffffffffffffff, 0x80000000, [], r4, r6, 0x4, 0x0, 0x5}, 0x40) r7 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x1f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f3, &(0x7f0000000080)) 03:42:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:01 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@null=' \x00', 0xd, 'bridge_slave_0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:42:01 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400202) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x14, &(0x7f0000000000)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r7, 0x400000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, 0xffffffffffffffff) dup3(r10, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2800000}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x20000009) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r8, 0x0, 0x10}, &(0x7f0000000180)=0xc) 03:42:01 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5000000]}) 03:42:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:01 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f00000001c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1c, r5, 0x301, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xb6238c99b975b61e}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4040) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r8 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x800000, 0x4000) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000140), 0x4) 03:42:01 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6000000]}) 03:42:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:01 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f00000001c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1c, r5, 0x301, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xb6238c99b975b61e}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4040) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r8 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x800000, 0x4000) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000140), 0x4) 03:42:01 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7000000]}) 03:42:02 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:02 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4000000000400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000000100)=@sack_info={0x0, 0x101, 0x5}, &(0x7f0000002000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f00000000c0)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r7) dup2(r6, 0xffffffffffffffff) 03:42:02 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x8000000]}) 03:42:02 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f00000001c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1c, r5, 0x301, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xb6238c99b975b61e}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4040) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r8 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x800000, 0x4000) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000140), 0x4) 03:42:02 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f00000001c0), 0x0, &(0x7f0000000080)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000000140)=@sack_info={0x0, 0xffffffe0, 0x8}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0)={0x0, 0x1f}, 0x2) r6 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, &(0x7f0000000000)=@builtin='builtin_trusted\x00') r7 = add_key$user(&(0x7f00000012c0)='user\x00', &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)="1b1c17141238f8e28a8a812b9c27d0e7cd6850b2133db4d6658d302c3bbb1dd6c97c85d2ff9cde2f8a6ef637bf6a5e0c5aafd4dfc3da7b33df1c7beadf113c2637de2af7", 0x44, r6) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001280)=[{&(0x7f00000001c0)="23fc9e2ceed2c57bc8d9415c866d519bd9b0537107e06007c3f2761aade33c051a0182cdf3d31c8b7eda8dcbffc37213dc45ede8b589ea058fee78efdb90a336aa20693c9065a8546433b44572f3a58092bb107a13b068ec2e088112478eddabca767c78d070be7f2e30a93883b6a81b03a6b1192184ab71f8667b7bebaa4915ae8a4da1ab230fe9072f41", 0x8b}, {&(0x7f0000000280)="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", 0x1000}], 0x2, r7) openat$cgroup_ro(r5, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) r8 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 03:42:02 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:42:02 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x9000000]}) 03:42:02 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f00000001c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1c, r5, 0x301, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xb6238c99b975b61e}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4040) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x800000, 0x4000) 03:42:02 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xa000000]}) 03:42:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:02 executing program 1: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="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"], 0x28}}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r5, 0x2, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'ipvlan0\x00'}}) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000000280)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59ecf213d6676924dc3d", 0x0, 0x0, 0x0, 0x10}) 03:42:02 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xb000000]}) 03:42:02 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:02 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f00000001c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1c, r5, 0x301, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xb6238c99b975b61e}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4040) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:02 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xc000000]}) 03:42:02 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000180)=0x1) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xffffff01}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0xc2) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x108) ioctl$sock_bt_cmtp_CMTPCONNDEL(r5, 0x400443c9, &(0x7f0000000040)={@fixed={[], 0x12}}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000011c0)={0x5, 0x1ff, 0x5, 0x0, 0x5, "d54c7197b748536e5ad6460d46ad027bf581f2", 0xfffffff7, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000028c0)={0x30, r7, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "6b9fc579f4f3131692b4ebf6ceb0d73019"}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000004780)=ANY=[@ANYBLOB="14120000", @ANYRES16=r7, @ANYBLOB="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"], 0x1214}, 0x1, 0x0, 0x0, 0x80}, 0x40014) 03:42:02 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xd000000]}) 03:42:02 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r5 = socket(0x11, 0x3, 0x0) bind(r5, &(0x7f00000001c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1c, r4, 0x301, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xb6238c99b975b61e}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4040) 03:42:02 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe000000]}) 03:42:02 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000001200)=[{&(0x7f00000001c0)=""/4091, 0xffb}, {&(0x7f0000000000)=""/245, 0xf5}, {&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f00000011c0)=""/14, 0xe}], 0x5, &(0x7f0000003500), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup2(r1, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:42:03 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x10000000]}) 03:42:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:05 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) pwrite64(r0, &(0x7f0000000100)="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", 0x1000, 0x5) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) clock_getres(0x3, &(0x7f00000000c0)) 03:42:05 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r5 = socket(0x11, 0x3, 0x0) bind(r5, &(0x7f00000001c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1c, r4, 0x301, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) 03:42:05 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) r6 = dup2(r1, r1) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:42:05 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x11000000]}) 03:42:05 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:05 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x12000000]}) 03:42:05 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1c4, 0x7ff, r0, 0x0, &(0x7f00000000c0)={0x9c090c, 0x4, [], @value=0x80}}) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000140)) r7 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f00000001c0)={0x1, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x100, 0x0, 0x4000}) 03:42:05 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x25000000]}) 03:42:05 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r3 = socket(0x11, 0x3, 0x0) bind(r3, &(0x7f00000001c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) 03:42:05 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5c000000]}) 03:42:05 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x7fff]}, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000000)) 03:42:05 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r3 = socket(0x11, 0x3, 0x0) bind(r3, &(0x7f00000001c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 03:42:05 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe7ffffff]}) 03:42:05 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff]}) 03:42:05 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socket(0x11, 0x3, 0x0) 03:42:06 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:06 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') 03:42:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) setfsgid(r3) lchown(&(0x7f00000011c0)='./file0\x00', r1, r3) r4 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x48400, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08002cbd7000fddbdf250a0000000800370065ad1ec9050008000100000008000200040000000000000000006e8004000200040002000400010032040002000400010004000200"/86], 0x5c}, 0x1, 0x0, 0x0, 0x24048984}, 0x24008084) process_vm_writev(r4, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 03:42:08 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffdfd]}) 03:42:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:08 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) 03:42:08 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000000c0)={0x6, 0x5, 0x1, 0xfffff3a4, 0x0, 0x81, 0x1ff}) 03:42:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:08 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:42:08 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0xfffffff9) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r1, 0x0) ptrace$setregs(0xd, r0, 0x80000000, &(0x7f0000003540)="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") ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f0000000000)=""/65) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 03:42:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:08 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) 03:42:08 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffffffe7]}) 03:42:08 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x7f, 0x4, 0x20, @initdev={0xfe, 0x88, [], 0x3, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7860, 0x9, 0x2}}) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f00000003c0)) bind$packet(r4, &(0x7f0000000380)={0x11, 0xf7, r5, 0x1, 0x8}, 0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="ffff3493", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000280)=0x14) dup3(r7, r1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f00000000c0)={0x80fc, {{0xa, 0x4e22, 0x9, @private2, 0x7f}}, {{0xa, 0x4e21, 0x2b0, @dev={0xfe, 0x80, [], 0x2b}, 0x8001}}}, 0x108) 03:42:08 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 03:42:08 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffffffff]}) 03:42:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:08 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) 03:42:08 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000000c0)={0x6, 0x5, 0x8, 0x200, 0x6, "bf3a3d00c728ad3c54a0dcb53710ccb5d063b6"}) r7 = dup2(r3, r2) dup3(r7, r1, 0x0) ioctl$TCXONC(r7, 0x540a, 0x1) 03:42:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:09 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) 03:42:09 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000000)="1c3e199f32806a00589da220a350d9d1c8255545b26dbaba071927679ca52ff4d0f610655e96de46db62d515794297dd56ceec58e12d633b64f61fc91f66ff61599aa9125c23fbf3411e91b0921992d71016c53f5949523f7f437adc0ef2df4ad8100b1c") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:42:09 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:09 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) 03:42:09 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) 03:42:11 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80) fallocate(r1, 0x8, 0x1, 0x2) 03:42:11 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:11 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) 03:42:11 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:42:11 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:11 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$phonet(r2, &(0x7f00000000c0)={0x23, 0x0, 0x40, 0x7f}, 0x10) 03:42:11 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) 03:42:11 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x5}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r6, &(0x7f00000000c0)={0xf612e79580412e10}) 03:42:11 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:11 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) 03:42:11 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat(r4, &(0x7f00000000c0)='./file0\x00', 0x100, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000100)={0x9, 0x0, {0x2, 0x2, 0xffff, 0x2, 0x8000}, 0x9}) 03:42:11 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x5, 0x7, 0x100, 0x429, 0x1, 0x7, [], 0x0, r5, 0x3, 0x1, 0x5}, 0x40) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) r7 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x800, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="d3ff7bf69000cd3cc32e23a8d78f723013096ced7fb375b531ef3ef73d5a18b861bccee0ac9b218f341593a98472a4a1c3f7696a718800148ff51e14d21c9e4129943148f3ba9075719a1b56aaaae38c64322a49a34e83d455c70c137b7cfb44d4da29a9e2df9161df495e4a7ff315aeb618d6c75e185f6f7ca6ff915c852fe94a5823e5a383f50beb0574f9c0dd64753be89b93109793df9b492e763a0e0b3361d33ac6c21d1cbfb373cd29115434c602", @ANYRES16=r8, @ANYBLOB="000426bd7000ffdbdf2501000000000000000841000000140018fffffff87564703a73797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x48044}, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) 03:42:11 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:11 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) 03:42:11 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) 03:42:11 executing program 3: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = getpgid(r0) ptrace$setopts(0x4200, r7, 0x8, 0x2) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) r9 = dup2(0xffffffffffffffff, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 03:42:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:12 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) 03:42:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:14 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) 03:42:14 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:42:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:14 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f0000000140)={0x2000, 0x8, 0xffffffff, 0x9}) dup3(r4, r1, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f00000000c0)={0xfff, "c2cae7d76df367827ffb600f5ee6e47ed5d1000000000000001e000400", 0x3, 0xff8, 0x4, 0x7, 0x8}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:14 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0xfffffffffffffffb, 0x200042) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e24, 0xaa0d, @mcast1, 0x98895c5}, {0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80}, 0x55, [0x7ff, 0x8001, 0x9, 0x1f, 0x0, 0x9, 0x9, 0xda3f]}, 0x5c) 03:42:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:14 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = getpgid(r0) ptrace$setopts(0x4200, r7, 0x8, 0x2) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) r9 = dup2(0xffffffffffffffff, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 03:42:14 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:42:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:14 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000180)=""/4096) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0xb, 0x4, 0x0, 0x1, 0x7, 0xffffffff, 0x0, 0xfffffffa, 0x481, 0xda, 0x4, 0x0, 0x2000000, 0x6, 0x6, 0x1, {0x81, 0xdbf}, 0x8, 0x5}}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:15 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000240)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_pts(r1, 0x8000) ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f0000000200)={0x5, 0x0, 0x6, 0x4031, 0xd84f}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r4) dup3(r7, r2, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x800000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r8, 0xc02c5341, &(0x7f0000000100)) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x2}) 03:42:15 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = getpgid(r0) ptrace$setopts(0x4200, r7, 0x8, 0x2) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) r9 = dup2(0xffffffffffffffff, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 03:42:15 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:42:17 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB], 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x28}}, 0x8000) 03:42:17 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x0) 03:42:17 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = getpgid(r0) ptrace$setopts(0x4200, r7, 0x8, 0x2) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) r9 = dup2(0xffffffffffffffff, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 03:42:17 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:17 executing program 0: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000000c0)) r5 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f0000000040)={0x800000, "6d71b374d3e08ea5cd54262e00f764d4007425e657cc59edf213d6676924dc3d", 0x1000}) 03:42:17 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x5]}) 03:42:18 executing program 3: r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4082, 0xff2}], 0x1, &(0x7f0000003500), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x14, &(0x7f0000000000)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)=@sack_info={r7, 0x0, 0x6}, &(0x7f0000002000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r4) dup3(r9, r3, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r9, 0xc06855c8, &(0x7f0000000080)={0xf, 0x7c1236a6, {0x52, 0x100, 0x400, {0xce95, 0x4}, {0xa2, 0x1}, @cond=[{0x8, 0xb8, 0x8, 0x2, 0x5, 0x5}, {0x4, 0x4, 0x5, 0x388e, 0x1, 0x4}]}, {0x51, 0x7c46, 0x80, {0x5, 0xa43}, {0x27, 0x20}, @cond=[{0x800, 0x0, 0x1f, 0x0, 0x3, 0xd55}, {0x6, 0x4, 0x40, 0x200, 0x8, 0x9}]}}) fsopen(&(0x7f0000000040)='fuse\x00', 0x0) 03:42:18 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x14, &(0x7f0000000000)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x14, &(0x7f0000000000)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f00000001c0)=@sack_info={r4, 0x6, 0x7}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r8, r1) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xb165, @remote, 0x8}, 0x1c) 03:42:18 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = getpgid(r0) ptrace$setopts(0x4200, r7, 0x8, 0x2) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) dup2(0xffffffffffffffff, r6) 03:42:18 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xff) 03:42:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$vhost_msg(r1, &(0x7f0000000200)={0x1, {&(0x7f00000000c0)=""/15, 0xf, &(0x7f0000000100)=""/253, 0x1, 0x1}}, 0x48) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:18 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xff) 03:42:18 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x3, "6d712bb4ce198e0000008000f0ffffff0000000000000000000000800000ce00"}) [ 378.900277][T19709] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mknodat(r3, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 379.019945][T19719] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:18 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:20 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xff) 03:42:20 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000240)={0x2, "6d71b374ce0000000054262e007764d4007425e65fcc59edf213d667692cdc3d", 0x800, 0x4, 0x22000}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000000)=@builtin='builtin_trusted\x00') add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000000c0)={0x80000001, "3a25dfb1ae23eae9e98aa22cf42bb31963ca5f902c57299702be8b0509c0325a", 0x200, 0x3, 0x7fffffff, 0x2, 0x1}) 03:42:20 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) [ 381.731769][T19746] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:21 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = getpgid(r0) ptrace$setopts(0x4200, r7, 0x8, 0x2) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) dup2(0xffffffffffffffff, r6) 03:42:21 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) perf_event_open(&(0x7f00000002c0)={0x4, 0x70, 0x5, 0x7, 0x4, 0x7, 0x0, 0x2cd6, 0x1100, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x94, 0x0, 0x3, 0x2, 0x8, 0x6, 0x1000}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x8, "bb03c12136598efce39e3434a4627563c26b2d3c1364d73fc0220494e3da83cf", 0x3, 0x1000, 0x4, 0x1427, 0x2, 0x4, 0x4, 0x5400}) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f00000003c0)={0xb, 0x1, 0x24, "3ffb27c16f6e34ed0797513986ecd4fde79e64cf57fafe5407ec9481bcf8ab511ca90269d02ed270f465a89a10f9659e63d1fa5cdf7575ccf31573ab", 0xf, "55b6c101e1445a8d2b45e2dd614a580440d393e0b83d83e4e7df7060e9b013e717f4019456cb842b869617198e4e0c6ffd2e6b39a775410bac0f97a0"}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d710800000000000000f2ffffff000000e90f00000000000010000000000008"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) dup3(r7, r4, 0x0) lseek(r7, 0x4, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000380)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000340)=""/51, &(0x7f00000001c0)=0x33) 03:42:21 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video36\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r3}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r3}, 0xc) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128}) mknod(&(0x7f0000000100)='./file0\x00', 0x800, 0xb93) 03:42:21 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:42:21 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000002040)={{0x14}, [@NFT_MSG_DELSETELEM={0x289c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2868, 0x3, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x67, 0x1, "bc544961c977bbff45857a4d3e8d0c93e69ed9de7e56ba0c360be29130470dec744fd5989df4bd818d4ba483c9eef124e7bb28391878774e934670928581b7f45455399c10c5e72765916c2a6a9461da959b22cacdb5440243eaf11e18e611549e69f3"}]}, @NFTA_SET_ELEM_USERDATA={0x23, 0x6, 0x1, 0x0, "5136312a9981af61bdbcbaa3a5d963debb73fe81fdecb7a652b149e755c851"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x410, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x200, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb3, 0x1, "6d4c6ea27b36e0b0c1ce92b4000c902e6b05c3f4a67f11324bce99b01e6ebe31cac74aa432d683e4931dbe470b6638de136ecbef6735e05896214609b334e8655326effdbd234861e5d38230339ab07caa4eb74aeebb2840f6e1d3b1d0945d5b65096dad96c7f44756d61d557a209a6bdfd4b527d41c59e77bf39949b32671279bd288bcbd1e48b42a22babd868249d32ce9ee52865a0a848af7ed6b8c8061808f8a1a5472c89a4a673023a013f226"}, @NFTA_DATA_VALUE={0xc3, 0x1, "cc1402ecd17bb41ca1837d295ece850f2bfc2fffb9dd3052b7f13e1ccd4b379d0e343f5723aaf4137f16aa7d78d7024c0f5bb888b8bbc6684233ad4c5122d16564c569cd484de769aa4b902e4e7d96a7031efbe86239743723252aee398b50e5b50c7222f1409a51513b7df5a4855dcb2ac6035d4391c2db97e9159554abab76c6f805ea2ce73a3e7b655a95237066e03cbb3f2e98d3b8ad0bd876654867976e57ee6a5fae90d48dec0afab107e738c4c86e333f394c760552d5ce0a971287"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x21, 0x1, "80d40f94a2b056a7dd4ecefd7f9148e00df04f0c2df01322ee6121504c"}]}, @NFTA_SET_ELEM_USERDATA={0xdd, 0x6, 0x1, 0x0, "1aed53e675056a6b30698db013bcc92290ec33ab78e4912344fed1e309442cb7a4bc931e54dd9136f878af8f3b13ef7e4bd7bd6bb141d9c6789fe8937614b6f83a502681e3e9d6f4dfe0ce9412ef2ea1280af41fddf741a30384644a6cd70461afd6acf61616cce79ae56a1aa3ef5678fd1a3aca3e663abd37b7a62a1da95fd9100750a1584433f7ba46c3d3eae3ce4e07af39f26290e11e1b76ff74fc8eb8d5fbba01d8e96ae4c384a095543b445e5cfe8d2f5eda3762a994d87b064d6388425bf3862bab89a04d476a4a6a93cd3316fb3e5cf8eb9ad7a033"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49a24625}, @NFTA_SET_ELEM_DATA={0x104, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xff, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x10c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "16792786ebbc30ebf40fb78ee25cc824984001ead90400774b94b1370832482dd1eced49dd90612f58e35c5d1024a89880da2c636edf5abbb33ef9189744a20be759ebf3266e98ca896d88799e4458a628215f5aa07b207e091ca1d131bfacc1d796d28e50142ca683a514bb551f6407817a708a1bad56e3454db55177457673a0db889ff39e3615c98b6d882536fa7c3777bce7cefa794d73ec834739f13e923e5372c1e5b5497f71cd57e6a1005b865c"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x92, 0x6, 0x1, 0x0, "5c2d3a660dfe6d0680377d1e46f24ddd05b895ff263f89ab7a7291f1ffe3991faabc58a27550cf1ddda5ca2eb82068b6fa2dc47e8e092306b982dc90210335d0b8260ca644efa7d5845afe8f85cb1085beca568c7ffc2c695b287e23b536fb2a9a3a0c1a3372ddee580560b196e80d308080e9cc4dacdb1864bdf6b38c064486e4542e0eed99cb7a40a80c331a91"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x122c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x1d, 0x6, 0x1, 0x0, "26bd11f447e2f45a81d77a2cb1a85523c1dd9c774f58dfa975"}, @NFTA_SET_ELEM_KEY_END={0x10f0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "c2d935d1f5ebf800cc12d60de1972955434b7425b33555d54a01482f254052ca2e637cb9c3156ba4fb7d3da1c315cd391bb9ce77cfd0e0486cf0d2756e2d52b567b1ad9c8801633e6ebbc0476075f75b4d3ad46f778f8c8108ee79dd1e7d42d3b5e74c8c2ecd39094746598bff6c4d65d2360dff9fcb4638bbaf156dc338518966e0da1782b01dde0311563cfcfea7a8899e2fc60dd637028133b8aa"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x8f, 0x6, 0x1, 0x0, "fca3a9ca4e1bde3196d2114037b489bd5b7d35289e672f7400a788ed62069e694308c90833666130bc78aaf8f6c8596199b30e997eee40fc93c2194a511f6f3d269cdb9420b08da87e77fcf34a21ad3cd52de82a71cbfe0289d02b34671654cd7ecab864f59a7059a5d17690e0289546125349664879ff63d798dac036b949540b4e5bf81a0fd27ece02cb"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x29c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x1b0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x2ba0}, 0x1, 0x0, 0x0, 0x40805}, 0x20008004) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) dup3(r7, r1, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f00000000c0)=0x7) 03:42:21 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', r10, 0x2f, 0x6, 0x80, 0x10000, 0x41, @dev={0xfe, 0x80, [], 0x29}, @mcast1, 0x7800, 0x7880, 0x8, 0x7}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private2, 0x33, r11}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x9}, 0x1) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 381.928005][T19765] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 381.954290][T19775] bridge1: port 1(dummy0) entered blocking state [ 381.969893][T19775] bridge1: port 1(dummy0) entered disabled state 03:42:21 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x0) 03:42:21 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262a007764d4007425e65fcc59edf213d6676920dc3d"}) prctl$PR_GET_THP_DISABLE(0x2a) [ 381.987772][T19775] device dummy0 entered promiscuous mode [ 382.046303][T19780] device dummy0 left promiscuous mode [ 382.051883][T19780] bridge1: port 1(dummy0) entered disabled state 03:42:21 executing program 1: syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000080)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000240)=0x78) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00ae2b88858eff73d3250400000008001700", @ANYRES32=r2, @ANYBLOB="0c000f00060000000000000008000c000200000008001800ac1414aa060001000b0000001400080073797a5f74756e00000000000000000008000b00040000000500050000000000"], 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x4000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r4) dup3(r7, r3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0', [{0x20, 'syz_tun\x00'}, {0x20, '\xeb@^:.&\\#:.-\\[-\x9e\':^['}, {0x20, ')])'}], 0xa, "3aaf0c1d"}, 0x30) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f00000000c0)={0x3, 0x6, 0x5, 0x5, 0x81}) 03:42:21 executing program 0: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) [ 382.119729][T19789] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:24 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = getpgid(r0) ptrace$setopts(0x4200, r7, 0x8, 0x2) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) dup2(0xffffffffffffffff, r6) 03:42:24 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:24 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x1, 0x8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r1, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x0, 0x13, r6, 0x82000000) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:24 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:24 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000100)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x20, 0xfff7fffd, 0xffffffff, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup3(r1, r1, 0x80000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x14, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r6, 0xffffffff, 0x9, 0x1ff}, 0x10) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000040)=0x5) [ 384.926835][T19829] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:24 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:24 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) open_by_handle_at(r1, &(0x7f0000000100)={0xa0, 0x0, "d2b5f2bfb91c38263e47f9ccdac3c9e4d5035b5ba6f2892323a9282b15c66c9e4e58e783a0ba8cb4d06ddeec94d64cef53b9126aea48d8d6f3b0d4dab3b2d5f45d04dce0414d2a3d4b2e2512a188a2b6efeb9db25e2194287952ac59fa02930d5e585f4ea0ffa58d48632cb0846d56b983f82c42aaa24307297db3282343714a1fe2f060ec35ab275dfc5b552198681a11f1d02b64f1b466"}, 0xc00002) [ 385.070359][T19841] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:24 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:24 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = getpgid(r0) ptrace$setopts(0x4200, r6, 0x8, 0x2) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) 03:42:24 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000100)=0x2, 0x4) r6 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f00000000c0)=0x5) 03:42:24 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x2400, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, r0, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x180800) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "c901e49e2c217d59", "b987fbeabb2d5efc77691b03eb7f4169", "119ef350", "79de079456d8bf9c"}, 0x28) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'erspan0\x00', r5, 0x700, 0x10, 0x9, 0x8, {{0x15, 0x4, 0x3, 0x4, 0x54, 0x65, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@lsrr={0x83, 0x23, 0x6, [@loopback, @loopback, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, @local, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0xdc, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x71f}, {@empty, 0x245}, {@loopback, 0x7bd}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', r6, 0x2f, 0x84, 0xff, 0x3ff, 0x44, @loopback, @local, 0x20, 0x8, 0x0, 0xe7}}) r7 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 385.291323][T19852] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:24 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:24 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = getpgid(r0) ptrace$setopts(0x4200, r6, 0x8, 0x2) userfaultfd(0x0) [ 385.493166][T19862] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:24 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 385.667395][T19869] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:25 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:25 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) [ 385.850621][T19883] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 386.028875][T19891] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:27 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x4, 0x70bd27, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x5, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004094}, 0x90) 03:42:27 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:27 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 388.357920][T19904] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:27 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = getpgid(r0) ptrace$setopts(0x4200, r6, 0x8, 0x2) userfaultfd(0x0) 03:42:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:27 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xa8200, 0x0) 03:42:27 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x800, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r2, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) ptrace$peek(0x7, r2, &(0x7f00000000c0)) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000140)) 03:42:27 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:27 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:27 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:27 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f00000001c0)=""/218) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in={0x2, 0x4e21, @empty}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r2) dup3(r7, r1, 0x0) ioctl$VIDIOC_G_AUDIO(r7, 0x80345621, &(0x7f00000000c0)) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 388.551963][T19917] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:27 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) [ 388.690381][T19938] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:28 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:28 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7ffff7ff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x10, 0x2}) 03:42:28 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = getpgid(r0) ptrace$setopts(0x4200, r6, 0x8, 0x2) 03:42:28 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) [ 388.836767][T19945] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 388.950146][T19954] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:28 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040084}, 0x20000000) dup3(r4, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f00000000c0)) 03:42:28 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:28 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) socket$inet6_tcp(0xa, 0x1, 0x0) getpgid(r0) 03:42:28 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:28 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 389.401186][T19969] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 389.527556][T19980] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:30 executing program 0: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x66001, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b3744e64d4007425e65fcc59edf2137c536924dc3d000100"}) 03:42:30 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) socket$inet6_tcp(0xa, 0x1, 0x0) 03:42:30 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:30 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:31 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = userfaultfd(0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r3) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x16}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) dup3(r7, r1, 0x0) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f00000000c0)={0x6, @output={0x1000, 0x1, {0x20, 0x7}, 0x4, 0x100}}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:31 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) [ 391.678176][T20002] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:31 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = eventfd(0x5) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3, 0x10200) flock(r3, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x1}) 03:42:31 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) 03:42:31 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:31 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) recvfrom(r6, &(0x7f0000003540)=""/4096, 0x1000, 0x10100, &(0x7f00000011c0)=@ethernet={0x306, @broadcast}, 0x80) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x30, r7, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x30}}, 0x0) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r8 = getpgid(r1) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x800, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x9, 0xc, 0x8, 0xff, 0x0, 0x7f, 0x210, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2000, 0x10001, 0x2, 0x6, 0xad, 0xff, 0x20}, r8, 0x3, r9, 0x18) 03:42:31 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:31 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 03:42:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:31 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:31 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:31 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x303000, 0x0) [ 392.581582][T20042] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 392.628690][T20045] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:34 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x20, 0x3, 0x0, 0x8}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x68800, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000140)={0x2, 0x80000000, 0x6, 0x6, 0x81, 0x2}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0x2000, 0x1000, 0x8, 0x0, 0x1f}) 03:42:34 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket(0xa, 0x2, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:34 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 03:42:34 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) 03:42:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) [ 394.726540][T20062] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:34 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:34 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) 03:42:34 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000380)={0x0, 0x7ff, 0xa00000, [], &(0x7f0000000140)=0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x39}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000000400)=@sack_info={0x0, 0xe75}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r1, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x1) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/440]) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000100)=0x4) r7 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x101000, 0x0) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000000040)={0x7ffffffd, "6d71b374ce198ea5cd54262e007764d40074250500cc59edf213d6676924dc3d", 0x80, 0x0, 0x0, 0x4}) 03:42:34 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 03:42:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 395.537956][T20081] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:34 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:35 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x10000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x0, {0x14}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x3}]}, 0x34}, 0x1, 0x9effffff00000000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDGKBTYPE(r6, 0x4b33, &(0x7f0000000300)) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f00000002c0)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x801001}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd0, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xa4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x85, 0x4, "9964016da413971601bab1ee343272905d2a7b4cd275a02e988d48a3bfcfcb06b866bf8462e234809c31e41dfd90247a205069f911f3450f2027b886a17046aa648cffd550ba7990ae1ccdc8d1e65ddfaf01979a6cbf08f76d5426256aa480044e578844acaef488e19a348cbd56be8459a46ec7272fd74515d040db90a8ec7a5a"}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0xd0}}, 0x10000880) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 397.486116][ T0] NOHZ: local_softirq_pending 08 03:42:37 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) 03:42:37 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:37 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e00771fd4007425e65fcc59edf213d6676924dc3d"}) 03:42:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:37 executing program 0: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400204) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0xffffffff, "6d71b3040000000000000024dc3d00"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000200)=""/203) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x3, 0x10000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000300)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) dup3(r7, r4, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000100)={0x80000000, 0x6, "fe9976df177220322871742bdfa07e9f05da5214934ba37fc50df4ebe3ca3d24", 0xffc, 0x3, 0x200, 0x4, 0x656, 0xfffffffc, 0x8000, 0x2f8, [0x4, 0xff, 0x7, 0x5]}) 03:42:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:37 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000100)={0x6, 0x7ff, 0x2}) write$P9_RREMOVE(r2, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7) 03:42:37 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f00000002c0)=[{0x0, 0xffff}, {0x0, 0x367}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000004c0)=[0x2]) semop(r0, &(0x7f00000000c0)=[{0x2, 0x8001}, {0x2, 0x5, 0x1000}, {0x3, 0x38}, {0x1, 0xff, 0x800}, {0x4, 0x4749, 0x1000}, {0x0, 0x1f, 0x1000}, {0x3, 0x200}], 0x7) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:37 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:37 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) [ 397.905193][T20143] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:37 executing program 3: mkdir(0x0, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) [ 397.954994][T20148] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 398.126494][ T0] NOHZ: local_softirq_pending 08 03:42:40 executing program 3: mkdir(0x0, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:40 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) 03:42:40 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000200)={0x8, @output={0x0, 0x0, {0x4, 0x47}, 0xfffff000, 0x7}}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8045}, 0x40000) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000300)) 03:42:40 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:40 executing program 3: mkdir(0x0, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:40 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:40 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0xc) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, r0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000000040)={0x80000003, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x200}) 03:42:40 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) 03:42:40 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(0x0, 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:40 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(0x0, 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:40 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(0x0, 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:40 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) 03:42:40 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:40 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:40 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:40 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:40 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) 03:42:43 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000000c0)={0x6, 0x3, 0x7ff, 0x1ff, 0x800, 0x8001, 0x8}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:43 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:43 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) 03:42:43 executing program 5: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) 03:42:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 403.975492][T20230] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:43 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x70) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r5, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r2) dup3(r7, r1, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r7, 0x5016, 0x0) 03:42:43 executing program 5: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) 03:42:43 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 404.303284][T20263] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:46 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000000c0)={0x6, 0x20}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vsock\x00', 0x84000, 0x0) r6 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r6, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500), 0x0, 0x0) ptrace$setopts(0x4206, r6, 0xfffffffffffffffe, 0xf) r7 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f0000000100)={{0x2, 0x4}, {0x6, 0x7f}, 0xfffff801, 0x4, 0x6}) 03:42:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:46 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) 03:42:46 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:46 executing program 5: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) [ 407.040077][T20282] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:46 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:46 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0xffffffff}) [ 407.167455][T20296] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:46 executing program 1: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0xffffffffffffae95, 0x5}, 0x1}, 0x20, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x400}) 03:42:46 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, r0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f00000000c0)=0x2) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:46 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:46 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 03:42:46 executing program 5: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) 03:42:46 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) [ 407.315082][T20305] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 407.426515][T20315] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:47 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:47 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x82, 0x0, &(0x7f0000000180)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) dup3(r8, r5, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3a00000038c116c6733a8b539042db52aa8f5f0cd3067bc7c7788a1c9bf5d62d8ca557ccc431b2a6caeb639385862d10d9f67a20b404b1d5cb5ef6f31a4c00131691", @ANYRES16=r6, @ANYBLOB="02002dbd7000fcdbdf25020000000800080003000080080009000400000008000700", @ANYRES32=r8, @ANYBLOB="080009000400000008000700", @ANYRES32=r10, @ANYBLOB="0800020000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x880) 03:42:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:47 executing program 5: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) 03:42:47 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) [ 407.859518][T20333] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:47 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) [ 407.921558][T20339] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:47 executing program 5: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) [ 407.993852][T20343] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:49 executing program 5: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 03:42:49 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:49 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 03:42:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:42:49 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f00000001c0)={0x4, "dc653db3563d695de967d2525783087864f640ac542ee4f82e6b0db819b7fe7b", 0x5, 0x100, 0x2, 0x3, 0x8, 0x1, 0x8, 0x40}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000000c0)={0x0, "6d71b374ce198ea5cd54265abd965fcc59342713d6676924dc3d00", 0x1000}) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x70, &(0x7f0000000140)=@sack_info={0x0, 0x3, 0x800}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r4) dup3(r8, r3, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r8, 0x3) [ 410.324449][T20360] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:49 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:49 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000300)="ddfb79", 0x3) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 410.418142][T20375] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:50 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000000c0)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:50 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:50 executing program 5: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) 03:42:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x1) r11 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r11, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:50 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 410.876076][T20390] bridge3: port 1(dummy0) entered blocking state [ 410.883302][T20390] bridge3: port 1(dummy0) entered disabled state [ 410.892809][T20390] device dummy0 entered promiscuous mode [ 410.900466][T20387] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 410.904802][T20390] device dummy0 left promiscuous mode [ 410.915799][T20390] bridge3: port 1(dummy0) entered disabled state 03:42:50 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, 0x0, &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:50 executing program 0: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) socket$nl_audit(0x10, 0x3, 0x9) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101880, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f00000001c0)={{0x2, 0x0, @reserved="0bc11dfce05e8a4c7cb8db7e85320bbb2160d9d51adc0dda13d83f3ce80e9a2a"}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f0000000100)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213ff096924dc3d", 0x100, 0x400000, 0x0, 0x10}) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffe6c) 03:42:50 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 03:42:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 03:42:50 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, 0x0, &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:50 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) keyctl$revoke(0x3, r5) keyctl$clear(0x7, r5) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRES32=r5, @ANYBLOB="000000000000000000000000000000000469c60600000000000000000000b70077107d4cca6f874d11ca45c041c9ad2fe57f6f5d2e5c9df1fd99c50f1441e596cfcec06a0a1229a19307fb2d9a9e2b7c3db99dc37f10c94871b84a8215d4fa5444ba488f131b3700000000e353d96c67caa960b337b346064aef285b65c56289d3d45f60f0cc0cacf0bd53e706a58fe4"]) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r7, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x7, 0x0, 0x7, 0x3638}, {0x46c6, 0x8, 0x2, 0x7}]}, 0x10) keyctl$read(0xb, r6, &(0x7f0000000180)=""/241, 0xf1) 03:42:50 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x80}) 03:42:50 executing program 5: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) userfaultfd(0x0) 03:42:50 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000100)={0x8, 0x0, 0xb, 0xc96f}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:50 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, 0x0, &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:50 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:50 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:50 executing program 0: syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x6, &(0x7f0000001400)=[{&(0x7f0000000140), 0x0, 0x1}, {&(0x7f0000000180)="aab4659189567ce6274ea8c4852cb34631dde25fe42db32223e5156e86e627c1b48b4baa0af454d6edee2b7e2ee1d4217fb578f99b31f6b1f342e8df4a6d74d18ca44a9bef07dc48ccfccacd36588fe455e3bc6ac7a6f1", 0x57, 0xce}, {&(0x7f0000000200)="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", 0x1000, 0x3}, {&(0x7f0000001200)="4e3a1825b41b8ba74fc74f31a91287eb4101ce6c3497c8bd2c3eb78b613f344a6a87d600d28b0c57140a1fc1f0856fc135dab5a7eec6a5edaa85ee8d606b192f77ba024aa137a2f4ef56245d5f6a8931f3bb9b8adee421aa713aad6ece2b3aabfd14a110725befb83c5ccfc86685cd9555e3a93a8abe0ac8265679ae1f984e3744a4e8637011439d93062926776f819739d4ef1206e3f6d6f2ecd37edda0ac141dd87792e1", 0xa5, 0x9}, {&(0x7f00000012c0)="e34baf2b0b8fe1b31441dfb3b14cb3b43ba0940ba4429fc9a5b573e8db7d98fc91272d06cc933c75e6ed3515d952c79f421c59b4ad143b3b429c7b1150f7bd53f42be7b33571c3f532084122b1a8c2bc35a94138f502a0de26b35c82b5bb56e205b40c30dbc664ed4927c9ad248c22e4b6c397a3b54ac0b1ec33ea17af70eafb15eead94b575087c7e4af7bb9fc0d1be296080d99b", 0x95, 0xffff}, {&(0x7f0000001380)="4ed5d9e7e85bdef286718593f3414a6b5ab4c05271ea85bad011533ff7e95f1c187a685cfb86a0d43540789c77127bc6d45956320f0100463d6dd91776aa53fbf926f5c46bec130801c45d731e3be54799fc9eb2cf00e1d6dadfffd9bdf0ad03e51139aebd374594ef", 0x69, 0x45e3}], 0x1800, &(0x7f00000014c0)='%&}\x00') r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:50 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:50 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) 03:42:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 03:42:51 executing program 5: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:53 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, r0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000000)={0x7, 0x7, 0x5, 0xad}) r4 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000040)={0x4d, "6d71b374ce06000000000000008000", 0x0, 0x0, 0x0, 0x0, 0x1}) 03:42:53 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) eventfd2(0x0, 0x0) 03:42:53 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) userfaultfd(0x0) 03:42:53 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:53 executing program 5: process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 03:42:53 executing program 5: process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:53 executing program 1: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) chroot(&(0x7f0000000040)='./file0\x00') r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000100)={0x10000007, "6d71844eaca6991a8a99ad2e0077b547007425e65fcc59edf213d6676924dc3d", 0x40, 0x4, 0x5, 0x4, 0x1}) 03:42:53 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:53 executing program 2: r0 = clone3(&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:53 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, 0x0) 03:42:53 executing program 5: process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 414.348070][T20506] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 414.429969][T20516] overlayfs: missing 'lowerdir' 03:42:56 executing program 5: r0 = clone3(0x0, 0x0) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:56 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = syz_open_dev$vcsu(&(0x7f0000000640)='/dev/vcsu#\x00', 0x2d12, 0xc0101) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000680)) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:56 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, 0x0) 03:42:56 executing program 2: process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:56 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000000c0)={0x4, {{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff}}, {{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}}, 0x108) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, [], 0x23}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x8, 0x401, 0x0, 0x20, 0x100000, r10}) 03:42:56 executing program 5: r0 = clone3(0x0, 0x0) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 417.237755][T20530] overlayfs: missing 'lowerdir' 03:42:56 executing program 2: process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:56 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, 0x0) 03:42:56 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f00000000c0)={0x0, [0x1ff, 0x4, 0x6, 0x5, 0x20, 0xff7f, 0x100, 0x8001, 0x7ff, 0x9, 0x9, 0x1, 0x2, 0x20, 0xff01, 0xf7cf, 0xe5cb, 0x57, 0x9, 0x4, 0x20, 0x9, 0x6, 0x0, 0x4, 0x6, 0x7, 0x3dc, 0x7, 0x6, 0xffff, 0x1000, 0x1, 0xff, 0x0, 0x65, 0x7, 0x4, 0x0, 0x8, 0x81, 0x401, 0x0, 0x691, 0x0, 0x8000, 0xa0, 0x69d8], 0x7}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 417.273503][T20536] bridge4: port 1(dummy0) entered blocking state [ 417.282254][T20536] bridge4: port 1(dummy0) entered disabled state [ 417.290977][T20536] device dummy0 entered promiscuous mode 03:42:56 executing program 5: r0 = clone3(0x0, 0x0) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:56 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:56 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000000c0)={0xc, 0x3, 0x9, 0x4000, r4}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:56 executing program 2: process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 417.385682][T20552] overlayfs: missing 'lowerdir' 03:42:56 executing program 2: r0 = clone3(0x0, 0x0) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:56 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) [ 417.496957][T20568] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:57 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:57 executing program 5: clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:57 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:57 executing program 2: r0 = clone3(0x0, 0x0) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 418.077991][T20584] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:59 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000000c0)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:42:59 executing program 2: r0 = clone3(0x0, 0x0) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:59 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x140b, 0x11, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000000) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f00000001c0)={0x1, 0x2}) 03:42:59 executing program 5: clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:59 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 03:42:59 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:59 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x82, 0x0, &(0x7f0000000180)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r6) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f00000001c0)={0xc00000, 0x800, 0x374, 0x4, 0xffffffff, 0x8}) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e21, 0x4, @local, 0x1}, {0xa, 0x4e23, 0x5, @ipv4={[], [], @broadcast}, 0x81}, 0x2, [0x1, 0x0, 0x101, 0xc00000, 0x6, 0x6, 0x109, 0x3]}, 0x5c) [ 420.384155][T20604] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:59 executing program 5: clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:59 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:42:59 executing program 2: clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:42:59 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:42:59 executing program 2: clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 420.541323][T20627] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:42:59 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) [ 420.640366][T20640] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:43:02 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) sendto$ax25(r4, &(0x7f00000000c0)="4b409f60cfc552a13a21e3c9bb673a30ac696c0f85422800cc34eede676ece63dca5cac281fabec770e86b764c11eaa236a160c9776e7ae2310a0426ac3331672304c8c152223fe22e70aa5b82b477f3394a27d11a80314b19319c3d48457d22857e1439d630ab19fefda931d74a70acae76a0717e68b1be67e818df93cbf75942aaaeb4c771a89caa5887c306c40827d030dfcd2dcfa125134ce8ff9725c57824cac3bcdd58cb06cba55f796ab377fb3ae1ad580b3e2e2f8615957dee30bc4135258be499593908b5fc780bb5973d785cbb00ab64e1db48d2294535a2ef1ad29928c45019fc67b57959", 0xea, 0xc009, 0x0, 0x0) 03:43:02 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:02 executing program 2: clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:02 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:43:02 executing program 4: clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 423.383468][T20650] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:43:02 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f00000001c0)={0x6, 0x2, 0x7380}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e24, 0x7, @private0, 0x7}}, 0x0, 0x0, 0x1c, 0x0, "cc1a043ca9550ca500546f9d249261d070216093d7cbd259e53889a349b03a70dbc78adb8a6b37d9cf765acebfaf5f7b4c395283a5be65c616860090ca9c674dcc81688e661f1dff6d30826e9f2055d9"}, 0xd8) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x80000000, "6d71b374ce198ea5cd54262e007764d4007425dd5fcc59edf213d6676924dc3d", 0x0, 0xffff8000, 0x1, 0x2, 0x1}) 03:43:02 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:02 executing program 4: process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:02 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:02 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:43:02 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000000c0)={0x4, {{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff}}, {{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}}, 0x108) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, [], 0x23}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x8, 0x401, 0x0, 0x20, 0x100000, r10}) 03:43:02 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) [ 423.504195][T20667] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 423.594985][T20677] bridge1: port 1(dummy0) entered blocking state [ 423.602514][T20677] bridge1: port 1(dummy0) entered disabled state [ 423.609704][T20677] device dummy0 entered promiscuous mode 03:43:05 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, r0, 0x0) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f00000000c0)=0x9, 0x4) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:43:05 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480), 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:05 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:43:05 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:05 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) [ 426.413871][T20691] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 426.440749][T20697] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:43:05 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x200, 0xffffffff, 0x7, 0x40, 0x5, 0x8, 0x1, 0x7fff}, &(0x7f0000000100)={0x0, 0x12, 0x6, 0x951, 0x8000, 0x50b, 0x0, 0x2}, &(0x7f0000000140)={0x2, 0x815, 0x9, 0x7, 0x7, 0x1000, 0x2, 0x6}, &(0x7f00000001c0)={r1, r2+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x8]}, 0x8}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = open(&(0x7f0000000280)='./file0\x00', 0x340400, 0x1) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f00000002c0)={0xa, {0x8, 0x9, 0x8, 0x9}, {0x7fff, 0x26ec1e35, 0x3, 0x8}, {0x2, 0x9}}) r6 = dup2(r4, r3) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x82, 0x0, &(0x7f0000000180)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r6, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000380)={r10, 0x0, 0x9}, 0x10) 03:43:05 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:43:05 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480), 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:05 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480), 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:05 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:43:05 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480), 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:05 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480), 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) [ 426.560518][T20710] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 426.578887][T20711] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 428.206288][ T0] NOHZ: local_softirq_pending 08 03:43:08 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x2, [0x6d07, 0x6, 0x4, 0x1, 0x7, 0x100, 0x3, 0x6, 0xe934, 0xc0c7, 0x3, 0x1, 0x0, 0x41, 0x3, 0x1, 0x400, 0x87, 0x7, 0x0, 0x9, 0x4, 0x8, 0x7, 0x5, 0x6, 0x6, 0x6, 0x0, 0x7, 0x99, 0x7ff, 0x0, 0x81, 0x9, 0xe91, 0x9, 0x101, 0x1ff, 0xc59e, 0xfff, 0x20, 0x3, 0x2, 0x200, 0x800, 0x6, 0x4], 0x9}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) 03:43:08 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>'}}]}) 03:43:08 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r2, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000140)=0xc) setuid(r4) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0x0) setfsgid(r6) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={r2, r4, r6}, 0xc) 03:43:08 executing program 4: r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f00000002c0)=[{0x0, 0xffff}, {0x0, 0x367}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000004c0)=[0x2]) semop(r0, &(0x7f00000000c0)=[{0x2, 0x8001}, {0x2, 0x5, 0x1000}, {0x3, 0x38}, {0x1, 0xff, 0x800}, {0x4, 0x4749, 0x1000}, {0x0, 0x1f, 0x1000}, {0x3, 0x200}], 0x7) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:43:08 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480), 0x0, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:08 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:08 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:08 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}]}) [ 429.453200][T20736] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:43:08 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:43:08 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) timerfd_create(0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x8000, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r2) dup3(r5, r1, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000000c0)={'ip6erspan0', 0x32, 0x37}, 0xd) [ 429.544236][T20749] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:43:08 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}]}) 03:43:08 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:08 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) [ 429.649746][T20756] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 429.668798][T20766] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:43:09 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) splice(r0, &(0x7f00000000c0)=0x7f7a, r0, &(0x7f0000000100)=0x7fffffff, 0x7d, 0x9) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:43:09 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x88, &(0x7f0000000440)={[{@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@default_permissions='default_permissions'}, {@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '<&[-\'+[/'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '.{{\''}}]}) 03:43:09 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) 03:43:09 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) 03:43:09 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 03:43:09 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 03:43:09 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 03:43:09 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x8, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 429.871331][T20782] overlayfs: unrecognized mount option "fscontext=root" or missing value [ 429.903030][T20784] overlayfs: unrecognized mount option "fscontext=root" or missing value 03:43:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x0, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x20040, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000110774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@generic={0x40, 0x4, 0xb, 0x8, 0x7fff}, @jmp={0x5, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9dc, 0x0, 0x0, 0x0, 0x1}, @call]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x2}, 0x10}, 0x78) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket$rds(0x15, 0x5, 0x0) r3 = dup2(r1, r2) bind$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e6f30c442848916cf46465d4faab740e103cb2aa0100000063eec4c87d263fb205000000e2b925324361dc00", 0x3e}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB="2bb0e59a8b6364a6c408602a7dca0d09165ae31af935e7ff010000ccb3ab301571f64dfa9ef088a521eed8cf0000000008317a", @ANYRES32, @ANYBLOB="0000000900000018250000", @ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x3, 0x9a, &(0x7f0000000700)=""/154, 0x40f00, 0x1, [], 0x0, 0x4, r0, 0x8, &(0x7f0000000440)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x6, 0x1, 0x6}, 0x10, 0x0, r3}, 0x78) accept4(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000000)=0x80, 0x80000) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:43:11 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000200)={0x9, 0x5, "8850ee53c05f0d175544641ab6468012c16a1e03b72cff6b1cd6b6416f9070ef", 0xffffff01, 0x3400, 0x3ff, 0x0, 0x200}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000100)={0x3, @pix={0x200, 0x9, 0x34324948, 0x8, 0x847, 0x6, 0x6, 0x5, 0x0, 0x0, 0x2, 0x2}}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000000c0)) 03:43:11 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:11 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 03:43:11 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 03:43:11 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x12]}) 03:43:12 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500), 0x0, 0x0) 03:43:12 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x0, [0x3]}) [ 432.652042][T20817] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 432.654191][T20819] overlayfs: bad mount option "redirect_dir=./file0" 03:43:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000440)=""/205) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100000000000000040000000000000710000200000099dc20"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x0) 03:43:12 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) [ 432.694045][T20817] device macsec1 entered promiscuous mode [ 432.708524][T20817] device virt_wifi0 entered promiscuous mode 03:43:12 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500), 0x0, 0x0) 03:43:12 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000440)=""/205) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100000000000000040000000000000710000200000099dc20"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x0) [ 432.741359][T20817] device virt_wifi0 left promiscuous mode 03:43:12 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0xfffffffd}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r2) ioctl$KDSKBLED(r3, 0x4b65, 0x304) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r5) r7 = dup2(r4, r5) dup3(r7, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) 03:43:12 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500), 0x0, 0x0) 03:43:12 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:12 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500), 0x0, 0x0) 03:43:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0x9, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x0) 03:43:12 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0xe}) [ 433.062414][T20853] overlayfs: bad mount option "redirect_dir=./file0" 03:43:12 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500), 0x0, 0x0) 03:43:12 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500)=[{0x0}], 0x1, 0x0) 03:43:12 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x0, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x20040, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000110774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700010000000a000540340000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279efe41749bfb87684800f3b4768d6ebe10ee82f6b2e7f55de781d27c9588c2cc3b1730589391f51ebe1ecba1b7d5ba1cc81386ee9fc11ef8c33b3a79f3f9187c9761c15d000000000000000000000000000000e81c0509f83a199089942b308c3f9e1da97bcaa66b4b31cdd2ef42d2bb7b42726a279c5019f4b408633cfce834beb5a343515af9401a8664936c62df130169b7670895897fb13eec0ff09e2e6311dc077a745b63a8fd0000000000000000000000000000c7ae7ad999ddf278dd38f2582244284cdae195f79b6d18165efd92b6946a0965730fbdbdf0f9a37b4b7fe70fd4c82805a286eba1c588a555a6f66035510a89296ff08d3a09d516182d1224d920f4fef3703549e2dfdfe9cdbf518b9ce90be973ede58d65bb60d88308021fcc32653dd4d5c701fcc5080d9d64c91fbd4e3fdfe37b256473ed39500cc751414400dcafb7be350a6a2dfc7991ede5", @ANYRES32], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@generic={0x40, 0x4, 0xb, 0x8, 0x7fff}, @jmp={0x5, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9dc, 0x0, 0x0, 0x0, 0x1}, @call]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x2}, 0x10}, 0x78) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket$rds(0x15, 0x5, 0x0) r3 = dup2(r1, r2) bind$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e6f30c442848916cf46465d4faab740e103cb2aa0100000063eec4c87d263fb205000000e2b925324361dc00", 0x3e}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB="2bb0e59a8b6364a6c408602a7dca0d09165ae31af935e7ff010000ccb3ab301571f64dfa9ef088a521eed8cf0000000008317a", @ANYRES32, @ANYBLOB="0000000900000018250000", @ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x3, 0x9a, &(0x7f0000000700)=""/154, 0x40f00, 0x1, [], 0x0, 0x4, r0, 0x8, &(0x7f0000000440)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x6, 0x1, 0x6}, 0x10, 0x0, r3}, 0x78) accept4(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000000)=0x80, 0x80000) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:43:12 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:43:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x40010, r0, 0x44fc1000) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:43:12 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500), 0x0, 0x0) 03:43:12 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500)=[{0x0}], 0x1, 0x0) 03:43:12 executing program 0: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x480, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000100)) [ 433.279610][T20880] overlayfs: bad mount option "redirect_dir=./file0" [ 433.286647][T20885] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:43:12 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500)=[{0x0}], 0x1, 0x0) 03:43:12 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:12 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500)=[{0x0}], 0x1, 0x0) [ 433.329532][T20885] device macsec1 entered promiscuous mode [ 433.359776][T20885] device virt_wifi0 entered promiscuous mode 03:43:12 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500)=[{0x0}], 0x1, 0x0) [ 433.405925][T20885] device virt_wifi0 left promiscuous mode 03:43:12 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003500)=[{0x0}], 0x1, 0x0) [ 433.448486][T20904] overlayfs: bad mount option "redirect_dir=./file0" 03:43:12 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x5b0e, 0x0}, 0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)={0x6bcf, r2}, 0x8) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x0) 03:43:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0xfeffffff00000000) [ 433.649093][T20885] syz-executor.4 (20885) used greatest stack depth: 10056 bytes left 03:43:15 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:43:15 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x11000000}) 03:43:15 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000180)="709263fe90c1c394944a78053f7ce2633da6a817281ee579a385b7be8c78df59ca82b3d3a889d7ef84abd450bb087ee0c817dbaaedcef309f4bfcf7fd85b756de209f4afccfbf49ec4bfa07e4be1ddaad279a052562128f686d458d6187e04ed0fd9a5e165574d006571e5b24e500250b943fa9a5ee7caa954ee0711d9146ff9d3724d27351431bf4ba4ef18bb", 0x8d) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x0) 03:43:15 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0xffffffffffffff8c) [ 436.295683][T20928] nfs: Unknown parameter 'ip_vti0' 03:43:15 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}}, 0x40) 03:43:15 executing program 2 (fault-call:1 fault-nth:0): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000007100002000000000020"], 0x24, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listxattr(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0xfffffffe) 03:43:15 executing program 5 (fault-call:1 fault-nth:0): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:15 executing program 3 (fault-call:5 fault-nth:0): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:15 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) [ 436.413556][T20938] FAULT_INJECTION: forcing a failure. [ 436.413556][T20938] name failslab, interval 1, probability 0, space 0, times 0 [ 436.416272][T20939] FAULT_INJECTION: forcing a failure. [ 436.416272][T20939] name failslab, interval 1, probability 0, space 0, times 0 [ 436.453860][T20942] FAULT_INJECTION: forcing a failure. [ 436.453860][T20942] name failslab, interval 1, probability 0, space 0, times 0 [ 436.465991][T20939] CPU: 0 PID: 20939 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 436.476331][T20939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.486404][T20939] Call Trace: [ 436.489727][T20939] dump_stack+0x10f/0x19d [ 436.494053][T20939] should_fail+0x23c/0x250 [ 436.498459][T20939] __should_failslab+0x81/0x90 [ 436.503213][T20939] ? kmalloc_array+0x2b/0x40 [ 436.507792][T20939] should_failslab+0x5/0x20 [ 436.512319][T20939] __kmalloc+0x43/0x2d0 [ 436.516468][T20939] kmalloc_array+0x2b/0x40 [ 436.520991][T20939] rw_copy_check_uvector+0x81/0x280 [ 436.526185][T20939] import_iovec+0x5e/0x1c0 [ 436.530599][T20939] process_vm_rw+0xca/0x1d0 [ 436.535159][T20939] ? fsnotify_parent+0x58/0x180 [ 436.540003][T20939] ? __this_cpu_preempt_check+0x18/0x20 [ 436.545580][T20939] ? __sb_end_write+0x90/0xe0 [ 436.550269][T20939] ? vfs_write+0x480/0x690 [ 436.554692][T20939] ? __fget_light+0x219/0x260 [ 436.559353][T20939] ? check_preemption_disabled+0x51/0x140 [ 436.565055][T20939] ? debug_smp_processor_id+0x18/0x20 [ 436.570412][T20939] __x64_sys_process_vm_writev+0x76/0x90 [ 436.576036][T20939] do_syscall_64+0x51/0xb0 [ 436.580439][T20939] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 436.586315][T20939] RIP: 0033:0x45c1d9 [ 436.590185][T20939] Code: Bad RIP value. [ 436.594235][T20939] RSP: 002b:00007f7e0baa6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 436.602763][T20939] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 436.610782][T20939] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 000000000000056d [ 436.618735][T20939] RBP: 00007f7e0baa6ca0 R08: 0000000000000275 R09: 0000000000000000 [ 436.626698][T20939] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000000 [ 436.634654][T20939] R13: 00007fff6addee0f R14: 00007f7e0baa79c0 R15: 000000000078bf0c [ 436.643832][T20938] CPU: 1 PID: 20938 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 03:43:16 executing program 4 (fault-call:2 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:43:16 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000000c0)=0x1, 0x4) [ 436.649196][T20947] nfs: Unknown parameter 'ip_vti0' [ 436.652525][T20938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.667651][T20938] Call Trace: [ 436.670935][T20938] dump_stack+0x10f/0x19d [ 436.675350][T20938] should_fail+0x23c/0x250 [ 436.679756][T20938] __should_failslab+0x81/0x90 [ 436.684523][T20938] ? kmalloc_array+0x2b/0x40 [ 436.689128][T20938] should_failslab+0x5/0x20 [ 436.693629][T20938] __kmalloc+0x43/0x2d0 [ 436.697772][T20938] kmalloc_array+0x2b/0x40 03:43:16 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, 0xffffffffffffffff, 0x0) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) dup3(r3, r0, 0x0) connect$l2tp6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x6, @private2={0xfc, 0x2, [], 0x1}}, 0x20) r7 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 436.702178][T20938] rw_copy_check_uvector+0x81/0x280 [ 436.707423][T20938] import_iovec+0x5e/0x1c0 [ 436.711831][T20938] process_vm_rw+0xca/0x1d0 [ 436.716380][T20938] ? fsnotify_parent+0x58/0x180 [ 436.721216][T20938] ? __this_cpu_preempt_check+0x18/0x20 [ 436.726823][T20938] ? __sb_end_write+0x90/0xe0 [ 436.731529][T20938] ? vfs_write+0x480/0x690 [ 436.735924][T20938] ? __fget_light+0x219/0x260 [ 436.740648][T20938] ? check_preemption_disabled+0x51/0x140 [ 436.746353][T20938] ? debug_smp_processor_id+0x18/0x20 [ 436.751767][T20938] __x64_sys_process_vm_writev+0x76/0x90 [ 436.757437][T20938] do_syscall_64+0x51/0xb0 [ 436.761831][T20938] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 436.767704][T20938] RIP: 0033:0x45c1d9 [ 436.771577][T20938] Code: Bad RIP value. [ 436.775630][T20938] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 436.784024][T20938] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 436.792009][T20938] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004b8 [ 436.799962][T20938] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 436.807911][T20938] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000000 [ 436.815869][T20938] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c [ 436.823857][T20942] CPU: 0 PID: 20942 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 436.832527][T20942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.842571][T20942] Call Trace: [ 436.845847][T20942] dump_stack+0x10f/0x19d [ 436.850155][T20942] should_fail+0x23c/0x250 [ 436.854560][T20942] __should_failslab+0x81/0x90 [ 436.859392][T20942] ? __se_sys_mount+0x3a/0x100 [ 436.864130][T20942] should_failslab+0x5/0x20 [ 436.868610][T20942] __kmalloc_track_caller+0x41/0x2d0 [ 436.874047][T20942] ? strnlen_user+0x166/0x1f0 [ 436.878698][T20942] strndup_user+0x73/0x120 [ 436.883086][T20942] __se_sys_mount+0x3a/0x100 [ 436.887647][T20942] __x64_sys_mount+0x63/0x70 [ 436.892266][T20942] do_syscall_64+0x51/0xb0 [ 436.896679][T20942] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 436.902559][T20942] RIP: 0033:0x45c1d9 [ 436.906432][T20942] Code: Bad RIP value. [ 436.910468][T20942] RSP: 002b:00007fd7f3983c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 436.918869][T20942] RAX: ffffffffffffffda RBX: 000000000001f6c0 RCX: 000000000045c1d9 [ 436.926813][T20942] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000000000000 [ 436.934845][T20942] RBP: 00007fd7f3983ca0 R08: 0000000020000440 R09: 0000000000000000 [ 436.943060][T20942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 03:43:16 executing program 2 (fault-call:1 fault-nth:1): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 436.951071][T20942] R13: 00007ffce457735f R14: 00007fd7f39849c0 R15: 000000000078bf0c 03:43:16 executing program 3 (fault-call:5 fault-nth:1): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:16 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) [ 437.035438][T20958] FAULT_INJECTION: forcing a failure. [ 437.035438][T20958] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 437.048751][T20958] CPU: 0 PID: 20958 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 437.057453][T20958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.067589][T20958] Call Trace: [ 437.070873][T20958] dump_stack+0x10f/0x19d [ 437.075200][T20958] should_fail+0x23c/0x250 [ 437.079609][T20958] __alloc_pages_nodemask+0xec/0x390 [ 437.084885][T20958] kmem_getpages+0x21/0x340 [ 437.089379][T20958] cache_grow_begin+0x76/0x250 [ 437.089935][T20965] FAULT_INJECTION: forcing a failure. [ 437.089935][T20965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 437.094131][T20958] cache_alloc_refill+0x326/0x3e0 [ 437.112320][T20958] ? should_fail+0xd6/0x250 [ 437.116874][T20958] ? check_preemption_disabled+0x51/0x140 [ 437.122568][T20958] __kmalloc+0x1eb/0x2d0 [ 437.126785][T20958] ? kmalloc_array+0x2b/0x40 [ 437.131360][T20958] kmalloc_array+0x2b/0x40 [ 437.135787][T20958] rw_copy_check_uvector+0x81/0x280 [ 437.140960][T20958] import_iovec+0x5e/0x1c0 [ 437.145347][T20958] process_vm_rw+0xca/0x1d0 [ 437.149878][T20958] ? fsnotify_parent+0x58/0x180 [ 437.154703][T20958] ? __this_cpu_preempt_check+0x18/0x20 [ 437.160229][T20958] ? __sb_end_write+0x90/0xe0 [ 437.164894][T20958] ? vfs_write+0x480/0x690 [ 437.169305][T20958] ? __fget_light+0x219/0x260 [ 437.173975][T20958] ? check_preemption_disabled+0x51/0x140 [ 437.179742][T20958] ? debug_smp_processor_id+0x18/0x20 [ 437.185102][T20958] __x64_sys_process_vm_writev+0x76/0x90 [ 437.190969][T20958] do_syscall_64+0x51/0xb0 [ 437.195471][T20958] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 437.201333][T20958] RIP: 0033:0x45c1d9 [ 437.205198][T20958] Code: Bad RIP value. [ 437.209234][T20958] RSP: 002b:00007f7e0baa6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 437.218256][T20958] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 437.226199][T20958] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000570 03:43:16 executing program 5 (fault-call:1 fault-nth:1): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 437.234145][T20958] RBP: 00007f7e0baa6ca0 R08: 0000000000000275 R09: 0000000000000000 [ 437.242102][T20958] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000001 [ 437.250128][T20958] R13: 00007fff6addee0f R14: 00007f7e0baa79c0 R15: 000000000078bf0c [ 437.258083][T20965] CPU: 1 PID: 20965 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 437.266745][T20965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.276960][T20965] Call Trace: [ 437.280250][T20965] dump_stack+0x10f/0x19d [ 437.284570][T20965] should_fail+0x23c/0x250 [ 437.288979][T20965] __alloc_pages_nodemask+0xec/0x390 [ 437.294268][T20965] kmem_getpages+0x21/0x340 [ 437.298772][T20965] cache_grow_begin+0x76/0x250 [ 437.303550][T20965] cache_alloc_refill+0x326/0x3e0 [ 437.308565][T20965] ? should_fail+0xd6/0x250 [ 437.313057][T20965] ? check_preemption_disabled+0x51/0x140 [ 437.318806][T20965] __kmalloc+0x1eb/0x2d0 [ 437.323038][T20965] ? kmalloc_array+0x2b/0x40 [ 437.327618][T20965] kmalloc_array+0x2b/0x40 03:43:16 executing program 2 (fault-call:1 fault-nth:2): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 437.332026][T20965] rw_copy_check_uvector+0x81/0x280 [ 437.337209][T20965] import_iovec+0x5e/0x1c0 [ 437.341617][T20965] process_vm_rw+0xca/0x1d0 [ 437.346119][T20965] ? fsnotify_parent+0x58/0x180 [ 437.350987][T20965] ? __this_cpu_preempt_check+0x18/0x20 [ 437.356586][T20965] ? __sb_end_write+0x90/0xe0 [ 437.361252][T20965] ? vfs_write+0x480/0x690 [ 437.365685][T20965] ? __fget_light+0x219/0x260 [ 437.370354][T20965] ? check_preemption_disabled+0x51/0x140 [ 437.376064][T20965] ? debug_smp_processor_id+0x18/0x20 [ 437.381435][T20965] __x64_sys_process_vm_writev+0x76/0x90 [ 437.387058][T20965] do_syscall_64+0x51/0xb0 [ 437.391594][T20965] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 437.397475][T20965] RIP: 0033:0x45c1d9 [ 437.401349][T20965] Code: Bad RIP value. [ 437.405395][T20965] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 437.413797][T20965] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 437.421765][T20965] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004bb [ 437.427201][T20975] FAULT_INJECTION: forcing a failure. [ 437.427201][T20975] name failslab, interval 1, probability 0, space 0, times 0 [ 437.429741][T20965] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 437.429747][T20965] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000001 [ 437.429752][T20965] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c [ 437.475017][T20966] FAULT_INJECTION: forcing a failure. [ 437.475017][T20966] name failslab, interval 1, probability 0, space 0, times 0 [ 437.501630][T20966] CPU: 1 PID: 20966 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 437.510321][T20966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.520363][T20966] Call Trace: [ 437.523668][T20966] dump_stack+0x10f/0x19d [ 437.527985][T20966] should_fail+0x23c/0x250 [ 437.532386][T20966] __should_failslab+0x81/0x90 [ 437.537195][T20966] should_failslab+0x5/0x20 [ 437.541773][T20966] kmem_cache_alloc_trace+0x32/0x2c0 [ 437.547500][T20966] ? copy_mount_options+0x43/0x130 [ 437.552623][T20966] copy_mount_options+0x43/0x130 [ 437.557544][T20966] __se_sys_mount+0xa8/0x100 [ 437.562118][T20966] __x64_sys_mount+0x63/0x70 [ 437.566695][T20966] do_syscall_64+0x51/0xb0 [ 437.571100][T20966] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 437.577055][T20966] RIP: 0033:0x45c1d9 [ 437.580924][T20966] Code: Bad RIP value. [ 437.584966][T20966] RSP: 002b:00007fd7f3983c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 437.593458][T20966] RAX: ffffffffffffffda RBX: 000000000001f6c0 RCX: 000000000045c1d9 [ 437.601436][T20966] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000000000000 [ 437.609399][T20966] RBP: 00007fd7f3983ca0 R08: 0000000020000440 R09: 0000000000000000 [ 437.617362][T20966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.625316][T20966] R13: 00007ffce457735f R14: 00007fd7f39849c0 R15: 000000000078bf0c [ 437.640072][T20975] CPU: 0 PID: 20975 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 437.648781][T20975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.658848][T20975] Call Trace: [ 437.662135][T20975] dump_stack+0x10f/0x19d [ 437.666465][T20975] should_fail+0x23c/0x250 [ 437.670880][T20975] __should_failslab+0x81/0x90 [ 437.675632][T20975] ? process_vm_rw_core+0x15a/0x760 [ 437.680825][T20975] should_failslab+0x5/0x20 [ 437.685336][T20975] __kmalloc+0x43/0x2d0 [ 437.689507][T20975] ? idtentry_exit_cond_resched+0x22/0x40 [ 437.695245][T20975] process_vm_rw_core+0x15a/0x760 [ 437.700322][T20975] ? delay_tsc+0x96/0xe0 [ 437.704556][T20975] ? delay_tsc+0x96/0xe0 [ 437.704695][T20985] FAULT_INJECTION: forcing a failure. [ 437.704695][T20985] name failslab, interval 1, probability 0, space 0, times 0 [ 437.708814][T20975] ? rw_copy_check_uvector+0x249/0x280 [ 437.708824][T20975] process_vm_rw+0x14e/0x1d0 [ 437.708839][T20975] ? __this_cpu_preempt_check+0x18/0x20 [ 437.708849][T20975] ? __sb_end_write+0x90/0xe0 [ 437.708946][T20975] ? vfs_write+0x480/0x690 [ 437.746040][T20975] ? __fget_light+0x219/0x260 [ 437.750743][T20975] ? check_preemption_disabled+0x51/0x140 [ 437.756438][T20975] ? debug_smp_processor_id+0x18/0x20 [ 437.761863][T20975] __x64_sys_process_vm_writev+0x76/0x90 [ 437.767483][T20975] do_syscall_64+0x51/0xb0 [ 437.771987][T20975] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 437.777859][T20975] RIP: 0033:0x45c1d9 [ 437.781725][T20975] Code: Bad RIP value. [ 437.785779][T20975] RSP: 002b:00007f7e0baa6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 437.794478][T20975] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 03:43:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:43:17 executing program 3 (fault-call:5 fault-nth:2): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 437.802453][T20975] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000573 [ 437.810423][T20975] RBP: 00007f7e0baa6ca0 R08: 0000000000000275 R09: 0000000000000000 [ 437.818388][T20975] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000002 [ 437.826367][T20975] R13: 00007fff6addee0f R14: 00007f7e0baa79c0 R15: 000000000078bf0c [ 437.834737][T20985] CPU: 1 PID: 20985 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 437.843536][T20985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.853577][T20985] Call Trace: [ 437.856866][T20985] dump_stack+0x10f/0x19d [ 437.861321][T20985] should_fail+0x23c/0x250 [ 437.865829][T20985] __should_failslab+0x81/0x90 [ 437.870583][T20985] should_failslab+0x5/0x20 [ 437.875076][T20985] kmem_cache_alloc+0x29/0x2b0 [ 437.879830][T20985] ? getname_flags+0x84/0x3d0 [ 437.884495][T20985] getname_flags+0x84/0x3d0 [ 437.889115][T20985] user_path_at_empty+0x28/0x50 [ 437.893952][T20985] do_mount+0xbf/0x1c00 [ 437.898165][T20985] ? _copy_from_user+0x93/0xd0 [ 437.902924][T20985] __se_sys_mount+0xd3/0x100 [ 437.907504][T20985] __x64_sys_mount+0x63/0x70 [ 437.912091][T20985] do_syscall_64+0x51/0xb0 [ 437.916504][T20985] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 437.922508][T20985] RIP: 0033:0x45c1d9 [ 437.926381][T20985] Code: Bad RIP value. [ 437.930532][T20985] RSP: 002b:00007fd7f3983c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 437.938927][T20985] RAX: ffffffffffffffda RBX: 000000000001f6c0 RCX: 000000000045c1d9 [ 437.946892][T20985] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000000000000 [ 437.954858][T20985] RBP: 00007fd7f3983ca0 R08: 0000000020000440 R09: 0000000000000000 [ 437.962830][T20985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 437.970790][T20985] R13: 00007ffce457735f R14: 00007fd7f39849c0 R15: 000000000078bf0c 03:43:17 executing program 2 (fault-call:1 fault-nth:3): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xd, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:43:17 executing program 5 (fault-call:1 fault-nth:2): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:17 executing program 3 (fault-call:5 fault-nth:3): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 438.079061][T20999] FAULT_INJECTION: forcing a failure. [ 438.079061][T20999] name failslab, interval 1, probability 0, space 0, times 0 [ 438.085580][T20997] FAULT_INJECTION: forcing a failure. [ 438.085580][T20997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.092097][T20999] CPU: 1 PID: 20999 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 438.113586][T20999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.123627][T20999] Call Trace: [ 438.125220][T21001] FAULT_INJECTION: forcing a failure. [ 438.125220][T21001] name failslab, interval 1, probability 0, space 0, times 0 [ 438.126908][T20999] dump_stack+0x10f/0x19d [ 438.126918][T20999] should_fail+0x23c/0x250 [ 438.126929][T20999] __should_failslab+0x81/0x90 [ 438.126945][T20999] ? kmalloc_array+0x2b/0x40 [ 438.157628][T20999] should_failslab+0x5/0x20 [ 438.162118][T20999] __kmalloc+0x43/0x2d0 [ 438.166266][T20999] kmalloc_array+0x2b/0x40 [ 438.170668][T20999] rw_copy_check_uvector+0x81/0x280 [ 438.175915][T20999] process_vm_rw+0x111/0x1d0 [ 438.180588][T20999] ? __this_cpu_preempt_check+0x18/0x20 [ 438.186113][T20999] ? __sb_end_write+0x90/0xe0 [ 438.190804][T20999] ? vfs_write+0x480/0x690 [ 438.195205][T20999] ? __fget_light+0x219/0x260 [ 438.199949][T20999] ? check_preemption_disabled+0x51/0x140 [ 438.205655][T20999] ? debug_smp_processor_id+0x18/0x20 [ 438.211117][T20999] __x64_sys_process_vm_writev+0x76/0x90 [ 438.216756][T20999] do_syscall_64+0x51/0xb0 [ 438.221156][T20999] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 438.227035][T20999] RIP: 0033:0x45c1d9 [ 438.230904][T20999] Code: Bad RIP value. [ 438.234955][T20999] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 438.243418][T20999] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 438.251372][T20999] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004be [ 438.259460][T20999] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 438.267463][T20999] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000002 [ 438.275428][T20999] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c [ 438.284372][T21001] CPU: 0 PID: 21001 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 438.293132][T21001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.303167][T21001] Call Trace: [ 438.306441][T21001] dump_stack+0x10f/0x19d [ 438.310776][T21001] should_fail+0x23c/0x250 [ 438.315202][T21001] __should_failslab+0x81/0x90 [ 438.319951][T21001] ? tomoyo_encode2+0x1e2/0x350 [ 438.324806][T21001] should_failslab+0x5/0x20 [ 438.329286][T21001] __kmalloc+0x43/0x2d0 [ 438.333432][T21001] tomoyo_encode2+0x1e2/0x350 [ 438.338185][T21001] tomoyo_encode+0x25/0x30 [ 438.342591][T21001] tomoyo_mount_permission+0x1e5/0x740 [ 438.348048][T21001] ? debug_smp_processor_id+0x18/0x20 [ 438.353399][T21001] ? ___cache_free+0x2a/0x510 [ 438.358066][T21001] ? filename_lookup+0x2b6/0x380 [ 438.362988][T21001] tomoyo_sb_mount+0x31/0x40 [ 438.367645][T21001] security_sb_mount+0x5c/0xb0 [ 438.372384][T21001] do_mount+0xf1/0x1c00 [ 438.376516][T21001] ? _copy_from_user+0x93/0xd0 [ 438.381517][T21001] __se_sys_mount+0xd3/0x100 [ 438.386088][T21001] __x64_sys_mount+0x63/0x70 [ 438.390662][T21001] do_syscall_64+0x51/0xb0 [ 438.395066][T21001] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 438.400976][T21001] RIP: 0033:0x45c1d9 [ 438.404868][T21001] Code: Bad RIP value. [ 438.408947][T21001] RSP: 002b:00007fd7f3983c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 438.417338][T21001] RAX: ffffffffffffffda RBX: 000000000001f6c0 RCX: 000000000045c1d9 [ 438.425295][T21001] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000000000000 [ 438.433426][T21001] RBP: 00007fd7f3983ca0 R08: 0000000020000440 R09: 0000000000000000 [ 438.441388][T21001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 438.449345][T21001] R13: 00007ffce457735f R14: 00007fd7f39849c0 R15: 000000000078bf0c [ 438.462950][T20997] CPU: 1 PID: 20997 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 438.471639][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.481679][T20997] Call Trace: [ 438.484972][T20997] dump_stack+0x10f/0x19d [ 438.489284][T20997] should_fail+0x23c/0x250 [ 438.493711][T20997] __alloc_pages_nodemask+0xec/0x390 [ 438.498990][T20997] alloc_pages_vma+0x3e6/0x890 [ 438.503750][T20997] do_anonymous_page+0x206/0xec0 [ 438.508673][T20997] ? __this_cpu_preempt_check+0x18/0x20 [ 438.514284][T20997] ? __rcu_read_unlock+0x4b/0x260 [ 438.519302][T20997] handle_mm_fault+0x1371/0x1930 [ 438.525273][T20997] __get_user_pages+0xac6/0x1150 [ 438.530391][T20997] __get_user_pages_remote+0x113/0x500 [ 438.535839][T20997] ? __ptrace_may_access+0x33e/0x350 [ 438.541106][T20997] pin_user_pages_remote+0x5e/0x80 [ 438.546285][T20997] process_vm_rw_core+0x369/0x760 [ 438.551569][T20997] ? check_preemption_disabled+0x51/0x140 [ 438.557275][T20997] ? check_stack_object+0x61/0x70 [ 438.562373][T20997] ? __virt_addr_valid+0x15a/0x1a0 [ 438.567495][T20997] ? __check_object_size+0x253/0x310 [ 438.572859][T20997] ? _copy_from_user+0x93/0xd0 [ 438.577600][T20997] ? rw_copy_check_uvector+0x249/0x280 [ 438.583147][T20997] process_vm_rw+0x14e/0x1d0 [ 438.587713][T20997] ? __this_cpu_preempt_check+0x18/0x20 [ 438.593229][T20997] ? __sb_end_write+0x90/0xe0 [ 438.597877][T20997] ? vfs_write+0x480/0x690 [ 438.602346][T20997] ? __fget_light+0x219/0x260 [ 438.607045][T20997] ? check_preemption_disabled+0x51/0x140 [ 438.612744][T20997] ? debug_smp_processor_id+0x18/0x20 [ 438.618118][T20997] __x64_sys_process_vm_writev+0x76/0x90 [ 438.623729][T20997] do_syscall_64+0x51/0xb0 [ 438.628125][T20997] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 438.633992][T20997] RIP: 0033:0x45c1d9 [ 438.637860][T20997] Code: Bad RIP value. [ 438.641913][T20997] RSP: 002b:00007f7e0baa6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 438.650468][T20997] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 438.658421][T20997] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000576 [ 438.666369][T20997] RBP: 00007f7e0baa6ca0 R08: 0000000000000275 R09: 0000000000000000 [ 438.674447][T20997] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000003 [ 438.682555][T20997] R13: 00007fff6addee0f R14: 00007f7e0baa79c0 R15: 000000000078bf0c 03:43:19 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom$inet(r2, &(0x7f00000000c0)=""/215, 0xd7, 0x12060, &(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:43:19 executing program 5 (fault-call:1 fault-nth:3): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0x16, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 440.035423][T21014] FAULT_INJECTION: forcing a failure. [ 440.035423][T21014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 440.051331][T21014] CPU: 1 PID: 21014 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 440.060036][T21014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.070083][T21014] Call Trace: [ 440.073372][T21014] dump_stack+0x10f/0x19d [ 440.077688][T21014] should_fail+0x23c/0x250 [ 440.082091][T21014] __alloc_pages_nodemask+0xec/0x390 [ 440.087396][T21014] alloc_pages_vma+0x3e6/0x890 [ 440.092188][T21014] do_anonymous_page+0x206/0xec0 [ 440.097237][T21014] ? __this_cpu_preempt_check+0x18/0x20 [ 440.102775][T21014] ? __rcu_read_unlock+0x4b/0x260 [ 440.107794][T21014] handle_mm_fault+0x1371/0x1930 [ 440.112797][T21014] __get_user_pages+0xac6/0x1150 [ 440.117832][T21014] __get_user_pages_remote+0x113/0x500 [ 440.123261][T21014] ? __ptrace_may_access+0x33e/0x350 [ 440.128517][T21014] pin_user_pages_remote+0x5e/0x80 [ 440.133632][T21014] process_vm_rw_core+0x369/0x760 [ 440.138692][T21014] ? check_preemption_disabled+0x51/0x140 [ 440.144432][T21014] ? check_stack_object+0x61/0x70 [ 440.149561][T21014] ? __virt_addr_valid+0x15a/0x1a0 [ 440.154642][T21014] ? __check_object_size+0x253/0x310 [ 440.159953][T21014] ? _copy_from_user+0x93/0xd0 [ 440.164703][T21014] ? rw_copy_check_uvector+0x249/0x280 [ 440.170151][T21014] process_vm_rw+0x14e/0x1d0 [ 440.174887][T21014] ? __this_cpu_preempt_check+0x18/0x20 [ 440.180406][T21014] ? __sb_end_write+0x90/0xe0 [ 440.185060][T21014] ? vfs_write+0x480/0x690 [ 440.189452][T21014] ? __fget_light+0x219/0x260 [ 440.194103][T21014] ? check_preemption_disabled+0x51/0x140 [ 440.200839][T21014] ? debug_smp_processor_id+0x18/0x20 [ 440.206298][T21014] __x64_sys_process_vm_writev+0x76/0x90 [ 440.211991][T21014] do_syscall_64+0x51/0xb0 [ 440.216423][T21014] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 440.222392][T21014] RIP: 0033:0x45c1d9 [ 440.226259][T21014] Code: Bad RIP value. 03:43:19 executing program 2 (fault-call:1 fault-nth:4): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:19 executing program 3 (fault-call:5 fault-nth:4): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0x144, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:43:19 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) r7 = dup3(r6, r3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x990000, 0xb8a, 0x8d05, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980001, 0xcaa, [], @string=&(0x7f0000000100)=0x6}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r2, r6, 0x4, r9}, 0x10) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 440.230362][T21014] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 440.238835][T21014] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 440.247213][T21014] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004c1 [ 440.255195][T21014] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 440.263306][T21014] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000003 [ 440.271362][T21014] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:19 executing program 5 (fault-call:1 fault-nth:4): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:19 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) [ 440.344729][T21030] FAULT_INJECTION: forcing a failure. [ 440.344729][T21030] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 440.362514][T21030] CPU: 1 PID: 21030 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 440.364233][T21036] FAULT_INJECTION: forcing a failure. [ 440.364233][T21036] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 440.371288][T21030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.371292][T21030] Call Trace: [ 440.371310][T21030] dump_stack+0x10f/0x19d [ 440.371320][T21030] should_fail+0x23c/0x250 [ 440.371331][T21030] __alloc_pages_nodemask+0xec/0x390 [ 440.371375][T21030] alloc_pages_vma+0x3e6/0x890 [ 440.391151][T21035] FAULT_INJECTION: forcing a failure. [ 440.391151][T21035] name failslab, interval 1, probability 0, space 0, times 0 [ 440.394737][T21030] do_anonymous_page+0x206/0xec0 [ 440.394756][T21030] ? __this_cpu_preempt_check+0x18/0x20 [ 440.439779][T21030] ? __rcu_read_unlock+0x4b/0x260 [ 440.444817][T21030] handle_mm_fault+0x1371/0x1930 [ 440.449749][T21030] __get_user_pages+0xac6/0x1150 [ 440.454681][T21030] __get_user_pages_remote+0x113/0x500 [ 440.460209][T21030] ? __ptrace_may_access+0x33e/0x350 [ 440.465518][T21030] pin_user_pages_remote+0x5e/0x80 [ 440.470620][T21030] process_vm_rw_core+0x369/0x760 [ 440.475676][T21030] ? rw_copy_check_uvector+0x249/0x280 [ 440.481233][T21030] process_vm_rw+0x14e/0x1d0 [ 440.485831][T21030] ? __this_cpu_preempt_check+0x18/0x20 [ 440.491406][T21030] ? __sb_end_write+0x90/0xe0 [ 440.496067][T21030] ? vfs_write+0x480/0x690 [ 440.500516][T21030] ? __fget_light+0x219/0x260 [ 440.505631][T21030] ? check_preemption_disabled+0x51/0x140 [ 440.511333][T21030] ? debug_smp_processor_id+0x18/0x20 [ 440.516696][T21030] __x64_sys_process_vm_writev+0x76/0x90 [ 440.522320][T21030] do_syscall_64+0x51/0xb0 [ 440.526727][T21030] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 440.532605][T21030] RIP: 0033:0x45c1d9 [ 440.536507][T21030] Code: Bad RIP value. [ 440.540654][T21030] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 440.549047][T21030] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 440.557022][T21030] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004c4 [ 440.564973][T21030] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 440.572986][T21030] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000004 [ 440.581038][T21030] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c [ 440.593727][T21035] CPU: 0 PID: 21035 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 440.602409][T21035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.612441][T21035] Call Trace: [ 440.615774][T21035] dump_stack+0x10f/0x19d [ 440.620088][T21035] should_fail+0x23c/0x250 [ 440.624485][T21035] __should_failslab+0x81/0x90 [ 440.629231][T21035] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 440.634962][T21035] should_failslab+0x5/0x20 [ 440.639466][T21035] __kmalloc+0x43/0x2d0 [ 440.643606][T21035] ? tomoyo_encode2+0x1e2/0x350 [ 440.648463][T21035] tomoyo_realpath_from_path+0x98/0x3c0 [ 440.653985][T21035] tomoyo_mount_permission+0x228/0x740 [ 440.659534][T21035] ? debug_smp_processor_id+0x18/0x20 [ 440.665072][T21035] ? ___cache_free+0x2a/0x510 [ 440.669809][T21035] ? filename_lookup+0x2b6/0x380 [ 440.674747][T21035] tomoyo_sb_mount+0x31/0x40 [ 440.679326][T21035] security_sb_mount+0x5c/0xb0 [ 440.684091][T21035] do_mount+0xf1/0x1c00 [ 440.688245][T21035] ? _copy_from_user+0x93/0xd0 [ 440.692987][T21035] __se_sys_mount+0xd3/0x100 [ 440.697667][T21035] __x64_sys_mount+0x63/0x70 [ 440.702266][T21035] do_syscall_64+0x51/0xb0 [ 440.706687][T21035] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 440.712573][T21035] RIP: 0033:0x45c1d9 [ 440.717357][T21035] Code: Bad RIP value. [ 440.721427][T21035] RSP: 002b:00007fd7f3983c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 440.729816][T21035] RAX: ffffffffffffffda RBX: 000000000001f6c0 RCX: 000000000045c1d9 [ 440.738016][T21035] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000000000000 [ 440.745980][T21035] RBP: 00007fd7f3983ca0 R08: 0000000020000440 R09: 0000000000000000 [ 440.754048][T21035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 440.762004][T21035] R13: 00007ffce457735f R14: 00007fd7f39849c0 R15: 000000000078bf0c [ 440.773773][T21036] CPU: 1 PID: 21036 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 440.782463][T21036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.792546][T21036] Call Trace: [ 440.795829][T21036] dump_stack+0x10f/0x19d [ 440.800179][T21036] should_fail+0x23c/0x250 [ 440.804589][T21036] __alloc_pages_nodemask+0xec/0x390 [ 440.809877][T21036] alloc_pages_vma+0x3e6/0x890 [ 440.814670][T21036] do_anonymous_page+0x206/0xec0 [ 440.819605][T21036] ? __this_cpu_preempt_check+0x18/0x20 [ 440.825144][T21036] ? __rcu_read_unlock+0x4b/0x260 [ 440.830244][T21036] handle_mm_fault+0x1371/0x1930 [ 440.835183][T21036] __get_user_pages+0xac6/0x1150 [ 440.840168][T21036] __get_user_pages_remote+0x113/0x500 [ 440.845680][T21036] ? __ptrace_may_access+0x33e/0x350 [ 440.851174][T21036] pin_user_pages_remote+0x5e/0x80 [ 440.856292][T21036] process_vm_rw_core+0x369/0x760 [ 440.861332][T21036] ? check_preemption_disabled+0x51/0x140 [ 440.867046][T21036] ? check_stack_object+0x61/0x70 [ 440.872071][T21036] ? __virt_addr_valid+0x15a/0x1a0 [ 440.877275][T21036] ? __check_object_size+0x253/0x310 [ 440.882556][T21036] ? _copy_from_user+0x93/0xd0 [ 440.887323][T21036] ? rw_copy_check_uvector+0x249/0x280 03:43:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0x150, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:43:20 executing program 3 (fault-call:5 fault-nth:5): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 440.888512][T21035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 440.892769][T21036] process_vm_rw+0x14e/0x1d0 [ 440.892790][T21036] ? __this_cpu_preempt_check+0x18/0x20 [ 440.909533][T21036] ? __sb_end_write+0x90/0xe0 [ 440.914208][T21036] ? vfs_write+0x480/0x690 [ 440.918742][T21036] ? __fget_light+0x219/0x260 [ 440.923452][T21036] ? check_preemption_disabled+0x51/0x140 [ 440.929302][T21036] ? debug_smp_processor_id+0x18/0x20 [ 440.934730][T21036] __x64_sys_process_vm_writev+0x76/0x90 [ 440.940362][T21036] do_syscall_64+0x51/0xb0 [ 440.944777][T21036] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 440.950734][T21036] RIP: 0033:0x45c1d9 [ 440.954609][T21036] Code: Bad RIP value. [ 440.958663][T21036] RSP: 002b:00007f7e0baa6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 440.967059][T21036] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 440.975020][T21036] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000579 [ 440.982984][T21036] RBP: 00007f7e0baa6ca0 R08: 0000000000000275 R09: 0000000000000000 03:43:20 executing program 5 (fault-call:1 fault-nth:5): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 440.991053][T21036] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000004 [ 440.995876][T21049] FAULT_INJECTION: forcing a failure. [ 440.995876][T21049] name failslab, interval 1, probability 0, space 0, times 0 [ 440.999756][T21036] R13: 00007fff6addee0f R14: 00007f7e0baa79c0 R15: 000000000078bf0c [ 441.058184][T21053] FAULT_INJECTION: forcing a failure. [ 441.058184][T21053] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 441.071393][T21053] CPU: 0 PID: 21053 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 441.080053][T21053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.091187][T21053] Call Trace: [ 441.094486][T21053] dump_stack+0x10f/0x19d [ 441.098796][T21053] should_fail+0x23c/0x250 [ 441.103219][T21053] __alloc_pages_nodemask+0xec/0x390 [ 441.109185][T21053] kmem_getpages+0x21/0x340 [ 441.113702][T21053] cache_grow_begin+0x76/0x250 [ 441.118440][T21053] cache_alloc_refill+0x326/0x3e0 [ 441.123745][T21053] ? should_fail+0xd6/0x250 [ 441.128333][T21053] ? check_preemption_disabled+0x51/0x140 [ 441.134031][T21053] __kmalloc+0x1eb/0x2d0 [ 441.138401][T21053] ? process_vm_rw_core+0x15a/0x760 [ 441.143593][T21053] process_vm_rw_core+0x15a/0x760 [ 441.148634][T21053] ? delay_tsc+0x96/0xe0 [ 441.153135][T21053] ? rw_copy_check_uvector+0x249/0x280 [ 441.158579][T21053] process_vm_rw+0x14e/0x1d0 [ 441.163169][T21053] ? __this_cpu_preempt_check+0x18/0x20 [ 441.168714][T21053] ? __sb_end_write+0x90/0xe0 [ 441.173380][T21053] ? vfs_write+0x480/0x690 [ 441.177787][T21053] ? __fget_light+0x219/0x260 [ 441.182456][T21053] ? check_preemption_disabled+0x51/0x140 [ 441.188164][T21053] ? debug_smp_processor_id+0x18/0x20 [ 441.193535][T21053] __x64_sys_process_vm_writev+0x76/0x90 [ 441.199184][T21053] do_syscall_64+0x51/0xb0 [ 441.203589][T21053] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 441.209497][T21053] RIP: 0033:0x45c1d9 [ 441.213369][T21053] Code: Bad RIP value. [ 441.217414][T21053] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 441.225944][T21053] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 441.233898][T21053] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004c7 [ 441.241867][T21053] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 441.249815][T21053] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000005 [ 441.257762][T21053] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c [ 441.265720][T21049] CPU: 1 PID: 21049 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 441.274388][T21049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.284431][T21049] Call Trace: [ 441.287734][T21049] dump_stack+0x10f/0x19d [ 441.292115][T21049] should_fail+0x23c/0x250 [ 441.296515][T21049] __should_failslab+0x81/0x90 [ 441.301271][T21049] ? tomoyo_encode2+0x1e2/0x350 [ 441.306106][T21049] should_failslab+0x5/0x20 [ 441.310593][T21049] __kmalloc+0x43/0x2d0 [ 441.314733][T21049] tomoyo_encode2+0x1e2/0x350 [ 441.319411][T21049] tomoyo_realpath_from_path+0x36e/0x3c0 [ 441.325036][T21049] tomoyo_mount_permission+0x228/0x740 [ 441.330583][T21049] ? debug_smp_processor_id+0x18/0x20 [ 441.335946][T21049] ? ___cache_free+0x2a/0x510 [ 441.340678][T21049] ? filename_lookup+0x2b6/0x380 [ 441.345718][T21049] tomoyo_sb_mount+0x31/0x40 [ 441.350390][T21049] security_sb_mount+0x5c/0xb0 [ 441.355143][T21049] do_mount+0xf1/0x1c00 03:43:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa02, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:43:20 executing program 2 (fault-call:1 fault-nth:5): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 441.359285][T21049] ? _copy_from_user+0x93/0xd0 [ 441.364032][T21049] __se_sys_mount+0xd3/0x100 [ 441.368613][T21049] __x64_sys_mount+0x63/0x70 [ 441.373190][T21049] do_syscall_64+0x51/0xb0 [ 441.377590][T21049] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 441.383470][T21049] RIP: 0033:0x45c1d9 [ 441.387346][T21049] Code: Bad RIP value. [ 441.391440][T21049] RSP: 002b:00007fd7f3983c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 441.399878][T21049] RAX: ffffffffffffffda RBX: 000000000001f6c0 RCX: 000000000045c1d9 03:43:20 executing program 5 (fault-call:1 fault-nth:6): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 441.407845][T21049] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000000000000 [ 441.413188][T21064] FAULT_INJECTION: forcing a failure. [ 441.413188][T21064] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 441.415803][T21049] RBP: 00007fd7f3983ca0 R08: 0000000020000440 R09: 0000000000000000 [ 441.415809][T21049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 441.415815][T21049] R13: 00007ffce457735f R14: 00007fd7f39849c0 R15: 000000000078bf0c [ 441.463276][T21064] CPU: 0 PID: 21064 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 441.471973][T21064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.482020][T21064] Call Trace: [ 441.484330][T21069] FAULT_INJECTION: forcing a failure. [ 441.484330][T21069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 441.485299][T21064] dump_stack+0x10f/0x19d [ 441.485311][T21064] should_fail+0x23c/0x250 [ 441.485360][T21064] __alloc_pages_nodemask+0xec/0x390 [ 441.512474][T21064] alloc_pages_vma+0x3e6/0x890 [ 441.517228][T21064] do_anonymous_page+0x206/0xec0 [ 441.522156][T21064] ? __this_cpu_preempt_check+0x18/0x20 [ 441.527691][T21064] ? __rcu_read_unlock+0x4b/0x260 [ 441.532705][T21064] handle_mm_fault+0x1371/0x1930 [ 441.537645][T21064] __get_user_pages+0xac6/0x1150 [ 441.542725][T21064] __get_user_pages_remote+0x113/0x500 [ 441.548230][T21064] ? __ptrace_may_access+0x33e/0x350 [ 441.553538][T21064] pin_user_pages_remote+0x5e/0x80 [ 441.558640][T21064] process_vm_rw_core+0x369/0x760 [ 441.563657][T21064] ? rw_copy_check_uvector+0x249/0x280 [ 441.569101][T21064] process_vm_rw+0x14e/0x1d0 [ 441.569376][T21049] ERROR: Out of memory at tomoyo_realpath_from_path. [ 441.573689][T21064] ? __this_cpu_preempt_check+0x18/0x20 [ 441.573698][T21064] ? __sb_end_write+0x90/0xe0 [ 441.573713][T21064] ? vfs_write+0x480/0x690 [ 441.594997][T21064] ? __fget_light+0x219/0x260 [ 441.599675][T21064] ? check_preemption_disabled+0x51/0x140 [ 441.605406][T21064] ? debug_smp_processor_id+0x18/0x20 [ 441.610767][T21064] __x64_sys_process_vm_writev+0x76/0x90 [ 441.616389][T21064] do_syscall_64+0x51/0xb0 [ 441.620801][T21064] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 441.626770][T21064] RIP: 0033:0x45c1d9 [ 441.630644][T21064] Code: Bad RIP value. [ 441.634713][T21064] RSP: 002b:00007f7e0baa6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 441.643184][T21064] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 441.651141][T21064] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 000000000000057c 03:43:21 executing program 3 (fault-call:5 fault-nth:6): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 441.659134][T21064] RBP: 00007f7e0baa6ca0 R08: 0000000000000275 R09: 0000000000000000 [ 441.667114][T21064] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000005 [ 441.675074][T21064] R13: 00007fff6addee0f R14: 00007f7e0baa79c0 R15: 000000000078bf0c [ 441.692027][T21069] CPU: 1 PID: 21069 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 441.701216][T21069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.711515][T21069] Call Trace: [ 441.714793][T21069] dump_stack+0x10f/0x19d [ 441.719114][T21069] should_fail+0x23c/0x250 [ 441.723518][T21069] __alloc_pages_nodemask+0xec/0x390 [ 441.728849][T21069] alloc_pages_vma+0x3e6/0x890 [ 441.733634][T21069] do_anonymous_page+0x206/0xec0 [ 441.738556][T21069] ? __this_cpu_preempt_check+0x18/0x20 [ 441.744231][T21069] ? __rcu_read_unlock+0x4b/0x260 [ 441.749285][T21069] handle_mm_fault+0x1371/0x1930 [ 441.754214][T21069] __get_user_pages+0xac6/0x1150 [ 441.759148][T21069] __get_user_pages_remote+0x113/0x500 [ 441.764665][T21069] ? __ptrace_may_access+0x33e/0x350 [ 441.769963][T21069] pin_user_pages_remote+0x5e/0x80 [ 441.775528][T21069] process_vm_rw_core+0x369/0x760 [ 441.780543][T21069] ? check_preemption_disabled+0x51/0x140 [ 441.786255][T21069] ? check_stack_object+0x61/0x70 [ 441.791262][T21069] ? __virt_addr_valid+0x15a/0x1a0 [ 441.796358][T21069] ? __check_object_size+0x253/0x310 [ 441.801630][T21069] ? _copy_from_user+0x93/0xd0 [ 441.806426][T21069] ? rw_copy_check_uvector+0x249/0x280 [ 441.811872][T21069] process_vm_rw+0x14e/0x1d0 [ 441.814098][T21077] FAULT_INJECTION: forcing a failure. [ 441.814098][T21077] name failslab, interval 1, probability 0, space 0, times 0 [ 441.816452][T21069] ? __this_cpu_preempt_check+0x18/0x20 [ 441.816463][T21069] ? __sb_end_write+0x90/0xe0 [ 441.816474][T21069] ? vfs_write+0x480/0x690 [ 441.816491][T21069] ? __fget_light+0x219/0x260 [ 441.848304][T21069] ? check_preemption_disabled+0x51/0x140 [ 441.854031][T21069] ? debug_smp_processor_id+0x18/0x20 [ 441.859395][T21069] __x64_sys_process_vm_writev+0x76/0x90 [ 441.865134][T21069] do_syscall_64+0x51/0xb0 [ 441.869652][T21069] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 441.875521][T21069] RIP: 0033:0x45c1d9 [ 441.879385][T21069] Code: Bad RIP value. [ 441.883424][T21069] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 441.891826][T21069] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 441.899775][T21069] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004ca [ 441.907721][T21069] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 441.915698][T21069] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000006 [ 441.923653][T21069] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c [ 441.931647][T21077] CPU: 0 PID: 21077 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 441.940310][T21077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.950360][T21077] Call Trace: [ 441.953687][T21077] dump_stack+0x10f/0x19d [ 441.958011][T21077] should_fail+0x23c/0x250 [ 441.962418][T21077] __should_failslab+0x81/0x90 [ 441.967173][T21077] ? tomoyo_encode2+0x1e2/0x350 [ 441.972043][T21077] should_failslab+0x5/0x20 [ 441.976528][T21077] __kmalloc+0x43/0x2d0 [ 441.980757][T21077] tomoyo_encode2+0x1e2/0x350 [ 441.985426][T21077] tomoyo_encode+0x25/0x30 [ 441.989831][T21077] tomoyo_mount_permission+0x360/0x740 [ 441.995363][T21077] ? filename_lookup+0x2b6/0x380 [ 442.000292][T21077] tomoyo_sb_mount+0x31/0x40 [ 442.004867][T21077] security_sb_mount+0x5c/0xb0 [ 442.009616][T21077] do_mount+0xf1/0x1c00 [ 442.013761][T21077] ? _copy_from_user+0x93/0xd0 [ 442.018513][T21077] __se_sys_mount+0xd3/0x100 [ 442.023091][T21077] __x64_sys_mount+0x63/0x70 [ 442.027671][T21077] do_syscall_64+0x51/0xb0 [ 442.032080][T21077] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 442.037955][T21077] RIP: 0033:0x45c1d9 [ 442.041826][T21077] Code: Bad RIP value. [ 442.045873][T21077] RSP: 002b:00007fd7f3983c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 442.054278][T21077] RAX: ffffffffffffffda RBX: 000000000001f6c0 RCX: 000000000045c1d9 03:43:21 executing program 2 (fault-call:1 fault-nth:6): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:21 executing program 5 (fault-call:1 fault-nth:7): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 442.062279][T21077] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000000000000 [ 442.070242][T21077] RBP: 00007fd7f3983ca0 R08: 0000000020000440 R09: 0000000000000000 [ 442.078202][T21077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 442.085973][T21081] FAULT_INJECTION: forcing a failure. [ 442.085973][T21081] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 442.086178][T21077] R13: 00007ffce457735f R14: 00007fd7f39849c0 R15: 000000000078bf0c [ 442.115616][T21081] CPU: 1 PID: 21081 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 442.124298][T21081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.134377][T21081] Call Trace: [ 442.137695][T21081] dump_stack+0x10f/0x19d [ 442.139609][T21084] FAULT_INJECTION: forcing a failure. [ 442.139609][T21084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 442.142012][T21081] should_fail+0x23c/0x250 [ 442.142082][T21081] __alloc_pages_nodemask+0xec/0x390 [ 442.165106][T21081] alloc_pages_vma+0x3e6/0x890 [ 442.169866][T21081] do_anonymous_page+0x206/0xec0 [ 442.174793][T21081] ? __this_cpu_preempt_check+0x18/0x20 [ 442.180327][T21081] ? __rcu_read_unlock+0x4b/0x260 [ 442.185339][T21081] handle_mm_fault+0x1371/0x1930 [ 442.190295][T21081] __get_user_pages+0xac6/0x1150 [ 442.195246][T21081] __get_user_pages_remote+0x113/0x500 [ 442.200684][T21081] ? __ptrace_may_access+0x33e/0x350 [ 442.205953][T21081] pin_user_pages_remote+0x5e/0x80 [ 442.211058][T21081] process_vm_rw_core+0x369/0x760 [ 442.216071][T21081] ? check_preemption_disabled+0x51/0x140 [ 442.221771][T21081] ? check_stack_object+0x61/0x70 [ 442.226829][T21081] ? __virt_addr_valid+0x15a/0x1a0 [ 442.231969][T21081] ? __check_object_size+0x253/0x310 [ 442.237283][T21081] ? _copy_from_user+0x93/0xd0 [ 442.242029][T21081] ? rw_copy_check_uvector+0x249/0x280 [ 442.247467][T21081] process_vm_rw+0x14e/0x1d0 [ 442.252114][T21081] ? __this_cpu_preempt_check+0x18/0x20 [ 442.257767][T21081] ? __sb_end_write+0x90/0xe0 [ 442.262427][T21081] ? vfs_write+0x480/0x690 [ 442.266832][T21081] ? __fget_light+0x219/0x260 [ 442.271493][T21081] ? check_preemption_disabled+0x51/0x140 [ 442.277199][T21081] ? debug_smp_processor_id+0x18/0x20 [ 442.282562][T21081] __x64_sys_process_vm_writev+0x76/0x90 [ 442.288214][T21081] do_syscall_64+0x51/0xb0 [ 442.292611][T21081] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 442.298477][T21081] RIP: 0033:0x45c1d9 [ 442.302343][T21081] Code: Bad RIP value. [ 442.306383][T21081] RSP: 002b:00007f7e0baa6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 442.314799][T21081] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 442.322748][T21081] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 000000000000057f [ 442.330695][T21081] RBP: 00007f7e0baa6ca0 R08: 0000000000000275 R09: 0000000000000000 [ 442.338670][T21081] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000006 [ 442.346637][T21081] R13: 00007fff6addee0f R14: 00007f7e0baa79c0 R15: 000000000078bf0c [ 442.354611][T21084] CPU: 0 PID: 21084 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 442.363276][T21084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.373415][T21084] Call Trace: [ 442.376698][T21084] dump_stack+0x10f/0x19d [ 442.381033][T21084] should_fail+0x23c/0x250 [ 442.385445][T21084] __alloc_pages_nodemask+0xec/0x390 [ 442.390798][T21084] alloc_pages_vma+0x3e6/0x890 [ 442.395565][T21084] do_anonymous_page+0x206/0xec0 [ 442.400501][T21084] ? __this_cpu_preempt_check+0x18/0x20 [ 442.406045][T21084] ? __rcu_read_unlock+0x4b/0x260 [ 442.411088][T21084] handle_mm_fault+0x1371/0x1930 [ 442.416112][T21084] __get_user_pages+0xac6/0x1150 [ 442.421049][T21084] __get_user_pages_remote+0x113/0x500 [ 442.426541][T21084] ? __ptrace_may_access+0x33e/0x350 [ 442.431811][T21084] pin_user_pages_remote+0x5e/0x80 [ 442.436918][T21084] process_vm_rw_core+0x369/0x760 [ 442.441941][T21084] ? check_preemption_disabled+0x51/0x140 [ 442.447660][T21084] ? check_stack_object+0x61/0x70 [ 442.452670][T21084] ? __virt_addr_valid+0x15a/0x1a0 [ 442.457808][T21084] ? __check_object_size+0x253/0x310 [ 442.463162][T21084] ? _copy_from_user+0x93/0xd0 [ 442.467923][T21084] ? rw_copy_check_uvector+0x249/0x280 [ 442.473368][T21084] process_vm_rw+0x14e/0x1d0 [ 442.478011][T21084] ? __this_cpu_preempt_check+0x18/0x20 [ 442.483611][T21084] ? __sb_end_write+0x90/0xe0 [ 442.488366][T21084] ? vfs_write+0x480/0x690 [ 442.492770][T21084] ? __fget_light+0x219/0x260 [ 442.497440][T21084] ? check_preemption_disabled+0x51/0x140 [ 442.503150][T21084] ? debug_smp_processor_id+0x18/0x20 [ 442.508516][T21084] __x64_sys_process_vm_writev+0x76/0x90 [ 442.514139][T21084] do_syscall_64+0x51/0xb0 [ 442.518548][T21084] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 442.524535][T21084] RIP: 0033:0x45c1d9 [ 442.528410][T21084] Code: Bad RIP value. [ 442.532453][T21084] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 442.540836][T21084] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 442.548782][T21084] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004cd [ 442.556734][T21084] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 442.564680][T21084] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000007 [ 442.572679][T21084] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:22 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$tipc(r2, &(0x7f0000000300)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x2}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="b1ee70678cd5132e13b4d4970a6ad219162c09b9b353b4f2d947d2f1dffbe3ad1aa5d9e543576288a68d3230f5cf4e01b8c4743f7951a371c438cdc89ddb39a369b7c0f55667d658116a471df060426a719c503daac905a8251e329ad879e8915ebe734421cdd7a2f035ce3ebb3b7b00ce189eff6b19c0edba8a2bc2901628054e324591d3459ce666ba2079b15e66391f0f3ad8748b0f47cf0ffd4801dd", 0x9e}], 0x1, &(0x7f0000000200)="a35fe954f4cf57bdcdbf3e3b72aa5795259d68c57f5d03722bba0b01fbd39be64c999d6c14b170c0b8c0ebf92fec4b05ddb981a5b9d632a348edce8006afa3a694470ee6074d533867eef2b546e301e5a4cb1e44da7cae0b53ca536d9d8657a2c38841fe917eea9059753d088224e006c92395f5263ec8d65a150076bd8dec32db93a3a6f8a0d794f77e4ebb819c0f800e552b83a022f29531f8ccc43c1726358e6b5bf77b3740a43cd1b56350a1570fe2d1b64ebfe87b05c463f39ed397b31b2a0f5f137172225db02883e3dbf8cbbd0f71119ea4863ca759fa1644af473e1f37a320312206ad38cc653f2f64687d4941e2", 0xf2, 0x845}, 0x44000000) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x4}) 03:43:22 executing program 2 (fault-call:1 fault-nth:7): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:22 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) 03:43:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:43:22 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:22 executing program 5 (fault-call:1 fault-nth:8): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 443.379768][T21101] overlayfs: bad mount option "redirect_dir=./file0" [ 443.388011][T21100] FAULT_INJECTION: forcing a failure. [ 443.388011][T21100] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.388198][T21102] FAULT_INJECTION: forcing a failure. [ 443.388198][T21102] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.435593][T21102] CPU: 0 PID: 21102 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 443.444289][T21102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.454432][T21102] Call Trace: [ 443.457712][T21102] dump_stack+0x10f/0x19d [ 443.462040][T21102] should_fail+0x23c/0x250 [ 443.466452][T21102] __alloc_pages_nodemask+0xec/0x390 [ 443.471734][T21102] alloc_pages_vma+0x3e6/0x890 [ 443.476504][T21102] do_anonymous_page+0x206/0xec0 [ 443.481499][T21102] ? __this_cpu_preempt_check+0x18/0x20 [ 443.487028][T21102] ? __rcu_read_unlock+0x4b/0x260 [ 443.492068][T21102] handle_mm_fault+0x1371/0x1930 [ 443.497016][T21102] __get_user_pages+0xac6/0x1150 [ 443.501996][T21102] __get_user_pages_remote+0x113/0x500 [ 443.507444][T21102] ? __ptrace_may_access+0x33e/0x350 [ 443.512804][T21102] pin_user_pages_remote+0x5e/0x80 [ 443.517895][T21102] process_vm_rw_core+0x369/0x760 [ 443.523004][T21102] ? check_preemption_disabled+0x51/0x140 [ 443.528724][T21102] ? check_stack_object+0x61/0x70 [ 443.533725][T21102] ? __virt_addr_valid+0x15a/0x1a0 [ 443.538815][T21102] ? __check_object_size+0x253/0x310 [ 443.544085][T21102] ? _copy_from_user+0x93/0xd0 [ 443.549224][T21102] ? rw_copy_check_uvector+0x249/0x280 [ 443.554658][T21102] process_vm_rw+0x14e/0x1d0 [ 443.559239][T21102] ? __this_cpu_preempt_check+0x18/0x20 [ 443.564817][T21102] ? __sb_end_write+0x90/0xe0 [ 443.569479][T21102] ? vfs_write+0x480/0x690 [ 443.573880][T21102] ? __fget_light+0x219/0x260 [ 443.578595][T21102] ? check_preemption_disabled+0x51/0x140 [ 443.584298][T21102] ? debug_smp_processor_id+0x18/0x20 [ 443.589726][T21102] __x64_sys_process_vm_writev+0x76/0x90 [ 443.595346][T21102] do_syscall_64+0x51/0xb0 [ 443.599747][T21102] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 443.605620][T21102] RIP: 0033:0x45c1d9 [ 443.609502][T21102] Code: Bad RIP value. [ 443.613636][T21102] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 443.622036][T21102] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 03:43:23 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x2, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:23 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2040080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x154, r5, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d1d3ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x775c263c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d16b4a6}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73d6550e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b4e1a7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc6164a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ff4c4c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdcf134f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa636c50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73fd27ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73b598dc}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ebe9d34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb7439ed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x180790c4}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x8) [ 443.630030][T21102] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004d0 [ 443.637988][T21102] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 443.646814][T21102] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000008 [ 443.654816][T21102] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c [ 443.679426][T21100] CPU: 1 PID: 21100 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 443.688116][T21100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.698154][T21100] Call Trace: [ 443.701436][T21100] dump_stack+0x10f/0x19d [ 443.705775][T21100] should_fail+0x23c/0x250 [ 443.710180][T21100] __alloc_pages_nodemask+0xec/0x390 [ 443.715453][T21100] alloc_pages_vma+0x3e6/0x890 [ 443.720206][T21100] do_anonymous_page+0x206/0xec0 [ 443.725128][T21100] ? __this_cpu_preempt_check+0x18/0x20 [ 443.730665][T21100] ? __rcu_read_unlock+0x4b/0x260 [ 443.735691][T21100] handle_mm_fault+0x1371/0x1930 [ 443.740617][T21100] __get_user_pages+0xac6/0x1150 [ 443.745547][T21100] __get_user_pages_remote+0x113/0x500 [ 443.751049][T21100] ? __ptrace_may_access+0x33e/0x350 [ 443.756366][T21100] pin_user_pages_remote+0x5e/0x80 [ 443.761454][T21100] process_vm_rw_core+0x369/0x760 [ 443.766502][T21100] ? check_preemption_disabled+0x51/0x140 [ 443.772390][T21100] ? check_stack_object+0x61/0x70 [ 443.777442][T21100] ? __virt_addr_valid+0x15a/0x1a0 [ 443.782529][T21100] ? __check_object_size+0x253/0x310 [ 443.787877][T21100] ? _copy_from_user+0x93/0xd0 [ 443.792612][T21100] ? rw_copy_check_uvector+0x249/0x280 [ 443.798041][T21100] process_vm_rw+0x14e/0x1d0 [ 443.802604][T21100] ? __this_cpu_preempt_check+0x18/0x20 [ 443.808273][T21100] ? __sb_end_write+0x90/0xe0 [ 443.812964][T21100] ? vfs_write+0x480/0x690 [ 443.817362][T21100] ? __fget_light+0x219/0x260 [ 443.822024][T21100] ? check_preemption_disabled+0x51/0x140 [ 443.827727][T21100] ? debug_smp_processor_id+0x18/0x20 [ 443.833088][T21100] __x64_sys_process_vm_writev+0x76/0x90 [ 443.838707][T21100] do_syscall_64+0x51/0xb0 [ 443.843140][T21100] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 443.849017][T21100] RIP: 0033:0x45c1d9 [ 443.853151][T21100] Code: Bad RIP value. [ 443.857289][T21100] RSP: 002b:00007f7e0baa6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 443.865826][T21100] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 443.873778][T21100] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000582 03:43:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x20000150) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:43:23 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x3, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 443.881831][T21100] RBP: 00007f7e0baa6ca0 R08: 0000000000000275 R09: 0000000000000000 [ 443.889799][T21100] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000007 [ 443.897749][T21100] R13: 00007fff6addee0f R14: 00007f7e0baa79c0 R15: 000000000078bf0c 03:43:23 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x4, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:23 executing program 2 (fault-call:1 fault-nth:8): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x7ffff000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 444.063293][T21138] FAULT_INJECTION: forcing a failure. [ 444.063293][T21138] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 444.078029][T21138] CPU: 1 PID: 21138 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 444.086700][T21138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.096815][T21138] Call Trace: [ 444.100102][T21138] dump_stack+0x10f/0x19d [ 444.104457][T21138] should_fail+0x23c/0x250 [ 444.108857][T21138] __alloc_pages_nodemask+0xec/0x390 [ 444.114131][T21138] alloc_pages_vma+0x3e6/0x890 [ 444.118928][T21138] do_anonymous_page+0x206/0xec0 [ 444.123859][T21138] ? __this_cpu_preempt_check+0x18/0x20 [ 444.129393][T21138] ? __rcu_read_unlock+0x4b/0x260 [ 444.134409][T21138] handle_mm_fault+0x1371/0x1930 [ 444.139335][T21138] __get_user_pages+0xac6/0x1150 [ 444.144271][T21138] __get_user_pages_remote+0x113/0x500 [ 444.149719][T21138] ? __ptrace_may_access+0x33e/0x350 [ 444.155055][T21138] pin_user_pages_remote+0x5e/0x80 03:43:23 executing program 5 (fault-call:1 fault-nth:9): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 444.160278][T21138] process_vm_rw_core+0x369/0x760 [ 444.165297][T21138] ? check_preemption_disabled+0x51/0x140 [ 444.171075][T21138] ? check_stack_object+0x61/0x70 [ 444.176086][T21138] ? __virt_addr_valid+0x15a/0x1a0 [ 444.181203][T21138] ? __check_object_size+0x253/0x310 [ 444.186535][T21138] ? _copy_from_user+0x93/0xd0 [ 444.191292][T21138] ? rw_copy_check_uvector+0x249/0x280 [ 444.196746][T21138] process_vm_rw+0x14e/0x1d0 [ 444.201328][T21138] ? __this_cpu_preempt_check+0x18/0x20 [ 444.206861][T21138] ? __sb_end_write+0x90/0xe0 [ 444.211612][T21138] ? vfs_write+0x480/0x690 [ 444.216071][T21138] ? __fget_light+0x219/0x260 [ 444.220740][T21138] ? check_preemption_disabled+0x51/0x140 [ 444.224168][T21144] FAULT_INJECTION: forcing a failure. [ 444.224168][T21144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 444.226463][T21138] ? debug_smp_processor_id+0x18/0x20 [ 444.226478][T21138] __x64_sys_process_vm_writev+0x76/0x90 [ 444.226493][T21138] do_syscall_64+0x51/0xb0 [ 444.255301][T21138] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 444.261183][T21138] RIP: 0033:0x45c1d9 [ 444.265214][T21138] Code: Bad RIP value. [ 444.269256][T21138] RSP: 002b:00007f7e0baa6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 444.277652][T21138] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 444.285742][T21138] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000585 [ 444.293791][T21138] RBP: 00007f7e0baa6ca0 R08: 0000000000000275 R09: 0000000000000000 [ 444.301783][T21138] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000008 [ 444.309757][T21138] R13: 00007fff6addee0f R14: 00007f7e0baa79c0 R15: 000000000078bf0c [ 444.317721][T21144] CPU: 0 PID: 21144 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 444.326387][T21144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.336428][T21144] Call Trace: [ 444.339718][T21144] dump_stack+0x10f/0x19d [ 444.344040][T21144] should_fail+0x23c/0x250 [ 444.348449][T21144] __alloc_pages_nodemask+0xec/0x390 [ 444.353725][T21144] alloc_pages_vma+0x3e6/0x890 [ 444.358477][T21144] do_anonymous_page+0x206/0xec0 [ 444.363430][T21144] ? __this_cpu_preempt_check+0x18/0x20 [ 444.368981][T21144] ? __rcu_read_unlock+0x4b/0x260 [ 444.373999][T21144] handle_mm_fault+0x1371/0x1930 [ 444.379384][T21144] __get_user_pages+0xac6/0x1150 [ 444.384321][T21144] __get_user_pages_remote+0x113/0x500 [ 444.389901][T21144] ? __ptrace_may_access+0x33e/0x350 [ 444.395245][T21144] pin_user_pages_remote+0x5e/0x80 [ 444.400356][T21144] process_vm_rw_core+0x369/0x760 [ 444.405369][T21144] ? check_preemption_disabled+0x51/0x140 [ 444.411087][T21144] ? check_stack_object+0x61/0x70 [ 444.416131][T21144] ? __virt_addr_valid+0x15a/0x1a0 [ 444.421250][T21144] ? __check_object_size+0x253/0x310 [ 444.426532][T21144] ? _copy_from_user+0x93/0xd0 [ 444.431293][T21144] ? rw_copy_check_uvector+0x249/0x280 [ 444.437225][T21144] process_vm_rw+0x14e/0x1d0 [ 444.441810][T21144] ? __this_cpu_preempt_check+0x18/0x20 [ 444.447354][T21144] ? __sb_end_write+0x90/0xe0 [ 444.452066][T21144] ? vfs_write+0x480/0x690 [ 444.456559][T21144] ? __fget_light+0x219/0x260 [ 444.461318][T21144] ? check_preemption_disabled+0x51/0x140 [ 444.467054][T21144] ? debug_smp_processor_id+0x18/0x20 [ 444.472487][T21144] __x64_sys_process_vm_writev+0x76/0x90 [ 444.478111][T21144] do_syscall_64+0x51/0xb0 [ 444.482520][T21144] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 444.488406][T21144] RIP: 0033:0x45c1d9 [ 444.492277][T21144] Code: Bad RIP value. [ 444.496320][T21144] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 444.504713][T21144] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 444.512679][T21144] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004d3 [ 444.520932][T21144] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 444.528952][T21144] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000009 [ 444.536909][T21144] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:25 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:43:25 executing program 2 (fault-call:1 fault-nth:9): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:25 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x5, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x2}}, r1}}, 0x48) 03:43:25 executing program 5 (fault-call:1 fault-nth:10): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 446.442098][T21165] FAULT_INJECTION: forcing a failure. [ 446.442098][T21165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 446.443536][T21163] FAULT_INJECTION: forcing a failure. [ 446.443536][T21163] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 446.469038][T21163] CPU: 1 PID: 21163 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 446.477692][T21163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.487728][T21163] Call Trace: [ 446.491072][T21163] dump_stack+0x10f/0x19d [ 446.495390][T21163] should_fail+0x23c/0x250 [ 446.499802][T21163] __alloc_pages_nodemask+0xec/0x390 [ 446.505076][T21163] alloc_pages_vma+0x3e6/0x890 [ 446.509827][T21163] wp_page_copy+0x16e/0x1640 [ 446.514426][T21163] ? reuse_swap_page+0x63c/0xa60 [ 446.519354][T21163] do_wp_page+0x9b3/0xd30 [ 446.523671][T21163] handle_mm_fault+0x16f5/0x1930 [ 446.528604][T21163] __get_user_pages+0xac6/0x1150 [ 446.533627][T21163] __get_user_pages_remote+0x113/0x500 [ 446.539071][T21163] ? __ptrace_may_access+0x33e/0x350 [ 446.544341][T21163] pin_user_pages_remote+0x5e/0x80 [ 446.549440][T21163] process_vm_rw_core+0x369/0x760 [ 446.554556][T21163] ? rw_copy_check_uvector+0x249/0x280 [ 446.559997][T21163] process_vm_rw+0x14e/0x1d0 [ 446.564573][T21163] ? __this_cpu_preempt_check+0x18/0x20 [ 446.570103][T21163] ? __sb_end_write+0x90/0xe0 [ 446.574762][T21163] ? vfs_write+0x480/0x690 [ 446.579188][T21163] ? __fget_light+0x219/0x260 [ 446.583845][T21163] ? check_preemption_disabled+0x51/0x140 [ 446.589574][T21163] ? debug_smp_processor_id+0x18/0x20 [ 446.594931][T21163] __x64_sys_process_vm_writev+0x76/0x90 [ 446.600546][T21163] do_syscall_64+0x51/0xb0 [ 446.604976][T21163] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 446.610854][T21163] RIP: 0033:0x45c1d9 [ 446.614749][T21163] Code: Bad RIP value. [ 446.618862][T21163] RSP: 002b:00007f7e0baa6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 446.627262][T21163] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 446.635309][T21163] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000588 [ 446.643636][T21163] RBP: 00007f7e0baa6ca0 R08: 0000000000000275 R09: 0000000000000000 [ 446.651585][T21163] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000009 [ 446.659542][T21163] R13: 00007fff6addee0f R14: 00007f7e0baa79c0 R15: 000000000078bf0c [ 446.667519][T21165] CPU: 0 PID: 21165 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 446.676221][T21165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.686266][T21165] Call Trace: [ 446.689550][T21165] dump_stack+0x10f/0x19d [ 446.693920][T21165] should_fail+0x23c/0x250 [ 446.698356][T21165] __alloc_pages_nodemask+0xec/0x390 [ 446.703656][T21165] alloc_pages_vma+0x3e6/0x890 [ 446.708408][T21165] do_anonymous_page+0x206/0xec0 [ 446.713402][T21165] ? __this_cpu_preempt_check+0x18/0x20 [ 446.719055][T21165] ? __rcu_read_unlock+0x4b/0x260 [ 446.724080][T21165] handle_mm_fault+0x1371/0x1930 [ 446.729063][T21165] __get_user_pages+0xac6/0x1150 [ 446.734056][T21165] __get_user_pages_remote+0x113/0x500 [ 446.739555][T21165] ? __ptrace_may_access+0x33e/0x350 [ 446.744834][T21165] pin_user_pages_remote+0x5e/0x80 [ 446.749933][T21165] process_vm_rw_core+0x369/0x760 [ 446.754978][T21165] ? rw_copy_check_uvector+0x249/0x280 [ 446.760455][T21165] process_vm_rw+0x14e/0x1d0 [ 446.765039][T21165] ? __this_cpu_preempt_check+0x18/0x20 [ 446.770577][T21165] ? __sb_end_write+0x90/0xe0 [ 446.775289][T21165] ? vfs_write+0x480/0x690 [ 446.779734][T21165] ? __fget_light+0x219/0x260 [ 446.784399][T21165] ? check_preemption_disabled+0x51/0x140 [ 446.790185][T21165] ? debug_smp_processor_id+0x18/0x20 [ 446.795544][T21165] __x64_sys_process_vm_writev+0x76/0x90 [ 446.801163][T21165] do_syscall_64+0x51/0xb0 [ 446.805582][T21165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 446.811492][T21165] RIP: 0033:0x45c1d9 [ 446.815362][T21165] Code: Bad RIP value. [ 446.819496][T21165] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 446.827898][T21165] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 446.835964][T21165] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004d6 03:43:26 executing program 0: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10200, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r4) r6 = fcntl$dupfd(r4, 0x406, r0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x54b, 0x1, 0x4, 0x0, 0x7, {r2, r3/1000+10000}, {0x4, 0x2, 0x3, 0xfe, 0xc0, 0x40, "56c18a11"}, 0xfffffff9, 0x3, @userptr=0xf3, 0x7, 0x0, r6}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:43:26 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x6, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:26 executing program 2 (fault-call:1 fault-nth:10): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 446.843930][T21165] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 446.851875][T21165] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000000a [ 446.859819][T21165] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:26 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x7, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:26 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000100)={0x4, 0x10, "4a7adf5e78ca48549220d60b8850a8f292315578fd034907", {0x4, 0x2}}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80900, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x8003, 0x0, 0x2}) [ 446.937733][T21182] FAULT_INJECTION: forcing a failure. [ 446.937733][T21182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 446.989746][T21182] CPU: 0 PID: 21182 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 446.998469][T21182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.008506][T21182] Call Trace: [ 447.012027][T21182] dump_stack+0x10f/0x19d [ 447.016346][T21182] should_fail+0x23c/0x250 [ 447.020757][T21182] __alloc_pages_nodemask+0xec/0x390 [ 447.026044][T21182] alloc_pages_vma+0x3e6/0x890 [ 447.030803][T21182] do_anonymous_page+0x206/0xec0 [ 447.035782][T21182] ? __this_cpu_preempt_check+0x18/0x20 [ 447.041329][T21182] ? __rcu_read_unlock+0x4b/0x260 [ 447.046353][T21182] handle_mm_fault+0x1371/0x1930 [ 447.051285][T21182] __get_user_pages+0xac6/0x1150 [ 447.056222][T21182] __get_user_pages_remote+0x113/0x500 [ 447.061673][T21182] ? __ptrace_may_access+0x33e/0x350 [ 447.066946][T21182] pin_user_pages_remote+0x5e/0x80 [ 447.072110][T21182] process_vm_rw_core+0x369/0x760 [ 447.077210][T21182] ? rw_copy_check_uvector+0x249/0x280 [ 447.082660][T21182] process_vm_rw+0x14e/0x1d0 [ 447.087241][T21182] ? __this_cpu_preempt_check+0x18/0x20 [ 447.092820][T21182] ? __sb_end_write+0x90/0xe0 [ 447.097494][T21182] ? vfs_write+0x480/0x690 [ 447.101901][T21182] ? __fget_light+0x219/0x260 [ 447.106564][T21182] ? check_preemption_disabled+0x51/0x140 [ 447.112274][T21182] ? debug_smp_processor_id+0x18/0x20 [ 447.117711][T21182] __x64_sys_process_vm_writev+0x76/0x90 [ 447.123326][T21182] do_syscall_64+0x51/0xb0 [ 447.127812][T21182] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 447.133693][T21182] RIP: 0033:0x45c1d9 03:43:26 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x0, 0x31384142}}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', r8, 0x29, 0x8, 0x81, 0x6, 0x12, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, 0x10, 0x7, 0x1, 0x4}}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r11) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x4e22, 0x8, 0x4e24, 0x7, 0xa, 0x20, 0x0, 0x88, r9, r11}, {0x252af1e3, 0x4, 0x3f, 0x7ff, 0xd16, 0x3, 0x4, 0x4}, {0x6, 0x6, 0x1, 0x5}, 0x5, 0x6e6bbd, 0x2, 0x0, 0x2, 0x1}, {{@in6=@ipv4={[], [], @remote}, 0x4d6, 0xff}, 0x2, @in=@multicast1, 0x3501, 0x1, 0x3, 0x7f, 0x4, 0x7f, 0x3f}}, 0xe8) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x4}) 03:43:26 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x8, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 447.137569][T21182] Code: Bad RIP value. [ 447.141624][T21182] RSP: 002b:00007f7e0baa6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 447.150130][T21182] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 447.158092][T21182] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 000000000000058b [ 447.166048][T21182] RBP: 00007f7e0baa6ca0 R08: 0000000000000275 R09: 0000000000000000 [ 447.174004][T21182] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000000a [ 447.182033][T21182] R13: 00007fff6addee0f R14: 00007f7e0baa79c0 R15: 000000000078bf0c [ 447.213384][T21200] device dummy0 left promiscuous mode [ 447.229044][T21200] bridge4: port 1(dummy0) entered disabled state [ 447.276785][T21200] bridge5: port 1(dummy0) entered blocking state [ 447.283134][T21200] bridge5: port 1(dummy0) entered disabled state [ 447.322310][T21200] device dummy0 entered promiscuous mode [ 448.687144][ T0] NOHZ: local_softirq_pending 08 03:43:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x1}}, 0xb) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000040)=""/247) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) 03:43:28 executing program 5 (fault-call:1 fault-nth:11): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:28 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:43:28 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x9, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:28 executing program 2 (fault-call:1 fault-nth:11): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x82, 0x0, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000140)={r4, r6, 0x60d7}) r7 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r8 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000800)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e449c38a94b27a298884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd5b8473375274cc5c1e298a16324fe27da2a9d5ba9ff3c009d3", 0xc0, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000940)='u', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r9, r8, r8}, &(0x7f0000000240)=""/202, 0xca, &(0x7f00000001c0)={&(0x7f0000000100)={'rmd128-generic\x00'}}) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) [ 449.489035][T21228] FAULT_INJECTION: forcing a failure. [ 449.489035][T21228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 449.497950][T21231] FAULT_INJECTION: forcing a failure. [ 449.497950][T21231] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 449.504354][T21228] CPU: 0 PID: 21228 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 449.524118][T21228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.534157][T21228] Call Trace: [ 449.537440][T21228] dump_stack+0x10f/0x19d [ 449.541788][T21228] should_fail+0x23c/0x250 [ 449.546195][T21228] __alloc_pages_nodemask+0xec/0x390 [ 449.551532][T21228] alloc_pages_vma+0x3e6/0x890 [ 449.556296][T21228] do_anonymous_page+0x206/0xec0 [ 449.561268][T21228] ? __this_cpu_preempt_check+0x18/0x20 [ 449.566799][T21228] ? __rcu_read_unlock+0x4b/0x260 [ 449.571818][T21228] handle_mm_fault+0x1371/0x1930 [ 449.576744][T21228] __get_user_pages+0xac6/0x1150 [ 449.581674][T21228] __get_user_pages_remote+0x113/0x500 [ 449.587128][T21228] ? __ptrace_may_access+0x33e/0x350 [ 449.592470][T21228] pin_user_pages_remote+0x5e/0x80 [ 449.597605][T21228] process_vm_rw_core+0x369/0x760 [ 449.602618][T21228] ? rw_copy_check_uvector+0x249/0x280 [ 449.608101][T21228] process_vm_rw+0x14e/0x1d0 [ 449.612681][T21228] ? __this_cpu_preempt_check+0x18/0x20 [ 449.618214][T21228] ? __sb_end_write+0x90/0xe0 [ 449.622928][T21228] ? vfs_write+0x480/0x690 [ 449.627323][T21228] ? __fget_light+0x219/0x260 [ 449.632556][T21228] ? check_preemption_disabled+0x51/0x140 [ 449.638262][T21228] ? debug_smp_processor_id+0x18/0x20 [ 449.643617][T21228] __x64_sys_process_vm_writev+0x76/0x90 [ 449.649292][T21228] do_syscall_64+0x51/0xb0 [ 449.653686][T21228] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 449.659551][T21228] RIP: 0033:0x45c1d9 [ 449.663428][T21228] Code: Bad RIP value. [ 449.667471][T21228] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 449.675967][T21228] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 449.683936][T21228] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004d9 [ 449.691901][T21228] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 449.699915][T21228] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000000b [ 449.707867][T21228] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c [ 449.715846][T21231] CPU: 1 PID: 21231 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 449.724525][T21231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.734567][T21231] Call Trace: [ 449.737846][T21231] dump_stack+0x10f/0x19d [ 449.742165][T21231] should_fail+0x23c/0x250 [ 449.746569][T21231] __alloc_pages_nodemask+0xec/0x390 [ 449.751853][T21231] alloc_pages_vma+0x3e6/0x890 [ 449.756631][T21231] do_anonymous_page+0x206/0xec0 [ 449.761565][T21231] ? __this_cpu_preempt_check+0x18/0x20 [ 449.767111][T21231] ? __rcu_read_unlock+0x4b/0x260 [ 449.772123][T21231] handle_mm_fault+0x1371/0x1930 [ 449.777044][T21231] __get_user_pages+0xac6/0x1150 [ 449.781981][T21231] __get_user_pages_remote+0x113/0x500 03:43:29 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xa, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:29 executing program 5 (fault-call:1 fault-nth:12): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 449.787602][T21231] ? __ptrace_may_access+0x33e/0x350 [ 449.792889][T21231] pin_user_pages_remote+0x5e/0x80 [ 449.798000][T21231] process_vm_rw_core+0x369/0x760 [ 449.803055][T21231] ? check_preemption_disabled+0x51/0x140 [ 449.808797][T21231] ? check_stack_object+0x61/0x70 [ 449.813823][T21231] ? __virt_addr_valid+0x15a/0x1a0 [ 449.818937][T21231] ? __check_object_size+0x253/0x310 [ 449.824219][T21231] ? _copy_from_user+0x93/0xd0 [ 449.829000][T21231] ? rw_copy_check_uvector+0x249/0x280 [ 449.834463][T21231] process_vm_rw+0x14e/0x1d0 03:43:29 executing program 0: syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) socket$kcm(0x29, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x70, &(0x7f0000000300)=@sack_info={0x0, 0x8, 0x3fe}, &(0x7f0000002000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x82, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) r4 = dup3(r3, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) dup2(0xffffffffffffffff, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={r0, r6}) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000040)={0x7, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x3}) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) [ 449.839231][T21231] ? __this_cpu_preempt_check+0x18/0x20 [ 449.844776][T21231] ? __sb_end_write+0x90/0xe0 [ 449.849496][T21231] ? vfs_write+0x480/0x690 [ 449.854038][T21231] ? __fget_light+0x219/0x260 [ 449.858949][T21231] ? check_preemption_disabled+0x51/0x140 [ 449.864667][T21231] ? debug_smp_processor_id+0x18/0x20 [ 449.870081][T21231] __x64_sys_process_vm_writev+0x76/0x90 [ 449.874903][T21244] FAULT_INJECTION: forcing a failure. [ 449.874903][T21244] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:43:29 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xb, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 449.875797][T21231] do_syscall_64+0x51/0xb0 [ 449.893338][T21231] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 449.899222][T21231] RIP: 0033:0x45c1d9 [ 449.903128][T21231] Code: Bad RIP value. [ 449.907191][T21231] RSP: 002b:00007f7e0baa6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 449.915705][T21231] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 449.923725][T21231] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 000000000000058e [ 449.931721][T21231] RBP: 00007f7e0baa6ca0 R08: 0000000000000275 R09: 0000000000000000 [ 449.939681][T21231] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000000b [ 449.947651][T21231] R13: 00007fff6addee0f R14: 00007f7e0baa79c0 R15: 000000000078bf0c [ 449.958400][T21244] CPU: 0 PID: 21244 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 449.967093][T21244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.977140][T21244] Call Trace: [ 449.980422][T21244] dump_stack+0x10f/0x19d [ 449.984750][T21244] should_fail+0x23c/0x250 [ 449.989184][T21244] __alloc_pages_nodemask+0xec/0x390 [ 449.994463][T21244] alloc_pages_vma+0x3e6/0x890 [ 449.999221][T21244] do_anonymous_page+0x206/0xec0 [ 450.004211][T21244] ? __this_cpu_preempt_check+0x18/0x20 [ 450.009842][T21244] ? __rcu_read_unlock+0x4b/0x260 [ 450.014857][T21244] handle_mm_fault+0x1371/0x1930 [ 450.019802][T21244] __get_user_pages+0xac6/0x1150 [ 450.025010][T21244] __get_user_pages_remote+0x113/0x500 [ 450.030464][T21244] ? __ptrace_may_access+0x33e/0x350 [ 450.035798][T21244] pin_user_pages_remote+0x5e/0x80 [ 450.040905][T21244] process_vm_rw_core+0x369/0x760 [ 450.045931][T21244] ? check_stack_object+0x61/0x70 [ 450.050942][T21244] ? __virt_addr_valid+0x15a/0x1a0 [ 450.056078][T21244] ? __check_object_size+0x253/0x310 [ 450.061357][T21244] ? _copy_from_user+0x93/0xd0 [ 450.066271][T21244] ? rw_copy_check_uvector+0x249/0x280 [ 450.071716][T21244] process_vm_rw+0x14e/0x1d0 [ 450.076374][T21244] ? __this_cpu_preempt_check+0x18/0x20 [ 450.081973][T21244] ? __sb_end_write+0x90/0xe0 [ 450.086648][T21244] ? vfs_write+0x480/0x690 [ 450.091080][T21244] ? __fget_light+0x219/0x260 [ 450.095815][T21244] ? check_preemption_disabled+0x51/0x140 [ 450.101580][T21244] ? debug_smp_processor_id+0x18/0x20 [ 450.107105][T21244] __x64_sys_process_vm_writev+0x76/0x90 [ 450.112728][T21244] do_syscall_64+0x51/0xb0 [ 450.117147][T21244] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 450.123026][T21244] RIP: 0033:0x45c1d9 [ 450.126900][T21244] Code: Bad RIP value. [ 450.130970][T21244] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 03:43:29 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xc, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x4e21, 0x0, @mcast2}, r2}}, 0x48) [ 450.139365][T21244] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 450.147388][T21244] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004dc [ 450.155354][T21244] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 450.163332][T21244] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000000c [ 450.171295][T21244] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:29 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r3, 0xffffffffffffffff) dup3(r6, 0xffffffffffffffff, 0x0) write$UHID_DESTROY(r6, &(0x7f0000000100), 0x4) r7 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$CAPI_GET_MANUFACTURER(r7, 0xc0044306, &(0x7f00000000c0)=0x401) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000001c0)={0x0, "d571b374ce198ea5cd54262e0023d2caef7425e65fcc5913d6676924dc3d00", 0x1058, 0x3ff}) 03:43:31 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:43:31 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:31 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xd, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:31 executing program 5 (fault-call:1 fault-nth:13): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x7f, 0x20, 0x1, 0xffffffffffffffff}) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000080)=0xffffffffffffffe0) [ 452.508873][T21289] FAULT_INJECTION: forcing a failure. [ 452.508873][T21289] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 452.524447][T21289] CPU: 1 PID: 21289 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 452.533225][T21289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.543313][T21289] Call Trace: [ 452.546603][T21289] dump_stack+0x10f/0x19d [ 452.550928][T21289] should_fail+0x23c/0x250 [ 452.555351][T21289] __alloc_pages_nodemask+0xec/0x390 [ 452.560710][T21289] alloc_pages_vma+0x3e6/0x890 [ 452.565467][T21289] do_anonymous_page+0x206/0xec0 [ 452.570400][T21289] ? __this_cpu_preempt_check+0x18/0x20 [ 452.575942][T21289] ? __rcu_read_unlock+0x4b/0x260 [ 452.581009][T21289] handle_mm_fault+0x1371/0x1930 [ 452.585962][T21289] __get_user_pages+0xac6/0x1150 [ 452.590956][T21289] __get_user_pages_remote+0x113/0x500 [ 452.596406][T21289] ? __ptrace_may_access+0x33e/0x350 [ 452.601684][T21289] pin_user_pages_remote+0x5e/0x80 [ 452.606860][T21289] process_vm_rw_core+0x369/0x760 [ 452.611882][T21289] ? check_preemption_disabled+0x51/0x140 [ 452.617599][T21289] ? check_stack_object+0x61/0x70 [ 452.622628][T21289] ? __virt_addr_valid+0x15a/0x1a0 [ 452.627881][T21289] ? __check_object_size+0x253/0x310 [ 452.633202][T21289] ? _copy_from_user+0x93/0xd0 [ 452.637968][T21289] ? rw_copy_check_uvector+0x249/0x280 [ 452.643427][T21289] process_vm_rw+0x14e/0x1d0 [ 452.648015][T21289] ? __this_cpu_preempt_check+0x18/0x20 [ 452.653551][T21289] ? __sb_end_write+0x90/0xe0 [ 452.658226][T21289] ? vfs_write+0x480/0x690 [ 452.662854][T21289] ? __fget_light+0x219/0x260 [ 452.667600][T21289] ? check_preemption_disabled+0x51/0x140 [ 452.673332][T21289] ? debug_smp_processor_id+0x18/0x20 [ 452.678909][T21289] __x64_sys_process_vm_writev+0x76/0x90 [ 452.684545][T21289] do_syscall_64+0x51/0xb0 [ 452.689010][T21289] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 452.694896][T21289] RIP: 0033:0x45c1d9 [ 452.698768][T21289] Code: Bad RIP value. 03:43:32 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xe, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:32 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1002}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 452.702816][T21289] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 452.711251][T21289] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 452.719273][T21289] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004df [ 452.727232][T21289] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 452.735194][T21289] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000000d [ 452.743244][T21289] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:32 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x10, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:32 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x11, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:32 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x10ef}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:32 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x12, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:32 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000000c0)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x8, 0xfffffffd, 0x0, 0x0, 0x1}) 03:43:34 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:43:34 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x25, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:34 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x4000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:34 executing program 5 (fault-call:1 fault-nth:14): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:34 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value={0x0}, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000100)=0xd3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r2) dup3(r5, r1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f00000000c0)={0x0, {0x400, 0x1}}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000140)={0x9, 0x6, 0x3, 0x1}) [ 455.547899][T21342] FAULT_INJECTION: forcing a failure. [ 455.547899][T21342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 455.564766][T21342] CPU: 0 PID: 21342 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 455.573453][T21342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.583502][T21342] Call Trace: [ 455.586856][T21342] dump_stack+0x10f/0x19d [ 455.591189][T21342] should_fail+0x23c/0x250 [ 455.595622][T21342] __alloc_pages_nodemask+0xec/0x390 [ 455.601344][T21342] alloc_pages_vma+0x3e6/0x890 [ 455.606183][T21342] do_anonymous_page+0x206/0xec0 [ 455.611123][T21342] ? __this_cpu_preempt_check+0x18/0x20 [ 455.616736][T21342] ? __rcu_read_unlock+0x4b/0x260 [ 455.621770][T21342] handle_mm_fault+0x1371/0x1930 [ 455.626714][T21342] __get_user_pages+0xac6/0x1150 [ 455.631665][T21342] __get_user_pages_remote+0x113/0x500 [ 455.637120][T21342] ? __ptrace_may_access+0x33e/0x350 [ 455.642427][T21342] pin_user_pages_remote+0x5e/0x80 [ 455.647582][T21342] process_vm_rw_core+0x369/0x760 [ 455.652608][T21342] ? rw_copy_check_uvector+0x249/0x280 [ 455.658164][T21342] process_vm_rw+0x14e/0x1d0 [ 455.662762][T21342] ? __this_cpu_preempt_check+0x18/0x20 [ 455.668341][T21342] ? __sb_end_write+0x90/0xe0 [ 455.673028][T21342] ? vfs_write+0x480/0x690 [ 455.677446][T21342] ? __fget_light+0x219/0x260 [ 455.682196][T21342] ? check_preemption_disabled+0x51/0x140 [ 455.687945][T21342] ? debug_smp_processor_id+0x18/0x20 03:43:35 executing program 0: pipe(&(0x7f00000000c0)) r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 455.693319][T21342] __x64_sys_process_vm_writev+0x76/0x90 [ 455.698982][T21342] do_syscall_64+0x51/0xb0 [ 455.703410][T21342] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 455.709341][T21342] RIP: 0033:0x45c1d9 [ 455.713220][T21342] Code: Bad RIP value. [ 455.717274][T21342] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 455.725755][T21342] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 455.733720][T21342] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004e2 03:43:35 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x2c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 455.741723][T21342] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 455.749683][T21342] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000000e [ 455.757719][T21342] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:35 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x48, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:35 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x200011c0}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:35 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x4c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:35 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x5c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:35 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x60, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:37 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x68, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:37 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x7ffff000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:37 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:43:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value={0x0}, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value={r3}, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) dup3(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f00000001c0)={0x16, 0x2, 0x4}) r8 = dup2(r4, r2) dup3(r8, r1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000140)={r9, 0x7}, 0x8) 03:43:37 executing program 5 (fault-call:1 fault-nth:15): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:37 executing program 4: uname(&(0x7f0000000040)=""/64) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x6a) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080), r2, 0x0, 0x2, 0x4}}, 0x20) clock_adjtime(0x1, &(0x7f00000002c0)={0x7f, 0xb00, 0xff, 0x1, 0x0, 0x1cf1, 0x5b, 0x7fffffff, 0xe7ff, 0xd6a, 0x9, 0x7fff, 0x1ff, 0x7, 0x6, 0x1, 0x6, 0x7, 0x5, 0x4, 0x1, 0x0, 0x0, 0x7, 0xeae7, 0x3}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000400)={0xffffffffffffffff}, 0x0, {0xa, 0x4e24, 0xb1, @private1, 0x200}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r6, &(0x7f0000000480)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) [ 458.557380][T21392] FAULT_INJECTION: forcing a failure. [ 458.557380][T21392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:43:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x68d86295, "6d71b37fce198ea5cd54262e007764d4007425e65fcc59edf213d6676904dc3d", 0x0, 0x0, 0x0, 0x0, 0x7}) [ 458.607260][T21392] CPU: 0 PID: 21392 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 458.616018][T21392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.626068][T21392] Call Trace: [ 458.629355][T21392] dump_stack+0x10f/0x19d [ 458.633678][T21392] should_fail+0x23c/0x250 [ 458.638174][T21392] __alloc_pages_nodemask+0xec/0x390 [ 458.643453][T21392] alloc_pages_vma+0x3e6/0x890 [ 458.648209][T21392] do_anonymous_page+0x206/0xec0 [ 458.653141][T21392] ? __this_cpu_preempt_check+0x18/0x20 [ 458.658678][T21392] ? __rcu_read_unlock+0x4b/0x260 [ 458.663695][T21392] handle_mm_fault+0x1371/0x1930 [ 458.668684][T21392] __get_user_pages+0xac6/0x1150 [ 458.673647][T21392] __get_user_pages_remote+0x113/0x500 [ 458.679210][T21392] ? __ptrace_may_access+0x33e/0x350 [ 458.684487][T21392] pin_user_pages_remote+0x5e/0x80 [ 458.689598][T21392] process_vm_rw_core+0x369/0x760 [ 458.694630][T21392] ? check_preemption_disabled+0x51/0x140 [ 458.700339][T21392] ? check_stack_object+0x61/0x70 03:43:38 executing program 0: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0xc00) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000000c0)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x100, 0x0, 0x0, 0x8}) [ 458.705354][T21392] ? __virt_addr_valid+0x15a/0x1a0 [ 458.710458][T21392] ? __check_object_size+0x253/0x310 [ 458.712027][T21403] nfs: Unknown parameter 'ip_vti0' [ 458.715728][T21392] ? _copy_from_user+0x93/0xd0 [ 458.715824][T21392] ? rw_copy_check_uvector+0x249/0x280 [ 458.731077][T21392] process_vm_rw+0x14e/0x1d0 [ 458.735681][T21392] ? __this_cpu_preempt_check+0x18/0x20 [ 458.741222][T21392] ? __sb_end_write+0x90/0xe0 [ 458.745891][T21392] ? vfs_write+0x480/0x690 [ 458.750293][T21392] ? __fget_light+0x219/0x260 03:43:38 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x8, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:38 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000000c0)={0x3, {0x5, 0x1f, 0x0, 0x5}}) [ 458.754970][T21392] ? check_preemption_disabled+0x51/0x140 [ 458.760684][T21392] ? debug_smp_processor_id+0x18/0x20 [ 458.766066][T21392] __x64_sys_process_vm_writev+0x76/0x90 [ 458.771689][T21392] do_syscall_64+0x51/0xb0 [ 458.776099][T21392] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 458.781974][T21392] RIP: 0033:0x45c1d9 [ 458.785846][T21392] Code: Bad RIP value. [ 458.789894][T21392] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 458.798298][T21392] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 03:43:38 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x6c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 458.806254][T21392] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004e5 [ 458.814230][T21392] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 458.822252][T21392] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000000f [ 458.830205][T21392] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:38 executing program 5 (fault-call:1 fault-nth:16): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:38 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) setreuid(r2, 0xee00) 03:43:38 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) 03:43:38 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x74, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 458.985440][T21422] FAULT_INJECTION: forcing a failure. [ 458.985440][T21422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 459.002023][T21422] CPU: 0 PID: 21422 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 459.010710][T21422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.020756][T21422] Call Trace: [ 459.024059][T21422] dump_stack+0x10f/0x19d [ 459.028383][T21422] should_fail+0x23c/0x250 [ 459.032799][T21422] __alloc_pages_nodemask+0xec/0x390 [ 459.038074][T21422] alloc_pages_vma+0x3e6/0x890 [ 459.042834][T21422] do_anonymous_page+0x206/0xec0 [ 459.047763][T21422] ? __this_cpu_preempt_check+0x18/0x20 [ 459.053320][T21422] ? __rcu_read_unlock+0x4b/0x260 [ 459.058408][T21422] handle_mm_fault+0x1371/0x1930 [ 459.063417][T21422] __get_user_pages+0xac6/0x1150 [ 459.068356][T21422] __get_user_pages_remote+0x113/0x500 [ 459.073811][T21422] ? __ptrace_may_access+0x33e/0x350 [ 459.079111][T21422] pin_user_pages_remote+0x5e/0x80 03:43:38 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x400036c0}], 0x275, 0x0) [ 459.084215][T21422] process_vm_rw_core+0x369/0x760 [ 459.089411][T21422] ? rw_copy_check_uvector+0x249/0x280 [ 459.094866][T21422] process_vm_rw+0x14e/0x1d0 [ 459.099454][T21422] ? __this_cpu_preempt_check+0x18/0x20 [ 459.105108][T21422] ? __sb_end_write+0x90/0xe0 [ 459.109812][T21422] ? vfs_write+0x480/0x690 [ 459.114223][T21422] ? __fget_light+0x219/0x260 [ 459.118920][T21422] ? check_preemption_disabled+0x51/0x140 [ 459.124638][T21422] ? debug_smp_processor_id+0x18/0x20 [ 459.130006][T21422] __x64_sys_process_vm_writev+0x76/0x90 03:43:38 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x7a, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 459.135627][T21422] do_syscall_64+0x51/0xb0 [ 459.140034][T21422] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 459.145913][T21422] RIP: 0033:0x45c1d9 [ 459.149787][T21422] Code: Bad RIP value. [ 459.153842][T21422] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 459.162246][T21422] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 459.170230][T21422] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004e8 [ 459.178194][T21422] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 459.186160][T21422] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000010 [ 459.194129][T21422] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:40 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x300, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:43:40 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x7fffe000}], 0x275, 0x0) 03:43:40 executing program 5 (fault-call:1 fault-nth:17): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:40 executing program 4: openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x20000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) [ 461.588153][T21458] FAULT_INJECTION: forcing a failure. [ 461.588153][T21458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 461.604912][T21458] CPU: 0 PID: 21458 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 461.613644][T21458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.623693][T21458] Call Trace: [ 461.627240][T21458] dump_stack+0x10f/0x19d [ 461.631563][T21458] should_fail+0x23c/0x250 [ 461.636021][T21458] __alloc_pages_nodemask+0xec/0x390 [ 461.641305][T21458] alloc_pages_vma+0x3e6/0x890 [ 461.646065][T21458] do_anonymous_page+0x206/0xec0 [ 461.650998][T21458] ? __this_cpu_preempt_check+0x18/0x20 [ 461.656602][T21458] ? __rcu_read_unlock+0x4b/0x260 [ 461.661718][T21458] handle_mm_fault+0x1371/0x1930 [ 461.666733][T21458] __get_user_pages+0xac6/0x1150 [ 461.671699][T21458] __get_user_pages_remote+0x113/0x500 [ 461.677237][T21458] ? __ptrace_may_access+0x33e/0x350 [ 461.682589][T21458] pin_user_pages_remote+0x5e/0x80 03:43:41 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x3fd, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:41 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x7ffff000}], 0x275, 0x0) [ 461.687726][T21458] process_vm_rw_core+0x369/0x760 [ 461.693629][T21458] ? check_preemption_disabled+0x51/0x140 [ 461.699344][T21458] ? check_stack_object+0x61/0x70 [ 461.704372][T21458] ? __virt_addr_valid+0x15a/0x1a0 [ 461.709475][T21458] ? __check_object_size+0x253/0x310 [ 461.714755][T21458] ? _copy_from_user+0x93/0xd0 [ 461.719516][T21458] ? rw_copy_check_uvector+0x249/0x280 [ 461.725028][T21458] process_vm_rw+0x14e/0x1d0 [ 461.729623][T21458] ? __this_cpu_preempt_check+0x18/0x20 [ 461.735191][T21458] ? __sb_end_write+0x90/0xe0 [ 461.739863][T21458] ? vfs_write+0x480/0x690 [ 461.744276][T21458] ? __fget_light+0x219/0x260 [ 461.748963][T21458] ? check_preemption_disabled+0x51/0x140 [ 461.754724][T21458] ? debug_smp_processor_id+0x18/0x20 [ 461.760092][T21458] __x64_sys_process_vm_writev+0x76/0x90 [ 461.765718][T21458] do_syscall_64+0x51/0xb0 [ 461.771805][T21458] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 461.777682][T21458] RIP: 0033:0x45c1d9 [ 461.781618][T21458] Code: Bad RIP value. 03:43:41 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x7ffffffff000}], 0x275, 0x0) [ 461.785719][T21458] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 461.794211][T21458] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 461.802174][T21458] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004eb [ 461.810233][T21458] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 461.818199][T21458] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000011 [ 461.826173][T21458] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:41 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) 03:43:41 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x10000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x30, r2, 0xc91add0bf88807dd, 0x0, 0x0, {0x2e}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x30}, 0x1, 0x60}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2010a040}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="88010000", @ANYRES16=r2, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x8001}, 0x4004000) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:43:41 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x3fe, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:41 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x8, 0x0) 03:43:41 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x500, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:41 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x9}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x1000}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x7f}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x80000001}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40181}, 0x4004005) 03:43:41 executing program 5 (fault-call:1 fault-nth:18): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:41 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x600, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 462.200948][T21510] FAULT_INJECTION: forcing a failure. [ 462.200948][T21510] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 462.218478][T21510] CPU: 1 PID: 21510 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 462.227164][T21510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.237211][T21510] Call Trace: [ 462.240548][T21510] dump_stack+0x10f/0x19d [ 462.244866][T21510] should_fail+0x23c/0x250 [ 462.249273][T21510] __alloc_pages_nodemask+0xec/0x390 [ 462.254574][T21510] alloc_pages_vma+0x3e6/0x890 [ 462.259332][T21510] do_anonymous_page+0x206/0xec0 [ 462.264262][T21510] ? __this_cpu_preempt_check+0x18/0x20 [ 462.269884][T21510] ? __rcu_read_unlock+0x4b/0x260 [ 462.274902][T21510] handle_mm_fault+0x1371/0x1930 [ 462.279836][T21510] __get_user_pages+0xac6/0x1150 [ 462.284830][T21510] __get_user_pages_remote+0x113/0x500 [ 462.290345][T21510] ? __ptrace_may_access+0x33e/0x350 [ 462.295647][T21510] pin_user_pages_remote+0x5e/0x80 [ 462.300749][T21510] process_vm_rw_core+0x369/0x760 [ 462.305768][T21510] ? check_preemption_disabled+0x51/0x140 [ 462.311476][T21510] ? check_stack_object+0x61/0x70 [ 462.316557][T21510] ? __virt_addr_valid+0x15a/0x1a0 [ 462.321690][T21510] ? __check_object_size+0x253/0x310 [ 462.326979][T21510] ? _copy_from_user+0x93/0xd0 [ 462.331732][T21510] ? rw_copy_check_uvector+0x249/0x280 [ 462.337212][T21510] process_vm_rw+0x14e/0x1d0 [ 462.341801][T21510] ? __this_cpu_preempt_check+0x18/0x20 [ 462.347413][T21510] ? __sb_end_write+0x90/0xe0 [ 462.352167][T21510] ? vfs_write+0x480/0x690 [ 462.356580][T21510] ? __fget_light+0x219/0x260 [ 462.361255][T21510] ? check_preemption_disabled+0x51/0x140 [ 462.366960][T21510] ? debug_smp_processor_id+0x18/0x20 [ 462.372324][T21510] __x64_sys_process_vm_writev+0x76/0x90 [ 462.377952][T21510] do_syscall_64+0x51/0xb0 [ 462.382439][T21510] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 462.388323][T21510] RIP: 0033:0x45c1d9 [ 462.392204][T21510] Code: Bad RIP value. [ 462.396258][T21510] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 462.404655][T21510] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 462.412620][T21510] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004ee [ 462.420588][T21510] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 462.428549][T21510] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000012 [ 462.436509][T21510] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:41 executing program 4: unlink(&(0x7f0000000040)='./file0\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:43:41 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x5}) 03:43:41 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x700, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:41 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x2) 03:43:44 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) 03:43:44 executing program 5 (fault-call:1 fault-nth:19): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:44 executing program 0: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x40080, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000001180)={0x7f, "d446a0b1028b335e80195e3f91fa380e1d5a3905302e3e2f824c66a3fa4b5145", 0x0, 0x1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001140)={r0, 0x10, &(0x7f0000001100)={&(0x7f0000000100)=""/4096, 0x1000}}, 0x10) syz_open_dev$cec(&(0x7f00000011c0)='/dev/cec#\x00', 0x3, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000040)={0x1, "6d71b374ce198ea5cdf213d6676924dc3d00", 0x40, 0x0, 0xedd4, 0x10}) 03:43:44 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x900, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:44 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x10) 03:43:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 465.036867][T21553] FAULT_INJECTION: forcing a failure. [ 465.036867][T21553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 465.073679][T21553] CPU: 0 PID: 21553 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 465.082372][T21553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.092522][T21553] Call Trace: [ 465.095810][T21553] dump_stack+0x10f/0x19d [ 465.100132][T21553] should_fail+0x23c/0x250 [ 465.104555][T21553] __alloc_pages_nodemask+0xec/0x390 [ 465.109829][T21553] alloc_pages_vma+0x3e6/0x890 [ 465.114587][T21553] do_anonymous_page+0x206/0xec0 [ 465.119607][T21553] ? __this_cpu_preempt_check+0x18/0x20 [ 465.125178][T21553] ? __rcu_read_unlock+0x4b/0x260 [ 465.130190][T21553] handle_mm_fault+0x1371/0x1930 [ 465.135118][T21553] __get_user_pages+0xac6/0x1150 [ 465.140121][T21553] __get_user_pages_remote+0x113/0x500 [ 465.145571][T21553] ? __ptrace_may_access+0x33e/0x350 [ 465.150887][T21553] pin_user_pages_remote+0x5e/0x80 [ 465.156053][T21553] process_vm_rw_core+0x369/0x760 [ 465.161071][T21553] ? rw_copy_check_uvector+0x249/0x280 [ 465.166537][T21553] process_vm_rw+0x14e/0x1d0 [ 465.171155][T21553] ? __this_cpu_preempt_check+0x18/0x20 [ 465.176688][T21553] ? __sb_end_write+0x90/0xe0 [ 465.181352][T21553] ? vfs_write+0x480/0x690 03:43:44 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xa00, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 465.185757][T21553] ? __fget_light+0x219/0x260 [ 465.190542][T21553] ? check_preemption_disabled+0x51/0x140 [ 465.196275][T21553] ? debug_smp_processor_id+0x18/0x20 [ 465.201640][T21553] __x64_sys_process_vm_writev+0x76/0x90 [ 465.207288][T21553] do_syscall_64+0x51/0xb0 [ 465.211782][T21553] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 465.217664][T21553] RIP: 0033:0x45c1d9 [ 465.221540][T21553] Code: Bad RIP value. [ 465.225591][T21553] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 03:43:44 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xb00, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:44 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0xef) 03:43:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 465.234037][T21553] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 465.241999][T21553] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004f1 [ 465.250013][T21553] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 465.257985][T21553] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000013 [ 465.265963][T21553] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:44 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xc00, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:44 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x2000) 03:43:47 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x4000) 03:43:47 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:43:47 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xd00, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) 03:43:47 executing program 5 (fault-call:1 fault-nth:20): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0x5}, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 468.108366][T21608] FAULT_INJECTION: forcing a failure. [ 468.108366][T21608] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 468.125993][T21608] CPU: 1 PID: 21608 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 468.134671][T21608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.144714][T21608] Call Trace: [ 468.148010][T21608] dump_stack+0x10f/0x19d [ 468.152333][T21608] should_fail+0x23c/0x250 [ 468.156740][T21608] __alloc_pages_nodemask+0xec/0x390 [ 468.162104][T21608] alloc_pages_vma+0x3e6/0x890 [ 468.166860][T21608] do_anonymous_page+0x206/0xec0 [ 468.171788][T21608] ? __this_cpu_preempt_check+0x18/0x20 [ 468.177325][T21608] ? __rcu_read_unlock+0x4b/0x260 [ 468.182341][T21608] handle_mm_fault+0x1371/0x1930 [ 468.187294][T21608] __get_user_pages+0xac6/0x1150 [ 468.192234][T21608] __get_user_pages_remote+0x113/0x500 [ 468.197771][T21608] ? __ptrace_may_access+0x33e/0x350 [ 468.203051][T21608] pin_user_pages_remote+0x5e/0x80 [ 468.208154][T21608] process_vm_rw_core+0x369/0x760 [ 468.213205][T21608] ? check_preemption_disabled+0x51/0x140 [ 468.218946][T21608] ? check_stack_object+0x61/0x70 [ 468.223958][T21608] ? __virt_addr_valid+0x15a/0x1a0 [ 468.229059][T21608] ? __check_object_size+0x253/0x310 [ 468.234522][T21608] ? _copy_from_user+0x93/0xd0 [ 468.239375][T21608] ? rw_copy_check_uvector+0x249/0x280 [ 468.244819][T21608] process_vm_rw+0x14e/0x1d0 [ 468.249400][T21608] ? __this_cpu_preempt_check+0x18/0x20 [ 468.254932][T21608] ? __sb_end_write+0x90/0xe0 [ 468.259606][T21608] ? vfs_write+0x480/0x690 [ 468.264166][T21608] ? __fget_light+0x219/0x260 [ 468.269092][T21608] ? check_preemption_disabled+0x51/0x140 [ 468.274839][T21608] ? debug_smp_processor_id+0x18/0x20 [ 468.280230][T21608] __x64_sys_process_vm_writev+0x76/0x90 [ 468.285856][T21608] do_syscall_64+0x51/0xb0 [ 468.290299][T21608] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 468.296180][T21608] RIP: 0033:0x45c1d9 [ 468.300059][T21608] Code: Bad RIP value. 03:43:47 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0xefff) 03:43:47 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xe00, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:47 executing program 0: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x7, 'bond_slave_0\x00', 0x2}, 0x18) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r6}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5faa3d70f1209dd2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x48c1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r3) dup3(r8, r2, 0x0) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4dc3d00"}) [ 468.304110][T21608] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 468.312502][T21608] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 468.320461][T21608] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004f4 [ 468.328421][T21608] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 468.336437][T21608] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000014 [ 468.344398][T21608] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:47 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x1020, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:47 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0xffef) 03:43:47 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x1100, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:47 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x20002) 03:43:50 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:43:50 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x1200, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:50 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x100000) 03:43:50 executing program 5 (fault-call:1 fault-nth:21): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:50 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value={0x0}, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r2) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r3, 0x7fffffff}, &(0x7f0000000100)=0x8) dup3(r5, r1, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f0000000040)={0x100, 0x0, 0x1}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r0}}, 0x48) r7 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r7, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000080)='status\x00') ioctl$USBDEVFS_GET_SPEED(r8, 0x551f) 03:43:50 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x200000) [ 471.156909][T21660] FAULT_INJECTION: forcing a failure. [ 471.156909][T21660] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 471.185286][T21660] CPU: 0 PID: 21660 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 471.194030][T21660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.204155][T21660] Call Trace: [ 471.207439][T21660] dump_stack+0x10f/0x19d [ 471.211855][T21660] should_fail+0x23c/0x250 [ 471.216265][T21660] __alloc_pages_nodemask+0xec/0x390 [ 471.221546][T21660] alloc_pages_vma+0x3e6/0x890 [ 471.226309][T21660] do_anonymous_page+0x206/0xec0 [ 471.231275][T21660] ? __this_cpu_preempt_check+0x18/0x20 [ 471.236823][T21660] ? __rcu_read_unlock+0x4b/0x260 [ 471.241912][T21660] handle_mm_fault+0x1371/0x1930 [ 471.246917][T21660] __get_user_pages+0xac6/0x1150 [ 471.251850][T21660] __get_user_pages_remote+0x113/0x500 [ 471.257292][T21660] ? __ptrace_may_access+0x33e/0x350 [ 471.262571][T21660] pin_user_pages_remote+0x5e/0x80 [ 471.267665][T21660] process_vm_rw_core+0x369/0x760 [ 471.272705][T21660] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 471.278861][T21660] ? rw_copy_check_uvector+0x249/0x280 [ 471.284345][T21660] ? wimax_report_rfkill_hw+0x410/0x430 [ 471.289875][T21660] process_vm_rw+0x14e/0x1d0 [ 471.294534][T21660] ? __this_cpu_preempt_check+0x18/0x20 [ 471.300072][T21660] ? __sb_end_write+0x90/0xe0 [ 471.304722][T21660] ? vfs_write+0x480/0x690 [ 471.309133][T21660] ? __fget_light+0x219/0x260 [ 471.313785][T21660] ? check_preemption_disabled+0x51/0x140 [ 471.319552][T21660] ? debug_smp_processor_id+0x18/0x20 [ 471.324899][T21660] __x64_sys_process_vm_writev+0x76/0x90 [ 471.330503][T21660] do_syscall_64+0x51/0xb0 [ 471.334949][T21660] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 471.340964][T21660] RIP: 0033:0x45c1d9 [ 471.344831][T21660] Code: Bad RIP value. [ 471.349013][T21660] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 03:43:50 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0xe0ff7f) [ 471.357400][T21660] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 471.365346][T21660] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004f7 [ 471.373292][T21660] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 471.381239][T21660] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000015 [ 471.389185][T21660] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:50 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x2000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:50 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000140)=""/176, &(0x7f0000000200)=0xb0) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=0x18) 03:43:50 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x1000000) 03:43:50 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x2010, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:50 executing program 5 (fault-call:1 fault-nth:22): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 471.597187][T21696] FAULT_INJECTION: forcing a failure. [ 471.597187][T21696] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 471.613193][T21696] CPU: 1 PID: 21696 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 471.621870][T21696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.631996][T21696] Call Trace: [ 471.635280][T21696] dump_stack+0x10f/0x19d [ 471.639606][T21696] should_fail+0x23c/0x250 [ 471.644075][T21696] __alloc_pages_nodemask+0xec/0x390 [ 471.649427][T21696] alloc_pages_vma+0x3e6/0x890 [ 471.654183][T21696] do_anonymous_page+0x206/0xec0 [ 471.659109][T21696] ? __this_cpu_preempt_check+0x18/0x20 [ 471.664642][T21696] ? __rcu_read_unlock+0x4b/0x260 [ 471.669713][T21696] handle_mm_fault+0x1371/0x1930 [ 471.674648][T21696] __get_user_pages+0xac6/0x1150 [ 471.679628][T21696] __get_user_pages_remote+0x113/0x500 [ 471.686238][T21696] ? __ptrace_may_access+0x33e/0x350 [ 471.691519][T21696] pin_user_pages_remote+0x5e/0x80 [ 471.696721][T21696] process_vm_rw_core+0x369/0x760 [ 471.701751][T21696] ? rw_copy_check_uvector+0x249/0x280 [ 471.707203][T21696] process_vm_rw+0x14e/0x1d0 [ 471.711789][T21696] ? __this_cpu_preempt_check+0x18/0x20 [ 471.717326][T21696] ? __sb_end_write+0x90/0xe0 [ 471.721987][T21696] ? vfs_write+0x480/0x690 [ 471.726394][T21696] ? __fget_light+0x219/0x260 [ 471.731072][T21696] ? check_preemption_disabled+0x51/0x140 [ 471.736786][T21696] ? debug_smp_processor_id+0x18/0x20 [ 471.742222][T21696] __x64_sys_process_vm_writev+0x76/0x90 [ 471.747838][T21696] do_syscall_64+0x51/0xb0 [ 471.752242][T21696] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 471.758120][T21696] RIP: 0033:0x45c1d9 [ 471.762187][T21696] Code: Bad RIP value. [ 471.766240][T21696] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 471.774638][T21696] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 471.782634][T21696] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004fa [ 471.790603][T21696] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 471.798564][T21696] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000016 [ 471.806536][T21696] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:53 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x2000000) 03:43:53 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:43:53 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f00000001c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1c, r5, 0x301, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040044}, 0x840) r8 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:43:53 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x2500, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:53 executing program 5 (fault-call:1 fault-nth:23): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:43:53 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x2c00, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 474.190615][T21721] FAULT_INJECTION: forcing a failure. [ 474.190615][T21721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 474.216697][T21721] CPU: 0 PID: 21721 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 474.225388][T21721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.235435][T21721] Call Trace: 03:43:53 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x2000200) 03:43:53 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x3f00, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 474.238745][T21721] dump_stack+0x10f/0x19d [ 474.243159][T21721] should_fail+0x23c/0x250 [ 474.247573][T21721] __alloc_pages_nodemask+0xec/0x390 [ 474.253021][T21721] alloc_pages_vma+0x3e6/0x890 [ 474.257784][T21721] do_anonymous_page+0x206/0xec0 [ 474.262776][T21721] ? __this_cpu_preempt_check+0x18/0x20 [ 474.268316][T21721] ? __rcu_read_unlock+0x4b/0x260 [ 474.273334][T21721] handle_mm_fault+0x1371/0x1930 [ 474.278268][T21721] __get_user_pages+0xac6/0x1150 [ 474.283236][T21721] __get_user_pages_remote+0x113/0x500 03:43:53 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x40000000) 03:43:53 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x40ceff5f) [ 474.288781][T21721] ? __ptrace_may_access+0x33e/0x350 [ 474.294109][T21721] pin_user_pages_remote+0x5e/0x80 [ 474.299204][T21721] process_vm_rw_core+0x369/0x760 [ 474.304220][T21721] ? check_preemption_disabled+0x51/0x140 [ 474.309931][T21721] ? check_stack_object+0x61/0x70 [ 474.314945][T21721] ? __virt_addr_valid+0x15a/0x1a0 [ 474.320050][T21721] ? __check_object_size+0x253/0x310 [ 474.325371][T21721] ? _copy_from_user+0x93/0xd0 [ 474.330156][T21721] ? rw_copy_check_uvector+0x249/0x280 03:43:53 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x40deff5f) [ 474.336212][T21721] ? wimax_report_rfkill_hw+0x410/0x430 [ 474.341747][T21721] process_vm_rw+0x14e/0x1d0 [ 474.346338][T21721] ? __this_cpu_preempt_check+0x18/0x20 [ 474.351943][T21721] ? __sb_end_write+0x90/0xe0 [ 474.356611][T21721] ? vfs_write+0x480/0x690 [ 474.361022][T21721] ? __fget_light+0x219/0x260 [ 474.365688][T21721] ? check_preemption_disabled+0x51/0x140 [ 474.371403][T21721] ? debug_smp_processor_id+0x18/0x20 [ 474.376767][T21721] __x64_sys_process_vm_writev+0x76/0x90 [ 474.382389][T21721] do_syscall_64+0x51/0xb0 03:43:53 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x4000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 474.386826][T21721] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.392749][T21721] RIP: 0033:0x45c1d9 [ 474.396656][T21721] Code: Bad RIP value. [ 474.400706][T21721] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 474.409115][T21721] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 474.417585][T21721] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 00000000000004fd [ 474.425546][T21721] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 474.433591][T21721] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000017 [ 474.441627][T21721] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:56 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:43:56 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x5fffce40) 03:43:56 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x4800, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x64, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x844}, 0x4000004) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) 03:43:56 executing program 5 (fault-call:1 fault-nth:24): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:56 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000028c0)={0x30, r5, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "6b9fc579f4f3131692b4ebf6ceb0d73019"}]}]}, 0x30}}, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x2480c0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r7, 0x40045730, &(0x7f0000000200)=0x3) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48000) 03:43:56 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x5fffde40) 03:43:56 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x4c00, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 477.233094][T21773] FAULT_INJECTION: forcing a failure. [ 477.233094][T21773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:43:56 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x7fffe000) [ 477.277684][T21773] CPU: 1 PID: 21773 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 477.286545][T21773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.296582][T21773] Call Trace: [ 477.299865][T21773] dump_stack+0x10f/0x19d [ 477.304188][T21773] should_fail+0x23c/0x250 [ 477.308598][T21773] __alloc_pages_nodemask+0xec/0x390 [ 477.313877][T21773] alloc_pages_vma+0x3e6/0x890 [ 477.318704][T21773] do_anonymous_page+0x206/0xec0 [ 477.323635][T21773] ? __this_cpu_preempt_check+0x18/0x20 [ 477.329171][T21773] ? __rcu_read_unlock+0x4b/0x260 [ 477.334224][T21773] handle_mm_fault+0x1371/0x1930 [ 477.339156][T21773] __get_user_pages+0xac6/0x1150 [ 477.344153][T21773] __get_user_pages_remote+0x113/0x500 [ 477.349601][T21773] ? __ptrace_may_access+0x33e/0x350 [ 477.354955][T21773] pin_user_pages_remote+0x5e/0x80 [ 477.360055][T21773] process_vm_rw_core+0x369/0x760 [ 477.365074][T21773] ? rw_copy_check_uvector+0x249/0x280 [ 477.370519][T21773] process_vm_rw+0x14e/0x1d0 [ 477.375096][T21773] ? __this_cpu_preempt_check+0x18/0x20 [ 477.380647][T21773] ? __sb_end_write+0x90/0xe0 [ 477.385320][T21773] ? vfs_write+0x480/0x690 [ 477.389725][T21773] ? __fget_light+0x219/0x260 [ 477.394394][T21773] ? check_preemption_disabled+0x51/0x140 [ 477.400104][T21773] ? debug_smp_processor_id+0x18/0x20 [ 477.405467][T21773] __x64_sys_process_vm_writev+0x76/0x90 [ 477.411093][T21773] do_syscall_64+0x51/0xb0 [ 477.415501][T21773] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.421471][T21773] RIP: 0033:0x45c1d9 03:43:56 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x5c00, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 477.425435][T21773] Code: Bad RIP value. [ 477.429558][T21773] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 477.437958][T21773] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 477.445915][T21773] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000500 [ 477.453947][T21773] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 477.461909][T21773] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000018 [ 477.469869][T21773] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:56 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0xefffffff) 03:43:56 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x6000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:59 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:43:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x24, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r7, 0x302, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000040)=0x7) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r8 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="6c68389278f2a7433bf00e34ad9b5008ffc8b6158f8406cf3268f82f211a3e8540a0897e555c10daa3fa072a93e16e7cfedd642f63f113df1e2448ed95b8f8bc28fae0bdc1d9e5efae67690618afd802f47ebe6a2910a3d85b616bab", 0x5c, 0xfffffffffffffff8) keyctl$assume_authority(0x10, r8) 03:43:59 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x6800, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:59 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0xffffffef) 03:43:59 executing program 5 (fault-call:1 fault-nth:25): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:43:59 executing program 0: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/514], 0x114, 0x0) getsockopt$packet_int(r1, 0x107, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x4, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x800}) 03:43:59 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x6c00, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:43:59 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x6, "6d71b374ce198ea5cd54262e007764dc3d00", 0x0, 0x0, 0x0, 0x10, 0x4}) 03:43:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x3}, {0xa, 0x0, 0x0, @mcast1, 0x27}, r1, 0xfffffeff}}, 0x48) [ 480.275893][T21827] FAULT_INJECTION: forcing a failure. [ 480.275893][T21827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:43:59 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x7ffffffff000) [ 480.353326][T21827] CPU: 0 PID: 21827 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 480.362017][T21827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.372150][T21827] Call Trace: [ 480.375428][T21827] dump_stack+0x10f/0x19d [ 480.379745][T21827] should_fail+0x23c/0x250 [ 480.384150][T21827] __alloc_pages_nodemask+0xec/0x390 [ 480.389420][T21827] alloc_pages_vma+0x3e6/0x890 [ 480.394435][T21827] wp_page_copy+0x16e/0x1640 [ 480.399092][T21827] ? reuse_swap_page+0x63c/0xa60 [ 480.404026][T21827] do_wp_page+0x9b3/0xd30 [ 480.408349][T21827] handle_mm_fault+0x16f5/0x1930 [ 480.413276][T21827] __get_user_pages+0xac6/0x1150 [ 480.418392][T21827] __get_user_pages_remote+0x113/0x500 [ 480.423882][T21827] ? __ptrace_may_access+0x33e/0x350 [ 480.429158][T21827] pin_user_pages_remote+0x5e/0x80 [ 480.434300][T21827] process_vm_rw_core+0x369/0x760 [ 480.439316][T21827] ? rw_copy_check_uvector+0x249/0x280 [ 480.444856][T21827] process_vm_rw+0x14e/0x1d0 [ 480.449638][T21827] ? __this_cpu_preempt_check+0x18/0x20 [ 480.455187][T21827] ? __sb_end_write+0x90/0xe0 [ 480.459980][T21827] ? vfs_write+0x480/0x690 [ 480.464391][T21827] ? __fget_light+0x219/0x260 [ 480.469073][T21827] ? check_preemption_disabled+0x51/0x140 [ 480.474786][T21827] ? debug_smp_processor_id+0x18/0x20 [ 480.480219][T21827] __x64_sys_process_vm_writev+0x76/0x90 [ 480.485906][T21827] do_syscall_64+0x51/0xb0 [ 480.490451][T21827] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 480.496341][T21827] RIP: 0033:0x45c1d9 03:43:59 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x7400, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 480.500212][T21827] Code: Bad RIP value. [ 480.504262][T21827] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 480.512656][T21827] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 480.520613][T21827] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000503 [ 480.528599][T21827] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 480.536559][T21827] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000019 [ 480.544592][T21827] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:43:59 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x7a00, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:02 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:44:02 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x10000000000000) 03:44:02 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xedc0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) dup3(r3, 0xffffffffffffffff, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x13, 0x1, {0x20, 0x3, 0x2}}, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r4) dup2(0xffffffffffffffff, r4) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) mount(&(0x7f00000000c0)=@sr0='/dev/sr0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='openpromfs\x00', 0x28009, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @local}]}) 03:44:02 executing program 0: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000000)=@builtin='builtin_trusted\x00') r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000000)=@builtin='builtin_trusted\x00') setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100)=0xfffeffff, 0x4) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000000)=@builtin='builtin_trusted\x00') keyctl$negate(0xd, r2, 0x7ffe, r0) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000000)=@builtin='builtin_trusted\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000240)) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000140)='builtin_trusted\x00', &(0x7f0000000200)) r6 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0)=0xcb, 0x4) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:44:02 executing program 5 (fault-call:1 fault-nth:26): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 483.281590][T21878] FAULT_INJECTION: forcing a failure. [ 483.281590][T21878] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 483.306073][T21878] CPU: 0 PID: 21878 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 483.314804][T21878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.324986][T21878] Call Trace: [ 483.328277][T21878] dump_stack+0x10f/0x19d [ 483.332666][T21878] should_fail+0x23c/0x250 [ 483.337081][T21878] __alloc_pages_nodemask+0xec/0x390 [ 483.342384][T21878] alloc_pages_vma+0x3e6/0x890 [ 483.347142][T21878] do_anonymous_page+0x206/0xec0 [ 483.352162][T21878] ? __this_cpu_preempt_check+0x18/0x20 [ 483.357697][T21878] ? __rcu_read_unlock+0x4b/0x260 [ 483.362757][T21878] handle_mm_fault+0x1371/0x1930 [ 483.367718][T21878] __get_user_pages+0xac6/0x1150 [ 483.372651][T21878] __get_user_pages_remote+0x113/0x500 03:44:02 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x20000000000000) 03:44:02 executing program 0: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2, 0x0) 03:44:02 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xfd03, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 483.378106][T21878] ? __ptrace_may_access+0x33e/0x350 [ 483.383457][T21878] pin_user_pages_remote+0x5e/0x80 [ 483.388566][T21878] process_vm_rw_core+0x369/0x760 [ 483.393625][T21878] ? rw_copy_check_uvector+0x249/0x280 [ 483.399080][T21878] ? wimax_report_rfkill_hw+0x410/0x430 [ 483.404619][T21878] process_vm_rw+0x14e/0x1d0 [ 483.409210][T21878] ? __this_cpu_preempt_check+0x18/0x20 [ 483.414873][T21878] ? __sb_end_write+0x90/0xe0 [ 483.419535][T21878] ? vfs_write+0x480/0x690 [ 483.424054][T21878] ? __fget_light+0x219/0x260 [ 483.428724][T21878] ? check_preemption_disabled+0x51/0x140 [ 483.434441][T21878] ? debug_smp_processor_id+0x18/0x20 [ 483.440084][T21878] __x64_sys_process_vm_writev+0x76/0x90 [ 483.445717][T21878] do_syscall_64+0x51/0xb0 [ 483.450134][T21878] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 483.456013][T21878] RIP: 0033:0x45c1d9 [ 483.459901][T21878] Code: Bad RIP value. [ 483.463949][T21878] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 483.472344][T21878] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 03:44:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:44:02 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xfe03, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 483.480306][T21878] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000506 [ 483.488266][T21878] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 483.496323][T21878] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000001a [ 483.504981][T21878] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:02 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x82, 0x0, &(0x7f0000000180)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) dup3(r8, r5, 0x0) setsockopt$rose(r8, 0x104, 0x1, &(0x7f00000001c0)=0x35e, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x3c1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000fb36f327850bfccaf7000414100007000000fddbdf2508000100000000000000010001000000080001000100000008000100000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x800) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x2}) 03:44:05 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:44:05 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0xe0ff7f00000000) 03:44:05 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xff00, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:05 executing program 5 (fault-call:1 fault-nth:27): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:05 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xff03, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:05 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0xf0ffffff7f0000) [ 486.352591][T21926] FAULT_INJECTION: forcing a failure. [ 486.352591][T21926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:44:05 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:05 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x100000000000000) [ 486.399512][T21926] CPU: 0 PID: 21926 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 486.408292][T21926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.418350][T21926] Call Trace: [ 486.421636][T21926] dump_stack+0x10f/0x19d [ 486.426015][T21926] should_fail+0x23c/0x250 [ 486.430418][T21926] __alloc_pages_nodemask+0xec/0x390 [ 486.435695][T21926] alloc_pages_vma+0x3e6/0x890 [ 486.440496][T21926] do_anonymous_page+0x206/0xec0 03:44:05 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x200000000000000) [ 486.445421][T21926] ? __this_cpu_preempt_check+0x18/0x20 [ 486.451031][T21926] ? __rcu_read_unlock+0x4b/0x260 [ 486.456043][T21926] handle_mm_fault+0x1371/0x1930 [ 486.460976][T21926] __get_user_pages+0xac6/0x1150 [ 486.465929][T21926] __get_user_pages_remote+0x113/0x500 [ 486.471375][T21926] ? __ptrace_may_access+0x33e/0x350 [ 486.476650][T21926] pin_user_pages_remote+0x5e/0x80 [ 486.481743][T21926] process_vm_rw_core+0x369/0x760 [ 486.486758][T21926] ? check_preemption_disabled+0x51/0x140 [ 486.492474][T21926] ? check_stack_object+0x61/0x70 [ 486.497485][T21926] ? __virt_addr_valid+0x15a/0x1a0 [ 486.502587][T21926] ? __check_object_size+0x253/0x310 [ 486.507892][T21926] ? _copy_from_user+0x93/0xd0 [ 486.512725][T21926] ? rw_copy_check_uvector+0x249/0x280 [ 486.518170][T21926] ? wimax_report_rfkill_hw+0x410/0x430 [ 486.523785][T21926] process_vm_rw+0x14e/0x1d0 [ 486.528374][T21926] ? __this_cpu_preempt_check+0x18/0x20 [ 486.533931][T21926] ? __sb_end_write+0x90/0xe0 [ 486.538663][T21926] ? vfs_write+0x480/0x690 [ 486.543149][T21926] ? __fget_light+0x219/0x260 03:44:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80200, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="dbea694a94accca9ec732300063e41ccd625473287c555a7d23db62f9b51b334f4a7749e0e45a8c4500d19596e64b9f20fcbdf8a88e1bcbe50a404f4b442a35282d22da18199250cdbc7a26fc1e830d3185fd6a7c4d1e7ca4e7256444365dae3d8dc255a54901af30b9563e5cc552809db665b72bf5398e394c7127e3af6c6e775ace6944aef54c546768113f1bd28e04bcce3cd0add3f5d250f"], 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={r7, 0x81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r3) dup3(r9, r2, 0x0) read$usbfs(r9, &(0x7f0000000040)=""/24, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:44:05 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x200020000000000) [ 486.547837][T21926] ? check_preemption_disabled+0x51/0x140 [ 486.554008][T21926] ? debug_smp_processor_id+0x18/0x20 [ 486.559374][T21926] __x64_sys_process_vm_writev+0x76/0x90 [ 486.565012][T21926] do_syscall_64+0x51/0xb0 [ 486.569423][T21926] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 486.575304][T21926] RIP: 0033:0x45c1d9 [ 486.579182][T21926] Code: Bad RIP value. [ 486.583235][T21926] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 486.591633][T21926] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 03:44:06 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 486.599596][T21926] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000509 [ 486.607598][T21926] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 486.615578][T21926] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000001b [ 486.623550][T21926] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:08 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:44:08 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x1000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:08 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) clock_gettime(0x5, &(0x7f00000000c0)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000000)={0x85, 0x0, &(0x7f0000000140)="dc65e34f1ab714dbd2281c5be8953fad5476ab736190e3769c1265be578c2b30409382f3e47ab5f407a8966b73f35d2228c91abd333d6bd29a0f6b391fb1e4f6651e43ae21ef4f813fdd397aac54764c161b382a6663c0f628de8e8087214c859e0ad8f38da428b0e2f4a319", {0xffff0000, 0xb070, 0x31303453, 0x7, 0x1f, 0x4e, 0x1, 0x3994}}) 03:44:08 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x4000000000000000) 03:44:08 executing program 5 (fault-call:1 fault-nth:28): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) setresgid(0x0, 0x0, 0x0) setfsgid(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) setfsgid(r3) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xfffffffffffffd6f) setresgid(0x0, r4, 0x0) setfsgid(r4) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0x0) setfsgid(r6) getgroups(0xa, &(0x7f0000000040)=[0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r4, r6]) setfsgid(r7) [ 489.349117][T21977] FAULT_INJECTION: forcing a failure. [ 489.349117][T21977] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 489.369621][T21977] CPU: 0 PID: 21977 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 489.378388][T21977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.388425][T21977] Call Trace: [ 489.391704][T21977] dump_stack+0x10f/0x19d [ 489.396072][T21977] should_fail+0x23c/0x250 [ 489.400477][T21977] __alloc_pages_nodemask+0xec/0x390 [ 489.405760][T21977] alloc_pages_vma+0x3e6/0x890 [ 489.410527][T21977] do_anonymous_page+0x206/0xec0 [ 489.415455][T21977] ? __this_cpu_preempt_check+0x18/0x20 [ 489.420989][T21977] ? __rcu_read_unlock+0x4b/0x260 [ 489.426029][T21977] handle_mm_fault+0x1371/0x1930 [ 489.430975][T21977] __get_user_pages+0xac6/0x1150 [ 489.435967][T21977] __get_user_pages_remote+0x113/0x500 [ 489.441435][T21977] ? __ptrace_may_access+0x33e/0x350 [ 489.446720][T21977] pin_user_pages_remote+0x5e/0x80 [ 489.451821][T21977] process_vm_rw_core+0x369/0x760 [ 489.456900][T21977] ? rw_copy_check_uvector+0x249/0x280 [ 489.462345][T21977] ? wimax_report_rfkill_hw+0x410/0x430 [ 489.467937][T21977] process_vm_rw+0x14e/0x1d0 [ 489.472522][T21977] ? __this_cpu_preempt_check+0x18/0x20 [ 489.478057][T21977] ? __sb_end_write+0x90/0xe0 [ 489.482723][T21977] ? vfs_write+0x480/0x690 [ 489.487141][T21977] ? __fget_light+0x219/0x260 [ 489.491886][T21977] ? check_preemption_disabled+0x51/0x140 [ 489.497595][T21977] ? debug_smp_processor_id+0x18/0x20 [ 489.503013][T21977] __x64_sys_process_vm_writev+0x76/0x90 [ 489.508719][T21977] do_syscall_64+0x51/0xb0 [ 489.513121][T21977] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 489.518999][T21977] RIP: 0033:0x45c1d9 [ 489.522872][T21977] Code: Bad RIP value. [ 489.527614][T21977] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 489.536963][T21977] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 03:44:08 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x10000, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000100)='/dev/radio#\x00', 0xc) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)={0xa6f, 0x9, 0x4, 0x2, 0x7ff, {0x77359400}, {0x3, 0x1, 0x9, 0x3f, 0xc6, 0x20, "20df7de5"}, 0x0, 0x1, @userptr=0x77, 0x1ff, 0x0, r0}) 03:44:08 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x2000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:08 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x40ceff5f00000000) [ 489.544944][T21977] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 000000000000050c [ 489.552902][T21977] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 489.560857][T21977] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000001c [ 489.568950][T21977] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:09 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x40deff5f00000000) 03:44:09 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x17, 0x8, &(0x7f0000000700)=[{&(0x7f0000000140)="6792f2adae8871d7fa4e5de721d8bd8f5b12ef2586e2bc2c95d223bbdc9621569adbb69acf39034a31e00e52e1525fc8e78b1da2ed19fe76bc58381a63bd5efd4c2f46f4a776336c0b492a2b7943366bb2228b58cd5fea913afb3a177e8dfb1063ec9675f15b21629175c43ed4c7fad1cdee3cbe15ab16bc2764569de99175878b1834acc11875e1215f3f3eb8e76acedc3bff87bbf61ba59139a5466d525fc350c0c185122abd46b9bc87272c331d784d11fb532facecd964e8507c3a1d1e9d31d50905debfb18dc6fa36230f682580e4e3834bc4d55bc8c01fb4579140f42a2ccd505fdf5e5e9b", 0xe8, 0x6}, {&(0x7f00000007c0)="c81306e694ee04963bccb84d5b6a6b91e8a28f5ee236d5047cb43869b6b83a519aba37ddac7043808dbed6cef81b6f9babbc0588612a7ab65761f8714292a30f01163c4ad42534b10eb38f", 0x4b, 0x7fffffff}, {&(0x7f00000002c0)="634f9f6ea7f47409910229ba6e00bd2ba760db950e5cec889769096dd570cb9a27842210b6d79b477066ad4f53513ee2f90263ecae3ab694a3310120bd5fa8b01a0216d7e38aea0ad2595cc973c7bf5816539d0679a9d30c589d3c4bd334c1c43d6322ca799a17338fe62943bd3603775921a83e438f96958d1c97566f0da9ba8d53756095a65862fbb3211cd3416d9a569cdde51cf3b9f4fc2934b0430025bb03028b1d2f139edb70821b14e4705803207a384f9e97d2063db484b7306051c449142c045a23cf", 0xc7, 0x6}, {&(0x7f00000003c0)="566cc6cd7efd65cd9e4de9db3c7bc31d1f13297447216084dfb54bde56cd9c2afd29ec55b8f7784978f2e7e754dd5a77546e547bdcc34c6f3a7e8930e2ecdcbbfad50cc596b004affff4e7cc4a122200f36ad930d1b28f5db9d4aa702799c9e75ff02009414fa58bfb5723078703e92f07d8b233", 0x74, 0xff}, {&(0x7f0000000440)="ca08497c4b9e33018c933cc2046d8fb75916a20eb3008c860912c3d4ff859bd3a8fdf6c01a929c4db40474d42fb21de139a7aacd7869b4430ad0b953d56a551668235d4a67d039693287fafdf64b8c28a8a8eb75195c6e11be077c33f8ace394038c7f00ac77f91e31af68b9e449c3e1df65a531de154b387e095a1ef93371d2fc05425ca5f3f600056943744b5bd5a0", 0x90}, {&(0x7f0000000500)="7e0cc45f03c15d5200bd5fa7a16bd8fecf10e17f3836468cd280f96a7b5d094ab3545496749f5d39321df1605de95d5911188f05bc95e9f5c1cb8e6c19dc0ce1ca13653d19b5ad221ee4cc5add9fdb1cb15e71652bb2f0190bd355ce70c11a9bc099b09efc3ee9c717891a2679dcfee7e41461ad1c59a055cc4c38fa10e09a3da1a981074554", 0x86, 0x3}, {&(0x7f00000005c0)="b513db229566fe4c6b688e09a818c990e79eb5ac048ca0bb45955f6c358be58dc67bcda1f145864df7066b75d4c8cc0d646ae6114cbc7104cf4fa7569c7067448c6df9758b67db888b95e82f67384d433d0f99c397cbc79c48ca72079f15691d8a00be897c0e9ff0ac16cac7410aaefceaf8695696acc1a56fff7cf173e4f2a6d4f7276c9bff7d54ffeb920344be8463a46d641bfe247f5aa9b862a1b7f0526e9bd7419a51ec269db254e1f0637d4324a7fd8a5d6c3b5f267417ee48f740e5d8e0a98adf30e0048b0390e99de102", 0xce, 0x6}, {&(0x7f00000006c0)="e3501b779046e6a8fd52f85d16d39238e2", 0x11, 0x5}], 0x1000, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 489.646593][T22002] ucma_write: process 1554 (syz-executor.4) changed security contexts after opening file descriptor, this is not allowed. 03:44:09 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x3000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:11 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:44:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r6}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:44:11 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x4000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:11 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x8000000000000000) 03:44:11 executing program 5 (fault-call:1 fault-nth:29): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:11 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x200, 0x7, 0x0, 0x0, 0x4}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x480201, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) sendmmsg(r3, &(0x7f0000001c80)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @rand_addr=0x64010100}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000280)="68e52a5e93d7af8cbbd1a071a5f690eacc4b86039eb2e50347f7913e1e2e55861f4db419119f8a", 0x27}, {&(0x7f00000002c0)="78dbd17cd68626c73410637035b0a670dee61eaa78d30b6d07decd71e825bcd310d6457256b27e18bb439712de7284201478aa8ce4ba61ec920b67fe2660e7ab1e576faa3d601b52bfe06cde8744edd99e3a98977b861493996c340941255c5cbd0e63e03f9eaee18063331ab846f7d89c8823449806e77d7530eb7730c696bc7537553a4f53e418cdc354ed3c", 0x8d}, {&(0x7f0000000380)="a2b01dc59cbc391b1b68857d0cbc61fe84704134ba3ed480e469a840d0d19c49f8efd6252881234fc15f3434ae27c66081ac30cefaa37097294ae1fa7e4a46999ada5ffdb65578ebf29b3cc30bac7dc1dea4a2d92eac9100c7ceda104a34efeb0a08e01f8d377510541fd0e5aa8416a9089feaee225bc9ca2968b5d69771f7145b8f97d9bfd416d9de34db035528d5da7ccf5a60c66da59842ce7957a7515a108940572724c055782ff1bd89528a67c0c7f3a912e6ee9072b7a679c4021e2a5843fb0a9081a33f150a5221b952a2", 0xce}, {&(0x7f0000000480)="2977a8c0f6a7171c29e553558de579477248ea95a482160f386b1210788fc7012ea9f91e24c159b98aa0ad8f513dff5bcd60422720ea6d337383f7e027fb0c4c9949c24886c9102bb5108b6e4b84e60f55ee13ecf6bc75a4ba5301e23d282d3cd430aa3162ecbb", 0x67}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="7acb4204913f55e9432137686cb45ca26b6288c8fa2b8d5a6905bc0c724be94da5", 0x21}, {&(0x7f0000001540)="9e873ea04dcc377c755d27f9514404c6301e8853957aaa6673a38a615934e650597a2e8463ad9a72a09105a99d3be5b91f6778372b1e08aa5e845081", 0x3c}], 0x7}}, {{&(0x7f0000001600)=@l2={0x1f, 0x8000, @any, 0xae04, 0x2}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001680)="5346d83777c8437c55151319456b8102d9faf9bde578b198b476bcb47e932e698f1da8ac46a9a42eb896578047385389baae49cccd7bc15d889c7bfc468d957293f9d9f3da9b3fdedb6656747ec5b5ecf307bd5d04626923d3de761faa10fa2adb935b6f4e784245dd001001b1f73d1d754bd880608b7eac4601f813ad5239cc21c0ea51713db2f1f7e4ce0a23bc13477ef52f5887973a19d8a82f2880b7e81039decd8860455c6db6031aee5a3d9060d2de306f6abcaa02dbd7937df8a41f96545a45f02dc1d3fd1a03bc593214044ce4063ed7e26d1b2cb1d785373b054c95cadcdd", 0xe3}, {&(0x7f0000001780)="0aca5ff49a5564016b2229bd0d2be1180709dd46a1a26771ee9bacd7ce0dd12c471cd5774d5447ec9b703986f27433483f32c6b0401279dbb82d928f900692a66835b686b7c3788c1e31fb75a467d480754f45e06d83739c8d9cc5bd5ecf56d5268c51ab68fecd7bc0c2891f5beac1df3f10f7cfad40bdcee9336d51514551938f42a805873eff94cfabd9a700e45dde16dc053e4521c743bcbff453729f0872a5d1a19cca6e42db1c09979c90d8db9e52277aa831af4495a59e16618451d26a9464aa4900b347c7a76a0d6e2c3ad75bc079a7601d731032dc741837764ac526b5df2d56", 0xe4}, {&(0x7f0000001880)="40cb9746292c70037fa241b730d470f1c98258dd0580091ae6ff5a819a1aa66fa47100f16c483f12a0df3557ba5ea0117173b60c77630d851eb68f487e946dd9e4e64bc3a6281311975c65a4280dc8fead5f3efb9ae0265a84a1b9604b13eeaceb7b4a333c2dcceb4cc5d0adeeb1d6cb23eba3817df6fdfe361d9892e1fd0a7d25a947842e49cd51a7e38c761df5a885305e14096257d2b3055c95260ae8f2ac3ed1c32d670f37bd022b44b864ba05d12efd5fc98154468e020dce725cbf8d5a1acd766d3d1f3f1acacf2e6e1c9910fbd84db00371906a741a7c2d8ed01daf75f98299a5d3be89b33c8e68432068abc341f283fe68de", 0xf6}, {&(0x7f0000001980)="a09d7ab762ce6a4d4f52bff1b7d7d644d2fbe12669a263300c", 0x19}, {&(0x7f00000019c0)="7b9dadb5709a25853bf82c0411014d0c5e07a05400d703b0c39b5e57b5abdfbff5a8856e0d953972a8b8dda2d146953d", 0x30}], 0x5, &(0x7f0000001a80)=[{0x20, 0x103, 0x61e, "9656d4e49477696082"}, {0xc8, 0x29, 0xaf, "5391e5824ff3f981462610c505b0f61625c4484315d7374515618fa9d8150540fbde3383657b6cc0551f523c1af999c3b904c3713c9521a1979bfbd68b1bf3372345671d61cd656c6353be6ea2dd2638e2ca70283292f05ff9d46de928c7035153aee0e03329e7b79234cc0c7615415620d9d61a668cbc9bd7d05f5c524ab42b73fc3b10da7d5e2cefebf7180f1c437e366eca5e683f93edcb2aff4d3c59c8f5a6dcc0d92912260d43a53190bf497b1674"}, {0xf8, 0x29, 0x6, "09573c00dcea4257357f8dd1a22762d15e307135b9aa2103640a6206c2c2190bf9cc0445e8b5f656e5b9eaba16ea7d0c87adf47f0f4ee85cedf1cddd8fc164d27999d577264ca83dd073095f5bd74ac5428caa93d032eeab8cf1f465f972b36e50d8a6902c6edf22e855874bee528cc49c2ef6cb94897973a15c4962b784fb48664eb156fe67e1118b70e9f5609c317b22310fbcad986e5955ca4d49af9f9f808a59eea3f6e5d07b46f4557e93e177ca6ae75fe49be334acea5e58d22e3bc17d995e1df9cdcc3dcf7fa097ead0a43a27321057a749517ee52ebd184f225a56fa2fd6124787369b"}], 0x1e0}}], 0x2, 0x40004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r6, 0xc0305616, &(0x7f00000001c0)={0x0, {0xfff, 0x7}}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x80000000}) [ 492.443604][T22038] FAULT_INJECTION: forcing a failure. [ 492.443604][T22038] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 492.480717][T22038] CPU: 0 PID: 22038 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 492.489402][T22038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.499445][T22038] Call Trace: [ 492.502727][T22038] dump_stack+0x10f/0x19d [ 492.507050][T22038] should_fail+0x23c/0x250 [ 492.511503][T22038] __alloc_pages_nodemask+0xec/0x390 [ 492.516879][T22038] alloc_pages_vma+0x3e6/0x890 [ 492.521663][T22038] do_anonymous_page+0x206/0xec0 [ 492.526597][T22038] ? __this_cpu_preempt_check+0x18/0x20 [ 492.532128][T22038] ? __rcu_read_unlock+0x4b/0x260 [ 492.537140][T22038] handle_mm_fault+0x1371/0x1930 03:44:11 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x5000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 492.542067][T22038] __get_user_pages+0xac6/0x1150 [ 492.547061][T22038] __get_user_pages_remote+0x113/0x500 [ 492.552501][T22038] ? __ptrace_may_access+0x33e/0x350 [ 492.557949][T22038] pin_user_pages_remote+0x5e/0x80 [ 492.563385][T22038] process_vm_rw_core+0x369/0x760 [ 492.568429][T22038] ? check_preemption_disabled+0x51/0x140 [ 492.574158][T22038] ? check_stack_object+0x61/0x70 [ 492.579170][T22038] ? __virt_addr_valid+0x15a/0x1a0 [ 492.584428][T22038] ? __check_object_size+0x253/0x310 [ 492.589708][T22038] ? _copy_from_user+0x93/0xd0 03:44:12 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x6000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 492.594471][T22038] ? rw_copy_check_uvector+0x249/0x280 [ 492.599921][T22038] process_vm_rw+0x14e/0x1d0 [ 492.604526][T22038] ? __this_cpu_preempt_check+0x18/0x20 [ 492.610079][T22038] ? __sb_end_write+0x90/0xe0 [ 492.614810][T22038] ? vfs_write+0x480/0x690 [ 492.620017][T22038] ? __fget_light+0x219/0x260 [ 492.624693][T22038] ? check_preemption_disabled+0x51/0x140 [ 492.630409][T22038] ? debug_smp_processor_id+0x18/0x20 [ 492.635782][T22038] __x64_sys_process_vm_writev+0x76/0x90 [ 492.641405][T22038] do_syscall_64+0x51/0xb0 [ 492.645870][T22038] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 492.651752][T22038] RIP: 0033:0x45c1d9 [ 492.655664][T22038] Code: Bad RIP value. [ 492.659713][T22038] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 492.668263][T22038] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 492.676231][T22038] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 000000000000050f [ 492.684341][T22038] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 03:44:12 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0xefffffffffffffff) 03:44:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000007) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 492.692305][T22038] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000001d [ 492.700264][T22038] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:12 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0xffffffff00000000) 03:44:12 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x7000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:14 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 03:44:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @rand_addr, 0x9}, {0xa, 0x4e22, 0x0, @mcast1}, r2}}, 0x17) 03:44:14 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x8000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:14 executing program 5 (fault-call:1 fault-nth:30): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:14 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0xffffffffffffffef) 03:44:14 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@mcast1, @dev={0xfe, 0x80, [], 0x20}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1000, 0x6, 0x298d, 0x400, 0xfffffffffffffff9, 0x43000015, r9}) 03:44:14 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x9000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 495.505588][T22102] device dummy0 left promiscuous mode [ 495.515766][T22098] nfs: Unknown parameter 'ip_vti0' [ 495.524020][T22103] FAULT_INJECTION: forcing a failure. [ 495.524020][T22103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 495.542605][T22102] bridge5: port 1(dummy0) entered disabled state 03:44:14 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) [ 495.556454][T22103] CPU: 0 PID: 22103 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 495.565133][T22103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.575172][T22103] Call Trace: [ 495.578446][T22103] dump_stack+0x10f/0x19d [ 495.582762][T22103] should_fail+0x23c/0x250 [ 495.587174][T22103] __alloc_pages_nodemask+0xec/0x390 [ 495.592448][T22103] alloc_pages_vma+0x3e6/0x890 [ 495.597199][T22103] do_anonymous_page+0x206/0xec0 [ 495.602166][T22103] ? __this_cpu_preempt_check+0x18/0x20 [ 495.607704][T22103] ? __rcu_read_unlock+0x4b/0x260 [ 495.612716][T22103] handle_mm_fault+0x1371/0x1930 [ 495.617635][T22103] __get_user_pages+0xac6/0x1150 [ 495.622613][T22103] __get_user_pages_remote+0x113/0x500 [ 495.628065][T22103] ? __ptrace_may_access+0x33e/0x350 [ 495.633332][T22103] pin_user_pages_remote+0x5e/0x80 [ 495.638433][T22103] process_vm_rw_core+0x369/0x760 [ 495.643447][T22103] ? check_preemption_disabled+0x51/0x140 [ 495.649146][T22103] ? check_stack_object+0x61/0x70 [ 495.654236][T22103] ? __virt_addr_valid+0x15a/0x1a0 [ 495.659328][T22103] ? __check_object_size+0x253/0x310 [ 495.664650][T22103] ? _copy_from_user+0x93/0xd0 [ 495.669545][T22103] ? rw_copy_check_uvector+0x249/0x280 [ 495.674999][T22103] process_vm_rw+0x14e/0x1d0 [ 495.679585][T22103] ? __this_cpu_preempt_check+0x18/0x20 [ 495.685110][T22103] ? __sb_end_write+0x90/0xe0 [ 495.689768][T22103] ? vfs_write+0x480/0x690 [ 495.694277][T22103] ? __fget_light+0x219/0x260 [ 495.698938][T22103] ? check_preemption_disabled+0x51/0x140 [ 495.704760][T22103] ? debug_smp_processor_id+0x18/0x20 [ 495.710110][T22103] __x64_sys_process_vm_writev+0x76/0x90 [ 495.715722][T22103] do_syscall_64+0x51/0xb0 [ 495.720118][T22103] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 495.727124][T22103] RIP: 0033:0x45c1d9 [ 495.730990][T22103] Code: Bad RIP value. [ 495.735026][T22103] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 495.743515][T22103] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 495.751468][T22103] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000512 [ 495.759529][T22103] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 495.767790][T22103] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000001e [ 495.775739][T22103] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c [ 495.834703][T22102] bridge6: port 1(dummy0) entered blocking state [ 495.841333][T22102] bridge6: port 1(dummy0) entered disabled state [ 495.858952][T22102] device dummy0 entered promiscuous mode 03:44:15 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) 03:44:15 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xa000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:15 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) 03:44:15 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x1f, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@local, @multicast2}, &(0x7f0000000140)=0xc) r2 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r2, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) write$eventfd(r6, &(0x7f0000000180)=0x5, 0x8) 03:44:15 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xb000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 495.976247][T22132] nfs: Unknown parameter 'ip_vti0' 03:44:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x6, 0x8000, "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", 0x6, 0x1f, 0x3, 0x6b, 0xe1, 0x1, 0x1f}, r1}}, 0x120) r2 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2000, 0x60, 0x9}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r2, r3) 03:44:15 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) 03:44:15 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020025bd7000fbdbdf250100000014000300fc0200000000000000000000000000011400020000000000000000000000000000000000050001000000000008000500e0000002080004006401010108000400e000000208000500ac1414bb"], 0x64}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x0, 0x200}) 03:44:15 executing program 5 (fault-call:1 fault-nth:31): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:15 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xc000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:15 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2000, 0x0) getsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f00000000c0)=""/2, &(0x7f0000000100)=0x2) 03:44:15 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xd000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 496.367665][T22165] FAULT_INJECTION: forcing a failure. [ 496.367665][T22165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 496.391164][T22171] nfs: Unknown parameter 'ip_vti0' 03:44:15 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) userfaultfd(0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) [ 496.459489][T22165] CPU: 0 PID: 22165 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 496.468179][T22165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.478235][T22165] Call Trace: [ 496.481527][T22165] dump_stack+0x10f/0x19d [ 496.485855][T22165] should_fail+0x23c/0x250 [ 496.490271][T22165] __alloc_pages_nodemask+0xec/0x390 [ 496.495628][T22165] alloc_pages_vma+0x3e6/0x890 [ 496.500392][T22165] do_anonymous_page+0x206/0xec0 03:44:15 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x577880, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e26, @multicast1}, 0x10) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/exec\x00') ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000280)={0xa20000, 0x5, 0x4b, r2, 0x0, &(0x7f0000000340)={0x990a2c, 0x6, [], @value64=0x4}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x14, &(0x7f0000000340)=ANY=[], 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x70, &(0x7f0000000300)=@sack_info={r5, 0x6, 0x8}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r2) dup3(r7, r1, 0x0) ioctl$VIDIOC_S_EDID(r7, 0xc0285629, &(0x7f0000000180)={0x0, 0x56a, 0x6, [], &(0x7f0000000140)=0x6}) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 496.505683][T22165] ? __this_cpu_preempt_check+0x18/0x20 [ 496.511231][T22165] ? __rcu_read_unlock+0x4b/0x260 [ 496.516258][T22165] handle_mm_fault+0x1371/0x1930 [ 496.521256][T22165] __get_user_pages+0xac6/0x1150 [ 496.526282][T22165] __get_user_pages_remote+0x113/0x500 [ 496.531739][T22165] ? __ptrace_may_access+0x33e/0x350 [ 496.537014][T22165] pin_user_pages_remote+0x5e/0x80 [ 496.542113][T22165] process_vm_rw_core+0x369/0x760 [ 496.547186][T22165] ? check_preemption_disabled+0x51/0x140 [ 496.552901][T22165] ? check_stack_object+0x61/0x70 [ 496.557915][T22165] ? __virt_addr_valid+0x15a/0x1a0 [ 496.563021][T22165] ? __check_object_size+0x253/0x310 [ 496.568294][T22165] ? _copy_from_user+0x93/0xd0 [ 496.573057][T22165] ? rw_copy_check_uvector+0x249/0x280 [ 496.578549][T22165] process_vm_rw+0x14e/0x1d0 [ 496.583131][T22165] ? __this_cpu_preempt_check+0x18/0x20 [ 496.588768][T22165] ? __sb_end_write+0x90/0xe0 [ 496.593619][T22165] ? vfs_write+0x480/0x690 [ 496.598084][T22165] ? __fget_light+0x219/0x260 [ 496.602862][T22165] ? check_preemption_disabled+0x51/0x140 [ 496.608577][T22165] ? debug_smp_processor_id+0x18/0x20 [ 496.610501][T22190] nfs: Unknown parameter 'ip_vti0' [ 496.613942][T22165] __x64_sys_process_vm_writev+0x76/0x90 [ 496.613955][T22165] do_syscall_64+0x51/0xb0 [ 496.613968][T22165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.613976][T22165] RIP: 0033:0x45c1d9 [ 496.613979][T22165] Code: Bad RIP value. [ 496.613984][T22165] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 496.613999][T22165] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 496.660220][T22165] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000515 [ 496.668180][T22165] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 496.676146][T22165] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000001f [ 496.684104][T22165] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:16 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) write$P9_RWSTAT(r1, &(0x7f0000000340)={0x7, 0x7f, 0x1}, 0x7) dup3(r4, r1, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x101000, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff80}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4c841) execveat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='/dev/radio#\x00', &(0x7f0000000180)='/dev/radio#\x00', &(0x7f00000001c0)='/dev/radio#\x00'], &(0x7f0000000300)=[&(0x7f0000000240)='.#^\x1e\'/\x00', &(0x7f0000000280)='/dev/radio#\x00', &(0x7f00000002c0)='/dev/radio#\x00'], 0x1000) 03:44:16 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) 03:44:16 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xe000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 496.814425][T22201] nfs: Unknown parameter 'ip_vti0' 03:44:16 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) 03:44:16 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0xffffffffffffff66}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:16 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x10000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xb8, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1d26}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4041}, 0x20000010) 03:44:16 executing program 5 (fault-call:1 fault-nth:32): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:16 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x80402, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4000, 0x0) prctl$PR_GET_DUMPABLE(0x3) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0x3f, 0x4) r1 = clone3(&(0x7f0000000000)={0xd000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:16 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x11000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 497.235792][T22225] nfs: Unknown parameter 'ip_vti0' [ 497.239548][T22223] FAULT_INJECTION: forcing a failure. [ 497.239548][T22223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 497.259643][T22223] CPU: 0 PID: 22223 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 497.268328][T22223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.278370][T22223] Call Trace: [ 497.281646][T22223] dump_stack+0x10f/0x19d [ 497.285948][T22223] should_fail+0x23c/0x250 [ 497.290336][T22223] __alloc_pages_nodemask+0xec/0x390 [ 497.295594][T22223] alloc_pages_vma+0x3e6/0x890 [ 497.300330][T22223] do_anonymous_page+0x206/0xec0 [ 497.305251][T22223] ? __this_cpu_preempt_check+0x18/0x20 [ 497.310782][T22223] ? __rcu_read_unlock+0x4b/0x260 [ 497.315792][T22223] handle_mm_fault+0x1371/0x1930 [ 497.320730][T22223] __get_user_pages+0xac6/0x1150 [ 497.325928][T22223] __get_user_pages_remote+0x113/0x500 [ 497.331446][T22223] ? __ptrace_may_access+0x33e/0x350 [ 497.336704][T22223] pin_user_pages_remote+0x5e/0x80 [ 497.341814][T22223] process_vm_rw_core+0x369/0x760 [ 497.346939][T22223] ? rw_copy_check_uvector+0x249/0x280 [ 497.352566][T22223] process_vm_rw+0x14e/0x1d0 [ 497.357144][T22223] ? __this_cpu_preempt_check+0x18/0x20 [ 497.362674][T22223] ? __sb_end_write+0x90/0xe0 [ 497.367332][T22223] ? vfs_write+0x480/0x690 [ 497.371728][T22223] ? __fget_light+0x219/0x260 [ 497.376438][T22223] ? check_preemption_disabled+0x51/0x140 03:44:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = userfaultfd(0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000100)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000280)={0x0, 'ip6_vti0\x00', {0x3}, 0xaa}) r5 = dup2(r4, r3) dup3(r5, r1, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xfff, @null, @rose={'rose', 0x0}, 0x5, [@null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) prctl$PR_GET_DUMPABLE(0x3) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) [ 497.382159][T22223] ? debug_smp_processor_id+0x18/0x20 [ 497.387509][T22223] __x64_sys_process_vm_writev+0x76/0x90 [ 497.393114][T22223] do_syscall_64+0x51/0xb0 [ 497.397506][T22223] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 497.403379][T22223] RIP: 0033:0x45c1d9 [ 497.407278][T22223] Code: Bad RIP value. [ 497.411326][T22223] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 497.419725][T22223] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 497.427797][T22223] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000518 [ 497.435741][T22223] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 497.443838][T22223] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000020 [ 497.451781][T22223] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:16 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) [ 497.565835][T22249] nfs: Unknown parameter 'ip_vti0' 03:44:19 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x2, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d", 0x20, 0x0, 0x0, 0x6, 0x4}) 03:44:19 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x12000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:19 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) 03:44:19 executing program 5 (fault-call:1 fault-nth:33): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:19 executing program 2: r0 = clone3(&(0x7f0000001240)={0x1a0001100, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x95de28597e74813c, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, 0xffffffffffffffff) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r6, 0xc06c4124, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000001340)=ANY=[@ANYBLOB="4d000000ff0f0000010120002a03090100100000090000000200000006000000000000000600000084000000000000000008000021f9ffff03000000", @ANYRESHEX=r0, @ANYRES16, @ANYBLOB="fe6eb93fb9a3b3d14f8d904f83f12fbaf5d9a630731ff00c956c7a88a2ee3645cf6e88f8f78e9ca2b818a43a660c2656a443ef0154052f964f34485b47", @ANYRES64=r4]}) 03:44:19 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000005c0)={0x61c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x5f4, 0x8, 0x0, 0x1, [{0x258, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @dev}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_ALLOWEDIPS={0x1f0, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}]}, {0x398, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ALLOWEDIPS={0x31c}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x61c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008014}, 0x50) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 499.833505][T22268] nfs: Unknown parameter 'ip_vti0' [ 499.834867][T22271] FAULT_INJECTION: forcing a failure. [ 499.834867][T22271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 499.884385][T22278] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 499.897864][T22271] CPU: 1 PID: 22271 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 499.906543][T22271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.916613][T22271] Call Trace: [ 499.919892][T22271] dump_stack+0x10f/0x19d [ 499.924201][T22271] should_fail+0x23c/0x250 [ 499.928605][T22271] __alloc_pages_nodemask+0xec/0x390 [ 499.934165][T22271] alloc_pages_vma+0x3e6/0x890 [ 499.938932][T22271] do_anonymous_page+0x206/0xec0 [ 499.943852][T22271] ? __this_cpu_preempt_check+0x18/0x20 [ 499.949470][T22271] ? __rcu_read_unlock+0x4b/0x260 [ 499.954502][T22271] handle_mm_fault+0x1371/0x1930 [ 499.959499][T22271] __get_user_pages+0xac6/0x1150 [ 499.964443][T22271] __get_user_pages_remote+0x113/0x500 [ 499.969997][T22271] ? __ptrace_may_access+0x33e/0x350 [ 499.975279][T22271] pin_user_pages_remote+0x5e/0x80 [ 499.980654][T22271] process_vm_rw_core+0x369/0x760 [ 499.985683][T22271] ? rw_copy_check_uvector+0x249/0x280 [ 499.991328][T22271] process_vm_rw+0x14e/0x1d0 [ 499.995915][T22271] ? __this_cpu_preempt_check+0x18/0x20 [ 500.001461][T22271] ? __sb_end_write+0x90/0xe0 [ 500.006135][T22271] ? vfs_write+0x480/0x690 [ 500.010542][T22271] ? __fget_light+0x219/0x260 [ 500.015206][T22271] ? check_preemption_disabled+0x51/0x140 [ 500.020917][T22271] ? debug_smp_processor_id+0x18/0x20 [ 500.026321][T22271] __x64_sys_process_vm_writev+0x76/0x90 [ 500.031944][T22271] do_syscall_64+0x51/0xb0 [ 500.036356][T22271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 500.042231][T22271] RIP: 0033:0x45c1d9 [ 500.046102][T22271] Code: Bad RIP value. [ 500.050160][T22271] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 500.058552][T22271] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 500.066518][T22271] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 000000000000051b [ 500.075268][T22271] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 03:44:19 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:19 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x20000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 500.083249][T22271] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000021 [ 500.091210][T22271] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c [ 500.108284][T22278] device dummy0 left promiscuous mode [ 500.116644][T22278] bridge6: port 1(dummy0) entered disabled state [ 500.148598][T22292] nfs: Unknown parameter 'ip_vti0' [ 500.162332][T22278] bridge7: port 1(dummy0) entered blocking state [ 500.168684][T22278] bridge7: port 1(dummy0) entered disabled state [ 500.181513][T22294] overlayfs: bad mount option "redirect_dir=./file0" 03:44:19 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x20100000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:19 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) [ 500.202924][T22278] device dummy0 entered promiscuous mode [ 500.265867][T22298] overlayfs: bad mount option "redirect_dir=./file0" [ 500.276496][T22299] nfs: Unknown parameter 'ip_vti0' 03:44:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @private2}, r1}}, 0x48) 03:44:19 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x48000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4001) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:44:19 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:19 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x25000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:19 executing program 5 (fault-call:1 fault-nth:34): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 500.542238][T22314] FAULT_INJECTION: forcing a failure. [ 500.542238][T22314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 500.545723][T22315] nfs: Unknown parameter 'ip_vti0' [ 500.572533][T22314] CPU: 0 PID: 22314 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 500.581372][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.591414][T22314] Call Trace: [ 500.594720][T22314] dump_stack+0x10f/0x19d [ 500.599031][T22314] should_fail+0x23c/0x250 [ 500.603442][T22314] __alloc_pages_nodemask+0xec/0x390 [ 500.609637][T22314] alloc_pages_vma+0x3e6/0x890 [ 500.614411][T22314] do_anonymous_page+0x206/0xec0 [ 500.619400][T22314] ? __this_cpu_preempt_check+0x18/0x20 [ 500.624927][T22314] ? __rcu_read_unlock+0x4b/0x260 [ 500.629937][T22314] handle_mm_fault+0x1371/0x1930 [ 500.634977][T22314] __get_user_pages+0xac6/0x1150 [ 500.639946][T22314] __get_user_pages_remote+0x113/0x500 [ 500.645393][T22314] ? __ptrace_may_access+0x33e/0x350 [ 500.650855][T22314] pin_user_pages_remote+0x5e/0x80 [ 500.656016][T22314] process_vm_rw_core+0x369/0x760 [ 500.661131][T22314] ? rw_copy_check_uvector+0x249/0x280 [ 500.666570][T22314] process_vm_rw+0x14e/0x1d0 [ 500.671179][T22314] ? __this_cpu_preempt_check+0x18/0x20 [ 500.676738][T22314] ? __sb_end_write+0x90/0xe0 [ 500.681393][T22314] ? vfs_write+0x480/0x690 [ 500.685798][T22314] ? __fget_light+0x219/0x260 [ 500.690464][T22314] ? check_preemption_disabled+0x51/0x140 [ 500.696172][T22314] ? debug_smp_processor_id+0x18/0x20 [ 500.701605][T22314] __x64_sys_process_vm_writev+0x76/0x90 [ 500.707287][T22314] do_syscall_64+0x51/0xb0 [ 500.711691][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 500.717643][T22314] RIP: 0033:0x45c1d9 [ 500.721519][T22314] Code: Bad RIP value. [ 500.725569][T22314] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 500.733954][T22314] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 03:44:20 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x2c000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 500.741901][T22314] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 000000000000051e [ 500.749850][T22314] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 500.758170][T22314] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000022 [ 500.766152][T22314] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x9d0000, 0x2, 0x101, r3, 0x0, &(0x7f0000000000)={0x9909df, 0x3, [], @value64=0x10001}}) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000080)="efdcff99e0273f9d2de7538eb7bf3a735b19c64789376678d8143063fb82863753e39e540bc19ba163f57c8e60d175472645e850a12039f2aac5c78bcd558014b9f05c83e6f2db2a944bd4f52e0759e4aa8aec4bf891783cd3abe69a23") process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:22 executing program 0: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@dev, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20004}, 0xc, &(0x7f0000000840)={&(0x7f0000000900)=ANY=[@ANYBLOB="377a24b981cf340255451cbecc3d79172f3c9483f9345f2b1aea7683234a40502afaa7d37ecec2aa98e5d6ded44b248e58f85a34ca33dfd0aa3cb9555fce8a41d5fd7eeee2c0612d7cd88e2f59915938535d418a92ab66c0fd49aee0b44b4d4d9423aaa38aa7aff3f249c9db9cd4f18a2bab2d9042bfe5c68b5e6f19dd7559d03798f755a93957fa979cd3fcf252009eaa0072a4a8971c1efaae9c59f709cea3c6f54422451d9131a307d0f54fb263532aad7946dc46753347cf526e069af7aa6423b03b6f8b8c8d42acda45cf4acbefe270000000", @ANYRES16=0x0, @ANYBLOB="200029bd7000ffdbdf25100000000c009900090000000400000008000c003800000008003500010000000400e200060096006ceb000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x604}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x400, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) 03:44:22 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x3f000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:22 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) 03:44:22 executing program 5 (fault-call:1 fault-nth:35): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1030, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:44:22 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x1, 0x1, 0x2, 0x6, 0x2, "92e5fa669f9cbebffc5e480f280adcb9e39631c3481bb2f44e2dc4747ddad5426c256c7218aa086bea2657426873e26f86f4475ad8ad46527c8e961bb78080", 0xf}, 0x60) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) signalfd(r2, &(0x7f0000000080)={[0x8000]}, 0x8) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) delete_module(&(0x7f0000000140)='}\x00', 0x200) [ 502.854942][T22346] nfs: Unknown parameter 'ip_vti0' [ 502.869773][T22350] FAULT_INJECTION: forcing a failure. [ 502.869773][T22350] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 502.885368][T22350] CPU: 1 PID: 22350 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 502.894116][T22350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.894120][T22350] Call Trace: [ 502.894137][T22350] dump_stack+0x10f/0x19d [ 502.894147][T22350] should_fail+0x23c/0x250 [ 502.894158][T22350] __alloc_pages_nodemask+0xec/0x390 [ 502.894171][T22350] alloc_pages_vma+0x3e6/0x890 [ 502.894185][T22350] do_anonymous_page+0x206/0xec0 [ 502.894196][T22350] ? __this_cpu_preempt_check+0x18/0x20 [ 502.894207][T22350] ? __rcu_read_unlock+0x4b/0x260 [ 502.894300][T22350] handle_mm_fault+0x1371/0x1930 [ 502.894315][T22350] __get_user_pages+0xac6/0x1150 [ 502.894352][T22350] __get_user_pages_remote+0x113/0x500 [ 502.894364][T22350] ? __ptrace_may_access+0x33e/0x350 [ 502.894376][T22350] pin_user_pages_remote+0x5e/0x80 [ 502.894386][T22350] process_vm_rw_core+0x369/0x760 [ 502.894401][T22350] ? check_preemption_disabled+0x51/0x140 [ 502.894477][T22350] ? check_stack_object+0x61/0x70 [ 502.894492][T22350] ? __virt_addr_valid+0x15a/0x1a0 [ 502.988709][T22350] ? __check_object_size+0x253/0x310 [ 502.994017][T22350] ? _copy_from_user+0x93/0xd0 [ 502.998840][T22350] ? rw_copy_check_uvector+0x249/0x280 [ 503.004290][T22350] process_vm_rw+0x14e/0x1d0 [ 503.008867][T22350] ? __this_cpu_preempt_check+0x18/0x20 [ 503.014434][T22350] ? __sb_end_write+0x90/0xe0 [ 503.019101][T22350] ? vfs_write+0x480/0x690 [ 503.023495][T22350] ? __fget_light+0x219/0x260 [ 503.028177][T22350] ? check_preemption_disabled+0x51/0x140 [ 503.033880][T22350] ? debug_smp_processor_id+0x18/0x20 [ 503.039251][T22350] __x64_sys_process_vm_writev+0x76/0x90 [ 503.044882][T22350] do_syscall_64+0x51/0xb0 [ 503.049285][T22350] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 503.055292][T22350] RIP: 0033:0x45c1d9 [ 503.059156][T22350] Code: Bad RIP value. [ 503.063193][T22350] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 503.071666][T22350] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 503.079612][T22350] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000521 [ 503.087583][T22350] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 503.095537][T22350] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000023 03:44:22 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 503.103509][T22350] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:22 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) 03:44:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value={0x0}, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = dup2(0xffffffffffffffff, r3) dup3(r5, r2, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r4, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x50, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x9}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8074}, 0x80) 03:44:22 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x48000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 503.262871][T22372] nfs: Unknown parameter 'ip_vti0' 03:44:22 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) 03:44:22 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x4c000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 503.376764][T22383] nfs: Unknown parameter 'ip_vti0' 03:44:25 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "0300000000000000cd54262e007764d4007425e607cc59edf213d6676924dc3d", 0x0, 0x0, 0x4, 0x8}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:44:25 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x5c000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:25 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) 03:44:25 executing program 5 (fault-call:1 fault-nth:36): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) r2 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r2, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4089, 0xff9}], 0x1, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_AIE_OFF(r4, 0x7002) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000006240)={0x0, 0x0, 0x0}, &(0x7f0000006280)=0xc) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r10) lstat(&(0x7f00000062c0)='./file0\x00', &(0x7f0000005d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006480)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000100)="bdef121513e25a194bc908d8fbe2f4b6cfe804a03bc1921db1716cc69f31ed64430c08f8dfe2c6b84919b90344e4ccbd76259b8f985e3d2665303695ec28eada572a380508d3eb06e5784e89debe5f48f92b40a7250251d29ecb330e9347a69969c71a704e1e44c09570e821c20484bd9ba8434f282142320129326100", 0x7d}, {&(0x7f0000000180)="2793b6b81f47ea2cfae5da4ee57d57099e36f0b807801f49b36a946e27de80cba5ec", 0x22}, {&(0x7f00000011c0)="6df5b0", 0x3}], 0x3, 0x0, 0x0, 0x4040}, {&(0x7f0000001240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003640)=[{&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="9770d1a7c8ad570156eead458e75dbb5ba5928683305c656", 0x18}, {&(0x7f0000002300)="c21c0b2137f68686875a89d286c23b6f362720165f90f04a23462b68d623d24509aeeff362609204d628a15708fb", 0x2e}, {&(0x7f0000002340)="176e6925f242bb1286eaa1850f066999823fb516c831b8fa48280c3f38b51d58c5bf8dd57157e65a738d6f820a427463ec3bb8da50be803bd32e9c7d23871fc08c605f1a0782d3022b64b057b35d4b40d8714714ca3b88af9a614c667d3a62798169824c3fc5fd902f2ea5f48f86d65ebb33a6c2caaf0c613c7edf62bb7e771379deed47a67641b3f87a10093243d69ddbd21d8d17f7cbbf4549133026add7e6d360add40d2e520821cd2b1088c03eed90b5f5a9951f5ccc8a141892f1672825beb179960bc51bc962ee", 0xca}, {&(0x7f0000002440)="cb6719664c0726bbeac8209d5095a8ca04dccb6859544c5d9708f2c97057d107bb9108b2965bcac4f45cc4625cfcc5ccffc290879d", 0x35}, {&(0x7f0000003540)="4b5357387795319be68a36485061abaac943a6ed517a1c590a01f03eb252257b3179ff726d1b0ac95b3632ef179604aed732388586be24262ea4b909caf54bb6f1c11375fdf1eeaed56b1dddaa222c7f9a1eeb24", 0x54}, {&(0x7f00000035c0)="7b2019fb62f8ca65647fced21521840a4d251924a539f0675f4c28d76049c0a8945bd763b7268ec0c9846824405cdd8782c6c03d8791764258974cc8157375cd65acb464c0b49d9314defcc0aa52050939a16c50b9af", 0x56}], 0x7, &(0x7f00000036c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r8}}}], 0x98}, {&(0x7f0000003780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000003800)="031f6187492f033fda7a0e4e52b77d09deb55a7adfbcead22f3d6d735c9676157392b5ddef9cdf6b054a8055809011c678989be0a10c9ee346471ea0cbb128cb370fb960763638936bf04030e93a7a9a5380ad07bd6fc332cc6745262d9c98a02be9eb8a2895bf6e79d11fa4a272b7687abc023f44912b02e692d43522930b008bb2fd66f07414bb8c67945d74ed08f772ccc4505fa560f746b2d26aee71db3304b776f120a75bfad21670aaf245abb97d542d4f77fd9fd80cbeafb43418c722a9d8b82fdaa274396c7bb8558f8d0c73b6d2ff756328b5c93ec2aedba674d2b1a0a5eccf9d95fd5f4d24413a5c6bc5f75bd4fd04942b7793c8", 0xf9}, {&(0x7f0000003900)="aec6dd2d1f48c0e10cf13dcc4c138ba6f6f4e2c63167222010dd5e0408d3d629ea1eebedcd848feb38fb5ae3a159c3bd707146e79319c78f17af7d783e41c42b4c6b9ba00fd4610c0b5566e33a050e9a357003f7752227fed17631f2f69f430afddc33a6237600b1e90576f10455ddcbeed1edacac0ceabdc3", 0x79}, {&(0x7f0000003980)="4d80376fb4cb0555e10cec137e6cf0065b2e19e76eaab8c59dcb15dcdd66e96d3540d31492ec2ef011af9dc02017a4e693eb3a8f6984629d622ed473fd201e613b7ebff838f69457f7d3a45b21eb14bd3a3359f17bd323d4471691", 0x5b}, {&(0x7f0000003a00)="b7cbd9dbf63b6eb3189a2532ce20d3c8f54cb85bd015fceed9bb518b0761ac26a6e8619e53fdd56ee4d911f980a01761c985cf4b3de4c957fd71ac558e5a061e0e0c631c", 0x44}, {&(0x7f0000003a80)="a5f220ee01e1c4b372a23ad70f835cf0e0d7968a90cc51134036c5e21b38b2d0ca27a8b6ef7d355306666d07fc65bbd9e3bc37c5d41e303391f93968c75a5d905b690616d7a9702ed4b50b6d04ee95c17ae6115c7ef0e06ed4d8a62e72c9396164e7", 0x62}, {&(0x7f0000003b00)="e9da5aa24349a5cdd5b800c6927dee7cec8e201d4f374e79cee4999676f0d4562b8b1315f9545e7570bc4f0c878270beb65b2fe44a704dd811672c02248e874eb8fc08bc8e98335a22626bf05f0e13f913e8ed4deefa4f0f697c8486d4af86447c", 0x61}, {&(0x7f0000003b80)="ff43326e386a2976ab8b66ea832dc534c03cfe8ac6be87d822dd73c87c2809072079ffd24946438128622e3f49f79db73ad6437eff72fc917aa749648569fc7b587b871c71018a6f18a9f2ee7644ec693be1fc85ea2ad1c291783b775f6ae7119f83e92356941d95c1827db3f41161ca992fc6d5761382b711db8085b62b22715e454cf46e515173229b6e39f7ba4d8cd9bddf432ed9b3ad68b395eb6929dbc8b77900f1303aaba74c7a7a07f10189d71a818b6af922239c66a2524f89f8e487018a3d5c1304549c8eec12fc54fc014508f0f4a17f6e9982b3abf87170a060a6d54fc52aa3ff391aafd09a720c7bd44d17dc186acad72e7045401b000d9254dd53492868f6d7263d4c717a9b215ae773c434830582cb575867bc3b04aba445691a5427381a3042ea76840b473b7a4927685bf8becb823cd7d81f36d29a6ae3b27574099d707a452065c1bdda7ac7adb44632567e58e0b4a3093ddcc10e490de2b5f43ccd9be719aa7de20443d80b908ef901223d212c02026ed37bfd540c722a50697a04b9406b7f28bd310fdfbc49307dc261bdf0d1f64494109c4ffeab2cefc7b0cd63a01fb98b43f343623d7d69128d999538a40004d24f0369f73c4407f045217ef025d206e0d42b767180bc8addc06a5297baa45fbea3a5c3bc6c83d1b75075f5e23641e97f930f2ae951de74394d04c28f640464207bef32844c661e1796bda9ed22ca9ec1ee33bd088e2dafa415a1c2f74d8f6e9c2d21c8a6273470e1c823a9f4c2d1d7dfdbd77bf25fda888fda672c39a046326779fed3c4444437d8bf9bb61a2137729be6ec1949ba88b7d2acc4837219f40119cfec053a5c041facf779a08fe882565f2e6f285feed47dce1eb47f028c23c03b88f0aa816be213b007f8d46c8365ad2a659d12c4f4f2c3ac0093e77a76b6d1e5277122b778dc37a1ac04dfd3be7b400eed86ff1294ea1568d0c335b78d71e14a037f6aa3cc258e089677bdecccc196c654ccb75e099d0fa11f0cf7f404a88917bc55b12d9ca22de9230c5ec0e80b17815911dfbb76b90faa7530b924bbe9ee523229fb94122da72cb34df6f2c910acb19bf6f62385d53e39982228a310466704634183460073b4b12e52fed6fca22cfd88401d1da2297979d2bcc429635b538b8bd448eb92c0815ddfa092d038d960e2371470df4018914fb4d80680f24fa8b8db01ec26db0e650b1bd52d7a4a40314e8b4a8726944478e3e17b7e225a40dabd1c6a74d304333e972246ec9a32cf0d37bf9438e6fbb4097c0cffb79feec03c864a9b6fac2fd8a438210a3057f5bcd736a6e44c9d7f26907ed3038237b3721e494cc9480d5ba1cccb5d0d91d19fa61c5f2c07c243af5cb3880ab9b5df19cfc40599d0c90b6a7cc85f0a9911b1346f27b2d5ee6491e9e6d3aaac84c94f92df50ab92f560dd66a3a9d65a4293594374753245768b39117b3f35c549859af3cee2fcb405ee33688dc6845b16124e7616263b30dab303028b50751b81e9b87a5b61cfa24cfc89a074e0caefc79efb6b4cdbe79bb5bd9aca07f9ce62a12ff6d59dfadcd16a98bc465e30280c5ec6294b901197ec98097b548bb37bacdecd7b09b9dd5f6f53f0af5b042640078b6f41f43220b695975cd4ae8cc319ff4e7f8ce16536863593587c2b328cc918c21ad8d6615b237363e42a35e6aa51fda57d4a4cf7d5a622ac1fa9a19ed287f774926bb909d24cb9752936e2d96feb7fdc0f1df460e1a450d7882e25c20cba81de253944c7fa29a2ab95befe2e29c9f3f213876805554f23f7a5dd6d21877faf8b5788cad2ed3d329107f4c87c0c7a9a90fa20ca24bf78b1b019575fa084d5ad8335525c899437c96b63f7d0772ee590520b16f6002ee290e1074fa62f7473817a41d2c492ddbae082077243b01f55faa8eb5ae55a9e0e119749cfc77133ad1c5893f806814e95d2c78e1e928497c84b3501d66fb39574d970df0aee093ce1cdabb5c91e35b6669f8c7093d8d57df8fccbb4d39c48beab8add83ef9430eaa3b9911eb86642486e9aa6739895bd8141a21f430c287f1a3724608ac0399af2c6272b1fc78b7e4560f1aad2b3ed1a82b4037696edac94c7eeb62d482d6a217191316c7742ec0197a13988be84e22f3f18ba387d13f9804e44c41158c497a2674ad3234a09433f3cfc3470942403fe9f5b8231c30afbe81c3a077a9f6396954769872c6299c7e784eb8074f3c9b412288e8e62624f21208e2e089377cd7399d7397fa20440861db203d0f573f03579da20f84bc9d4b1143e70b0415f6d16ec8679988e012ecf5a8ce4849cd05b4b06a7f9f6a2f386c6e97d039ac0faf6ab5809f2df5d8377ec95eec54f8c74e1963f7e5862b7632f257f0459b29c161107b99f6cbf9bc6201f782f596047784df68efe4c44e988f355601e19d83363b9f7c5e68e9f68488f9d391606d02edbde4bec169fa5f4a7298169ddb4b4e15a2db8145a893f72b78a20cc4a5d851302f7ba2e3a70e0b0f958a82288cd359105e9b76ff958dbd411547555a4c1a8a93c8dab42f465f0516e960019e65fa8531936c3d68696cf159d7d14cd35d6af30b1813d0680c746974956f9a98cd4c309a2188cc0cdaa6cb39ca6161b4930d99d5275fc9c62ca2b93296c46dc6dd5fb76d2e012bdf989ac50d394a79f527001b83628e92267210a92afcc538ed33e949ef42ffbd0db547c2cf54f0f5b21466ffeb7cb6eda3e9a45eb7479771b777fa756db1a110bb2ffd2a48a28c20239e5dbb90f59c1260e9a15abf5ac7abe8641f0aa173fbf293b1ba5d7e28f75a4f6f0e16652f63e8f8e31c3a03eb74232aeef77af39cae788cde34a5abec55f37cf7d4125753203360c5755f44654d2de77d43b09029627a4d1f402ff695f9af0902373a82a9aa639b09b771fe13ad38f8dc921326975289d091b901019f914457ad70a7b070751458a890d66034911dcbbec04f85e1ca3ae97b233bdd93658914ac55d828e8548cbd988e3eac7952764600e423261e91763e735ee759c6dab82d8a146909bd5dfb1197cba6f5bce7cc3da59eba01cccbd318cee4d6d2c76b3d77954b38767a842245e6ab7df7b166f9e8929dae6cc2b644514bd3c492bfb97291e48751a471193eb2cab4b9c783c3d0072ea263b27254647a0a62916d9c40607a20addc1056345672231be985ea979f3a891b0dc5dfe4e47826e8e47182b4c31f7fd7beb91cf0a65e0309bae8ae3446490821957367ceba2a3ccf21c1465cc0237d81cb356f82526f116dd8bf2bec0b80a6957d761215f8dc85003bfaf7e74ea965df7fd10b4613e3dae0f38399a62f2fa2fb964a9bf1cabcecafcc4f123155c3a41ff06ef184bdd1f78622c158158e15e7f57626b45f44124b55cf43f3debcb2608b77ebf0d2c0cc8d7875c0c9c8791e281f460c75eac6548e99258ec709cb29a8a8a9d2259d23df8d38597c3261f3fab3d5d55a0f36910cecb1e53869132b9ce63c62c5bc8c7c710405066b671d704ff1abe47fb59ce8d74d8fb1e301fdc8f7174a25d631148ad69ab39d8e22d52d94637a9d2f1013321bb9f5db3e76e049a39178f68a8cbd98de1c75903c09046c4b19e545705a2dbbd65b3d425d64ce67e496c3b28b0f7a3fa3db878e7c88e245243288334f21622604197eebf1a6863b6a8ebcfa9cd9fb0eebe8cf04177f1b022d90d0d31c8f83d2e228709cdfd98d132703b542e97acf6280324be4219c4018d31754a029d17bc1dd12177cb8cb072e905d22881fc127fa5dc9bd43d2f13cc7894473a21f3e8ab352759e7a05621e10269ecfcfb6818a336ef554f95a1fe4c589e9e82e8b9c6076aef2c915fcd1cb76a0508bfecdae8bf4399b1b5e5e9adf693c711952815732caffdfeb6ecd461f4b0a546aa591dda0be7092f4856edade3b6e95c15be292042d49bb618654e9504cc2df9be107b3425928c727ed9c9570c8ec314fd5b930d11ed4a1d1184ff58ba650c26b99b68998e0768b0504d61144d596870a7634ef63f44a166ce51acce96c75d21ea8997387d4592ff2f4c68945b0b4759c82ca71ce6325c4dd3096cc323a72055f89e01d25e1e5fbd3693b041fc62b489928aab824f99f5f540d2a8e5c639654e28a1fac23dae33afad6a8a4c687c525caa89a35c9f47f5df5b84bba3fd62d68c454bd65526e8e43691213ab913db312250a5bb84c47200eb1a40b8b65b86999ea5720005a326e25259a7e125fe16ea5c6b2b32cf29e3f8f5a6f422d5791c9b7f8f5535427ff487845ac2885bf3d6319aa672b7c94053d09b8734c6895f7e4074fa3817fb5e3ba7214edc8b6ed5b0098b4e5f04e545f35daac6046bfc10dbf1894058245bd4212d9b83c7f6d75cba7fcb6eb4f5372603df63cf806d3da4becd0acd0a7496a4a8f0da3fb17ffea7dcfe06f4db8acb5a39e4f0b217bb6d2e9523d7c170f880a9c8fab551949ab387d44674adfd41dc8fc4d234e20de097c046cff0b243814e7d8c526ddd0861cd380a62e9821ab71d237f45216ec7d2ee02106822067729534a5ed3e621d2756cc5d770e3be0e441384486fed048fb90ceb84178550e751b1acc796bf2e3304ba448cfce4a04289bd2275485a1ee557530f03e912dd673eb175067fcd33d508ef4d0d64d6a0833de077a64e6e24b1e36a5e5cc22e960e8a5b002fa92030293313e1fd1cc35cb4fe1f664e6838801bf943d8dab9c9772947c328dea51390afb2618fd8ec87b255cb500ad11fe3885729eb8702012a258c8e001f2f3227babc2e51f38d1be2c9f72bb76a3f5f08408d4784cbd5d5bd176f0faf5de6ab63c97c6fc8fbf1a92033547d096df4e50c3a50ec551894fbff101697cfe3f875228143212df028b77653003ac1931ef320bf89d6f794952b4c721a533562b67f756ed75b2dfa4a69304fad941086a7aba6f08e969913e62d6882bfe0a231e306a580b5d1b66fa00eaa10fb6aa04ba2bdd691d619cbf3aada24859a04c76b5625f5c4a931bfcf6260939c80c4def86be5db51ef790552249aaa2276d864c85bdddf905e6af7468f7e12d351924fce011bc361e9e08e9a7b9bc2355db9a24649a0c1e06241f75ac33624f5a9f871a721d44c08b3842b7d2b587cdce7984b4592557aa510b31cc1b99ca89cdc56cf54f0cbba5c81468dcf3402151be1f389f21261ade5ccfb1d34d460241c1c5454a2bb917268357980a3ed7be97957b0522a9b8f69d43127480f976069b3054dbdd2c35b44a3ef81c5ecbd338481c896de6983f932d23e877ed4939c2027fce5ad6e46a6328d29458ac31d212ba1472e3dd8815dfc3a8b411e6e5a5ada66c39c70670317e8b2604c91fd3e91c0ed914ae72d9d109adff3a351d556935d3f3db82847b17794bd979734d03784660bc5d40f3ccb5107aec75b3eddc20858b866895cad3848e16e4a6b567b5e15cffa24033f1764c049f666a3241b96603c04bf1bdc188ea3bfa637b550fb43d5148c335a6e7726ee072110a2d239e201f8001ac80ff19301792c897b117884e733b6273856fffd10fce49094288becf75fc9190059d75b4be2c8df0fd4f7ee9ed84d64df7d3348cf21211b9609588f742e3f45a8bb234a7e18c1fd1cae4b10c185f642066ced05eb1601d140755308a0fc7cac7f011ec98b39c019c35254a950b48f37ab43941aaa70affcf1407c6c3e55801f509c32be8d984d26e059b369596af0fd928068dc26992cd48e3cb9b4b5e5c12852dd0620bed023b5ea38e701a2057792731adec626e66b19c5927e3a68d3139fd55bb6e87242", 0x1000}], 0x7, 0x0, 0x0, 0xc001}, {&(0x7f0000004c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005e80)=[{&(0x7f0000004c80)="323d846868d8f685b25bd77195511153d95d0240f69a16f5f7d38c246ed87e906bcf7391d89681c2a1f797bb84497606571ac071e5c41f2fa427ae2dbc83bb46a2781c2b4409d769972e13938246d5879e0794d7d5a6461435b00c5115d790ed4d79c424297519de68e8b95d624c125a5cb8c04897475e10a9551dbbdd6f36721480777105bc", 0x86}, {&(0x7f00000024c0)="b5cd6dd0e48c4eff268c13a5297c952ef855b7ac30717b37c22862c9746feff113d30d703ebb64", 0x27}, {&(0x7f0000004d40)="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", 0x1000}, {&(0x7f0000006380)="c1575c8d92a16f1d6932ba29852f796f35441b6cd0b59cbd848b78a1ffa243b765abfdb2414829d79a4b8d11e0e4b6c873712a4059171c9f38ac379a5371e7377bf7ebb6ee87a98ca3f3cb4578bac0e39d5877d62c70bdcccf16afba697fd7c3878e7b9fd4c5ee4c62bbf1ed9916919a98d249dc1089b8e31822411f378eccab1f486580f607f04d06f1e9da2c34430c065cc752b0c287125cf7f71f9f07fc4552ed9110306909088ee7d9a834a44a8a8ed0977079ff1082aff603fcf07ad27d6084fb07c0aa3762a3ff9b7374efabaf94062261c4d76403c8dab0718d0c80d70d8dbf8e4684bacce2547ea2", 0xec}, {&(0x7f0000005e40)="bae57598853629f81090a6c2b4dda749b35c5f7cac5142900266", 0x1a}], 0x5, 0x0, 0x0, 0x40000}, {&(0x7f0000005f00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000006100)=[{&(0x7f0000005f80)="fe59869c8937b0fd04280c48ce49b5cbd6574eca0fda8be9882ec1bf6e6d38ab8ffc17551c197dff61c084b9cb73037c1e9ce01f3033c841aee35823e794506eede9b5da5e74f6fc95acfb00d5b119897b743645897e680d66e0161f652985c2ece89068d1a8d5ccd6dea289b5f746c1d8b4b4fff54fa5bdf3bd2416bc54ae3c03fa554805ec1abb81a4786456adf7b409e5817520fc7359083859d7a6c8dd0849905177e154e45d1b0a400acf965a19c68bf41b86ea8249", 0xb8}, {&(0x7f0000006040)="db7b17d1fb07dd4e2937fbd516d165cf3e0492e1f0973df5de8612629a01b7a2c1ce68e2cd3a4ed627040dfb19b1daf5002d02f3aaf59f47c6a96f90c4d44928b0754728ee85d1430fff46e515b1b1a44499b5aa915cee217941ea26da6ad90003c017791dca5b77b93db4212e73845526", 0x71}, {&(0x7f00000060c0)="e4c980322eb492196ac1b81d124b6ce320e5", 0x12}], 0x3, &(0x7f0000006140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000201c330000000000000000000001000004ebdd68b96f27e7f2e51e17c35fcf48280f126e4700"/56, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYRES64, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x40080c0}], 0x5, 0x4840) 03:44:25 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) syz_emit_ethernet(0xa6, &(0x7f00000001c0)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x70, 0x3a, 0xff, @empty={[0x3, 0x3c]}, @mcast1, {[], @pkt_toobig={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x89, 0xff, @ipv4={[], [], @remote}, @remote, [@routing={0x2f, 0x6, 0x0, 0x0, 0x0, [@remote, @loopback, @rand_addr=' \x01\x00']}], "000022ebffff0400"}}}}}}}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000100)={0x0, 0xc2, 0xfffc, 0x8, 0xf2, 0x28, 0x28, "b29351346032db23aaa1c692884b7e8bf45be154", "964497dbf4903987018bdfebf32da1f57e3dbffc"}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 505.867827][T22402] nfs: Unknown parameter 'ip_vti0' [ 505.877256][T22404] FAULT_INJECTION: forcing a failure. [ 505.877256][T22404] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:44:25 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x60000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 505.938991][T22404] CPU: 0 PID: 22404 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 505.948295][T22404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.958346][T22404] Call Trace: [ 505.961637][T22404] dump_stack+0x10f/0x19d [ 505.965996][T22404] should_fail+0x23c/0x250 [ 505.970409][T22404] __alloc_pages_nodemask+0xec/0x390 [ 505.975737][T22404] alloc_pages_vma+0x3e6/0x890 [ 505.980499][T22404] do_anonymous_page+0x206/0xec0 03:44:25 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) [ 505.985435][T22404] ? __this_cpu_preempt_check+0x18/0x20 [ 505.991235][T22404] ? __rcu_read_unlock+0x4b/0x260 [ 505.996255][T22404] handle_mm_fault+0x1371/0x1930 [ 506.001189][T22404] __get_user_pages+0xac6/0x1150 [ 506.006130][T22404] __get_user_pages_remote+0x113/0x500 [ 506.009310][T22422] nfs: Unknown parameter 'ip_vti0' [ 506.011575][T22404] ? __ptrace_may_access+0x33e/0x350 [ 506.022057][T22404] pin_user_pages_remote+0x5e/0x80 [ 506.027286][T22404] process_vm_rw_core+0x369/0x760 [ 506.032294][T22404] ? rw_copy_check_uvector+0x249/0x280 [ 506.037727][T22404] process_vm_rw+0x14e/0x1d0 [ 506.042297][T22404] ? __this_cpu_preempt_check+0x18/0x20 [ 506.047927][T22404] ? __sb_end_write+0x90/0xe0 [ 506.052579][T22404] ? vfs_write+0x480/0x690 [ 506.056976][T22404] ? __fget_light+0x219/0x260 [ 506.066321][T22404] ? check_preemption_disabled+0x51/0x140 [ 506.072178][T22404] ? debug_smp_processor_id+0x18/0x20 [ 506.077536][T22404] __x64_sys_process_vm_writev+0x76/0x90 [ 506.083143][T22404] do_syscall_64+0x51/0xb0 [ 506.087544][T22404] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 506.093424][T22404] RIP: 0033:0x45c1d9 [ 506.097286][T22404] Code: Bad RIP value. [ 506.101324][T22404] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 506.109725][T22404] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 506.117670][T22404] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000524 [ 506.125640][T22404] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 506.133633][T22404] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000024 [ 506.141754][T22404] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x4, 0x0, @mcast1}, r1}}, 0x48) 03:44:25 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x68000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:25 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {0xfffffffc}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:25 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f000001a740)=""/102393}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:25 executing program 5 (fault-call:1 fault-nth:37): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:25 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x311a02, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x81, 0x0, 0x6, 0x20, 0x20, 0x7, 0x0, 0x7f, 0xc4, 0xa5, 0x40, 0x1, 0x59, 0x7}, 0xe) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000100)) [ 506.285589][T22438] nfs: Unknown parameter 'ip_vti0' 03:44:25 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x6c000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 506.321519][T22439] FAULT_INJECTION: forcing a failure. [ 506.321519][T22439] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 506.347980][T22439] CPU: 0 PID: 22439 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 506.356664][T22439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.366982][T22439] Call Trace: 03:44:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) [ 506.370266][T22439] dump_stack+0x10f/0x19d [ 506.374589][T22439] should_fail+0x23c/0x250 [ 506.379001][T22439] __alloc_pages_nodemask+0xec/0x390 [ 506.385781][T22439] alloc_pages_vma+0x3e6/0x890 [ 506.390531][T22439] do_anonymous_page+0x206/0xec0 [ 506.395459][T22439] ? __this_cpu_preempt_check+0x18/0x20 [ 506.401160][T22439] ? __rcu_read_unlock+0x4b/0x260 [ 506.406614][T22439] handle_mm_fault+0x1371/0x1930 [ 506.412028][T22439] __get_user_pages+0xac6/0x1150 03:44:25 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x74000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 506.416987][T22439] __get_user_pages_remote+0x113/0x500 [ 506.422490][T22439] ? __ptrace_may_access+0x33e/0x350 [ 506.427771][T22439] pin_user_pages_remote+0x5e/0x80 [ 506.432870][T22439] process_vm_rw_core+0x369/0x760 [ 506.437900][T22439] ? rw_copy_check_uvector+0x249/0x280 [ 506.443349][T22439] process_vm_rw+0x14e/0x1d0 [ 506.447933][T22439] ? __this_cpu_preempt_check+0x18/0x20 [ 506.448212][T22455] nfs: Unknown parameter 'ip_vti0' [ 506.453478][T22439] ? __sb_end_write+0x90/0xe0 [ 506.453490][T22439] ? vfs_write+0x480/0x690 [ 506.453502][T22439] ? __fget_light+0x219/0x260 [ 506.453519][T22439] ? check_preemption_disabled+0x51/0x140 [ 506.478666][T22439] ? debug_smp_processor_id+0x18/0x20 [ 506.484035][T22439] __x64_sys_process_vm_writev+0x76/0x90 [ 506.489748][T22439] do_syscall_64+0x51/0xb0 [ 506.494164][T22439] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 506.500044][T22439] RIP: 0033:0x45c1d9 [ 506.503916][T22439] Code: Bad RIP value. [ 506.507971][T22439] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 506.516379][T22439] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 506.524369][T22439] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000527 [ 506.532336][T22439] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 506.540303][T22439] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000025 [ 506.548281][T22439] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:28 executing program 2: clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = accept4$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x800) accept4$inet(r5, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f00000011c0)=0x10, 0x81800) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x82, 0x0, &(0x7f0000000180)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) dup3(r8, r0, 0x0) write$P9_ROPEN(r8, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x82, 0x1, 0x2}, 0x10000}}, 0x18) 03:44:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:28 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000040)={0xc021, 0x3}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r0}}, 0x48) 03:44:28 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x7a000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:28 executing program 5 (fault-call:1 fault-nth:38): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:28 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r5, 0x1, 0x0, 0x0, {0x14}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x3}]}, 0x34}, 0x1, 0x9effffff00000000}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x47c, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x418, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1c, 0x5, "791dadab39a19cd8b9b84548a5be23ae3ab0d309769e827b"}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%:^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x22}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')\'#)[%\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xb4, 0x5, "3377967b83c954261aebb892a89a6c54fce0d28302b121d4afb6ab0fbd7c0c886a7fe161bed700912d91f88fcee08181ce42246a8879ee1614501a15014a44cdeea28d559943a36ea81d3c6788a3f48604f8fa3f4acde79a113718cd2557039d265851bd973b3cf6148f1eb75dd0a1b40f0b1dc5cddea01c8d3c319c848f5db9ae512603b6067568f5828cc8d38da0a72dd6d302b8d8e0aff48c15a3a2972b67f4ec3ecb18bda50ab3496ba687b0945e"}, @ETHTOOL_A_BITSET_VALUE={0xe6, 0x4, "7038eb1b682d9f9f8fc2018c93530bc60fba91c8184703a99d57cbe955c54fea902d34ce441718b6a4381af8dfd071c8e0a3db65b15d9433c9e0b0b089153bd20367cc22a099f90210f8ed9232b1f79995b8cb567b1ac6cba1337a22788b9fd90b14e6dae4bde4a75ad17b49eb31d40547adfe3ffbfd192c037308e69fab78925aab9c6a888f9bcb6dd5ddd5607436cbd3cc5d790b670bb999e090c1d20f2c0442db81afc4b7911ead94d13029d565021a6f78c2af676fc6cb4b39600f318db9ed54044fe70c953ffac44bd5105de73d8cfbf4aaa97ea13bfa7716370daa748865dd"}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '].\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x72d5b1ec}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfe2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',@)-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}+\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/radio#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7395}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x811}, 0x4044880) r6 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) 03:44:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x81) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 508.993865][T22490] nfs: Unknown parameter 'ip_vti0' 03:44:28 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x8cffffff, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 509.037703][T22500] FAULT_INJECTION: forcing a failure. [ 509.037703][T22500] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 509.076259][T22500] CPU: 1 PID: 22500 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 509.084952][T22500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.095008][T22500] Call Trace: [ 509.098381][T22500] dump_stack+0x10f/0x19d [ 509.102717][T22500] should_fail+0x23c/0x250 [ 509.107122][T22500] __alloc_pages_nodemask+0xec/0x390 [ 509.112484][T22500] alloc_pages_vma+0x3e6/0x890 [ 509.117292][T22500] do_anonymous_page+0x206/0xec0 [ 509.122334][T22500] ? __this_cpu_preempt_check+0x18/0x20 [ 509.127878][T22500] ? __rcu_read_unlock+0x4b/0x260 [ 509.132965][T22500] handle_mm_fault+0x1371/0x1930 [ 509.137905][T22500] __get_user_pages+0xac6/0x1150 [ 509.142839][T22500] __get_user_pages_remote+0x113/0x500 [ 509.148597][T22500] ? __ptrace_may_access+0x33e/0x350 [ 509.154957][T22500] pin_user_pages_remote+0x5e/0x80 [ 509.160062][T22500] process_vm_rw_core+0x369/0x760 [ 509.165229][T22500] ? check_preemption_disabled+0x51/0x140 [ 509.170938][T22500] ? check_stack_object+0x61/0x70 [ 509.175951][T22500] ? __virt_addr_valid+0x15a/0x1a0 [ 509.181051][T22500] ? __check_object_size+0x253/0x310 03:44:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) [ 509.186328][T22500] ? _copy_from_user+0x93/0xd0 [ 509.191085][T22500] ? rw_copy_check_uvector+0x249/0x280 [ 509.196540][T22500] process_vm_rw+0x14e/0x1d0 [ 509.201229][T22500] ? __this_cpu_preempt_check+0x18/0x20 [ 509.207635][T22500] ? __sb_end_write+0x90/0xe0 [ 509.212299][T22500] ? vfs_write+0x480/0x690 [ 509.216707][T22500] ? __fget_light+0x219/0x260 [ 509.221440][T22500] ? check_preemption_disabled+0x51/0x140 [ 509.227153][T22500] ? debug_smp_processor_id+0x18/0x20 [ 509.232520][T22500] __x64_sys_process_vm_writev+0x76/0x90 [ 509.238144][T22500] do_syscall_64+0x51/0xb0 [ 509.242550][T22500] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.248429][T22500] RIP: 0033:0x45c1d9 [ 509.252310][T22500] Code: Bad RIP value. [ 509.256415][T22500] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 509.264815][T22500] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 509.272783][T22500] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 000000000000052a [ 509.280760][T22500] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 03:44:28 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xc0ed0000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 509.288829][T22500] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000026 [ 509.296802][T22500] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c [ 509.328647][T22515] nfs: Unknown parameter 'ip_vti0' 03:44:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2dd) setsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000080)=0x3, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) 03:44:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) [ 509.630847][T22535] nfs: Unknown parameter 'ip_vti0' 03:44:31 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x2) syz_extract_tcp_res(&(0x7f0000000180), 0x8000005, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000011c0)=ANY=[@ANYBLOB="0900000000000000b2090000000000000f580000000000005002000000000000010010000000000000000080000000000000c209000000000000fcffffffffffffff0b040000000000003d12cb718e25e2b22409e424ffff001000000000620a0000000000000400000081e8c8642e35c6ea346c568200000000034d564b000000000900000000000000ed0b00"/154]) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/60}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/10}], 0x0, 0x0) 03:44:31 executing program 5 (fault-call:1 fault-nth:39): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:31 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xf6ffffff, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:31 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764b3007425e600000000f213d6676905003d", 0x100, 0x0, 0x0, 0x0, 0x3}) [ 512.021191][T22545] nfs: Unknown parameter 'ip_vti0' [ 512.026603][T22547] FAULT_INJECTION: forcing a failure. [ 512.026603][T22547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 512.043089][T22547] CPU: 0 PID: 22547 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 512.051857][T22547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.061897][T22547] Call Trace: [ 512.065201][T22547] dump_stack+0x10f/0x19d [ 512.069522][T22547] should_fail+0x23c/0x250 [ 512.074025][T22547] __alloc_pages_nodemask+0xec/0x390 [ 512.079324][T22547] alloc_pages_vma+0x3e6/0x890 [ 512.084119][T22547] do_anonymous_page+0x206/0xec0 [ 512.089049][T22547] ? __this_cpu_preempt_check+0x18/0x20 [ 512.094625][T22547] ? __rcu_read_unlock+0x4b/0x260 [ 512.099711][T22547] handle_mm_fault+0x1371/0x1930 [ 512.104650][T22547] __get_user_pages+0xac6/0x1150 [ 512.109584][T22547] __get_user_pages_remote+0x113/0x500 [ 512.115030][T22547] ? __ptrace_may_access+0x33e/0x350 03:44:31 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/72, 0x48, 0x40012101, 0x0, 0x0) 03:44:31 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xfd030000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 512.120306][T22547] pin_user_pages_remote+0x5e/0x80 [ 512.125404][T22547] process_vm_rw_core+0x369/0x760 [ 512.130423][T22547] ? check_preemption_disabled+0x51/0x140 [ 512.136145][T22547] ? check_stack_object+0x61/0x70 [ 512.141162][T22547] ? __virt_addr_valid+0x15a/0x1a0 [ 512.146278][T22547] ? __check_object_size+0x253/0x310 [ 512.151557][T22547] ? _copy_from_user+0x93/0xd0 [ 512.156324][T22547] ? rw_copy_check_uvector+0x249/0x280 [ 512.161853][T22547] ? wimax_report_rfkill_hw+0x410/0x430 [ 512.167396][T22547] process_vm_rw+0x14e/0x1d0 [ 512.172017][T22547] ? __this_cpu_preempt_check+0x18/0x20 [ 512.177625][T22547] ? __sb_end_write+0x90/0xe0 [ 512.182297][T22547] ? vfs_write+0x480/0x690 [ 512.186704][T22547] ? __fget_light+0x219/0x260 [ 512.191374][T22547] ? check_preemption_disabled+0x51/0x140 [ 512.197086][T22547] ? debug_smp_processor_id+0x18/0x20 [ 512.202516][T22547] __x64_sys_process_vm_writev+0x76/0x90 [ 512.208143][T22547] do_syscall_64+0x51/0xb0 [ 512.212555][T22547] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.218480][T22547] RIP: 0033:0x45c1d9 [ 512.222363][T22547] Code: Bad RIP value. [ 512.226416][T22547] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 512.234812][T22547] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 512.242917][T22547] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 000000000000052d [ 512.250976][T22547] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 512.258939][T22547] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000027 [ 512.266904][T22547] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:31 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xfe030000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 512.423846][T22568] nfs: Unknown parameter 'ip_vti0' 03:44:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:31 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xfeffffff, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:31 executing program 5 (fault-call:1 fault-nth:40): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 512.610790][T22579] nfs: Unknown parameter 'ip_vti0' 03:44:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 512.643162][T22585] FAULT_INJECTION: forcing a failure. [ 512.643162][T22585] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 512.656604][T22585] CPU: 0 PID: 22585 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 512.665270][T22585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.675318][T22585] Call Trace: [ 512.678601][T22585] dump_stack+0x10f/0x19d [ 512.683005][T22585] should_fail+0x23c/0x250 [ 512.687409][T22585] __alloc_pages_nodemask+0xec/0x390 [ 512.692692][T22585] alloc_pages_vma+0x3e6/0x890 [ 512.697455][T22585] do_anonymous_page+0x206/0xec0 [ 512.702393][T22585] ? __this_cpu_preempt_check+0x18/0x20 [ 512.707927][T22585] ? __rcu_read_unlock+0x4b/0x260 [ 512.713020][T22585] handle_mm_fault+0x1371/0x1930 [ 512.717953][T22585] __get_user_pages+0xac6/0x1150 [ 512.722890][T22585] __get_user_pages_remote+0x113/0x500 [ 512.728379][T22585] ? __ptrace_may_access+0x33e/0x350 [ 512.733662][T22585] pin_user_pages_remote+0x5e/0x80 [ 512.738867][T22585] process_vm_rw_core+0x369/0x760 03:44:32 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xff000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 512.743942][T22585] ? check_preemption_disabled+0x51/0x140 [ 512.749658][T22585] ? check_stack_object+0x61/0x70 [ 512.754675][T22585] ? __virt_addr_valid+0x15a/0x1a0 [ 512.759865][T22585] ? __check_object_size+0x253/0x310 [ 512.765154][T22585] ? _copy_from_user+0x93/0xd0 [ 512.769915][T22585] ? rw_copy_check_uvector+0x249/0x280 [ 512.775367][T22585] ? wimax_report_rfkill_hw+0x410/0x430 [ 512.780906][T22585] process_vm_rw+0x14e/0x1d0 [ 512.785498][T22585] ? __this_cpu_preempt_check+0x18/0x20 [ 512.791068][T22585] ? __sb_end_write+0x90/0xe0 [ 512.795741][T22585] ? vfs_write+0x480/0x690 [ 512.800173][T22585] ? __fget_light+0x219/0x260 [ 512.804846][T22585] ? check_preemption_disabled+0x51/0x140 [ 512.810562][T22585] ? debug_smp_processor_id+0x18/0x20 [ 512.815935][T22585] __x64_sys_process_vm_writev+0x76/0x90 [ 512.821561][T22585] do_syscall_64+0x51/0xb0 [ 512.826044][T22585] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.832025][T22585] RIP: 0033:0x45c1d9 [ 512.835902][T22585] Code: Bad RIP value. [ 512.839959][T22585] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 512.848621][T22585] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 512.856582][T22585] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000530 [ 512.864550][T22585] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 512.872514][T22585] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000028 [ 512.880477][T22585] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:32 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001380)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000000080)=""/37, 0x25}, {&(0x7f0000001440)=""/85, 0x55}, {&(0x7f00000011c0)=""/235, 0xeb}, {&(0x7f0000001400)=""/63, 0x3f}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000012c0)=""/158, 0x9e}], 0x7, 0x0) 03:44:32 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet(0x2, 0x5, 0x101) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x88, @rand_addr=0x64010101, 0x4e20, 0x2, 'lblc\x00', 0x18, 0x8341, 0x32}, {@rand_addr=0x64010102, 0x4e22, 0x2000, 0x5, 0xfffffffa, 0x7}}, 0x44) 03:44:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) 03:44:32 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xff030000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 513.083610][T22606] nfs: Unknown parameter 'ip_vti0' 03:44:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) 03:44:32 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xffffff7f, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:32 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xffffff8c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 513.298919][T22621] nfs: Unknown parameter 'ip_vti0' 03:44:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) 03:44:32 executing program 5 (fault-call:1 fault-nth:41): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:32 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xfffffff6, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 513.461378][T22634] nfs: Unknown parameter 'ip_vti0' [ 513.466961][T22635] FAULT_INJECTION: forcing a failure. [ 513.466961][T22635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 513.535233][T22635] CPU: 0 PID: 22635 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 513.543929][T22635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.554175][T22635] Call Trace: [ 513.557507][T22635] dump_stack+0x10f/0x19d [ 513.561948][T22635] should_fail+0x23c/0x250 [ 513.566384][T22635] __alloc_pages_nodemask+0xec/0x390 [ 513.571703][T22635] alloc_pages_vma+0x3e6/0x890 [ 513.576558][T22635] do_anonymous_page+0x206/0xec0 [ 513.581504][T22635] ? __this_cpu_preempt_check+0x18/0x20 [ 513.587045][T22635] ? __rcu_read_unlock+0x4b/0x260 [ 513.592063][T22635] handle_mm_fault+0x1371/0x1930 [ 513.597038][T22635] __get_user_pages+0xac6/0x1150 [ 513.604758][T22635] __get_user_pages_remote+0x113/0x500 [ 513.610218][T22635] ? __ptrace_may_access+0x33e/0x350 [ 513.615499][T22635] pin_user_pages_remote+0x5e/0x80 [ 513.620634][T22635] process_vm_rw_core+0x369/0x760 [ 513.625662][T22635] ? check_preemption_disabled+0x51/0x140 [ 513.631401][T22635] ? check_stack_object+0x61/0x70 [ 513.636427][T22635] ? __virt_addr_valid+0x15a/0x1a0 [ 513.641531][T22635] ? __check_object_size+0x253/0x310 [ 513.646817][T22635] ? _copy_from_user+0x93/0xd0 [ 513.651579][T22635] ? rw_copy_check_uvector+0x249/0x280 [ 513.657038][T22635] process_vm_rw+0x14e/0x1d0 [ 513.661633][T22635] ? __this_cpu_preempt_check+0x18/0x20 [ 513.667401][T22635] ? __sb_end_write+0x90/0xe0 [ 513.672185][T22635] ? vfs_write+0x480/0x690 [ 513.676660][T22635] ? __fget_light+0x219/0x260 [ 513.681381][T22635] ? check_preemption_disabled+0x51/0x140 [ 513.687102][T22635] ? debug_smp_processor_id+0x18/0x20 [ 513.692479][T22635] __x64_sys_process_vm_writev+0x76/0x90 [ 513.698107][T22635] do_syscall_64+0x51/0xb0 [ 513.702545][T22635] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.708423][T22635] RIP: 0033:0x45c1d9 [ 513.712295][T22635] Code: Bad RIP value. [ 513.716342][T22635] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 513.724746][T22635] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 513.732714][T22635] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000533 [ 513.740677][T22635] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 513.748633][T22635] R10: 0000000020003500 R11: 0000000000000246 R12: 0000000000000029 [ 513.756604][T22635] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x7fffffff, 0xfffffffc, 0x0, 0x1, 0x9d, 0x813, 0x800, 0x6, 0x3f, 0x7ff, 0x2, 0x800, 0xffff, 0x80000000, 0x4, 0x15, {0x8, 0x101}, 0x29, 0x7}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 03:44:35 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xfffffffe, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:35 executing program 5 (fault-call:1 fault-nth:42): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6ffe0000000000000000031c00002000018004000280160001006574683a76657468305f746f5f626f6e64000000"], 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x1e8, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x7, 0x9, 0x43d3b7f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51525718}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f50f7b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3580}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d517105}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b211ac3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25df0788}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d85}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd0, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53863cb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3be7eac7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70718838}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fbaf65f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x558d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5663}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc29}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e5097ed}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f74}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4901e77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2467425b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4344}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43ad6bd9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71895b47}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x306e422c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58d49545}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf06f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b4e0317}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b3b89e8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6013946}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bf24802}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14bcc7ae}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54fe613e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6faf640b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r5, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f499e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67f58ba7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15ae835}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x762f}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d6b2e6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x675eeb98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78c3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x164d}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40800}, 0x8050) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x34c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1eee84f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7550314a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfca4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c5ede9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f3f7c42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d52db60}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f7b5502}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bf67d49}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47060be6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c30e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d677b6a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6556fd4d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1da7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd73b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x138c96d2}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75390a86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58e3915e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56ecf6ab}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x543e9991}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f4cddc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75e6b28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f5204e0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41c6850a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21e1784d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8aa9902}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x700d2457}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6962d698}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64210b23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x698228a2}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8c23157}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe164}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60610e08}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc535}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26cb71ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29d43128}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f46b030}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f9fc72c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65b6ce84}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b55c8ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d023aab}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1593559a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66b8f016}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x436e915a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d52632a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x521ab4ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c3cbc96}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5958}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x284dba87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8f602e0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a5}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78a3f607}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a591795}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29bb0afd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x653609e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40a0}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x34c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004000) r6 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 515.707659][T22658] tipc: Started in network mode [ 515.715629][T22657] FAULT_INJECTION: forcing a failure. [ 515.715629][T22657] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 515.716670][T22659] nfs: Unknown parameter 'ip_vti0' [ 515.738020][T22658] tipc: Own node identity aaaaaaaaaa1d, cluster identity 4711 [ 515.744907][T22657] CPU: 1 PID: 22657 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 515.754269][T22657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.754826][T22658] tipc: Enabled bearer , priority 10 [ 515.764315][T22657] Call Trace: [ 515.764333][T22657] dump_stack+0x10f/0x19d [ 515.764344][T22657] should_fail+0x23c/0x250 [ 515.764356][T22657] __alloc_pages_nodemask+0xec/0x390 [ 515.764442][T22657] alloc_pages_vma+0x3e6/0x890 [ 515.793401][T22657] do_anonymous_page+0x206/0xec0 [ 515.798414][T22657] ? __this_cpu_preempt_check+0x18/0x20 [ 515.803956][T22657] ? __rcu_read_unlock+0x4b/0x260 [ 515.808977][T22657] handle_mm_fault+0x1371/0x1930 [ 515.813995][T22657] __get_user_pages+0xac6/0x1150 [ 515.818993][T22657] __get_user_pages_remote+0x113/0x500 [ 515.824456][T22657] ? __ptrace_may_access+0x33e/0x350 [ 515.829800][T22657] pin_user_pages_remote+0x5e/0x80 [ 515.834916][T22657] process_vm_rw_core+0x369/0x760 [ 515.840047][T22657] ? check_preemption_disabled+0x51/0x140 [ 515.845790][T22657] ? check_stack_object+0x61/0x70 [ 515.850815][T22657] ? __virt_addr_valid+0x15a/0x1a0 [ 515.856101][T22657] ? __check_object_size+0x253/0x310 [ 515.861390][T22657] ? _copy_from_user+0x93/0xd0 [ 515.866160][T22657] ? rw_copy_check_uvector+0x249/0x280 [ 515.871615][T22657] process_vm_rw+0x14e/0x1d0 [ 515.876227][T22657] ? __this_cpu_preempt_check+0x18/0x20 [ 515.881891][T22657] ? __sb_end_write+0x90/0xe0 [ 515.886563][T22657] ? vfs_write+0x480/0x690 [ 515.890981][T22657] ? __fget_light+0x219/0x260 [ 515.895657][T22657] ? check_preemption_disabled+0x51/0x140 [ 515.901461][T22657] ? debug_smp_processor_id+0x18/0x20 03:44:35 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100677265746170"], 0x40}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000011c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x182}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x801) [ 515.906836][T22657] __x64_sys_process_vm_writev+0x76/0x90 [ 515.912507][T22657] do_syscall_64+0x51/0xb0 [ 515.916938][T22657] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.922850][T22657] RIP: 0033:0x45c1d9 [ 515.926728][T22657] Code: Bad RIP value. [ 515.930783][T22657] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 515.939217][T22657] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 515.945129][T22669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:44:35 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0xedc000000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 515.947188][T22657] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000536 [ 515.947194][T22657] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 515.947201][T22657] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000002a [ 515.947207][T22657] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c [ 515.997625][T22669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:44:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3ff) 03:44:35 executing program 5 (fault-call:1 fault-nth:43): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:35 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x1000000000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6ffe0000000000000000031c00002000018004000280160001006574683a76657468305f746f5f626f6e64000000"], 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x1e8, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x7, 0x9, 0x43d3b7f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51525718}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f50f7b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3580}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d517105}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b211ac3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25df0788}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d85}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd0, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53863cb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3be7eac7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70718838}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fbaf65f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x558d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5663}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc29}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e5097ed}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f74}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4901e77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2467425b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4344}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43ad6bd9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71895b47}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x306e422c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58d49545}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf06f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b4e0317}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b3b89e8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6013946}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bf24802}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14bcc7ae}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54fe613e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6faf640b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r5, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f499e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67f58ba7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15ae835}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x762f}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d6b2e6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x675eeb98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78c3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x164d}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40800}, 0x8050) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x34c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1eee84f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7550314a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfca4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c5ede9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f3f7c42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d52db60}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f7b5502}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bf67d49}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47060be6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c30e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d677b6a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6556fd4d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1da7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd73b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x138c96d2}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75390a86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58e3915e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56ecf6ab}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x543e9991}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f4cddc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75e6b28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f5204e0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41c6850a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21e1784d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8aa9902}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x700d2457}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6962d698}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64210b23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x698228a2}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8c23157}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe164}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60610e08}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc535}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26cb71ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29d43128}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f46b030}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f9fc72c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65b6ce84}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b55c8ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d023aab}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1593559a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66b8f016}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x436e915a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d52632a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x521ab4ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c3cbc96}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5958}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x284dba87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8f602e0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a5}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78a3f607}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a591795}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29bb0afd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x653609e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40a0}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x34c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004000) r6 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764d4007425e65fcc59edf213d6676924dc3d"}) [ 516.122783][T22682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 516.152357][T22682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 516.195528][T22692] nfs: Unknown parameter 'ip_vti0' [ 516.211629][T22690] FAULT_INJECTION: forcing a failure. [ 516.211629][T22690] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 516.227247][T22691] tipc: Enabling of bearer rejected, already enabled 03:44:35 executing program 0: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100677265746170"], 0x40}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000011c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x182}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x801) 03:44:35 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x4000000000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) [ 516.289181][T22690] CPU: 0 PID: 22690 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 516.297873][T22690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.307916][T22690] Call Trace: [ 516.311202][T22690] dump_stack+0x10f/0x19d [ 516.315530][T22690] should_fail+0x23c/0x250 [ 516.320012][T22690] __alloc_pages_nodemask+0xec/0x390 [ 516.325393][T22690] alloc_pages_vma+0x3e6/0x890 [ 516.330153][T22690] do_anonymous_page+0x206/0xec0 [ 516.335084][T22690] ? __this_cpu_preempt_check+0x18/0x20 [ 516.340621][T22690] ? __rcu_read_unlock+0x4b/0x260 [ 516.345739][T22690] handle_mm_fault+0x1371/0x1930 [ 516.350673][T22690] __get_user_pages+0xac6/0x1150 [ 516.352319][T22704] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 516.355606][T22690] __get_user_pages_remote+0x113/0x500 [ 516.355678][T22690] ? __ptrace_may_access+0x33e/0x350 [ 516.368113][T22706] nfs: Unknown parameter 'ip_vti0' [ 516.370366][T22690] pin_user_pages_remote+0x5e/0x80 [ 516.370378][T22690] process_vm_rw_core+0x369/0x760 [ 516.370403][T22690] ? rw_copy_check_uvector+0x249/0x280 [ 516.377765][T22704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 516.380747][T22690] process_vm_rw+0x14e/0x1d0 [ 516.380762][T22690] ? __this_cpu_preempt_check+0x18/0x20 [ 516.380772][T22690] ? __sb_end_write+0x90/0xe0 [ 516.380783][T22690] ? vfs_write+0x480/0x690 [ 516.380818][T22690] ? __fget_light+0x219/0x260 [ 516.380829][T22690] ? check_preemption_disabled+0x51/0x140 [ 516.380854][T22690] ? debug_smp_processor_id+0x18/0x20 [ 516.440434][T22690] __x64_sys_process_vm_writev+0x76/0x90 [ 516.446062][T22690] do_syscall_64+0x51/0xb0 [ 516.450464][T22690] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.456350][T22690] RIP: 0033:0x45c1d9 [ 516.460231][T22690] Code: Bad RIP value. [ 516.464282][T22690] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 516.472684][T22690] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 516.480639][T22690] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 0000000000000539 03:44:35 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f00000011c0)={0x1, @default, @rose={'rose', 0x0}, 0xffff, 'syz1\x00', @null, 0x9, 0x8, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @null]}) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8402, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f00000000c0)=0x4) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000001240)={0x9, 0x4, 0x1, 0xff, 0x4, 0x1, 0x8}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x14, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={r8, 0x1507}, &(0x7f0000000140)=0x8) 03:44:35 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x100000000000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 516.488600][T22690] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 516.496587][T22690] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000002b [ 516.504553][T22690] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) 03:44:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4257) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) [ 516.605142][T22723] nfs: Unknown parameter 'ip_vti0' 03:44:36 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x200000000000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) [ 516.712914][T22738] nfs: Unknown parameter 'ip_vti0' [ 516.789188][ T8303] tipc: 32-bit node address hash set to aaaab700 03:44:36 executing program 5 (fault-call:1 fault-nth:44): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:36 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x300000000000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:36 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x0, "6d71b374ce198ea5cd54262e007764b3007425e600000000f213d6676905003d", 0x100, 0x0, 0x0, 0x0, 0x3}) 03:44:36 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000340)={0x1, &(0x7f0000000080)=""/158, &(0x7f0000000300)=[{0x7, 0x7f, 0x100, &(0x7f0000000280)=""/127}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) [ 516.941960][T22752] nfs: Unknown parameter 'ip_vti0' 03:44:36 executing program 0: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x1, 0x1, 0x2, 0x6, 0x2, "92e5fa669f9cbebffc5e480f280adcb9e39631c3481bb2f44e2dc4747ddad5426c256c7218aa086bea2657426873e26f86f4475ad8ad46527c8e961bb78080", 0xf}, 0x60) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x82, 0x0, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) signalfd(r2, &(0x7f0000000080)={[0x8000]}, 0x8) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) delete_module(&(0x7f0000000140)='}\x00', 0x200) [ 516.990162][T22757] FAULT_INJECTION: forcing a failure. [ 516.990162][T22757] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 517.092046][T22757] CPU: 1 PID: 22757 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 517.100740][T22757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.110780][T22757] Call Trace: [ 517.114064][T22757] dump_stack+0x10f/0x19d [ 517.118382][T22757] should_fail+0x23c/0x250 [ 517.122849][T22757] __alloc_pages_nodemask+0xec/0x390 [ 517.128126][T22757] alloc_pages_vma+0x3e6/0x890 [ 517.133026][T22757] do_anonymous_page+0x206/0xec0 [ 517.138008][T22757] ? __this_cpu_preempt_check+0x18/0x20 [ 517.143548][T22757] ? __rcu_read_unlock+0x4b/0x260 [ 517.148600][T22757] handle_mm_fault+0x1371/0x1930 [ 517.153530][T22757] __get_user_pages+0xac6/0x1150 [ 517.158512][T22757] __get_user_pages_remote+0x113/0x500 [ 517.163959][T22757] ? __ptrace_may_access+0x33e/0x350 [ 517.169234][T22757] pin_user_pages_remote+0x5e/0x80 [ 517.174350][T22757] process_vm_rw_core+0x369/0x760 [ 517.179366][T22757] ? check_preemption_disabled+0x51/0x140 [ 517.185075][T22757] ? check_stack_object+0x61/0x70 [ 517.190105][T22757] ? __virt_addr_valid+0x15a/0x1a0 [ 517.195208][T22757] ? __check_object_size+0x253/0x310 [ 517.200521][T22757] ? _copy_from_user+0x93/0xd0 [ 517.205270][T22757] ? rw_copy_check_uvector+0x249/0x280 [ 517.210712][T22757] process_vm_rw+0x14e/0x1d0 [ 517.215290][T22757] ? __this_cpu_preempt_check+0x18/0x20 [ 517.220821][T22757] ? __sb_end_write+0x90/0xe0 [ 517.225484][T22757] ? vfs_write+0x480/0x690 [ 517.229913][T22757] ? __fget_light+0x219/0x260 [ 517.234595][T22757] ? check_preemption_disabled+0x51/0x140 [ 517.240366][T22757] ? debug_smp_processor_id+0x18/0x20 [ 517.245794][T22757] __x64_sys_process_vm_writev+0x76/0x90 [ 517.251413][T22757] do_syscall_64+0x51/0xb0 [ 517.255848][T22757] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.261736][T22757] RIP: 0033:0x45c1d9 [ 517.265608][T22757] Code: Bad RIP value. [ 517.269652][T22757] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 517.278090][T22757] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 517.286049][T22757] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 000000000000053c [ 517.294010][T22757] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 517.301970][T22757] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000002c [ 517.309924][T22757] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @rand_addr, 0x9}, {0xa, 0x4e22, 0x0, @mcast1}, r2}}, 0x17) 03:44:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x26) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x82, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr, 0x71}, {0xa, 0x40, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0xc}, r2, 0xfcfe}}, 0x48) 03:44:39 executing program 5 (fault-call:1 fault-nth:45): r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$uinput_user_dev(r5, &(0x7f00000001c0)={'syz0\x00', {0x9, 0x4, 0x81, 0x2}, 0x4d, [0x80, 0x5, 0x4, 0xfffffe01, 0x40, 0x2, 0x2, 0x7f, 0x7, 0xc8, 0x2e, 0xfffffff8, 0x1, 0x3, 0xff, 0x9, 0x7fff, 0x7fff, 0x3f, 0x3, 0x2, 0x200, 0x8bc8, 0x3, 0x6, 0xb9c, 0x2578, 0x0, 0x8, 0x7, 0x0, 0x4, 0x8, 0x0, 0x80000001, 0xb075, 0xfff, 0x5, 0xffffffff, 0x81, 0xfffff9cd, 0x9, 0x9, 0x3, 0x3, 0x7fffffff, 0x6, 0x7fff, 0x6, 0x6, 0x8, 0x100, 0x3ed, 0x9, 0x2, 0x0, 0x9, 0xfffffffd, 0x9d, 0xffffffff, 0x5, 0x1ff, 0x1fe, 0x4a], [0x10000, 0x0, 0x40, 0xf9a, 0x400, 0xffffff7f, 0x7, 0x2, 0x0, 0xfffffffb, 0x0, 0x7fffffff, 0xa25, 0x8, 0x800, 0xd3, 0x80000000, 0x6, 0x5, 0x200, 0xffffffff, 0x4, 0x31f2, 0x80000000, 0x8a5, 0xfffffff8, 0x0, 0x200, 0x8, 0x2, 0x1, 0x81, 0x7, 0x5, 0x7, 0x9, 0x0, 0x21f8, 0x6, 0xcc, 0x6, 0x81, 0x6, 0x81, 0x1, 0xb953, 0x8, 0x81, 0x8000, 0x1, 0x8, 0x81, 0x7fff, 0x0, 0x7, 0x3, 0x18, 0x5fd, 0x0, 0x8, 0x10001, 0x8, 0x80000000, 0x3], [0x80000000, 0x76, 0x2, 0x6, 0x401, 0xffff, 0x7fffffff, 0x1000, 0x65, 0x70c, 0x1, 0x1, 0x80, 0x5, 0x5af, 0x400, 0xbebf, 0x3f9, 0x1, 0x42, 0x3ff, 0x4, 0x7f01, 0x4, 0x7fff, 0x9, 0x1, 0xfffffffe, 0x0, 0x4, 0x2, 0xfffff87b, 0x3, 0x1, 0x7d0, 0x4, 0x7fffffff, 0x2, 0xffff, 0x6, 0x2b55, 0x3, 0x800, 0x20, 0x8e06, 0x0, 0xb6, 0x80000001, 0x5, 0xe6c, 0x4, 0x93e, 0x2, 0x48, 0x80000000, 0x1, 0x5, 0x1, 0x7, 0x100, 0x4, 0x1, 0xfff, 0x22dc], [0xaa, 0x80000001, 0x1400, 0x4, 0x10000, 0xff, 0x3, 0x5, 0x6, 0x6, 0x5, 0x3, 0x800, 0x4, 0x0, 0x4, 0x5, 0x6, 0x7c4, 0xfffff800, 0x2, 0x8000, 0x10000, 0xffffffff, 0x2f39, 0x5f6a, 0x8, 0x0, 0x10001, 0x3, 0x101, 0x4, 0x8, 0xac, 0x8, 0x7, 0x352, 0x1, 0x9, 0x7, 0x3d4, 0x5, 0x6, 0x1, 0x0, 0xffff8000, 0xfffffff7, 0x4, 0x41ff, 0x1, 0x7ff, 0xffffffff, 0x1453, 0x4, 0x5, 0xfff, 0x4, 0x0, 0x7, 0x3, 0x5, 0x5, 0x6, 0xffffffd4]}, 0x45c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x82, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r3) dup3(r7, r2, 0x0) r8 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) dup2(0xffffffffffffffff, 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0xffffffffffffffff, &(0x7f00000000c0)=0x401, 0xff, 0x2) process_vm_writev(r8, &(0x7f0000000080), 0x0, &(0x7f0000000280), 0x0, 0x0) 03:44:39 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000000000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:39 executing program 2: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x2cb8dca3720e06fd, 0x0) [ 519.853624][T22793] FAULT_INJECTION: forcing a failure. [ 519.853624][T22793] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 519.873410][T22793] CPU: 0 PID: 22793 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 519.874250][T22787] nfs: Unknown parameter 'ip_vti0' [ 519.882091][T22793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.882094][T22793] Call Trace: [ 519.882111][T22793] dump_stack+0x10f/0x19d [ 519.882193][T22793] should_fail+0x23c/0x250 [ 519.882211][T22793] __alloc_pages_nodemask+0xec/0x390 [ 519.914727][T22793] alloc_pages_vma+0x3e6/0x890 [ 519.919481][T22793] do_anonymous_page+0x206/0xec0 [ 519.924412][T22793] ? __this_cpu_preempt_check+0x18/0x20 [ 519.929946][T22793] ? __rcu_read_unlock+0x4b/0x260 [ 519.935058][T22793] handle_mm_fault+0x1371/0x1930 [ 519.939998][T22793] __get_user_pages+0xac6/0x1150 [ 519.944951][T22793] __get_user_pages_remote+0x113/0x500 [ 519.950397][T22793] ? __ptrace_may_access+0x33e/0x350 [ 519.955705][T22793] pin_user_pages_remote+0x5e/0x80 [ 519.960810][T22793] process_vm_rw_core+0x369/0x760 [ 519.965862][T22793] ? check_preemption_disabled+0x51/0x140 [ 519.971580][T22793] ? check_stack_object+0x61/0x70 [ 519.976606][T22793] ? __virt_addr_valid+0x15a/0x1a0 [ 519.981831][T22793] ? __check_object_size+0x253/0x310 [ 519.987129][T22793] ? _copy_from_user+0x93/0xd0 [ 519.991895][T22793] ? rw_copy_check_uvector+0x249/0x280 [ 519.997418][T22793] process_vm_rw+0x14e/0x1d0 [ 520.002126][T22793] ? __this_cpu_preempt_check+0x18/0x20 [ 520.007672][T22793] ? __sb_end_write+0x90/0xe0 [ 520.012343][T22793] ? vfs_write+0x480/0x690 [ 520.016747][T22793] ? __fget_light+0x219/0x260 [ 520.021415][T22793] ? check_preemption_disabled+0x51/0x140 [ 520.027132][T22793] ? debug_smp_processor_id+0x18/0x20 [ 520.032499][T22793] __x64_sys_process_vm_writev+0x76/0x90 [ 520.038124][T22793] do_syscall_64+0x51/0xb0 [ 520.042532][T22793] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.048479][T22793] RIP: 0033:0x45c1d9 [ 520.052368][T22793] Code: Bad RIP value. [ 520.056498][T22793] RSP: 002b:00007f3f6cde5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 520.064941][T22793] RAX: ffffffffffffffda RBX: 0000000000023b40 RCX: 000000000045c1d9 [ 520.072925][T22793] RDX: 0000000000000367 RSI: 0000000020002480 RDI: 000000000000053f [ 520.080883][T22793] RBP: 00007f3f6cde5ca0 R08: 0000000000000275 R09: 0000000000000000 [ 520.088845][T22793] R10: 0000000020003500 R11: 0000000000000246 R12: 000000000000002d [ 520.096810][T22793] R13: 00007ffc143abeef R14: 00007f3f6cde69c0 R15: 000000000078bf0c 03:44:40 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x500000000000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:40 executing program 2: r0 = clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1d, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:40 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:40 executing program 0: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x2cb8dca3720e06fd, 0x0) 03:44:42 executing program 0: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x2cb8dca3720e06fd, 0x0) 03:44:42 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1002}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 03:44:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:42 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x600000000000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x82, 0x0, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x82, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, 0xffffffffffffffff, 0x0) r5 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r5, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) process_vm_writev(0x0, &(0x7f00000000c0)=[{&(0x7f0000003540)=""/4099, 0x1003}], 0x1, &(0x7f0000001580)=[{&(0x7f00000011c0)=""/187, 0xbb}, {&(0x7f0000001280)=""/247, 0xf7}, {&(0x7f0000001840)=""/269, 0x10d}, {&(0x7f0000000100)=""/94, 0x5e}, {&(0x7f0000001480)=""/139, 0x8b}, {&(0x7f0000001380)=""/25, 0x19}], 0x6, 0x0) 03:44:42 executing program 4: socket(0x18, 0x5, 0x9) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:44:42 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x700000000000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:42 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0xcff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x800000000000000, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000440)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:44:42 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0x5, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 03:44:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4100d782a52f106a33d7e1186903beb71dfa6c732f93f1850d0032de73202f60f322cb75dbb31a4ae877335bd9c37593768fb81bef8c9cc176dd3bac102297a256151f998ddf6cb53149813675218adf330ec4713ed52b7b1e21afd027be88", 0x5f, 0x40}], 0x200002, &(0x7f0000000180)='ip_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 03:44:46 executing program 5: r0 = clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x200011c0}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) [ 548.534849][ T2462] ================================================================== [ 548.542944][ T2462] BUG: KCSAN: data-race in get_scan_count / mem_cgroup_update_lru_size [ 548.551153][ T2462] [ 548.553466][ T2462] write to 0xffff88812bd0f9f8 of 8 bytes by task 22888 on cpu 1: [ 548.561156][ T2462] mem_cgroup_update_lru_size+0x53/0xf0 [ 548.566674][ T2462] __pagevec_lru_add_fn+0x39e/0x570 [ 548.571843][ T2462] pagevec_lru_move_fn+0xff/0x190 [ 548.576836][ T2462] lru_cache_add+0x132/0x180 [ 548.581413][ T2462] add_to_page_cache_lru+0x150/0x1b0 [ 548.586669][ T2462] page_cache_readahead_unbounded+0x234/0x440 [ 548.592711][ T2462] __do_page_cache_readahead+0x96/0xb0 [ 548.598144][ T2462] filemap_fault+0x63d/0x11e0 [ 548.602809][ T2462] ext4_filemap_fault+0x4b/0x60 [ 548.607634][ T2462] do_read_fault+0x41f/0x730 [ 548.612193][ T2462] handle_mm_fault+0x135d/0x1930 [ 548.617109][ T2462] do_user_addr_fault+0x393/0x810 [ 548.622109][ T2462] exc_page_fault+0xb8/0x330 [ 548.626678][ T2462] asm_exc_page_fault+0x1e/0x30 [ 548.631489][ T2462] [ 548.633789][ T2462] read to 0xffff88812bd0f9f8 of 8 bytes by task 2462 on cpu 0: [ 548.641571][ T2462] get_scan_count+0x2b3/0x770 [ 548.646262][ T2462] shrink_lruvec+0x5a/0x620 [ 548.650744][ T2462] shrink_node_memcgs+0x1be/0x360 [ 548.655755][ T2462] shrink_node+0x94e/0x1170 [ 548.660239][ T2462] balance_pgdat+0x675/0xbb0 [ 548.664809][ T2462] kswapd+0x1ef/0x370 [ 548.668784][ T2462] kthread+0x20d/0x230 [ 548.672836][ T2462] ret_from_fork+0x1f/0x30 [ 548.677225][ T2462] [ 548.679532][ T2462] Reported by Kernel Concurrency Sanitizer on: [ 548.685672][ T2462] CPU: 0 PID: 2462 Comm: kswapd0 Not tainted 5.8.0-rc5-syzkaller #0 [ 548.693632][ T2462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.703670][ T2462] ================================================================== [ 548.711714][ T2462] Kernel panic - not syncing: panic_on_warn set ... [ 548.718289][ T2462] CPU: 0 PID: 2462 Comm: kswapd0 Not tainted 5.8.0-rc5-syzkaller #0 [ 548.726247][ T2462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.736288][ T2462] Call Trace: [ 548.739558][ T2462] dump_stack+0x10f/0x19d [ 548.743868][ T2462] panic+0x207/0x64a [ 548.747770][ T2462] ? vprintk_emit+0x44a/0x4f0 [ 548.752417][ T2462] kcsan_report+0x684/0x690 [ 548.756892][ T2462] ? kcsan_setup_watchpoint+0x453/0x4d0 [ 548.762414][ T2462] ? get_scan_count+0x2b3/0x770 [ 548.767342][ T2462] ? shrink_lruvec+0x5a/0x620 [ 548.772087][ T2462] ? shrink_node_memcgs+0x1be/0x360 [ 548.777265][ T2462] ? shrink_node+0x94e/0x1170 [ 548.781938][ T2462] ? balance_pgdat+0x675/0xbb0 [ 548.786687][ T2462] ? kswapd+0x1ef/0x370 [ 548.790944][ T2462] ? kthread+0x20d/0x230 [ 548.795198][ T2462] ? ret_from_fork+0x1f/0x30 [ 548.799805][ T2462] ? snd_scarlett_controls_create+0x4b7/0x16b0 [ 548.805936][ T2462] kcsan_setup_watchpoint+0x453/0x4d0 [ 548.811290][ T2462] get_scan_count+0x2b3/0x770 [ 548.815954][ T2462] ? get_scan_count+0x4d0/0x770 [ 548.820789][ T2462] ? super_cache_count+0x171/0x190 [ 548.825879][ T2462] shrink_lruvec+0x5a/0x620 [ 548.830358][ T2462] ? do_shrink_slab+0xa8/0x5c0 [ 548.835096][ T2462] ? css_next_descendant_pre+0x4f/0x180 [ 548.841669][ T2462] ? __rcu_read_unlock+0x4b/0x260 [ 548.846683][ T2462] ? vmpressure+0xd4/0x260 [ 548.851091][ T2462] shrink_node_memcgs+0x1be/0x360 [ 548.856140][ T2462] shrink_node+0x94e/0x1170 [ 548.860636][ T2462] balance_pgdat+0x675/0xbb0 [ 548.865234][ T2462] kswapd+0x1ef/0x370 [ 548.869196][ T2462] ? kswapd_run+0x100/0x100 [ 548.873668][ T2462] kthread+0x20d/0x230 [ 548.877818][ T2462] ? kswapd_run+0x100/0x100 [ 548.882298][ T2462] ? kthread_blkcg+0x80/0x80 [ 548.886861][ T2462] ret_from_fork+0x1f/0x30 [ 548.892700][ T2462] Kernel Offset: disabled [ 548.897011][ T2462] Rebooting in 86400 seconds..