ux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x140})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:40 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:40 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x20100, 0x0)
io_submit(r3, 0x4, &(0x7f0000000580)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f00000005c0), 0x0, 0x200000}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3, r4, &(0x7f00000002c0)="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", 0xfb, 0xfffffffffffffffe, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000600)="0f4422449f4ae627ebee8699151e25668c4af477412b00f8ab09f4d66c4a658474c82724d0ffac46b84cf8e3fc1b69cbfb88e1d957ce01b9d59920f40668cd55860b5bde5f232c1af3860c58d5a1d551577231294a08962047c9b7aeea5aebe87dc5062668dc92691914defd2591bd29a47d10bbaa651677824d8c2257e4", 0x7e, 0x338, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x20, r0, &(0x7f0000000480)="d4deaa4c9397d3eb4ed0125b50819190081967d97ccfecc8bd55c7c059bc8e260c77d58e556671a359f60cfb2416300f6c508d144ac82bcba7d86997eb208d30758b02235ee228640a9baceb3026128ff73f508a0a5efd2757fb6909f12e0e7ba7e36a9351dcca90bd6207cf8836915c4a9878d48ff6", 0x76, 0x8e, 0x0, 0x3}])
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4e}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="21d9dccb837b591cfd84387bef11963f"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000004)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:40 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1000, 0x0, 0x0, 0x1, 0x4, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x7fff, 0x8, 0x4, 0x10, 0x80000001, {0x77359400}, {0x3, 0x3b4a5b8cab5e98dd, 0x80, 0x15, 0x8, 0x0, "4bf1e0e1"}, 0x8, 0x4, @userptr=0xffffffffffff8000, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x1, 0x70, 0x7, 0x0, 0xc1, 0x0, 0x0, 0x2, 0x40808, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xbc}, 0x868, 0x9, 0x9, 0x1, 0x1, 0x800, 0x5})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0)
recvfrom$x25(r4, &(0x7f0000000080)=""/43, 0x2b, 0x40002043, &(0x7f0000000100)={0x9, @null='               \x00'}, 0x12)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
vmsplice(r5, &(0x7f0000000140), 0x0, 0x4)

15:31:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x6)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:43 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:43 executing program 1:
r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={<r4=>0x0, 0x8}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0xff00, 0x2, 0xce3ebdbc, 0x8a, 0x1, 0x2, 0x100, r4}, 0x20)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x140})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000300)=[{0x0, 0x55}, {0x0}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000001580)=""/4110, 0x1000}, {&(0x7f0000000240)=""/135, 0x94}], 0x5, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)

15:31:43 executing program 4:
r0 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3e)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x200000000000a, 0xfa})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
ptrace$cont(0x9, r1, 0x0, 0x0)

15:31:43 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x7c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, r0, 0xb)
getpid()
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
sysfs$2(0x2, 0xedd8, &(0x7f0000000040)=""/113)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
splice(r1, &(0x7f0000000100)=0x5f, r2, &(0x7f0000000140)=0x6fa, 0x0, 0xc)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x7}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:43 executing program 0:
openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f00000001c0)=0x4)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x140})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:43 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180))
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r3, &(0x7f0000000000), 0x0, 0x400000000200000}])
clock_gettime(0x0, &(0x7f0000000080)={<r6=>0x0, <r7=>0x0})
utimensat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{r6, r7/1000+10000}, {0x0, 0x7530}}, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="be"], 0x1)
ioctl$IMDELTIMER(r8, 0x80044941, &(0x7f0000000240)=0x829aa92bf50fbf87)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r11=>0x0)
io_submit(r11, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r10, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$USBDEVFS_GET_CAPABILITIES(r10, 0x8004551a, &(0x7f0000000200))
ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f00000002c0)={0x1f, 0x9, 0x8})

15:31:43 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x5, 0x8}, 0x150, 0x0, 0xfffffffd, 0x6, 0x0, 0x3}, 0x0, 0x28, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
r1 = shmget(0x0, 0x2000, 0x80, &(0x7f0000007000/0x2000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmat(r1, &(0x7f0000006000/0x2000)=nil, 0x2000)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8, 0x600)
fstat(r1, &(0x7f0000000100))
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x2000000000000110, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x5, 0x0, r3, &(0x7f0000000000), 0x0, 0xf53}])
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={<r6=>0x0, 0x6}, &(0x7f0000000380)=0x8)
r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r9, 0x3f, 0x0, 0x3, 0xba16}, &(0x7f0000000140)=0x18)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001580)={r9, 0x48, &(0x7f0000001500)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x764}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x36f, @rand_addr="ca63e80e727771ec1aee67f82b7cb133", 0x9}]}, &(0x7f00000015c0)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000004c0)={r6, 0x5, 0x20}, 0xc)
r10 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20)
connect$inet6(r10, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r11 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
r12 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x9, 0x100)
sendfile(r12, r11, &(0x7f0000000440)=0x202, 0x6000000000dc)
r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="f5497d6ff663c459d92a27050c270000000000647b54127300"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00002bbd7000fbdbdf2505000000240007800c00080002000000000000000c00080000000000000c000800ffffff7f00"/66], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="40150000", @ANYRES16=r13, @ANYBLOB="000127bd7000fbdbdf25010000000c0005000401000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4)
r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r13, 0x708, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x841)

15:31:46 executing program 1:
openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x140})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x40, 0x0, 0xf8, 0x80, 0x0, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x2, @perf_config_ext={0x7, 0x6}, 0x4, 0x2, 0x40, 0x7, 0x2, 0x3a, 0xfff8}, r0, 0x6, r1, 0x1a)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x3)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
ioctl$FICLONE(r3, 0x40049409, r4)

15:31:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
write$P9_RSTAT(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="520000007d020000004b001fb381000000a6000000000700000000000000000084049e0000000100000000000000000000000100210100cd0b00636c6561725f72656673000b00636c6561725f7265667300"], 0x52)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
sysfs$2(0x2, 0xedd8, &(0x7f0000000040)=""/113)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:46 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=<r2=>0x0)
r3 = syz_open_procfs(r2, &(0x7f00000004c0)='smaps\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="e8e0be333f45ef2ddb367ec6751dd3f79500aa982cd013d6103b3eb7b5dc2e2c96964ab428d70e054af85d3c1b598c5cd871d09461a4f34fb8981d39cb6e192477d63a722311490d86737f2c15f6c6b48f13ce01ce66e9d7feb75461a5e1a82589f8df4e103cb39f9b82d2e51f397960cb0b2a1bc23f836583ee4cfe281779b380286842da9d3cb79383dc73c099a8de2dd71776c3aa5f85e66bb88f2830dcbd00f3200329b9f2db7030bf65c01c03f487b7a4fd1a606c1ded7ffba9c551638b507697f7994cf13d2be5"], 0x1)
bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1e)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000080), &(0x7f00000002c0)=""/255, 0xff})
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040))

15:31:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000040)={{0x3, 0x0, @reserved="54152d0ba00ff1497f468287bd5548d62f0d1b8cc5ac408db30a4d0555e0d71e"}})

15:31:46 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000040)={{0x3, 0x0, @reserved="54152d0ba00ff1497f468287bd5548d62f0d1b8cc5ac408db30a4d0555e0d71e"}})

15:31:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000040)={{0x3, 0x0, @reserved="54152d0ba00ff1497f468287bd5548d62f0d1b8cc5ac408db30a4d0555e0d71e"}})

15:31:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
recvfrom$rose(r2, &(0x7f0000000100)=""/31, 0x1f, 0x12, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080))

15:31:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x8)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x2, 0x70bd28}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x58, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x43}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008041}, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'clear_refs\x00'}]}, 0x3c}}, 0x20000000)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:49 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:49 executing program 1:
r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000180)={{0x5}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x101d02, 0x0)
r2 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)="c4a007b005ac217fdf0614d30ca192348cd4c0bae44c067b4c75d1beaa4ed8c0619fdb2402b11ec0a6b2eb06bc540294f6e900c2d7")
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x42, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}, 0x140, r3})
ptrace$setopts(0x4200, r2, 0x1fb, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000200))
ptrace$cont(0x9, r2, 0x0, 0x0)

15:31:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
recvfrom$rose(r2, &(0x7f0000000100)=""/31, 0x1f, 0x12, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080))

15:31:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
recvfrom$rose(r2, &(0x7f0000000100)=""/31, 0x1f, 0x12, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080))

15:31:49 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000880)={<r1=>0x0, @local, @loopback}, &(0x7f00000008c0)=0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000002a00080025bd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="16005315ca4b139e87002d00"], 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x4)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000002c0)={{0xa, 0x2, 0x2, 0x400, '\x00', 0xc9a}, 0x1, [0x6a5c, 0x100000001, 0x2, 0x39dc, 0x7, 0x6, 0x40, 0x9, 0x2, 0x9, 0x1, 0x1, 0x2, 0x1b, 0x4, 0x117c, 0x845, 0x400, 0x8, 0x5, 0xc55, 0x8, 0x9, 0x3, 0x100000000, 0x2, 0x7, 0xffff, 0x3f, 0x44c, 0x365, 0x8, 0x74e, 0x1, 0x8001, 0xffffffff, 0x200, 0x200, 0x7ff, 0x800, 0x3, 0x8, 0x4, 0x800, 0x2, 0x7f0000000, 0x1, 0x7fff, 0x80000000, 0x400, 0x100000001, 0x400, 0x2, 0x400, 0x7, 0x20, 0x4, 0x200, 0xd8, 0x3, 0x5, 0x3, 0x1, 0x4, 0x0, 0x0, 0x6, 0x8000, 0xda6d, 0x443, 0x1, 0x9, 0x4, 0x0, 0xffffffffffffffae, 0x20, 0x5, 0x1, 0x7f, 0xfa6, 0x1, 0x7fffffff, 0x100, 0x1, 0x6, 0x7, 0x2, 0x8, 0x4, 0x4, 0xffffffff, 0x1000, 0x233, 0x9, 0x10001, 0x7ff, 0x2, 0xdc5, 0xfffffffffffffff8, 0x0, 0x8c, 0xffffffffffffff80, 0x4, 0x5, 0x7, 0x4, 0xa, 0x9, 0x0, 0x6, 0x53cb6b57, 0x80000001, 0x81, 0x6, 0x8, 0x100, 0x2, 0x4, 0x8, 0x0, 0x40, 0x9, 0x1, 0x8, 0x409a3963, 0x7, 0x4, 0x3]})
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x4002, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)=""/195)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
recvfrom$rose(r2, &(0x7f0000000100)=""/31, 0x1f, 0x12, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080))

15:31:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x00')
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x00')
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:49 executing program 4 (fault-call:5 fault-nth:0):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:31:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x00')
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1627.649115] FAULT_INJECTION: forcing a failure.
[ 1627.649115] name failslab, interval 1, probability 0, space 0, times 0
[ 1627.667908] CPU: 1 PID: 14315 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1627.675824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1627.685306] Call Trace:
[ 1627.687912]  dump_stack+0x142/0x197
[ 1627.691642]  should_fail.cold+0x10f/0x159
[ 1627.695805]  should_failslab+0xdb/0x130
[ 1627.699801]  kmem_cache_alloc_node+0x287/0x780
[ 1627.704486]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1627.709426]  __alloc_skb+0x9c/0x500
[ 1627.713651]  ? skb_trim+0x180/0x180
[ 1627.717277]  alloc_skb_with_frags+0x86/0x4b0
[ 1627.721812]  ? trace_hardirqs_on+0x10/0x10
[ 1627.726080]  sock_alloc_send_pskb+0x5db/0x740
[ 1627.730621]  ? sock_wmalloc+0xf0/0xf0
[ 1627.734416]  ? lock_downgrade+0x740/0x740
[ 1627.738621]  sock_alloc_send_skb+0x32/0x40
[ 1627.742878]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1627.747810]  ? perf_pending_event+0xe0/0xe0
[ 1627.752137]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1627.756467]  ? lock_downgrade+0x740/0x740
[ 1627.760631]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1627.766338]  ? ipv4_mtu+0x25e/0x3a0
[ 1627.769975]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1627.774297]  ip_make_skb+0x17a/0x1d0
[ 1627.778002]  ? ip_flush_pending_frames+0x30/0x30
[ 1627.782759]  ? lock_downgrade+0x740/0x740
[ 1627.786914]  ? ipv4_dst_check+0x10d/0x160
[ 1627.791109]  udp_sendmsg+0x16a6/0x1da0
[ 1627.795009]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1627.799324]  ? udp4_seq_show+0x520/0x520
[ 1627.803386]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1627.808148]  ? sock_has_perm+0x1ed/0x280
[ 1627.812200]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1627.816872]  ? dup_iter+0x260/0x260
[ 1627.820504]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1627.825266]  inet_sendmsg+0x122/0x500
[ 1627.829192]  ? inet_recvmsg+0x500/0x500
[ 1627.833332]  sock_sendmsg+0xce/0x110
[ 1627.837050]  ___sys_sendmsg+0x349/0x840
[ 1627.841025]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1627.845786]  ? find_held_lock+0x35/0x130
[ 1627.849842]  ? __fget+0x210/0x370
[ 1627.853293]  ? lock_downgrade+0x740/0x740
[ 1627.857651]  ? __fget+0x237/0x370
[ 1627.861168]  ? __fget_light+0x172/0x1f0
[ 1627.865148]  ? __fdget+0x1b/0x20
[ 1627.868506]  ? sockfd_lookup_light+0xb4/0x160
[ 1627.872993]  __sys_sendmmsg+0x152/0x3a0
[ 1627.876972]  ? SyS_sendmsg+0x50/0x50
[ 1627.880701]  ? lock_downgrade+0x740/0x740
[ 1627.884854]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1627.889782]  ? check_preemption_disabled+0x3c/0x250
[ 1627.894794]  ? wait_for_completion+0x420/0x420
[ 1627.899382]  ? __sb_end_write+0xc1/0x100
[ 1627.903451]  ? SyS_write+0x15e/0x230
[ 1627.907167]  SyS_sendmmsg+0x35/0x60
[ 1627.910798]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1627.914955]  do_syscall_64+0x1e8/0x640
[ 1627.918847]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1627.923701]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1627.928885] RIP: 0033:0x45b399
[ 1627.932112] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1627.939829] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1627.947099] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1627.954439] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1627.961717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1627.969212] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000000
15:31:52 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:52 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x800, 0x0)
ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x4, [@default, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]})
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x10a00, 0x0)
setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000002c0)=@gcm_256={{0x304}, "c21f9955d4d06f9e", "2a5e391d06af6d0bdaadcf8a73f6839ce0c821c6f72411e1e8a06ed09aa555e8", "48fd2847", "dc60add1c94d1c45"}, 0x38)
ptrace$cont(0x20, r1, 0x0, 0x1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000180)=ANY=[@ANYRES16], 0x2)
r4 = accept4(r3, 0x0, &(0x7f0000000080), 0x800)
setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000100)=@fragment={0x1b, 0x0, 0x80, 0x0, 0x0, 0x4, 0x66}, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, r1, 0xe, 0xffffffffffffffff, 0xb)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
getegid()
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
r6 = syz_open_dev$rtc(&(0x7f0000000300)='/dev/rtc#\x00', 0x0, 0x40000)
fsync(r6)
syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x341480)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000024000505d25a80648c", 0xd}], 0x1}, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:31:52 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$jfs(&(0x7f0000000540)='jfs\x00', &(0x7f0000000580)='./bus\x00', 0x6, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00')
setxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)=@known='trusted.syz\x00', &(0x7f0000000140)='jfs\x00', 0x4, 0x3)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000300)={r0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c841}, 0x80)

15:31:52 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:52 executing program 4 (fault-call:5 fault-nth:1):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:31:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
r3 = socket$key(0xf, 0x3, 0x2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0xc)
setreuid(r2, r4)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000100)=""/143, &(0x7f0000000040)=0x8f)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000080)=0xffffff00, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00')
syz_genetlink_get_family_id$tipc2(0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65308cfdbf7c02c85f6cf92c6c6f7765726469723d2e3a66696c65302c776f726b646995a90874db7d3d6c3b8041568b1df8fd7b0edf630d575cb29c505c0069d2123f2623a0784e5274b40d17583da6e92374b6511eb907471166b125be881e85eb803195e9a579633e7f58bf0cdadf356f0bbb7197fa3d117c4cf3b2a220bb535686f9ece8e6b3a9574b2a5cdcea751271"])
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000200)={'nr0\x00', {0x2, 0x4e23, @rand_addr=0x8}})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vga_arbiter\x00', 0x46601, 0x0)
perf_event_open$cgroup(0x0, r0, 0xd, 0xffffffffffffffff, 0x1)
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="3454207f7bb85bd79e6f5f751be3273c0a9306b8f9515e7bac827b0025635f9c503df825e4664253aa66a1afd2e916c071ab050596c4eca33cb6eae46fb10b4ed9578ee579a5bb81c9f11968c4ada163c76a748635ee0bb80048d60813e17ae5dc7583c0afd1baf6659906720520eb2d901680d52445fdb9bf3e63191afb11830cdc765ad69e22360ea8cfa59cdf427e88a18636"], 0x1)
mmap$snddsp_control(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0xb, 0x11, r3, 0x83000000)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x20000800)
sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x3c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crond_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x81)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x4)
renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00')
open(&(0x7f0000000400)='./file1\x00', 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101040, 0x0)
getsockopt$inet_udp_int(r6, 0x11, 0x67, 0x0, &(0x7f0000000080))
fallocate(r5, 0x0, 0xfffffffffffffc01, 0x0)

15:31:52 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
statx(r0, &(0x7f0000000500)='./bus\x00', 0x2000, 0xfff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0xfffffffffffff9e4, 0x5, &(0x7f0000000480)=[{&(0x7f00000001c0)="ca6023d3b7ea3cbeae35bb45949c56b2bf560ca398780b220604a79bd19a87e1f3483dbd2e8f25bcaf232e4cc3b7bdb4aea4fcc70b90ac", 0x37, 0x6b}, {&(0x7f0000000200)="a78b71dfb8fee0be969c04b638cc3a189fba73ddf22fcf87dc4dd018b709605feac1ffb919743c3f296c2f207ce3f4af78050790e47e911308e306525ed49b92781f460a4113dc649994cdb7188568f2fe778cff5bb98304f8933ee3e94bcc12", 0x60, 0x1}, {&(0x7f0000000280)="fd6c22a515c017b09ca21413aa9e856b4bdb99d393645febbf0ae418b0f57ae44201665a215cbcaf5f17c60ca4a77c7103f511eac44c71ccf0bbd70bd25066033bc6a1c1e3bf4eca44d53320c1c4ff26377af5aa3ec026208174cadb3b3de07607f2e57a1ff23999e9f384ef054befec685a4e09d8a578be41c4a7ba3cb0ddb091a5e25d65b5fca5efd5546108a51232eae95a7c304aa7af7f8c3b2b66f7aaa91164f4b948089608d0d97c4adbf1e0cf5cbee9f887af1b73631630af93f8b09b2e68488d3c0f05e35865dd43", 0xcc, 0x8001}, {&(0x7f0000000380)="55fe6621b40ff25b0d69d04428eeabd2cd28ce5a58cb97022d78b84235c49182deaf380462414a2805129088c8008fd0d235c6437ec33f99a849c97df54527167b6fe4bb682ef8aa8fde57d7182e9a81abe4bc60600930693e94c02f51fc", 0x5e, 0x4}, {&(0x7f0000000400)="4fb2399f9dedaba5bd651f0624ee1384f0fb10899f8cc3afee918e8030f479d13db40c5065bfff2d96f603cf490f16e1cf65f79be6763f2977482f2a27f917feda333593c03b54bf893701e5bdb217662fe07d71124d", 0x56, 0x6}], 0x40a0, &(0x7f0000000680)={[{@gid={'gid', 0x3d, r1}}, {@part={'part', 0x3d, 0x101}}, {@dir_umask={'dir_umask'}}, {@creator={'creator', 0x3d, "22cdcae7"}}, {@codepage={'codepage', 0x3d, 'macgreek'}}], [{@measure='measure'}, {@fowner_gt={'fowner>', r3}}, {@obj_user={'obj_user', 0x3d, 'eth0'}}, {@appraise='appraise'}, {@measure='measure'}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]})
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000000000dfeb7bba00280593bd5d74dafc2038"], 0x37)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r6=>0x0)
io_submit(r6, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r5, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4)

15:31:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000240)={'bridge_slave_1\x00', 0x5})
sysinfo(&(0x7f00000007c0)=""/154)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f0000000200)=0x54)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000100)="d93d1785b7968bea133caaf79f97e4340bff5781f7ec353eb1357dc5a2c1d02a616440f24ddc9de7157f634a6f5000c210534656fb596fadb5e51a9041a8d3b30d20a651ffd0d480f5a2bacb631a8e4d38092a16f598a92e669062d24eae75759ee1bee3e8c93299d26d4b6596f37da88682fa23693fa846ef4868d9f464e2a75e619702a201e6cc7fa53180d0d13dbf43272735a754b81b899cd57b87d7ab8926ce8c620adfb10e747215698a8d42f83de973dd891af8ec63ad36234a28077bcfe82928cd2a8ce22ac14205ca8f60831a5ec937bf5892348f37bfa70697e1618db998afea0cb95e6c161d53c6a1130ada31c6f09a")
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000100)={0x9, 0x3f, [{0x0, 0x0, 0x1}, {0x80000000, 0x0, 0x8}, {0x8, 0x0, 0x9}, {0x3, 0x0, 0x3ff}, {0x1000, 0x0, 0x7}, {0x400, 0x0, 0x7}, {0x9, 0x0, 0x3}, {0xfff, 0x0, 0x9}, {0x10001, 0x0, 0xffffffff}]})
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1630.520812] FAULT_INJECTION: forcing a failure.
[ 1630.520812] name failslab, interval 1, probability 0, space 0, times 0
[ 1630.539215] CPU: 0 PID: 14352 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1630.547257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1630.556634] Call Trace:
[ 1630.559244]  dump_stack+0x142/0x197
[ 1630.562900]  should_fail.cold+0x10f/0x159
[ 1630.567067]  should_failslab+0xdb/0x130
15:31:52 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1630.571060]  kmem_cache_alloc_node_trace+0x280/0x770
[ 1630.576178]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1630.578216] overlayfs: unrecognized mount option "workdi•©tÛ}=l;€AV‹øý{ßc
W\²œP\" or missing value
[ 1630.581649]  __kmalloc_node_track_caller+0x3d/0x80
[ 1630.581667]  __kmalloc_reserve.isra.0+0x40/0xe0
[ 1630.581680]  __alloc_skb+0xcf/0x500
[ 1630.581688]  ? skb_trim+0x180/0x180
[ 1630.581704]  alloc_skb_with_frags+0x86/0x4b0
[ 1630.581720]  ? trace_hardirqs_on+0x10/0x10
[ 1630.616776]  sock_alloc_send_pskb+0x5db/0x740
[ 1630.621297]  ? sock_wmalloc+0xf0/0xf0
[ 1630.625105]  ? lock_downgrade+0x740/0x740
[ 1630.629371]  sock_alloc_send_skb+0x32/0x40
[ 1630.633618]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1630.638685]  ? perf_pending_event+0xe0/0xe0
[ 1630.643025]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1630.647357]  ? lock_downgrade+0x740/0x740
[ 1630.651529]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1630.657239]  ? ipv4_mtu+0x25e/0x3a0
[ 1630.660886]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1630.665221]  ip_make_skb+0x17a/0x1d0
[ 1630.665638] audit: type=1400 audit(1581175912.664:20123): avc:  denied  { map } for  pid=14347 comm="syz-executor.1" path="/proc/14347/task/14362/clear_refs" dev="proc" ino=169114 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1
[ 1630.668961]  ? ip_flush_pending_frames+0x30/0x30
[ 1630.668985]  ? lock_downgrade+0x740/0x740
[ 1630.668998]  ? ipv4_dst_check+0x10d/0x160
[ 1630.669013]  udp_sendmsg+0x16a6/0x1da0
[ 1630.713949]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1630.718292]  ? udp4_seq_show+0x520/0x520
[ 1630.722365]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1630.727155]  ? sock_has_perm+0x1ed/0x280
[ 1630.731231]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1630.735912]  ? dup_iter+0x260/0x260
[ 1630.739540]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1630.744286]  inet_sendmsg+0x122/0x500
[ 1630.748083]  ? inet_recvmsg+0x500/0x500
[ 1630.752114]  sock_sendmsg+0xce/0x110
[ 1630.755830]  ___sys_sendmsg+0x349/0x840
[ 1630.759825]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1630.765541]  ? find_held_lock+0x35/0x130
[ 1630.769605]  ? __fget+0x210/0x370
[ 1630.773058]  ? lock_downgrade+0x740/0x740
[ 1630.777253]  ? __fget+0x237/0x370
[ 1630.780701]  ? __fget_light+0x172/0x1f0
[ 1630.782477] overlayfs: unrecognized mount option "workdi•©tÛ}=l;€AV‹øý{ßc
W\²œP\" or missing value
[ 1630.784677]  ? __fdget+0x1b/0x20
[ 1630.784689]  ? sockfd_lookup_light+0xb4/0x160
[ 1630.784703]  __sys_sendmmsg+0x152/0x3a0
[ 1630.784718]  ? SyS_sendmsg+0x50/0x50
[ 1630.809745]  ? lock_downgrade+0x740/0x740
[ 1630.813907]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1630.818758]  ? check_preemption_disabled+0x3c/0x250
[ 1630.823797]  ? wait_for_completion+0x420/0x420
[ 1630.828408]  ? __sb_end_write+0xc1/0x100
[ 1630.832487]  ? SyS_write+0x15e/0x230
[ 1630.836215]  SyS_sendmmsg+0x35/0x60
[ 1630.839896]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1630.844094]  do_syscall_64+0x1e8/0x640
[ 1630.847975]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1630.852839]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1630.858038] RIP: 0033:0x45b399
[ 1630.861210] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1630.869026] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1630.876286] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1630.883545] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1630.890909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1630.898277] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000001
15:31:55 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x100000, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:55 executing program 4 (fault-call:5 fault-nth:2):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:31:55 executing program 1:
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f0000000100)={0xfffffffffefffffb, 0x5001})
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000000)=""/4, &(0x7f0000000040)=0x4)

15:31:55 executing program 0:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x80, 0x0)
ioctl$VT_ACTIVATE(r4, 0x5606, 0x9)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0xa00000, 0x7fff, 0x7, r3, 0x0, &(0x7f0000000100)={0xa20929, 0x80000001, [], @p_u32=&(0x7f0000000080)}})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="34d0a485a242773ca3b0980c0c5a7c311d310e8cb6c043669436d928c1f75ace2c4d37885748b35fff7725f76a00ed24c847457d"], 0x1)
write$FUSE_NOTIFY_POLL(r5, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x10001}}, 0x18)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x2, r1, &(0x7f0000000380), 0x0, 0x10000000200000}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1f, r6, &(0x7f00000001c0)="7ce4342a34624070722ce0f3af8563791ecc4d54a717f1621f3a09f873bdafb50b7fc92f87999c8584727724e5c68b8b755505fdf486dfdd09f9254174f8ab99f0f8f62b6195394291725a5f7bb6a287e29e4637c0f8405ac487f95b6dfc35c1596a8f47f7986c12628c2d22eda640aef1d6523c2e0c0e0412805f48eb3a72f6dc145c2c408f94d15f09632efd9e41b568b101b7d043daae72f69e5f9411fd4c053accb626773c717fe88d09b064ac446c7ecc1649e0bcb169dccd433d831c0d7fd030dce009d88b11299ba7ef10d70841", 0xd1, 0x4, 0x0, 0x3, r1}])
ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000040)={0x6, 0x3f, 0x4, 0x8, 0x1f, 0x1, 0xb4ff})
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0)
syz_mount_image$xfs(&(0x7f0000000500)='xfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6c6175b9ea4c6f0000"])

[ 1633.268488] FAULT_INJECTION: forcing a failure.
[ 1633.268488] name failslab, interval 1, probability 0, space 0, times 0
[ 1633.305756] CPU: 0 PID: 14385 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
15:31:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={<r4=>0x0}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x1f, 0x8002, 0x112, 0xffffffff, 0x3, 0xfffffff7, 0x1, 0xc1, <r5=>r4}, &(0x7f0000000100)=0x20)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r5, 0x40}, 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x20040013, 0x0, 0x0)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1633.313682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1633.323166] Call Trace:
[ 1633.325765]  dump_stack+0x142/0x197
[ 1633.329404]  should_fail.cold+0x10f/0x159
[ 1633.333557]  should_failslab+0xdb/0x130
[ 1633.337619]  kmem_cache_alloc+0x47/0x780
[ 1633.341803]  skb_clone+0x129/0x320
[ 1633.345467]  ip_mc_output+0x628/0xd40
[ 1633.350222]  ? ip_queue_xmit+0x1b10/0x1b10
[ 1633.354465]  ? ip_append_data.part.0+0x160/0x160
[ 1633.359224]  ? ip_flush_pending_frames+0x30/0x30
[ 1633.363985]  ip_local_out+0x97/0x170
[ 1633.367700]  ip_send_skb+0x3e/0xc0
[ 1633.371242]  udp_send_skb+0x616/0xb90
[ 1633.375040]  ? ipv4_dst_check+0x10d/0x160
[ 1633.379181]  udp_sendmsg+0x16df/0x1da0
[ 1633.383073]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1633.387402]  ? udp4_seq_show+0x520/0x520
[ 1633.391470]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1633.396223]  ? sock_has_perm+0x1ed/0x280
[ 1633.400277]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1633.404956]  ? dup_iter+0x260/0x260
[ 1633.408577]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1633.413333]  inet_sendmsg+0x122/0x500
[ 1633.417121]  ? inet_recvmsg+0x500/0x500
[ 1633.421096]  sock_sendmsg+0xce/0x110
[ 1633.424809]  ___sys_sendmsg+0x349/0x840
[ 1633.428798]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1633.433557]  ? find_held_lock+0x35/0x130
[ 1633.437653]  ? __fget+0x210/0x370
[ 1633.441127]  ? lock_downgrade+0x740/0x740
[ 1633.445284]  ? __fget+0x237/0x370
[ 1633.448743]  ? __fget_light+0x172/0x1f0
[ 1633.452722]  ? __fdget+0x1b/0x20
[ 1633.457388]  ? sockfd_lookup_light+0xb4/0x160
[ 1633.461880]  __sys_sendmmsg+0x152/0x3a0
[ 1633.465860]  ? SyS_sendmsg+0x50/0x50
[ 1633.469572]  ? lock_downgrade+0x740/0x740
[ 1633.473723]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1633.478561]  ? check_preemption_disabled+0x3c/0x250
[ 1633.483577]  ? wait_for_completion+0x420/0x420
[ 1633.488182]  ? __sb_end_write+0xc1/0x100
[ 1633.492236]  ? SyS_write+0x15e/0x230
[ 1633.495956]  SyS_sendmmsg+0x35/0x60
[ 1633.499582]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1633.503729]  do_syscall_64+0x1e8/0x640
[ 1633.507616]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1633.512466]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1633.517655] RIP: 0033:0x45b399
[ 1633.521020] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1633.528727] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1633.535988] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1633.543258] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1633.550514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1633.557779] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000002
[ 1633.583778] XFS (loop0): unknown mount option [lau¹êLo].
15:31:55 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:55 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:55 executing program 1:
read$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x0, 0x803, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={<r3=>0x0})
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r3, 0x1a})
close(r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105482)
r5 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
pwritev(r5, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0xfede}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
mmap(&(0x7f0000009000/0xf000)=nil, 0xf000, 0x800102, 0x100812, r4, 0x0)
write(r4, &(0x7f0000000000), 0x52698b21)

[ 1633.721344] XFS (loop0): unknown mount option [lau¹êLo].
15:31:55 executing program 0:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x18400, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x5e, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e21, 0x2, 'nq\x00', 0x24, 0x3f, 0x69}, 0x2c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3)
r2 = socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=<r3=>0x0, &(0x7f0000000100)=0x4)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r3, 0x2, 0x401, 0x1}, &(0x7f0000000180)=0x10)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/dev_mcast\x00')
ioctl$UI_DEV_CREATE(r4, 0x5501)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f0000000200)={0x6, 0x40})
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x8)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000002c0)=@generic={0x2, 0x7, 0xff})
open(&(0x7f0000000300)='./file0\x00', 0x800, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x8900, 0x0)
r6 = open(&(0x7f0000000380)='./file0\x00', 0x507d40, 0x40)
r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000400))
ioctl$TIOCCONS(r6, 0x541d)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000480)={&(0x7f0000000440)=[0x9, 0x0, 0x7, 0x3ff, 0x1, 0x1, 0x6, 0x859e], 0x8, 0x2, 0x94bd, 0x7, 0x8, 0xfffffff7, 0x7f, {0x8001, 0x400, 0x9, 0x6, 0xff00, 0x7, 0x7, 0x101, 0x2, 0x400, 0xf189, 0x100, 0x5, 0x0, "87b811b1e55b402766ff5e30dee7963f92a2b669abae07e35687c46a708c3ead"}})
ioctl$TIOCGPKT(r7, 0x80045438, &(0x7f0000000500))
socket$bt_cmtp(0x1f, 0x3, 0x5)
lookup_dcookie(0x3aa, &(0x7f0000000540)=""/42, 0x2a)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10)
write(r8, &(0x7f0000000600)="2b7e082d39a8340ccf4eba58852cf95720e954b9cef6b14c4004164e7f07cd68902e808dffea5d8c253f3a4775c43b6fce7f686ce1b4f32d5619c43e561891e9b765c36e26d65d589de94457424b5215d0b0d9b25b82496089f3d16514d83e521869922bea1b57d38160a294450f992cf88f1b1bf3508a2a79f62b9d55b2545fb955b66ae7d95fedfe47be9373865a3ce493801c494e4d3d9a09a2beeb0de0684dbe693e10fe02505f603c0ff151999cb4fdc89216e4317c8d52bb11f02d0517e789db", 0xc3)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1e9f1f439de04590dfaf40c5e1"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "2697da213c"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x68}}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000900)={0x2b8, r10, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, [@NL80211_TXRATE_LEGACY={0xc, 0x1, "715ee3d2c4b252e7"}, @NL80211_TXRATE_LEGACY={0xf, 0x1, "edb5246cd9d6fc9f4ad230"}, @NL80211_TXRATE_LEGACY={0xc, 0x1, "f6c7aacbc636f1df"}, @NL80211_TXRATE_LEGACY={0x5, 0x1, 'G'}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x44, 0x0, [@NL80211_TXRATE_LEGACY={0x24, 0x1, "3d26273289342c412ac461acb5779eaa415ee9931acfc210af788b88559bd21e"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0xfffd, 0xfffa, 0x6, 0x101, 0x4, 0x2]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1c, 0x2, 0x6, 0x6, 0x1, 0x6, 0x401]}}, @NL80211_TXRATE_HT={0x35, 0x2, "6e0ff9483f62975199692f94a55547acb2260c5d574b95cb8acfbc26d706569d9c964c85f9232d3bfd68f8df9d8e0393b8"}, @NL80211_TXRATE_LEGACY={0x12, 0x1, "75a5f80cdd6e369d3aea569c094c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x44, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, "5cdc820a184f5a7265e293a8875dd0e9d3cbee5cdd"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x659e, 0x4, 0x1, 0x8cb9, 0x0, 0x8, 0xacda]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x0, 0x3, 0x9, 0x74cb, 0x8001, 0x6, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x368, 0x2, 0x0, 0x4, 0xaa, 0x2, 0x1f, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0xff, 0x800, 0x9, 0x7, 0x7ff, 0xfffb]}}, @NL80211_TXRATE_HT={0x8, 0x2, "bcefc0ff"}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, "8993195c03f38eb55a8b5281b784eec49be349c9794bdb"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeb77, 0x1ff, 0xb52, 0x9, 0x8000, 0x401, 0x6, 0x2]}}]}, @NL80211_BAND_60GHZ={0x88, 0x2, [@NL80211_TXRATE_HT={0xf, 0x2, "dfa48106e2f700426ae45f"}, @NL80211_TXRATE_HT={0x42, 0x2, "3856898c817dd186d621ef8530457fc5b99ecae910540b742a43870d31ba939eccff59addf81f6e04c4dbd747251e5c46c5c71d91d8c8c48167e8a27d171"}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, "a97e8e89514f1709745135779a4eedcad4993082101479f2dc8cc3"}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, [@NL80211_TXRATE_HT={0x2a, 0x2, "9555b2373a5501cc51361ef22ad6929d556a5bb5487112e1b06e51b57088cc205ce715cbe809"}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1b2ee96108b61a9a12b1d6e84d4254aaea73eaa066"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/zero\x00', 0x0, 0x0)
sendmsg$nfc_llcp(r11, &(0x7f0000000e80)={&(0x7f0000000c80)={0x27, 0x1, 0x0, 0x1, 0x38, 0x40, "8f098d0a481dc6b1bfa69fac745568f6fd4d62463b33a74ddab043e3d9cb47b1aa4a0bb5b58423bcccb0375d695bb8f2cb28f98c7fa6b2327bbd12ce9a3046", 0x22}, 0x60, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="c2b6905db89ae04f7ec7baf30e3e9a0b3145ff5e40d7fa698ff6e9f16ade31599638ac153c2f0d04803ebaaf5e58e004950941565941ed562ff99ccdeb6fb3f45245c5e50c6bf320b69e24b53c3da34ee496369add35653f908a7da67905a17403eb96b4e0650da5c2fb761aa5dd26b5d7c97ee24a93d501ae0349314b709e56a6636e5436c458fc36b8c72fc31563e6c944efe42570c8cd534149a8074399", 0x9f}], 0x1, &(0x7f0000000e00)={0x60, 0x112, 0x6, "ae5f53965a665a098436b37470398f478bd993a7b7e392ceb67717856ca788e8b2953170726b1eb76135b1d3c8410598226d81d28a1aadc13a35376c89ef8cbb987c23fe3695970afbe831df4e43"}, 0x60, 0x40081}, 0x0)

15:31:56 executing program 4 (fault-call:5 fault-nth:3):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 1633.946164] audit: type=1804 audit(1581175916.074:20124): pid=14428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="bus" dev="sda1" ino=17665 res=1
15:31:56 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xf7b8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="6ad0b6c617941a07f18c8af7905d2d9b85d2ead851b8c05e4a120547722dbe8a571e3a3de85df99b77c8cb027076aaf21b4650a9615deb40a8f6025689e5b99c7777b4e7c3c47ff65bfb5e7848dff49ffd5da99391cf8b7db36c9b19d15a"], 0x1)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0xf4)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0}}, r3, 0xffffffffffffffff, r2, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5)
sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xe00000000000000, 0x0, 0xffffffffffffffc2)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x511080, 0x0)
write$P9_RUNLINKAT(r6, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7)

15:31:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1634.009711] FAULT_INJECTION: forcing a failure.
[ 1634.009711] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1634.096478] CPU: 1 PID: 14434 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1634.104590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1634.114092] Call Trace:
[ 1634.116714]  dump_stack+0x142/0x197
[ 1634.120360]  should_fail.cold+0x10f/0x159
[ 1634.124520]  ? __might_sleep+0x93/0xb0
[ 1634.128429]  __alloc_pages_nodemask+0x1d6/0x7a0
[ 1634.133221]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1634.138163]  ? __alloc_pages_slowpath+0x2930/0x2930
[ 1634.143228]  ? find_held_lock+0x35/0x130
[ 1634.147314]  alloc_pages_vma+0xc9/0x4c0
[ 1634.151304]  wp_page_copy+0xa5f/0x13d0
[ 1634.155212]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1634.159557]  ? follow_pfn+0x220/0x220
[ 1634.163365]  ? do_raw_spin_unlock+0x174/0x260
[ 1634.167879]  do_wp_page+0x24b/0x1250
[ 1634.171740]  ? finish_mkwrite_fault+0x620/0x620
[ 1634.176427]  __handle_mm_fault+0x1cc3/0x33d0
[ 1634.180851]  ? copy_page_range+0x1de0/0x1de0
[ 1634.185278]  ? find_held_lock+0x35/0x130
[ 1634.189352]  ? handle_mm_fault+0x1b6/0x7c0
15:31:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x400, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

[ 1634.193613]  handle_mm_fault+0x293/0x7c0
[ 1634.197687]  __do_page_fault+0x4c1/0xb80
[ 1634.201766]  ? vmalloc_fault+0xe30/0xe30
[ 1634.206043]  do_page_fault+0x71/0x511
[ 1634.209855]  page_fault+0x25/0x50
[ 1634.213311] RIP: 0010:__put_user_4+0x1c/0x30
[ 1634.217716] RSP: 0018:ffff888056b27cc8 EFLAGS: 00010293
[ 1634.223080] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020007ff8
[ 1634.230368] RDX: 00000000000008e5 RSI: ffffffff817cb828 RDI: 0000000000000286
[ 1634.238774] RBP: ffff888056b27eb8 R08: ffff888080196040 R09: 0000000000000000
15:31:56 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x100000e, 0x10010, r2, 0x2000)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ftruncate(r0, 0x48280)
r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])
r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f)
open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
dup(0xffffffffffffffff)
fdatasync(r4)
socket(0x10, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
ioctl$KVM_GET_CPUID2(r7, 0x4138ae84, &(0x7f0000000000)=ANY=[])
dup2(r8, r7)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x220000, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x2}, &(0x7f0000000380)=0x8)

15:31:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000040)=0x2000000000000074, 0x54)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000e40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000001180)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="6c0200003dc8b0930dead7774f37a6a2e24bc9a8ade4312328429247597176d2075d8bf939f6c698cf40149998c1391fc423945420e9119554", @ANYRES16=r4, @ANYBLOB="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"], 0x3}}, 0x20008000)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r4, 0x330, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}]}, 0x90}}, 0xc080)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000080))

[ 1634.246230] R10: 0000000000000000 R11: ffff888080196040 R12: 0000000000000000
[ 1634.253508] R13: 0000000000040000 R14: 0000000020007fc0 R15: 0000000020007fc0
[ 1634.260831]  ? __might_fault+0x188/0x1d0
[ 1634.264914]  ? __sys_sendmmsg+0x18b/0x3a0
[ 1634.269090]  ? SyS_sendmsg+0x50/0x50
[ 1634.272952]  ? lock_downgrade+0x740/0x740
[ 1634.277124]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1634.281977]  ? check_preemption_disabled+0x3c/0x250
[ 1634.287025]  ? wait_for_completion+0x420/0x420
[ 1634.291744]  ? __sb_end_write+0xc1/0x100
[ 1634.295856]  ? SyS_write+0x15e/0x230
[ 1634.299642]  SyS_sendmmsg+0x35/0x60
[ 1634.303393]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1634.307558]  do_syscall_64+0x1e8/0x640
[ 1634.311458]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1634.316313]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1634.321505] RIP: 0033:0x45b399
[ 1634.324696] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1634.332416] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1634.339702] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1634.346979] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1634.354261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1634.361533] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000003
15:31:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2000001)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
sendto$inet(r1, 0x0, 0x0, 0x200087b8, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:56 executing program 4 (fault-call:5 fault-nth:4):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 1634.419712] audit: type=1804 audit(1581175916.544:20125): pid=14452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir203880335/syzkaller.9NtDoe/964/bus" dev="sda1" ino=17621 res=1
[ 1634.508278] audit: type=1804 audit(1581175916.544:20126): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir203880335/syzkaller.9NtDoe/964/bus" dev="sda1" ino=17621 res=1
[ 1634.535885] audit: type=1804 audit(1581175916.544:20127): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir203880335/syzkaller.9NtDoe/964/bus" dev="sda1" ino=17621 res=1
[ 1634.564734] audit: type=1804 audit(1581175916.544:20128): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir203880335/syzkaller.9NtDoe/964/bus" dev="sda1" ino=17621 res=1
[ 1634.622127] FAULT_INJECTION: forcing a failure.
[ 1634.622127] name failslab, interval 1, probability 0, space 0, times 0
[ 1634.633768] CPU: 0 PID: 14459 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1634.641789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1634.651149] Call Trace:
[ 1634.653887]  dump_stack+0x142/0x197
[ 1634.657556]  should_fail.cold+0x10f/0x159
[ 1634.661725]  should_failslab+0xdb/0x130
[ 1634.665714]  kmem_cache_alloc_node+0x287/0x780
[ 1634.670303]  ? __lock_is_held+0xb6/0x140
[ 1634.674366]  ? check_preemption_disabled+0x3c/0x250
[ 1634.679396]  __alloc_skb+0x9c/0x500
[ 1634.683028]  ? skb_trim+0x180/0x180
[ 1634.686653]  alloc_skb_with_frags+0x86/0x4b0
[ 1634.691065]  ? trace_hardirqs_on+0x10/0x10
[ 1634.695325]  sock_alloc_send_pskb+0x5db/0x740
[ 1634.699820]  ? sock_wmalloc+0xf0/0xf0
[ 1634.703632]  ? lock_downgrade+0x740/0x740
[ 1634.707800]  sock_alloc_send_skb+0x32/0x40
[ 1634.712037]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1634.716971]  ? perf_pending_event+0xe0/0xe0
[ 1634.721292]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1634.725622]  ? lock_downgrade+0x740/0x740
[ 1634.729804]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1634.735521]  ? ipv4_mtu+0x25e/0x3a0
[ 1634.739158]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1634.743472]  ip_make_skb+0x17a/0x1d0
[ 1634.747202]  ? ip_flush_pending_frames+0x30/0x30
[ 1634.751970]  ? lock_downgrade+0x740/0x740
[ 1634.756112]  ? ipv4_dst_check+0x10d/0x160
[ 1634.760281]  udp_sendmsg+0x16a6/0x1da0
[ 1634.764268]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1634.768627]  ? udp4_seq_show+0x520/0x520
[ 1634.772678]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1634.777426]  ? sock_has_perm+0x1ed/0x280
[ 1634.781504]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1634.786181]  ? dup_iter+0x260/0x260
[ 1634.789827]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1634.794584]  ? save_trace+0x290/0x290
[ 1634.799737]  inet_sendmsg+0x122/0x500
[ 1634.803544]  ? inet_recvmsg+0x500/0x500
[ 1634.807522]  sock_sendmsg+0xce/0x110
[ 1634.811251]  ___sys_sendmsg+0x349/0x840
[ 1634.815233]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1634.820060]  ? __perf_sw_event+0x62/0x90
[ 1634.824159]  ? __do_page_fault+0x358/0xb80
[ 1634.828406]  ? retint_kernel+0x2d/0x2d
[ 1634.832296]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1634.837314]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1634.842103]  ? retint_kernel+0x2d/0x2d
[ 1634.846027]  __sys_sendmmsg+0x152/0x3a0
[ 1634.850038]  ? SyS_sendmsg+0x50/0x50
[ 1634.853881]  ? lock_downgrade+0x740/0x740
[ 1634.858030]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1634.862876]  ? check_preemption_disabled+0x3c/0x250
[ 1634.867900]  ? wait_for_completion+0x420/0x420
[ 1634.872513]  ? __sb_end_write+0xc1/0x100
[ 1634.876579]  ? SyS_write+0x15e/0x230
[ 1634.880304]  SyS_sendmmsg+0x35/0x60
[ 1634.883928]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1634.888102]  do_syscall_64+0x1e8/0x640
[ 1634.892000]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1634.896847]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1634.902031] RIP: 0033:0x45b399
[ 1634.905215] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1634.912915] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1634.920177] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1634.927444] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1634.934728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1634.941988] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000004
[ 1634.949893] audit: type=1804 audit(1581175916.764:20129): pid=14460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir203880335/syzkaller.9NtDoe/964/bus" dev="sda1" ino=17621 res=1
[ 1634.977787] audit: type=1804 audit(1581175916.764:20130): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir203880335/syzkaller.9NtDoe/964/bus" dev="sda1" ino=17621 res=1
[ 1635.005763] audit: type=1804 audit(1581175916.764:20131): pid=14452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir203880335/syzkaller.9NtDoe/964/bus" dev="sda1" ino=17621 res=1
[ 1635.038936] audit: type=1804 audit(1581175917.084:20132): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir203880335/syzkaller.9NtDoe/964/bus" dev="sda1" ino=17621 res=1
15:31:58 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:58 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:31:58 executing program 1:
read$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x0, 0x803, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={<r3=>0x0})
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r3, 0x1a})
close(r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105482)
r5 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
pwritev(r5, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0xfede}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
mmap(&(0x7f0000009000/0xf000)=nil, 0xf000, 0x800102, 0x100812, r4, 0x0)
write(r4, &(0x7f0000000000), 0x52698b21)

15:31:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_sctp(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500000000eb00000000000000", @ANYRES32=0x0, @ANYBLOB="0000040013000000010000000800010068746262cb00000000000200"], 0x3}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\a\a\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000fffffffff6ffffff0b0001006d756c746971000008"], 0x3}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x38, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

15:31:58 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
syz_open_dev$radio(0x0, 0x1, 0x2)
ftruncate(r2, 0x200004)
socket$tipc(0x1e, 0x5, 0x0)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

15:31:58 executing program 4 (fault-call:5 fault-nth:5):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 1636.827675] FAULT_INJECTION: forcing a failure.
[ 1636.827675] name failslab, interval 1, probability 0, space 0, times 0
[ 1636.851782] CPU: 0 PID: 14477 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1636.859713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1636.869076] Call Trace:
[ 1636.871813]  dump_stack+0x142/0x197
[ 1636.875470]  should_fail.cold+0x10f/0x159
[ 1636.879643]  should_failslab+0xdb/0x130
[ 1636.883632]  kmem_cache_alloc_node_trace+0x280/0x770
[ 1636.888753]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1636.894223]  __kmalloc_node_track_caller+0x3d/0x80
[ 1636.899179]  __kmalloc_reserve.isra.0+0x40/0xe0
[ 1636.903867]  __alloc_skb+0xcf/0x500
[ 1636.907524]  ? skb_trim+0x180/0x180
[ 1636.911236]  alloc_skb_with_frags+0x86/0x4b0
[ 1636.915772]  ? trace_hardirqs_on+0x10/0x10
[ 1636.920022]  sock_alloc_send_pskb+0x5db/0x740
[ 1636.924540]  ? sock_wmalloc+0xf0/0xf0
[ 1636.928352]  ? lock_downgrade+0x740/0x740
[ 1636.932625]  sock_alloc_send_skb+0x32/0x40
[ 1636.936875]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1636.941812]  ? perf_pending_event+0xe0/0xe0
[ 1636.946153]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1636.950491]  ? lock_downgrade+0x740/0x740
[ 1636.954658]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1636.960492]  ? ipv4_mtu+0x25e/0x3a0
[ 1636.964126]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1636.968456]  ip_make_skb+0x17a/0x1d0
[ 1636.972415]  ? ip_flush_pending_frames+0x30/0x30
[ 1636.977200]  ? lock_downgrade+0x740/0x740
[ 1636.981465]  ? ipv4_dst_check+0x10d/0x160
[ 1636.985627]  udp_sendmsg+0x16a6/0x1da0
[ 1636.989526]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1636.993981]  ? udp4_seq_show+0x520/0x520
[ 1636.998054]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1637.002841]  ? sock_has_perm+0x1ed/0x280
[ 1637.006910]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1637.011741]  ? dup_iter+0x260/0x260
[ 1637.015403]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1637.020167]  ? save_trace+0x290/0x290
[ 1637.023982]  inet_sendmsg+0x122/0x500
[ 1637.027909]  ? inet_recvmsg+0x500/0x500
[ 1637.031888]  sock_sendmsg+0xce/0x110
[ 1637.035621]  ___sys_sendmsg+0x349/0x840
[ 1637.039701]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1637.044468]  ? __perf_sw_event+0x62/0x90
[ 1637.048535]  ? __do_page_fault+0x358/0xb80
[ 1637.052785]  ? retint_kernel+0x2d/0x2d
[ 1637.056682]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1637.061711]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1637.066487]  ? retint_kernel+0x2d/0x2d
[ 1637.070411]  __sys_sendmmsg+0x152/0x3a0
[ 1637.074396]  ? SyS_sendmsg+0x50/0x50
[ 1637.078120]  ? lock_downgrade+0x740/0x740
[ 1637.082286]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1637.087142]  ? check_preemption_disabled+0x3c/0x250
[ 1637.092382]  ? wait_for_completion+0x420/0x420
[ 1637.096979]  ? __sb_end_write+0xc1/0x100
[ 1637.101057]  ? SyS_write+0x15e/0x230
[ 1637.104890]  SyS_sendmmsg+0x35/0x60
[ 1637.108522]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1637.112794]  do_syscall_64+0x1e8/0x640
[ 1637.116697]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1637.121580]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
15:31:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x56, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x300b565e24c3d729, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0)
read$char_usb(r1, &(0x7f0000000080)=""/53, 0x35)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1637.126773] RIP: 0033:0x45b399
[ 1637.130023] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1637.137733] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1637.145003] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1637.152272] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1637.159537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1637.166803] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000005
15:31:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
syz_open_dev$radio(0x0, 0x1, 0x2)
ftruncate(r2, 0x200004)
socket$tipc(0x1e, 0x5, 0x0)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

15:31:59 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r1, &(0x7f0000001100)=[{&(0x7f00000001c0)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="10", 0x34000}], 0x1, &(0x7f0000000440)=[@init={0x18}], 0x18}], 0x1, 0x1f4)
timerfd_create(0x3, 0x80000)

15:31:59 executing program 4 (fault-call:5 fault-nth:6):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:31:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000005000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/vlan/vlan0\x00')
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:31:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x2, 0x0, &(0x7f0000000040)=""/243, &(0x7f00000002c0)=""/207, &(0x7f00000001c0)=""/153, 0x3000})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x769c003a, 0x0)
dup3(r3, r4, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0)
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r7=>0x0)
io_submit(r7, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r6, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
write$uinput_user_dev(r6, &(0x7f0000000440)={'syz0\x00', {0x0, 0x3d9, 0x800, 0x4}, 0x17, [0x3, 0x2, 0x9, 0x2, 0x0, 0x7, 0x9, 0x2a463afa, 0x7f, 0x2, 0x81, 0x2, 0x272b, 0x6, 0x0, 0xfffffffc, 0x7, 0x1, 0x1, 0x1ff, 0x1, 0x81, 0x2, 0x8, 0x4a, 0x6, 0xd1, 0x3f, 0x80, 0x6, 0x5, 0x3, 0x1000, 0x0, 0x2, 0x7, 0x401, 0x8, 0x200, 0x2, 0x81, 0x9, 0x9, 0x6, 0x1, 0x7, 0x9, 0x5, 0x7fffffff, 0x5, 0x7fffffff, 0x100, 0x100001, 0x8, 0x4, 0x3ff, 0x1000, 0x8, 0xffff5dc5, 0x1ff, 0x8000, 0x9050, 0x3, 0x236b], [0xfff, 0x0, 0x7, 0x42d7453f, 0x4, 0x3ff, 0x4, 0x2, 0xa00000, 0x5b, 0x8, 0x2, 0x1, 0xffffff00, 0x6, 0x1f, 0x3ff, 0x1, 0x5, 0x3, 0x6, 0x80000000, 0x7, 0x94, 0x6, 0x7, 0x8001, 0x4, 0x9, 0x4, 0x5, 0x3, 0xffff, 0x3, 0x0, 0x4063, 0x0, 0x1, 0x60be, 0x6, 0x7, 0x9, 0x5, 0xccf1, 0x6, 0x7fffffff, 0x1, 0x76, 0x6, 0x7, 0x0, 0x56a90a64, 0x5, 0x2, 0x1, 0x80000000, 0x9, 0x1ff, 0x7fff, 0x3bda, 0x8, 0xff, 0xfffffff7, 0x5fe], [0x6, 0xfff, 0x3, 0x80000000, 0x0, 0x9, 0x1000, 0x10001, 0x69, 0x10000, 0x8, 0x9, 0x4, 0x3, 0x800, 0x7, 0x0, 0xffff7fff, 0x0, 0x8, 0x400, 0x8000, 0x1, 0x959, 0xa342, 0x3, 0x8, 0xffffffff, 0x4, 0xffffffff, 0x3, 0x6, 0x7, 0x5, 0x8001, 0x6, 0x7, 0x4, 0x6, 0x0, 0x8, 0x0, 0xf7, 0x8, 0x8001, 0x1, 0x1, 0x7fff, 0x2, 0x8, 0xffff, 0xfffffffe, 0x1, 0x60a5, 0x7, 0x0, 0x1, 0xa3, 0x0, 0x5, 0x401, 0x2, 0x6, 0x544], [0x668dbd11, 0x8cff, 0x7fffffff, 0x9, 0x2, 0x7ff, 0x1, 0x7f, 0x7f, 0x3, 0x7e6, 0x3, 0xed7, 0xf8, 0x7ff, 0x8e, 0x4, 0x2, 0xffff7fff, 0x0, 0x6, 0x8, 0x3, 0x3, 0x73b, 0x9, 0x2, 0xe7f7, 0x7, 0x7, 0x9, 0x800, 0x400, 0x9, 0x3, 0x5, 0x0, 0x1, 0x7, 0x9, 0xfff, 0x0, 0x77, 0xffffffff, 0x6, 0x1, 0xfff, 0xb721, 0x5, 0x6, 0x9, 0x100, 0x8, 0x5, 0x2, 0x36, 0x20, 0x1f, 0x2, 0x3ff, 0x8001, 0x5, 0x4, 0x9]}, 0x45c)
close(r5)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r9=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {0x0, r9}}, 0x18)

[ 1637.348062] FAULT_INJECTION: forcing a failure.
[ 1637.348062] name failslab, interval 1, probability 0, space 0, times 0
[ 1637.369378] CPU: 1 PID: 14502 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1637.377307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1637.386787] Call Trace:
[ 1637.389391]  dump_stack+0x142/0x197
[ 1637.393040]  should_fail.cold+0x10f/0x159
[ 1637.397196]  should_failslab+0xdb/0x130
[ 1637.401180]  kmem_cache_alloc+0x47/0x780
[ 1637.405348]  skb_clone+0x129/0x320
[ 1637.408894]  ip_mc_output+0x628/0xd40
[ 1637.412689]  ? ip_queue_xmit+0x1b10/0x1b10
[ 1637.416922]  ? ip_append_data.part.0+0x160/0x160
[ 1637.421676]  ? ip_flush_pending_frames+0x30/0x30
[ 1637.426474]  ip_local_out+0x97/0x170
[ 1637.430189]  ip_send_skb+0x3e/0xc0
[ 1637.433731]  udp_send_skb+0x616/0xb90
[ 1637.437527]  ? ipv4_dst_check+0x10d/0x160
[ 1637.441728]  udp_sendmsg+0x16df/0x1da0
[ 1637.445751]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1637.451121]  ? udp4_seq_show+0x520/0x520
[ 1637.455310]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1637.460075]  ? sock_has_perm+0x1ed/0x280
[ 1637.464128]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1637.468797]  ? dup_iter+0x260/0x260
[ 1637.472441]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1637.477199]  ? save_trace+0x290/0x290
[ 1637.481012]  inet_sendmsg+0x122/0x500
[ 1637.484853]  ? inet_recvmsg+0x500/0x500
[ 1637.488849]  sock_sendmsg+0xce/0x110
[ 1637.492686]  ___sys_sendmsg+0x349/0x840
[ 1637.496662]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1637.501432]  ? __perf_sw_event+0x62/0x90
[ 1637.505497]  ? __do_page_fault+0x358/0xb80
[ 1637.509846]  ? retint_kernel+0x2d/0x2d
[ 1637.513834]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1637.518896]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1637.523792]  ? retint_kernel+0x2d/0x2d
[ 1637.527708]  __sys_sendmmsg+0x152/0x3a0
[ 1637.531676]  ? SyS_sendmsg+0x50/0x50
[ 1637.535413]  ? lock_downgrade+0x740/0x740
[ 1637.539591]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1637.544425]  ? check_preemption_disabled+0x3c/0x250
[ 1637.549474]  ? wait_for_completion+0x420/0x420
[ 1637.554062]  ? __sb_end_write+0xc1/0x100
[ 1637.558115]  ? SyS_write+0x15e/0x230
[ 1637.561829]  SyS_sendmmsg+0x35/0x60
[ 1637.565455]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1637.569603]  do_syscall_64+0x1e8/0x640
[ 1637.573489]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1637.578338]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1637.583542] RIP: 0033:0x45b399
[ 1637.586727] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1637.594430] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1637.601707] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1637.608977] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1637.616236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1637.623503] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000006
15:32:01 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
r4 = accept4$rose(r3, &(0x7f0000000040)=@short={0xb, @remote, @null, 0x1, @null}, &(0x7f0000000080)=0x1c, 0xc00)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x5, 0x57, &(0x7f0000000100)="e611a78c05947255e460b4170c9b444a03a2666da88f9243879a8eeb30b62afa4781d856950a8194b5ceea0494a9f0f0733711498ed43061b0b29b4f0d07d07d4fc386b7218501fc385533b0163bce8afaa6732c69a455", 0x7, 0x0, 0x7ff, 0x1c4, 0xf75, 0x0, 0x8001, 'syz0\x00'})
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:32:01 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:01 executing program 4 (fault-call:5 fault-nth:7):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:01 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x22040, 0x0)
mmap(&(0x7f0000c45000/0x3000)=nil, 0x3000, 0x1000003, 0x4000010, r0, 0x0)
mmap(&(0x7f000073c000/0x2000)=nil, 0x2000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
get_robust_list(0x0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7ff, @default, @netrom={'nr', 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000000)={0x3, 0x0, [{0x7, 0x0, 0x1}, {0xe28e, 0x0, 0x4}, {0xc8, 0x0, 0x7}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002)

15:32:01 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r1 = socket$inet6(0xa, 0x2, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001080)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000019000100000206005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e7fbad40ac3794899000000000000000000000000000000d94bfeadbfd00d4e11f71b242b42000000ea00000400000002eeffffffe0e8154f707c51bf000000000000000008000000000000000000f9d80100000001000000000020004c357b2173b3a125441d7e79bf732fd0efb4458e9d0867e33dfad15313"], 0xb8}}, 0x0)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3c)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r4, 0x0, 0x0)
fcntl$lock(r3, 0x5, &(0x7f00000010c0)={0x1, 0x2, 0x43f, 0x5, r4})
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3c)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r5, 0x0, 0x0)
r6 = syz_open_procfs(r4, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000001140))

[ 1639.879473] FAULT_INJECTION: forcing a failure.
[ 1639.879473] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1639.914788] CPU: 1 PID: 14518 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1639.922699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1639.932060] Call Trace:
[ 1639.934671]  dump_stack+0x142/0x197
[ 1639.938318]  should_fail.cold+0x10f/0x159
[ 1639.942475]  ? __might_sleep+0x93/0xb0
[ 1639.946390]  __alloc_pages_nodemask+0x1d6/0x7a0
[ 1639.951068]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1639.956014]  ? __alloc_pages_slowpath+0x2930/0x2930
[ 1639.961044]  ? find_held_lock+0x35/0x130
[ 1639.965165]  alloc_pages_vma+0xc9/0x4c0
[ 1639.969164]  wp_page_copy+0xa5f/0x13d0
[ 1639.973064]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1639.977399]  ? follow_pfn+0x220/0x220
[ 1639.981339]  ? do_raw_spin_unlock+0x174/0x260
[ 1639.985850]  do_wp_page+0x24b/0x1250
[ 1639.989580]  ? finish_mkwrite_fault+0x620/0x620
[ 1639.994264]  __handle_mm_fault+0x1cc3/0x33d0
[ 1639.998793]  ? copy_page_range+0x1de0/0x1de0
[ 1640.003216]  ? find_held_lock+0x35/0x130
[ 1640.007282]  ? handle_mm_fault+0x1b6/0x7c0
[ 1640.011553]  handle_mm_fault+0x293/0x7c0
[ 1640.015626]  __do_page_fault+0x4c1/0xb80
[ 1640.019719]  ? vmalloc_fault+0xe30/0xe30
[ 1640.023799]  do_page_fault+0x71/0x511
[ 1640.027631]  page_fault+0x25/0x50
[ 1640.031084] RIP: 0010:__put_user_4+0x1c/0x30
[ 1640.035489] RSP: 0018:ffff888056b27cc8 EFLAGS: 00010293
[ 1640.040857] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020008038
[ 1640.048128] RDX: 00000000000013a0 RSI: ffffffff817cb828 RDI: 0000000000000286
[ 1640.055400] RBP: ffff888056b27eb8 R08: ffff8880955ee000 R09: 0000000000000000
[ 1640.062673] R10: 0000000000000000 R11: ffff8880955ee000 R12: 0000000000000001
[ 1640.069941] R13: 0000000000040000 R14: 0000000020008000 R15: 0000000020007fc0
[ 1640.077453]  ? __might_fault+0x188/0x1d0
[ 1640.081781]  ? __sys_sendmmsg+0x18b/0x3a0
[ 1640.085964]  ? SyS_sendmsg+0x50/0x50
[ 1640.089834]  ? lock_downgrade+0x740/0x740
[ 1640.094008]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1640.098862]  ? check_preemption_disabled+0x3c/0x250
[ 1640.103890]  ? wait_for_completion+0x420/0x420
[ 1640.108486]  ? __sb_end_write+0xc1/0x100
[ 1640.112566]  ? SyS_write+0x15e/0x230
[ 1640.116291]  SyS_sendmmsg+0x35/0x60
[ 1640.120049]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1640.124218]  do_syscall_64+0x1e8/0x640
[ 1640.128232]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1640.133114]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1640.138417] RIP: 0033:0x45b399
[ 1640.141699] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1640.149413] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1640.156795] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1640.164179] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1640.171475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
15:32:02 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20}, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0xfffffffffffffe51)
add_key$user(0x0, 0x0, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd)
write(r1, &(0x7f0000000000)="b6", 0xfffffe7e)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write$FUSE_POLL(r3, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x4}}, 0x18)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x8)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
dup(0xffffffffffffffff)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)

15:32:02 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:02 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r1 = socket$inet6(0xa, 0x2, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"10a59fd1032a2db205efe8749d509cbf2748927fd2c79a4fab0dd81b97324d025f9cbf53fe6d1e9655376a8e1469ea96126a40b65ef9af6e041a5538f281043e2c15c2d2ce09c4e2d13c83edfbaedd9c8265600992c7e5ef120caed5a332e876d12e1b3e356e094431bdc4decff32f6e14704e6240ad65ae32f156a04aa46c71bdd6d386a2ba048fe7555d276824aa2138537a26d3244a791a3af57e28185df0033f2de9ec6d7b20bd0f7c2140c6b7cc28c74057eda2bba2abc58c7bf562c52fbbe1bcdfcc2d14ae19ecd9bbf0af9734331e80f9c86f4f8d85aa9d4fd1b3d3620dbc5a37947fe5cc96355a77d7d1d1381755c31714a0c618bdc1dde16e151b841a98f1a69f52263cdbd27f6ecde03cf6f586468aab5d61a28e79f7992f469f0d38364453fefd108122c13dd6225e85fc39a442aa5d6f2bbbb9460fe6d7e79973330fb206c0d6bbcced86946b1bd151d56b3990e1b0469c7c56684ef60eb6da95e385775202ea828e52e87b8e2a8d18647cd1a551f37acbe8e3bbd816f94c703489b705744ab9b8e610034888ed37c146d3716279e624206cb02c3e1d1ae893f56720622f278e578e6f40fc816f275c67026c9ea71ddd2d9efac26284cb91c8d7c80a7eb6499e8d3f11f344fb79086c06b64dd8644a5b5255f8e8e48c1df95e6a046556295b2002071e191728707dffbfb37dea6879ba2d2681317eb2643aca8dd89ad82d941cbcba1d4db95ff2899b5e95bda22721aaf93cb5f339ff067e9e7b8d0a8ab1702b5d577080fc4644e00b1e3a54d7cb5923c1fd2aa4063f982f8c71d449c2d023954153a797d3885528facd1ca2271fdbff020b3f007ef5fc009b627a0a0b930cddf9a26c3edceb47ab7601dd7505491a9c3a2e9c2a0313c1788f77003b25a3be111120204e49ed7fe3e2839ec96d636ef927bd00653b3b09f175ed5c95443183aa06f1a8341a3accf785155ac829f4f70d7d6a9a1d159fb4589e2d961eaad41627225f5cbfa13278faffdd47166cbf64ae4cc03067948fa0e67a29dd8ad37b1f4fea3aab550f4cb0c81a97be7f8c2a4da5991c4113984040cd6e03ffe067d6d6f4dbea35fe53bf791b06f35419f2c6d050bf6880a9c9afc1b7b95640519c6e55355812298eae2aaf9eb3d29a0e035320bfb9e3020dcfcdfa174318da958b6c4b3ef05833851cde116967a3c69860d771eaaefe158579429e70ad14650d48c771023bdedebe6f4bd639f791e8c195b6f16e80881b63d70c31e6b8af3722c904462a1d5cefda0126714674c91b43e58213e9ccca672f3521d51857169251d02e3a29c6154394d1570c5bc7e027ec77f4771f265c5af72a28f1a68c689bd11a2bdf799bd05315ac402cccbc1bff3b709e4ee110061b35d59a7ee82e88944c8bb7791d945cc479ef81c6612c4d9b4003b99f3fbb9b66e973293543bd81b720aeb3b8a534095c3d9507679d3571709e8885b40493d5ad98821e5041f3cffdd3d03b655e8fd15cc4a442b82dbe70a318b6e7caa78b51fa0d1bcc230e08b737f0375f7323c6d7fd19363f4bfad7f696c5fd052678647189b1378119dbf7403e9fc5f4f42ea4cb4ccee46ccc39cf42d1073569716b3ef1d118be76ca75b5859b737305e24ec5f00817a91bed3c04f2030fed222708284800f6199a55feb74912de140818543d74623bb88a4acfe573b8b971ac2e3c350615c18ace57a8bd42eb338084d271c1929b37e272d367a76adda01b34c819a837fa56296db9bc44bd5624df2eaf5f0230556522547e616ccd5202b0f9b1a1da94c200b4f9733b4f88e2df718763a53164cf80233f21ba591849e015a5c0360fce2772dd496006cbcb901a739eacd763ef954ecafa19501f3ae66a9334e9b11ec038f053452932579cfa7693d536b4e236a70a59cc943da5c636c41b85050d3f08ea9559770db9fdd6d6fe9cd4fa01629a70dd71b19d1fce4c5a30669645b4972474167da52485900f946e768b9fca7d687f7f426d147d4750939fc694c49b32c7fed8e5a3333055df888f7c386018605bcd1cd42b04bda17ee172b686f3c75352f9db7d57fbf7e34b810081e3ae691a14c4850d60074f39a50380e971f252f9dcf5724414588c16df8ca6a4625fe6759711fc7d9ab32e865f003ca7f2177c2a69608a86f76dd577fe1e2331eb2378b61e299357c1543a1c77755ad3e9a68a028b5cf9a914e6ad22f4ea640cf41f5c0662e4d3b30a161c21cb0700b9c17fbcde7f256ae948e347d9b38771210d517d0de33928721aa7557ff2dcfe303315f24f481f1a348f1052bf5ce7e577d32a39169c457f9dc114422b6d755e8350d88dd70f32f2fcc2f290efcc1f2a6ccbf4d485f3e9195935d3e2f533284b5540332a1b77759b4b667b1c357f41cafe3ab78b722fe13418319e0a26eca48594a2b0c58aea0d059eed06fbfedf1da767aab59792a020de474990cb3ab553b76af34eed5aeb2c83fbd7d5bdd4d4187686cbc0b84201f49f8e31515d7f19ef7ac8cc6a872e768e2b96d2986b77983e1545c04654f08ca51915d1c653482fb88fcf5f27587ecce0b361af69117c08aaf5dea55a671d9dc33e6c7d7c8d17ff940599d50ec79301b90d406cc65ada78efe72e682181ed33e447bf67aa4f142cb6386bd2ae2c12cfe3ee22e656f6de62d24d8594d846571ec9435a5549696b093dfc8a380a3a073d0e22c9fdc7e00ebb88e8fd2f283c7d6c5dfced151211cad536b35f557c1395bee43d5e82672b7ff0aabc208cf51560c282cf67e0a321e36c435c500347f6935dc53bab25ea9ce1fdea40598ea4135ffac87eb63b0dd5475810843dac5f4cbc07b69e846bcf21dbcf23ca4209bdcb55da6b6ff00f551d0d6773df0a4b67f37f41d9d943c261a73c07a86bb329e4cbe2fc9363569a903ae9590bf49b38879aa7ea67227011c9aa9eca3039727dc8416c4252ed1469fea2b780899467d1f7534413100753c409926da4a63867f8bc835fa5fd37a8f39b4cbadbb497d946e54beb4dbe6a3f2c3d214e334fe7238e4b654b3c633ab07621736e54bca5362b1edbd1b318735840026b5e556d4af1aa94119deb10c22de01ae9ab16bb41aa7dec06bba2d64745d15cebc5514758c0b1d38af6cfe6565706d8e71e5ceedbef357f445e80ddb65e7733637dca51bb2f7a3c5e92d9dc63fcc0681609575c6e91321b7c2291edc440a9cbfda167837c4f3281e43fa52010d4574ec554031a790a7533d943cb75b7d56c2c8a9c4e327119c1d6d9236075f10be1cc8893e18c3c0e64ee6eb5f00131505d968e1a0700729f50d01a3ac8c8af6c01dc035ff2819a2dc16a232d99c54dc5e926d277d0f60f6027893a5438b29f38a42188ab5c1f6e05d27febfaedd19409415f13e5f8f0f958209bd6d89066d43b0580855106c21f464ae7c9322cf0c4e919889e7b19499b4b91933b7895f284f0d4ce1a6bf35b0720ff71281256f9512ff33af4619bfdeaaacbfed93a9fe996aef02171187b8ab32b6edee65ad9bd083cadfcb749f0aa736fc87cd66327c4370ba8e19e6cbbc6dcf33ab5439ca1fca660c4a077d1923f599eb96e98e8808edbd953bb95d2d71be2d2cc4516a324e27f923c83ceb5ffbf3b05008a949cc59add97798d0ff7e0aa827561b86a36e89c2117f67dae857e21e6cbb2774d697e6eb76c5e33dde72a8b3e1ffe9d8c21f1664c1b3c22b7d282bcc3a4ea8cbffe9808b65d1a06333aeaaf015ac71a087c2e12f6619a4c5e9054c7d398e99d62e78d50282e9a7b486cf0ed8c32dfbb42c140b3d7e504af1e508240359c0f8c540c8419042ee8bc401e04adb16c43e4d74e899c4549fa673cbf112cc3ffdc83d0cd108ea145ca40f5d01532d7309017ea27f90a28c2ec116fa56763ad4176d42923bd146e7f5e206b0b0596e19f8da34e8a7b9b1c780e133ff4d905b786874b522fad6329867bad4b8d8dd4ead68abf293abfc7d4ac363f80e71a30db93a5563ce6897a3a856b23a12aa4daaf718545e915797cf954cbdc0bd9499bdafdb1c04a44134b98e1800c8705e2edb318e62f99df5642af61385bd4456aa7db70a0e3dc3142013ba4690277bbedfcc739d8c4d08a7450de2389a5a3816d5cc9c331a13d69f1201dd72e22df3f1c90d53786585352e8bfa186c528964f6d638cdc02f9f50a8aef20d8c2080f11d11d6df60733baeed1d1dfee54bb331015140ed8f57d39100128d5ea6b831298de8031957fc77dbe9fa498e2a4dd25eec00f8bf8cb67ef7a8ecd462e427263756786a9f7293f06551382fe8708fc9c8455a1e17233c91be37c008bf147287f324fe025b6f8af5da928fe921dc1700ee68b777eb6d564fac9245576c4cda857fc71cd5b4a728cb116a492b7e782226d92d4184977ed5ba810d9b187a1366948c6a0258e14b2f55ceb40baac5d82f7de1a453b8b6c877f171a6d311b031cce2eac604d79a8b6b7870014c294782738b8767a2802c7c46c60962551e757b1989c832bf0d12b7b9cd8260513371355dca85e60035b88aed4c1d1c1a02c00b9a210c1dbab828b798e1be671d70a5cfb79db92cd95c15883c63153f7882ff9f587f51dc0166fd5f3fefa6723f7896f36c9136760b1191a32e2ae0b0ec7d3325eec4916dc4c426ab30d28302e65b34bde61c2e6b59d23b9847d4b8b6f17b0e644481aa132060d24560a17a57fc24a865883e7915e12e00239c87d6e37ca435c5db640241962a80fcdbf8bf3d34d1862d63d4dbf5f1f0fd11e9baf6e2a12121508ed2e7328b5b8d71a3be524acf62a96b5755e21cc58ac155f04250a4f6940270acd856bee2f12152cb0bad7e142de52439db548dc3ce11ffff29e117b4e48ff9bc9625c512999870cad82da121fa6b333bc72e61e05ed82ebc6e0eb729ef5b720dde28a4b131c42b848b418137101645c8ee87b68b71c236f56c05ee7ad7b745e7234c88e94cf991c5451a5a3d5acb89f980963798adaa1773168ec8841cfb892160830f836e9a073863497cab04d985bf43cb77969294464a818b21f4e3e7553ed72930323942aec3e6b1d5d4e0604a1775830b540df03a2901b18cd54adb5096b1cc6118fa860c9b7871c13cface73a83a50133a45b7376bd3a19c11a7c5bd43ab3b5460917381025f1c2f029991a12a47183140927eba0361e622538e871be35a8ae02f20fa4c5bdae4d08e186019819b410e36de5e779267adf2d5706acfa9a9a2716378653acb00842a33336ca22085b37759ba086e2b5be5c8b9ac1dc1d7b83130bac1aa07848b221a51efb77affef727c6d680a3c2d062224a2f741e328a3b49c8e25fd2dbf757d4207c25a3ac17e9aff0905c93067dea77f68b2c5d513c1b35534bb5553e4f586effc05525943b75693354be98753457f638f7b1073b6bb51762fbf4a3d3808f89892aab39ef2f7f4029c57b17f11d9262a68c48fb8c979519472516d3029cf73f1057c4e47e1cd27c782aaada4278c296e4e7010ad4849a814d760f0e819eed697f75655abc9620685269c39bb65bb061daa00fdd622c46a48a222d7ef6b8db9e256fbe41f5a6c607c1e3f4496d432be5184c3ee4b8d83dce738b7cb3a7041a4d2c45badce9485af9472509a4ef5b1e3354b5493eb8507b83ec2d72bbc2c8d96a53b63076527b9d506bb8c279a59d52018ae64606443469e656d8ecac547ca744642882b7bbe8d31885aa015ec57908d322687cc06d0f733ad98a1868418957fd979d3e601ac4223a3b41cea11c1e3bca0df477750277c6c07d509677e0294d6b673a5b0d9624e61dce", 0x1000}}, 0x1006)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001080)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000019000100000206005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e7fbad40ac3794899000000000000000000000000000000d94bfeadbfd00d4e11f71b242b42000000ea00000400000002eeffffffe0e8154f707c51bf000000000000000008000000000000000000f9d80100000001000000000020004c357b2173b3a125441d7e79bf732fd0efb4458e9d0867e33dfad15313"], 0xb8}}, 0x0)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3c)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r4, 0x0, 0x0)
fcntl$lock(r3, 0x5, &(0x7f00000010c0)={0x1, 0x2, 0x43f, 0x5, r4})
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3c)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r5, 0x0, 0x0)
r6 = syz_open_procfs(r4, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000001140))

15:32:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x3f, 0x0, 0x0, 0x0, 0xf32, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$vhost_msg(0xffffffffffffffff, &(0x7f0000000140)={0x1, {&(0x7f0000000040)=""/109, 0x6d, &(0x7f0000000100)=""/8, 0x3, 0x3}}, 0x48)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000200)=0x9, 0x4)
io_setup(0x40, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$UI_DEV_DESTROY(r1, 0x5502)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1640.178924] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000007
15:32:02 executing program 4 (fault-call:5 fault-nth:8):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
madvise(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x12)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = epoll_create1(0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000200))
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000040)={0x11})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000001c0)={0xfffbffff80000013})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000200)={0x20000001})
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r9, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r4, &(0x7f0000000080)={0xfffbffff80000013})
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1640.408011] FAULT_INJECTION: forcing a failure.
[ 1640.408011] name failslab, interval 1, probability 0, space 0, times 0
[ 1640.438306] CPU: 0 PID: 14548 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1640.446358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1640.455828] Call Trace:
[ 1640.458430]  dump_stack+0x142/0x197
[ 1640.462082]  should_fail.cold+0x10f/0x159
[ 1640.466543]  should_failslab+0xdb/0x130
[ 1640.470669]  kmem_cache_alloc_node+0x287/0x780
[ 1640.475266]  ? __lock_is_held+0xb6/0x140
[ 1640.479354]  ? check_preemption_disabled+0x3c/0x250
[ 1640.484395]  __alloc_skb+0x9c/0x500
[ 1640.488032]  ? skb_trim+0x180/0x180
[ 1640.491919]  alloc_skb_with_frags+0x86/0x4b0
[ 1640.496443]  ? __dev_queue_xmit+0xd33/0x25e0
[ 1640.500868]  ? trace_hardirqs_on+0xd/0x10
[ 1640.505030]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1640.509642]  sock_alloc_send_pskb+0x5db/0x740
[ 1640.514169]  ? sock_wmalloc+0xf0/0xf0
[ 1640.517978]  ? get_page_from_freelist+0x1145/0x2370
[ 1640.523006]  ? find_held_lock+0x35/0x130
[ 1640.527082]  ? get_page_from_freelist+0x1145/0x2370
[ 1640.532164]  sock_alloc_send_skb+0x32/0x40
[ 1640.536420]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1640.541370]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1640.545718]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1640.551540]  ? ipv4_mtu+0x25e/0x3a0
[ 1640.555182]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1640.559541]  ip_make_skb+0x17a/0x1d0
[ 1640.563274]  ? ip_flush_pending_frames+0x30/0x30
[ 1640.568058]  ? lock_downgrade+0x740/0x740
[ 1640.572316]  ? ipv4_dst_check+0x10d/0x160
[ 1640.576599]  udp_sendmsg+0x16a6/0x1da0
[ 1640.580500]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1640.584840]  ? udp4_seq_show+0x520/0x520
[ 1640.588908]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1640.593677]  ? sock_has_perm+0x1ed/0x280
[ 1640.597847]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1640.602702]  ? dup_iter+0x260/0x260
[ 1640.606357]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1640.611127]  ? save_trace+0x290/0x290
[ 1640.614941]  inet_sendmsg+0x122/0x500
[ 1640.618961]  ? inet_recvmsg+0x500/0x500
[ 1640.622944]  sock_sendmsg+0xce/0x110
[ 1640.626677]  ___sys_sendmsg+0x349/0x840
[ 1640.630662]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1640.635424]  ? __perf_sw_event+0x62/0x90
[ 1640.639500]  ? __do_page_fault+0x358/0xb80
[ 1640.643757]  ? retint_kernel+0x2d/0x2d
[ 1640.647654]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1640.652795]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1640.657578]  ? retint_kernel+0x2d/0x2d
[ 1640.661493]  __sys_sendmmsg+0x152/0x3a0
[ 1640.665546]  ? SyS_sendmsg+0x50/0x50
[ 1640.669298]  ? lock_downgrade+0x740/0x740
[ 1640.673467]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1640.678328]  ? check_preemption_disabled+0x3c/0x250
[ 1640.683359]  ? wait_for_completion+0x420/0x420
[ 1640.688193]  ? __sb_end_write+0xc1/0x100
[ 1640.692272]  ? SyS_write+0x15e/0x230
[ 1640.696104]  SyS_sendmmsg+0x35/0x60
[ 1640.699764]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1640.704165]  do_syscall_64+0x1e8/0x640
[ 1640.708061]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1640.712930]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1640.718134] RIP: 0033:0x45b399
[ 1640.721329] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1640.729163] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1640.736440] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1640.743733] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1640.751012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1640.758407] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000008
15:32:04 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:04 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
accept4$llc(r1, 0x0, &(0x7f0000000000), 0x80000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="002200000002000008000a00", @ANYRES32, @ANYBLOB="2c0012000c000100697036746e6c00001c00020014000200ff02000000000000000000000000000104001300"], 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x0)

15:32:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r0}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r1 = socket$inet(0x2, 0x6, 0x1)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = gettid()
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
clock_gettime(0x0, &(0x7f0000000200)={<r4=>0x0, <r5=>0x0})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x6, 0x2, 0x4, 0xe011, 0x5e, {r4, r5/1000+10000}, {0x4, 0x8, 0x6f, 0x0, 0x7f, 0x40, "1d46060d"}, 0x0, 0x2, @userptr=0x6, 0x6, 0x0, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x2, 0x0, 0x0, 0x2, 0x0, 0x100, 0x4000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e46771c, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x88, 0x5d4, 0x4, 0x2, 0x9, 0x9}, r2, 0xb, r6, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000340))
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:32:04 executing program 4 (fault-call:5 fault-nth:9):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
madvise(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x12)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = epoll_create1(0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000200))
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000040)={0x11})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000001c0)={0xfffbffff80000013})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000200)={0x20000001})
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r9, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r4, &(0x7f0000000080)={0xfffbffff80000013})
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1642.833564] FAULT_INJECTION: forcing a failure.
[ 1642.833564] name failslab, interval 1, probability 0, space 0, times 0
[ 1642.869912] CPU: 0 PID: 14561 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1642.877834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1642.887204] Call Trace:
[ 1642.889824]  dump_stack+0x142/0x197
[ 1642.893482]  should_fail.cold+0x10f/0x159
[ 1642.897653]  should_failslab+0xdb/0x130
[ 1642.901655]  kmem_cache_alloc_node_trace+0x280/0x770
[ 1642.906780]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1642.912256]  __kmalloc_node_track_caller+0x3d/0x80
[ 1642.917205]  __kmalloc_reserve.isra.0+0x40/0xe0
[ 1642.921891]  __alloc_skb+0xcf/0x500
[ 1642.925533]  ? skb_trim+0x180/0x180
[ 1642.929179]  alloc_skb_with_frags+0x86/0x4b0
15:32:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0x33c, 0xfffffec2)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1642.933599]  ? __dev_queue_xmit+0xd33/0x25e0
[ 1642.938018]  ? trace_hardirqs_on+0xd/0x10
[ 1642.942195]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1642.946806]  sock_alloc_send_pskb+0x5db/0x740
[ 1642.951358]  ? sock_wmalloc+0xf0/0xf0
[ 1642.955177]  ? get_page_from_freelist+0x1145/0x2370
[ 1642.960207]  ? find_held_lock+0x35/0x130
[ 1642.964276]  ? get_page_from_freelist+0x1145/0x2370
[ 1642.969308]  sock_alloc_send_skb+0x32/0x40
[ 1642.973555]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1642.978506]  ? ip_reply_glue_bits+0xb0/0xb0
15:32:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
fdatasync(r1)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1642.982855]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1642.989011]  ? ipv4_mtu+0x25e/0x3a0
[ 1642.992680]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1642.997130]  ip_make_skb+0x17a/0x1d0
[ 1643.000886]  ? ip_flush_pending_frames+0x30/0x30
[ 1643.005790]  ? lock_downgrade+0x740/0x740
[ 1643.009958]  ? ipv4_dst_check+0x10d/0x160
[ 1643.014266]  udp_sendmsg+0x16a6/0x1da0
[ 1643.018172]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1643.022508]  ? udp4_seq_show+0x520/0x520
[ 1643.026583]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1643.031364]  ? sock_has_perm+0x1ed/0x280
[ 1643.035439]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1643.040124]  ? dup_iter+0x260/0x260
[ 1643.043768]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1643.048526]  ? save_trace+0x290/0x290
[ 1643.052335]  inet_sendmsg+0x122/0x500
[ 1643.056152]  ? inet_recvmsg+0x500/0x500
[ 1643.060131]  sock_sendmsg+0xce/0x110
[ 1643.063846]  ___sys_sendmsg+0x349/0x840
[ 1643.067815]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1643.072585]  ? __perf_sw_event+0x62/0x90
[ 1643.076647]  ? __do_page_fault+0x358/0xb80
[ 1643.080876]  ? retint_kernel+0x2d/0x2d
[ 1643.084764]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1643.089792]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1643.094550]  ? retint_kernel+0x2d/0x2d
[ 1643.098452]  __sys_sendmmsg+0x152/0x3a0
[ 1643.102515]  ? SyS_sendmsg+0x50/0x50
[ 1643.106242]  ? lock_downgrade+0x740/0x740
[ 1643.110407]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1643.115244]  ? check_preemption_disabled+0x3c/0x250
[ 1643.120258]  ? wait_for_completion+0x420/0x420
[ 1643.125015]  ? __sb_end_write+0xc1/0x100
[ 1643.129102]  ? SyS_write+0x15e/0x230
[ 1643.132983]  SyS_sendmmsg+0x35/0x60
[ 1643.136604]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1643.140744]  do_syscall_64+0x1e8/0x640
[ 1643.144698]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1643.149536]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1643.154720] RIP: 0033:0x45b399
[ 1643.157942] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1643.165639] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1643.172908] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1643.180171] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1643.187461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1643.194731] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000009
15:32:05 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200140, 0x0)
bind$phonet(r0, &(0x7f0000000080)={0x23, 0x7, 0x2e, 0x40}, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:32:05 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
madvise(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x12)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = epoll_create1(0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000200))
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000040)={0x11})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000001c0)={0xfffbffff80000013})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000200)={0x20000001})
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r9, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r4, &(0x7f0000000080)={0xfffbffff80000013})
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:32:05 executing program 4 (fault-call:5 fault-nth:10):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:05 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
getpid()
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES16=r1, @ANYBLOB="080004000000ffff08000a00529c9b", @ANYRES32=r2, @ANYBLOB="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"], 0x7}}, 0xe58570af959775da)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x22a, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00')

[ 1643.360933] FAULT_INJECTION: forcing a failure.
[ 1643.360933] name failslab, interval 1, probability 0, space 0, times 0
[ 1643.410648] CPU: 0 PID: 14591 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1643.418562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1643.427925] Call Trace:
[ 1643.430530]  dump_stack+0x142/0x197
[ 1643.434183]  should_fail.cold+0x10f/0x159
[ 1643.438353]  should_failslab+0xdb/0x130
[ 1643.442354]  kmem_cache_alloc_node_trace+0x280/0x770
[ 1643.447479]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1643.452955]  __kmalloc_node_track_caller+0x3d/0x80
[ 1643.457905]  __kmalloc_reserve.isra.0+0x40/0xe0
[ 1643.462589]  __alloc_skb+0xcf/0x500
[ 1643.466234]  ? skb_trim+0x180/0x180
[ 1643.469885]  alloc_skb_with_frags+0x86/0x4b0
[ 1643.474357]  ? __dev_queue_xmit+0xd33/0x25e0
[ 1643.478781]  ? trace_hardirqs_on+0xd/0x10
[ 1643.483113]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1643.487723]  sock_alloc_send_pskb+0x5db/0x740
[ 1643.492368]  ? ip_finish_output2+0x77b/0x14a0
[ 1643.496971]  ? find_held_lock+0x35/0x130
[ 1643.501052]  ? sock_wmalloc+0xf0/0xf0
[ 1643.504871]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1643.509479]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1643.514516]  sock_alloc_send_skb+0x32/0x40
[ 1643.518774]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1643.523739]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1643.528085]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1643.533932]  ? ipv4_mtu+0x25e/0x3a0
[ 1643.537606]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1643.542055]  ip_make_skb+0x17a/0x1d0
[ 1643.545785]  ? ip_flush_pending_frames+0x30/0x30
[ 1643.550567]  ? lock_downgrade+0x740/0x740
[ 1643.554739]  ? ipv4_dst_check+0x10d/0x160
[ 1643.558917]  udp_sendmsg+0x16a6/0x1da0
[ 1643.562837]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1643.567199]  ? udp4_seq_show+0x520/0x520
[ 1643.571355]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1643.576140]  ? sock_has_perm+0x1ed/0x280
[ 1643.580350]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1643.585037]  ? dup_iter+0x260/0x260
[ 1643.588686]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1643.593602]  inet_sendmsg+0x122/0x500
[ 1643.597426]  ? inet_recvmsg+0x500/0x500
[ 1643.601566]  sock_sendmsg+0xce/0x110
[ 1643.605294]  ___sys_sendmsg+0x349/0x840
[ 1643.609283]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1643.614421]  ? trace_hardirqs_on+0x10/0x10
[ 1643.618670]  ? save_trace+0x290/0x290
[ 1643.622522]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1643.627904]  ? __might_fault+0x110/0x1d0
[ 1643.631977]  ? find_held_lock+0x35/0x130
[ 1643.636049]  ? __might_fault+0x110/0x1d0
[ 1643.640139]  __sys_sendmmsg+0x152/0x3a0
[ 1643.644131]  ? SyS_sendmsg+0x50/0x50
[ 1643.647863]  ? lock_downgrade+0x740/0x740
[ 1643.652133]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1643.656984]  ? check_preemption_disabled+0x3c/0x250
[ 1643.662017]  ? wait_for_completion+0x420/0x420
[ 1643.666614]  ? __sb_end_write+0xc1/0x100
[ 1643.670693]  ? SyS_write+0x15e/0x230
[ 1643.674429]  SyS_sendmmsg+0x35/0x60
[ 1643.678066]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1643.682371]  do_syscall_64+0x1e8/0x640
[ 1643.686302]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1643.691169]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1643.696377] RIP: 0033:0x45b399
[ 1643.699664] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1643.707524] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1643.714810] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1643.722200] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1643.729599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1643.736876] R13: 00000000000008cc R14: 00000000004ca262 R15: 000000000000000a
15:32:08 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:08 executing program 4 (fault-call:5 fault-nth:11):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:08 executing program 5:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000880)='./bus\x00', 0x20)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x88002, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x19, 0x0, "795952b3695ba4cec7bc97b595f878bab1be64029bf49353c307d3c382ba5d43b5bd2965c751d3bbbee69433b0dee76e81e37e6271cf2d8789ef88f7e57de7cd6aaceeeb6864c84e8a0aad3246fd2922"}, 0xd8)
sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000300)=ANY=[@ANYRES64=r3])
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xdaf5766652ee0ed1)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000240)={0x6, {{0xa, 0x4e20, 0x7fffffff, @ipv4={[], [], @rand_addr=0x5}, 0x8000}}}, 0x88)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x12400, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8)
r8 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x2, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
r10 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r11, 0x3f, 0x0, 0x3, 0xba16}, &(0x7f0000000140)=0x18)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001580)={r11, 0x48, &(0x7f0000001500)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x764}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x36f, @rand_addr="ca63e80e727771ec1aee67f82b7cb133", 0x9}]}, &(0x7f00000015c0)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000600)={<r12=>r11, 0x9, 0x0, 0xffff, 0x2}, &(0x7f0000000640)=0x18)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000840)={r12, 0x4, 0x4}, 0x8)
connect$packet(r6, &(0x7f0000000800)={0x11, 0x15, r7, 0x1, 0x2f, 0x6, @random="bebe4a3d7f9e"}, 0x14)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0)

15:32:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
madvise(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x12)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = epoll_create1(0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000200))
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000040)={0x11})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000001c0)={0xfffbffff80000013})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000200)={0x20000001})
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r9, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r4, &(0x7f0000000080)={0xfffbffff80000013})
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1645.937751] FAULT_INJECTION: forcing a failure.
[ 1645.937751] name failslab, interval 1, probability 0, space 0, times 0
[ 1645.979376] CPU: 0 PID: 14612 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1645.987291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1645.996644] Call Trace:
[ 1645.999246]  dump_stack+0x142/0x197
[ 1646.002885]  should_fail.cold+0x10f/0x159
[ 1646.007029]  should_failslab+0xdb/0x130
[ 1646.011005]  kmem_cache_alloc_node+0x287/0x780
[ 1646.015589]  ? __lock_is_held+0xb6/0x140
[ 1646.019639]  ? check_preemption_disabled+0x3c/0x250
[ 1646.024663]  __alloc_skb+0x9c/0x500
[ 1646.028292]  ? skb_trim+0x180/0x180
[ 1646.031923]  alloc_skb_with_frags+0x86/0x4b0
[ 1646.036432]  ? __dev_queue_xmit+0xd33/0x25e0
[ 1646.040846]  ? trace_hardirqs_on+0xd/0x10
[ 1646.044999]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1646.049589]  sock_alloc_send_pskb+0x5db/0x740
[ 1646.054189]  ? ip_finish_output2+0x77b/0x14a0
[ 1646.058676]  ? find_held_lock+0x35/0x130
[ 1646.062726]  ? sock_wmalloc+0xf0/0xf0
[ 1646.066967]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1646.071550]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1646.076582]  sock_alloc_send_skb+0x32/0x40
[ 1646.080813]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1646.085756]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1646.090086]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1646.095795]  ? ipv4_mtu+0x25e/0x3a0
[ 1646.099431]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1646.103745]  ip_make_skb+0x17a/0x1d0
[ 1646.107467]  ? ip_flush_pending_frames+0x30/0x30
[ 1646.112337]  ? lock_downgrade+0x740/0x740
[ 1646.116489]  ? ipv4_dst_check+0x10d/0x160
[ 1646.120642]  udp_sendmsg+0x16a6/0x1da0
[ 1646.124524]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1646.128969]  ? udp4_seq_show+0x520/0x520
[ 1646.133020]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1646.137877]  ? sock_has_perm+0x1ed/0x280
[ 1646.141927]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1646.146608]  ? dup_iter+0x260/0x260
[ 1646.150239]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1646.155003]  inet_sendmsg+0x122/0x500
[ 1646.158793]  ? inet_recvmsg+0x500/0x500
[ 1646.162764]  sock_sendmsg+0xce/0x110
[ 1646.166472]  ___sys_sendmsg+0x349/0x840
[ 1646.170455]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1646.175203]  ? trace_hardirqs_on+0x10/0x10
[ 1646.179441]  ? save_trace+0x290/0x290
[ 1646.183239]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1646.188165]  ? __might_fault+0x110/0x1d0
[ 1646.192232]  ? find_held_lock+0x35/0x130
[ 1646.196310]  ? __might_fault+0x110/0x1d0
[ 1646.200424]  ? nf_log_dump_tcp_header+0x670/0xac0
[ 1646.205279]  __sys_sendmmsg+0x152/0x3a0
[ 1646.209264]  ? SyS_sendmsg+0x50/0x50
[ 1646.212978]  ? lock_downgrade+0x740/0x740
[ 1646.217236]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1646.222075]  ? check_preemption_disabled+0x3c/0x250
[ 1646.227094]  ? wait_for_completion+0x420/0x420
[ 1646.231678]  ? __sb_end_write+0xc1/0x100
[ 1646.235843]  ? SyS_write+0x15e/0x230
[ 1646.239548]  SyS_sendmmsg+0x35/0x60
[ 1646.243182]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1646.247335]  do_syscall_64+0x1e8/0x640
[ 1646.251221]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1646.256074]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1646.261262] RIP: 0033:0x45b399
[ 1646.264449] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1646.272152] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
15:32:08 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1646.279433] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1646.286789] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1646.294058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1646.301329] R13: 00000000000008cc R14: 00000000004ca262 R15: 000000000000000b
15:32:08 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0})
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0x8de1})
write(r2, &(0x7f0000000340), 0x41395527)
getdents(0xffffffffffffffff, &(0x7f0000000000)=""/35, 0x23)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_emit_ethernet(0x1011, &(0x7f0000000640)={@remote, @dev={[], 0x43}, @void, {@llc={0x4, {@llc={0x80, 0x80, 'T', "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"}}}}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffe})
ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x2})
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
fcntl$setpipe(r6, 0x407, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))

15:32:08 executing program 4 (fault-call:5 fault-nth:12):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:08 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)={<r3=>0x0, 0x0, 0x2})
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000080)={0x0, <r6=>0x0, 0x2})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r3, r6, 0xffffffff})

15:32:08 executing program 5:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000880)='./bus\x00', 0x20)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x88002, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x19, 0x0, "795952b3695ba4cec7bc97b595f878bab1be64029bf49353c307d3c382ba5d43b5bd2965c751d3bbbee69433b0dee76e81e37e6271cf2d8789ef88f7e57de7cd6aaceeeb6864c84e8a0aad3246fd2922"}, 0xd8)
sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000300)=ANY=[@ANYRES64=r3])
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xdaf5766652ee0ed1)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000240)={0x6, {{0xa, 0x4e20, 0x7fffffff, @ipv4={[], [], @rand_addr=0x5}, 0x8000}}}, 0x88)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x12400, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8)
r8 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x2, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
r10 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r11, 0x3f, 0x0, 0x3, 0xba16}, &(0x7f0000000140)=0x18)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001580)={r11, 0x48, &(0x7f0000001500)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x764}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x36f, @rand_addr="ca63e80e727771ec1aee67f82b7cb133", 0x9}]}, &(0x7f00000015c0)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000600)={<r12=>r11, 0x9, 0x0, 0xffff, 0x2}, &(0x7f0000000640)=0x18)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000840)={r12, 0x4, 0x4}, 0x8)
connect$packet(r6, &(0x7f0000000800)={0x11, 0x15, r7, 0x1, 0x2f, 0x6, @random="bebe4a3d7f9e"}, 0x14)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0)

[ 1646.846139] FAULT_INJECTION: forcing a failure.
[ 1646.846139] name failslab, interval 1, probability 0, space 0, times 0
[ 1646.866301] CPU: 1 PID: 14647 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1646.874328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1646.883808] Call Trace:
[ 1646.886518]  dump_stack+0x142/0x197
[ 1646.890251]  should_fail.cold+0x10f/0x159
[ 1646.894421]  should_failslab+0xdb/0x130
[ 1646.898555]  kmem_cache_alloc_node_trace+0x280/0x770
[ 1646.903707]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1646.909180]  __kmalloc_node_track_caller+0x3d/0x80
[ 1646.914253]  __kmalloc_reserve.isra.0+0x40/0xe0
[ 1646.919026]  __alloc_skb+0xcf/0x500
[ 1646.922689]  ? skb_trim+0x180/0x180
[ 1646.926336]  alloc_skb_with_frags+0x86/0x4b0
[ 1646.930861]  ? __dev_queue_xmit+0xd33/0x25e0
[ 1646.935281]  ? trace_hardirqs_on+0xd/0x10
[ 1646.939442]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1646.944157]  sock_alloc_send_pskb+0x5db/0x740
[ 1646.948680]  ? ip_finish_output2+0x77b/0x14a0
[ 1646.953187]  ? find_held_lock+0x35/0x130
[ 1646.957260]  ? sock_wmalloc+0xf0/0xf0
[ 1646.961175]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1646.965883]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1646.970916]  sock_alloc_send_skb+0x32/0x40
[ 1646.975170]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1646.982296]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1646.986654]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1646.992417]  ? ipv4_mtu+0x25e/0x3a0
[ 1646.996059]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1647.000392]  ip_make_skb+0x17a/0x1d0
[ 1647.004129]  ? ip_flush_pending_frames+0x30/0x30
[ 1647.008921]  ? lock_downgrade+0x740/0x740
[ 1647.013093]  ? ipv4_dst_check+0x10d/0x160
[ 1647.017259]  udp_sendmsg+0x16a6/0x1da0
[ 1647.021249]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1647.025935]  ? udp4_seq_show+0x520/0x520
[ 1647.030004]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1647.034775]  ? sock_has_perm+0x1ed/0x280
[ 1647.038868]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1647.043545]  ? dup_iter+0x260/0x260
[ 1647.047203]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1647.051979]  inet_sendmsg+0x122/0x500
[ 1647.055791]  ? inet_recvmsg+0x500/0x500
[ 1647.059779]  sock_sendmsg+0xce/0x110
[ 1647.063501]  ___sys_sendmsg+0x349/0x840
[ 1647.067487]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1647.072264]  ? trace_hardirqs_on+0x10/0x10
[ 1647.076523]  ? save_trace+0x290/0x290
[ 1647.080438]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1647.085377]  ? __might_fault+0x110/0x1d0
[ 1647.089448]  ? find_held_lock+0x35/0x130
[ 1647.093517]  ? __might_fault+0x110/0x1d0
[ 1647.097604]  __sys_sendmmsg+0x152/0x3a0
[ 1647.101601]  ? SyS_sendmsg+0x50/0x50
[ 1647.105328]  ? lock_downgrade+0x740/0x740
[ 1647.109579]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1647.114442]  ? check_preemption_disabled+0x3c/0x250
[ 1647.119481]  ? wait_for_completion+0x420/0x420
[ 1647.124079]  ? __sb_end_write+0xc1/0x100
[ 1647.128157]  ? SyS_write+0x15e/0x230
[ 1647.131942]  SyS_sendmmsg+0x35/0x60
[ 1647.135577]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1647.139745]  do_syscall_64+0x1e8/0x640
[ 1647.143643]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1647.148506]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1647.153709] RIP: 0033:0x45b399
[ 1647.156899] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1647.164748] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1647.172026] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1647.179304] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1647.186582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
15:32:09 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="27fd0000ea000000001f00020000000000040000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a0001000080c20000000000"], 0x40}}, 0x0)

[ 1647.193867] R13: 00000000000008cc R14: 00000000004ca262 R15: 000000000000000c
15:32:09 executing program 4 (fault-call:5 fault-nth:13):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 1647.258580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=234 sclass=netlink_route_socket pig=14662 comm=syz-executor.1
[ 1647.279287] FAULT_INJECTION: forcing a failure.
[ 1647.279287] name failslab, interval 1, probability 0, space 0, times 0
[ 1647.295795] CPU: 1 PID: 14665 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1647.303827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1647.313188] Call Trace:
[ 1647.315958]  dump_stack+0x142/0x197
[ 1647.319613]  should_fail.cold+0x10f/0x159
[ 1647.323888]  should_failslab+0xdb/0x130
[ 1647.328050]  kmem_cache_alloc+0x47/0x780
[ 1647.332133]  skb_clone+0x129/0x320
[ 1647.335772]  ip_mc_output+0x628/0xd40
[ 1647.339589]  ? ip_queue_xmit+0x1b10/0x1b10
[ 1647.343929]  ? ip_append_data.part.0+0x160/0x160
[ 1647.348829]  ? ip_flush_pending_frames+0x30/0x30
[ 1647.353601]  ip_local_out+0x97/0x170
[ 1647.356248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=234 sclass=netlink_route_socket pig=14670 comm=syz-executor.1
[ 1647.357321]  ip_send_skb+0x3e/0xc0
[ 1647.357335]  udp_send_skb+0x616/0xb90
[ 1647.357344]  ? ipv4_dst_check+0x10d/0x160
[ 1647.357359]  udp_sendmsg+0x16df/0x1da0
[ 1647.385196]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1647.389536]  ? udp4_seq_show+0x520/0x520
[ 1647.393609]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1647.398378]  ? sock_has_perm+0x1ed/0x280
[ 1647.402453]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1647.407136]  ? dup_iter+0x260/0x260
[ 1647.410781]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1647.415678]  inet_sendmsg+0x122/0x500
[ 1647.419488]  ? inet_recvmsg+0x500/0x500
[ 1647.423586]  sock_sendmsg+0xce/0x110
[ 1647.427318]  ___sys_sendmsg+0x349/0x840
[ 1647.431304]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1647.436077]  ? trace_hardirqs_on+0x10/0x10
[ 1647.440323]  ? save_trace+0x290/0x290
[ 1647.444132]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1647.449102]  ? __might_fault+0x110/0x1d0
[ 1647.453179]  ? find_held_lock+0x35/0x130
[ 1647.457255]  ? __might_fault+0x110/0x1d0
[ 1647.461527]  __sys_sendmmsg+0x152/0x3a0
[ 1647.465517]  ? SyS_sendmsg+0x50/0x50
[ 1647.469252]  ? lock_downgrade+0x740/0x740
[ 1647.473416]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1647.478268]  ? check_preemption_disabled+0x3c/0x250
[ 1647.483415]  ? wait_for_completion+0x420/0x420
[ 1647.488008]  ? __sb_end_write+0xc1/0x100
[ 1647.492108]  ? SyS_write+0x15e/0x230
[ 1647.495840]  SyS_sendmmsg+0x35/0x60
[ 1647.499483]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1647.503749]  do_syscall_64+0x1e8/0x640
15:32:09 executing program 5:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000880)='./bus\x00', 0x20)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x88002, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x19, 0x0, "795952b3695ba4cec7bc97b595f878bab1be64029bf49353c307d3c382ba5d43b5bd2965c751d3bbbee69433b0dee76e81e37e6271cf2d8789ef88f7e57de7cd6aaceeeb6864c84e8a0aad3246fd2922"}, 0xd8)
sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000300)=ANY=[@ANYRES64=r3])
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xdaf5766652ee0ed1)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000240)={0x6, {{0xa, 0x4e20, 0x7fffffff, @ipv4={[], [], @rand_addr=0x5}, 0x8000}}}, 0x88)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x12400, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8)
r8 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x2, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
r10 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r11, 0x3f, 0x0, 0x3, 0xba16}, &(0x7f0000000140)=0x18)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001580)={r11, 0x48, &(0x7f0000001500)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x764}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x36f, @rand_addr="ca63e80e727771ec1aee67f82b7cb133", 0x9}]}, &(0x7f00000015c0)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000600)={<r12=>r11, 0x9, 0x0, 0xffff, 0x2}, &(0x7f0000000640)=0x18)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000840)={r12, 0x4, 0x4}, 0x8)
connect$packet(r6, &(0x7f0000000800)={0x11, 0x15, r7, 0x1, 0x2f, 0x6, @random="bebe4a3d7f9e"}, 0x14)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0)

[ 1647.507662]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1647.512526]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1647.517726] RIP: 0033:0x45b399
[ 1647.520926] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1647.528668] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1647.535944] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1647.543223] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1647.550501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1647.557928] R13: 00000000000008cc R14: 00000000004ca262 R15: 000000000000000d
15:32:11 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:11 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101000, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000001c0)={0xfffffffb, 0x0, {<r1=>0xffffffffffffffff}, {}, 0x0, 0x5e})
syz_open_procfs(r1, &(0x7f0000000200)='oom_score\x00')
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = dup2(r2, r3)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r6=>0x0)
io_submit(r6, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r5, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0xc, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa, 0xffffffd5, 0x0, 0x0, 0xa0007ffd}, [@exit, @generic={0x5, 0x2, 0x2, 0x4, 0x800}, @map={0x18, 0x2, 0x1, 0x0, r4}, @alu={0x7, 0x1, 0x3, 0xa, 0x5, 0x30, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8001}, @map={0x18, 0x3, 0x1, 0x0, r5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x99, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)

15:32:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xb}]}, @IFLA_MTU={0x8, 0x4, 0x14000}]}, 0x3c}}, 0x40042)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x9e, 0x6, @link_local}, 0x14)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@mcast1, @remote, @empty, 0x5, 0x0, 0xe984, 0x100, 0x9, 0x40080020, r3})

15:32:11 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r7=>0x0)
io_submit(r7, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r6, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x101000, 0x0)
r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r9=>0x0)
io_submit(r9, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r8, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$KVM_RUN(r0, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRESDEC=0x0, @ANYPTR, @ANYRES16=0x0], 0x3}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = dup2(r11, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:32:11 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:11 executing program 4 (fault-call:5 fault-nth:14):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:11 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300021b000000000000000000050005000600000000000a00000000000000000000997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89c1aa2997da12ba71996d8ee000000809ac1ec3d95c9a0af5fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d0000a43084dc1840039649673b733890eb3db522c9e73a871a86cc8c8dda87000000000200010000000000000008fdffffe8ff05000500000000000a000000def7bd3e10e2e6e00012000200000000000000003692daa992ee1466"], 0xd8}}, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040))
r2 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r2, &(0x7f0000000180), 0x400024c, 0x0)

15:32:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$packet(0x11, 0x0, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x1})
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x3)
socket$inet(0x11, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000180)={{0x4eeae72f2ef3d882, 0x0, @identifier="029272e4e893cce830d37b008768f2ae"}})
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0)
write(r4, &(0x7f0000000600)="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", 0xe00)
r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r7=>0x0)
io_submit(r7, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r6, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x1ff}, 0x1c)
sendfile(r4, r5, 0x0, 0x12000)

15:32:11 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00')
r0 = syz_genetlink_get_family_id$tipc2(0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRES16=r0])
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000540)=""/240)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0)
chroot(&(0x7f0000000380)='.//ile0\x00')
openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x42400, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$TIOCNXCL(r3, 0x540d)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="000026bd0cc1580076c812cced70"], 0x14}}, 0x20000800)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socket(0x10, 0x0, 0x4)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="1000060000000000200000000000"], 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000400)={0x29, 0x4, 0x0, {0x0, 0x4, 0x1, 0x0, [0x0]}}, 0x29)
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000001c0), 0x4)
renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00')
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000300))
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x4)
r7 = getpid()
sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
waitid(0x1, r7, &(0x7f00000006c0), 0x0, 0x0)

[ 1649.454679] FAULT_INJECTION: forcing a failure.
[ 1649.454679] name failslab, interval 1, probability 0, space 0, times 0
15:32:11 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1')

[ 1649.533553] CPU: 1 PID: 14706 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1649.541470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1649.551273] Call Trace:
[ 1649.553876]  dump_stack+0x142/0x197
[ 1649.557549]  should_fail.cold+0x10f/0x159
[ 1649.561715]  should_failslab+0xdb/0x130
[ 1649.565700]  kmem_cache_alloc_node+0x287/0x780
[ 1649.570293]  ? __lock_is_held+0xb6/0x140
[ 1649.574362]  ? check_preemption_disabled+0x3c/0x250
[ 1649.579392]  __alloc_skb+0x9c/0x500
[ 1649.583290]  ? skb_trim+0x180/0x180
[ 1649.586935]  alloc_skb_with_frags+0x86/0x4b0
[ 1649.591352]  ? __dev_queue_xmit+0xd33/0x25e0
[ 1649.595767]  ? trace_hardirqs_on+0xd/0x10
[ 1649.599935]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1649.604539]  sock_alloc_send_pskb+0x5db/0x740
[ 1649.609049]  ? ip_finish_output2+0x77b/0x14a0
[ 1649.613557]  ? find_held_lock+0x35/0x130
[ 1649.613619] device lo entered promiscuous mode
[ 1649.617622]  ? sock_wmalloc+0xf0/0xf0
[ 1649.617638]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1649.617653]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1649.617667]  sock_alloc_send_skb+0x32/0x40
[ 1649.617680]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1649.617696]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1649.617716]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1649.617723]  ? ipv4_mtu+0x25e/0x3a0
[ 1649.617735]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1649.617745]  ip_make_skb+0x17a/0x1d0
[ 1649.617762]  ? ip_flush_pending_frames+0x30/0x30
[ 1649.617787]  ? lock_downgrade+0x740/0x740
[ 1649.617799]  ? ipv4_dst_check+0x10d/0x160
[ 1649.679557]  udp_sendmsg+0x16a6/0x1da0
[ 1649.683467]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1649.687807]  ? udp4_seq_show+0x520/0x520
[ 1649.691896]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1649.696669]  ? sock_has_perm+0x1ed/0x280
[ 1649.700743]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1649.705431]  ? dup_iter+0x260/0x260
[ 1649.709227]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1649.714008]  inet_sendmsg+0x122/0x500
[ 1649.717824]  ? inet_recvmsg+0x500/0x500
[ 1649.721810]  sock_sendmsg+0xce/0x110
[ 1649.725545]  ___sys_sendmsg+0x349/0x840
[ 1649.729536]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1649.732271] audit: type=1800 audit(1581175931.664:20133): pid=14708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=17278 res=0
[ 1649.734303]  ? trace_hardirqs_on+0x10/0x10
[ 1649.734317]  ? save_trace+0x290/0x290
[ 1649.734325]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1649.734337]  ? __might_fault+0x110/0x1d0
[ 1649.734459]  ? find_held_lock+0x35/0x130
[ 1649.734476]  ? __might_fault+0x110/0x1d0
[ 1649.782776]  __sys_sendmmsg+0x152/0x3a0
[ 1649.786767]  ? SyS_sendmsg+0x50/0x50
[ 1649.790496]  ? lock_downgrade+0x740/0x740
[ 1649.794660]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1649.799506]  ? check_preemption_disabled+0x3c/0x250
[ 1649.804536]  ? wait_for_completion+0x420/0x420
[ 1649.806121] audit: type=1804 audit(1581175931.664:20134): pid=14708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="file0" dev="sda1" ino=17278 res=1
[ 1649.809116]  ? __sb_end_write+0xc1/0x100
[ 1649.809131]  ? SyS_write+0x15e/0x230
[ 1649.809147]  SyS_sendmmsg+0x35/0x60
[ 1649.809155]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1649.809168]  do_syscall_64+0x1e8/0x640
[ 1649.809178]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1649.809197]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1649.861371] RIP: 0033:0x45b399
[ 1649.864588] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1649.872306] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
15:32:12 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

15:32:12 executing program 5:
syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="696f636861727365743d63703836332c6e6fb3a101e8612c696f638f61727365743d6b6f69382d722c736d61636b66736861743d2c00"])

[ 1649.879578] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1649.886852] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1649.894210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1649.901489] R13: 00000000000008cc R14: 00000000004ca262 R15: 000000000000000e
[ 1649.924000] overlayfs: unrecognized mount option "ÿÿ" or missing value
[ 1650.021718] jfs: Unrecognized mount option "no³¡
èa" or missing value
[ 1650.063834] jfs: Unrecognized mount option "no³¡
èa" or missing value
[ 1650.209243] overlayfs: unrecognized mount option "ÿÿ" or missing value
15:32:14 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:14 executing program 4 (fault-call:5 fault-nth:15):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:14 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000))
sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000580)=[{&(0x7f00000002c0)="e73b2ca797d29d33eeb7ed4e18f86a31351c877a8a343f6257baf601f84b81e89045a0538dc9efa04c19c13f6b1ff2cf02d408f27487de1d0c3d71cc76aac5b4235eac46d10a1377a36c7d174c72e3b715084ce2439253fd65131210253d3a3096baeaad428c0fcb2e362ef8a8db9350d6b272a6ba1c770fdb32f27cef0ca500000000000000000000000000576d1f78a044425f88b9866df40d2da2f9e0852ad9b1e71044cca95929e918f3e47e7f0470bd5b74afca49a8be9ca7551058bf8c224b01cf4cf48c3c21", 0xc9}], 0x1)
sendto$inet(r0, &(0x7f0000000200)="0d0000927f1f6588b9674cba7860005cf65ac61877d8ea737c66c8656a42bcde02000000abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae557ff282100b1a7531bf746bec66ba0000", 0xfffffd5a, 0x34044051, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x15)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x2, 'bond_slave_1\x00', {0xfffffffc}, 0x8})
r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00')
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f067964e4dd7789c51229d0a63cdbd8324000000c22ae40bab41689847213bb92975d73cbb43fcb2eb124d52442a9e2daa551d43c26f96af47dda10dbdff03104b7999e4c61c59fbff1fb602eb0359f21b41da67fd7e54cad822877ef808", @ANYRES16=r4], 0x2}, 0x1, 0x0, 0x0, 0x40004}, 0x40808)
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00002cbd7000fcdbdf25010000000c00990003000000ffffffff08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x8}}, 0x8001)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r6=>0x0)
io_submit(r6, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r5, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r8=>0x0)
io_submit(r8, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r7, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0x40045542, &(0x7f0000000080)=0xffff)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x6430)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
accept$ax25(r9, &(0x7f00000004c0)={{0x3, @rose}, [@null, @netrom, @netrom, @null, @netrom, @default, @null, @bcast]}, &(0x7f00000003c0)=0x48)
accept$packet(0xffffffffffffffff, &(0x7f0000001f80)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001fc0)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000020c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x64, r4, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000}}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000081)

15:32:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f00000000c0)={0x8001, 0x80000001, 0xb8b, 0x0, 0x7, 0x9ea, 0x6})
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000380))
semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000080)=""/53)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
r3 = semget(0x2, 0x1, 0x5)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)=[0x8, 0x8, 0x20, 0x1, 0x2, 0x8, 0x600, 0x4c5d, 0x200, 0x9214])
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ip6tnl0\x00', 0x4000})
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe880000000000000000000000000001ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3941c5ed2ffe3e2b09245a40000000000000000000000000000000000000000000000000000000000000000ea00000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/245], 0x138}}, 0x0)

15:32:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r6=>0x0)
io_submit(r6, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r5, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x1, 0x2000, 0x2000, &(0x7f0000007000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff})
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 1652.016991] FAULT_INJECTION: forcing a failure.
[ 1652.016991] name failslab, interval 1, probability 0, space 0, times 0
[ 1652.067291] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1652.090651] CPU: 1 PID: 14748 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1652.098569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1652.107932] Call Trace:
[ 1652.110608]  dump_stack+0x142/0x197
[ 1652.114303]  should_fail.cold+0x10f/0x159
[ 1652.118473]  should_failslab+0xdb/0x130
[ 1652.122466]  kmem_cache_alloc_node_trace+0x280/0x770
[ 1652.127581]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1652.133037]  __kmalloc_node_track_caller+0x3d/0x80
[ 1652.137974]  __kmalloc_reserve.isra.0+0x40/0xe0
[ 1652.142665]  __alloc_skb+0xcf/0x500
[ 1652.146280]  ? skb_trim+0x180/0x180
[ 1652.149933]  alloc_skb_with_frags+0x86/0x4b0
[ 1652.154350]  ? __dev_queue_xmit+0xd33/0x25e0
[ 1652.158751]  ? trace_hardirqs_on+0xd/0x10
[ 1652.162898]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1652.167489]  sock_alloc_send_pskb+0x5db/0x740
[ 1652.171999]  ? ip_finish_output2+0x77b/0x14a0
[ 1652.176498]  ? find_held_lock+0x35/0x130
[ 1652.180558]  ? sock_wmalloc+0xf0/0xf0
[ 1652.184424]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1652.189031]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1652.194051]  sock_alloc_send_skb+0x32/0x40
[ 1652.198278]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1652.203223]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1652.207545]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1652.213247]  ? ipv4_mtu+0x25e/0x3a0
[ 1652.216878]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1652.221196]  ip_make_skb+0x17a/0x1d0
[ 1652.224916]  ? ip_flush_pending_frames+0x30/0x30
[ 1652.229683]  ? lock_downgrade+0x740/0x740
[ 1652.233827]  ? ipv4_dst_check+0x10d/0x160
[ 1652.237979]  udp_sendmsg+0x16a6/0x1da0
[ 1652.241863]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1652.246188]  ? udp4_seq_show+0x520/0x520
[ 1652.250240]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1652.254990]  ? sock_has_perm+0x1ed/0x280
[ 1652.259054]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1652.263727]  ? dup_iter+0x260/0x260
[ 1652.267349]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1652.272100]  inet_sendmsg+0x122/0x500
[ 1652.275888]  ? inet_recvmsg+0x500/0x500
[ 1652.279866]  sock_sendmsg+0xce/0x110
[ 1652.283570]  ___sys_sendmsg+0x349/0x840
[ 1652.287560]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1652.292319]  ? trace_hardirqs_on+0x10/0x10
[ 1652.296543]  ? save_trace+0x290/0x290
[ 1652.300342]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1652.305455]  ? __might_fault+0x110/0x1d0
[ 1652.309522]  ? find_held_lock+0x35/0x130
[ 1652.313578]  ? __might_fault+0x110/0x1d0
[ 1652.317665]  __sys_sendmmsg+0x152/0x3a0
[ 1652.321793]  ? SyS_sendmsg+0x50/0x50
[ 1652.325516]  ? lock_downgrade+0x740/0x740
[ 1652.329677]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1652.334526]  ? check_preemption_disabled+0x3c/0x250
[ 1652.339542]  ? wait_for_completion+0x420/0x420
[ 1652.344138]  ? __sb_end_write+0xc1/0x100
[ 1652.348216]  ? SyS_write+0x15e/0x230
[ 1652.351928]  SyS_sendmmsg+0x35/0x60
[ 1652.355590]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1652.359736]  do_syscall_64+0x1e8/0x640
[ 1652.363611]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1652.368463]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1652.373648] RIP: 0033:0x45b399
[ 1652.376833] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1652.384533] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1652.391795] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1652.399072] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1652.406448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1652.413811] R13: 00000000000008cc R14: 00000000004ca262 R15: 000000000000000f
15:32:14 executing program 4 (fault-call:5 fault-nth:16):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f00000000c0)={0x8001, 0x80000001, 0xb8b, 0x0, 0x7, 0x9ea, 0x6})
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000380))
semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000080)=""/53)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
r3 = semget(0x2, 0x1, 0x5)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)=[0x8, 0x8, 0x20, 0x1, 0x2, 0x8, 0x600, 0x4c5d, 0x200, 0x9214])
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ip6tnl0\x00', 0x4000})
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe880000000000000000000000000001ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3941c5ed2ffe3e2b09245a40000000000000000000000000000000000000000000000000000000000000000ea00000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/245], 0x138}}, 0x0)

[ 1652.532849] FAULT_INJECTION: forcing a failure.
[ 1652.532849] name failslab, interval 1, probability 0, space 0, times 0
[ 1652.557048] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1652.566713] CPU: 0 PID: 14769 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1652.574620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1652.584084] Call Trace:
[ 1652.586692]  dump_stack+0x142/0x197
[ 1652.590441]  should_fail.cold+0x10f/0x159
[ 1652.594610]  should_failslab+0xdb/0x130
[ 1652.598595]  kmem_cache_alloc+0x47/0x780
[ 1652.602661]  skb_clone+0x129/0x320
[ 1652.606217]  ip_mc_output+0x628/0xd40
[ 1652.610018]  ? ip_queue_xmit+0x1b10/0x1b10
[ 1652.614260]  ? ip_append_data.part.0+0x160/0x160
[ 1652.619031]  ? ip_flush_pending_frames+0x30/0x30
[ 1652.623837]  ip_local_out+0x97/0x170
[ 1652.627565]  ip_send_skb+0x3e/0xc0
[ 1652.631108]  udp_send_skb+0x616/0xb90
[ 1652.634896]  ? ipv4_dst_check+0x10d/0x160
[ 1652.639036]  udp_sendmsg+0x16df/0x1da0
[ 1652.642934]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1652.647260]  ? udp4_seq_show+0x520/0x520
[ 1652.651312]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1652.656083]  ? sock_has_perm+0x1ed/0x280
[ 1652.660137]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1652.664807]  ? dup_iter+0x260/0x260
[ 1652.668556]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1652.673311]  inet_sendmsg+0x122/0x500
[ 1652.677122]  ? inet_recvmsg+0x500/0x500
[ 1652.681096]  sock_sendmsg+0xce/0x110
[ 1652.684803]  ___sys_sendmsg+0x349/0x840
[ 1652.688784]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1652.693546]  ? trace_hardirqs_on+0x10/0x10
[ 1652.697785]  ? save_trace+0x290/0x290
[ 1652.701595]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1652.706532]  ? __might_fault+0x110/0x1d0
[ 1652.710605]  ? find_held_lock+0x35/0x130
[ 1652.714768]  ? __might_fault+0x110/0x1d0
[ 1652.718849]  __sys_sendmmsg+0x152/0x3a0
[ 1652.722815]  ? SyS_sendmsg+0x50/0x50
[ 1652.726534]  ? lock_downgrade+0x740/0x740
[ 1652.730695]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1652.735524]  ? check_preemption_disabled+0x3c/0x250
[ 1652.740533]  ? wait_for_completion+0x420/0x420
[ 1652.745113]  ? __sb_end_write+0xc1/0x100
[ 1652.749178]  ? SyS_write+0x15e/0x230
[ 1652.753025]  SyS_sendmmsg+0x35/0x60
[ 1652.756656]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1652.760812]  do_syscall_64+0x1e8/0x640
[ 1652.764689]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1652.769660]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1652.774968] RIP: 0033:0x45b399
[ 1652.778160] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1652.785880] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1652.793158] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1652.800600] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1652.807870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1652.815139] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000010
15:32:15 executing program 5:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
r2 = open(0x0, 0x200, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ftruncate(r0, 0x48280)
r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])
r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
dup(0xffffffffffffffff)
fdatasync(r4)
socket(0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, 0x0)
dup3(0xffffffffffffffff, r5, 0x0)
ioctl$KVM_GET_CPUID2(r6, 0x4138ae84, 0x0)
r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r8=>0x0)
io_submit(r8, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r7, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x220000, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340), &(0x7f0000000380)=0x8)

15:32:15 executing program 0:
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syncfs(r0)
creat(&(0x7f0000000000)='./bus\x00', 0x160)

[ 1652.823095] audit: type=1400 audit(1581175934.704:20135): avc:  denied  { write } for  pid=14744 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1
15:32:15 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

15:32:15 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1a001000000}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x10001, 'syz0\x00', 0x7})

15:32:15 executing program 4 (fault-call:5 fault-nth:17):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 1653.055827] audit: type=1804 audit(1581175935.184:20136): pid=14777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="bus" dev="sda1" ino=17642 res=1
[ 1653.144852] audit: type=1804 audit(1581175935.274:20137): pid=14777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="bus" dev="sda1" ino=17642 res=1
[ 1653.172887] FAULT_INJECTION: forcing a failure.
[ 1653.172887] name failslab, interval 1, probability 0, space 0, times 0
[ 1653.205124] CPU: 0 PID: 14788 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1653.213275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1653.222638] Call Trace:
[ 1653.225233]  dump_stack+0x142/0x197
[ 1653.228888]  should_fail.cold+0x10f/0x159
[ 1653.233035]  should_failslab+0xdb/0x130
[ 1653.237120]  kmem_cache_alloc_node+0x287/0x780
[ 1653.241703]  ? __lock_is_held+0xb6/0x140
[ 1653.245752]  ? check_preemption_disabled+0x3c/0x250
[ 1653.250784]  __alloc_skb+0x9c/0x500
[ 1653.254500]  ? skb_trim+0x180/0x180
[ 1653.258141]  alloc_skb_with_frags+0x86/0x4b0
[ 1653.262548]  ? __dev_queue_xmit+0xd33/0x25e0
[ 1653.266958]  ? trace_hardirqs_on+0xd/0x10
[ 1653.271095]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1653.275695]  sock_alloc_send_pskb+0x5db/0x740
[ 1653.280310]  ? ip_finish_output2+0x77b/0x14a0
[ 1653.284796]  ? find_held_lock+0x35/0x130
[ 1653.288847]  ? sock_wmalloc+0xf0/0xf0
[ 1653.292695]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1653.297291]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1653.302314]  sock_alloc_send_skb+0x32/0x40
[ 1653.306565]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1653.311490]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1653.315808]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1653.321614]  ? ipv4_mtu+0x25e/0x3a0
[ 1653.325274]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1653.329598]  ip_make_skb+0x17a/0x1d0
[ 1653.333306]  ? ip_flush_pending_frames+0x30/0x30
[ 1653.338080]  ? lock_downgrade+0x740/0x740
[ 1653.342249]  ? ipv4_dst_check+0x10d/0x160
[ 1653.346514]  udp_sendmsg+0x16a6/0x1da0
[ 1653.350403]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1653.354741]  ? udp4_seq_show+0x520/0x520
[ 1653.358789]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1653.363552]  ? sock_has_perm+0x1ed/0x280
[ 1653.367620]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1653.372290]  ? dup_iter+0x260/0x260
[ 1653.376195]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1653.380958]  inet_sendmsg+0x122/0x500
[ 1653.384762]  ? inet_recvmsg+0x500/0x500
[ 1653.388743]  sock_sendmsg+0xce/0x110
[ 1653.392450]  ___sys_sendmsg+0x349/0x840
[ 1653.396432]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1653.401195]  ? trace_hardirqs_on+0x10/0x10
[ 1653.405426]  ? save_trace+0x290/0x290
[ 1653.409233]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1653.414193]  ? __might_fault+0x110/0x1d0
[ 1653.418273]  ? find_held_lock+0x35/0x130
[ 1653.422325]  ? __might_fault+0x110/0x1d0
[ 1653.426543]  __sys_sendmmsg+0x152/0x3a0
[ 1653.430522]  ? SyS_sendmsg+0x50/0x50
[ 1653.434345]  ? lock_downgrade+0x740/0x740
[ 1653.438553]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1653.443398]  ? check_preemption_disabled+0x3c/0x250
[ 1653.448417]  ? wait_for_completion+0x420/0x420
[ 1653.452998]  ? __sb_end_write+0xc1/0x100
[ 1653.457066]  ? SyS_write+0x15e/0x230
[ 1653.460784]  SyS_sendmmsg+0x35/0x60
[ 1653.464397]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1653.468546]  do_syscall_64+0x1e8/0x640
[ 1653.472422]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1653.477270]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1653.482457] RIP: 0033:0x45b399
[ 1653.485634] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1653.493339] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1653.500602] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1653.507869] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1653.515261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1653.522528] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000011
[ 1653.608420] audit: type=1804 audit(1581175935.734:20138): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="bus" dev="sda1" ino=17642 res=1
[ 1653.640507] audit: type=1804 audit(1581175935.754:20139): pid=14797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="bus" dev="sda1" ino=17642 res=1
15:32:17 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:17 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1018c0, 0x0)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="b24b6e76479a02f90c15d634954327d821162750961e59673a8da22385a8ab11ec6291006ebd802c919c26135080b7439be7e5a6640b98f8e9f3322ee1469f716cc189d2efcb3022cd00dfe17f141b655e2cb2fee8fe80021430d376be309ead721680966667547cfe5921173008ab5e2366908ebe246d324f6b05aab642c1213f167e6e27000b94fb557f9a51c7187eef0b732c1d61f65786302a99672c09623ce58aecde2aa8270a246cf7f0dfd3e1fba98b48c0b4339a2fa7"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x10)
fcntl$setstatus(r1, 0x4, 0x46802)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ftruncate(r1, 0x48280)
r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0xa10000, 0x3, 0x800, <r4=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9909ca, 0x8001, [], @value64=0x3}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000500)={r5, 0x1, 0x6, @random="4011e5e24506"}, 0x10)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}])
r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$P9_RREMOVE(r6, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f)
r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
dup(0xffffffffffffffff)
fdatasync(r6)
socket(0x0, 0x0, 0x0)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x220000, 0x0)
pipe(0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={<r9=>0x0, 0x2}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000003c0)={r9, 0x80, 0x4}, &(0x7f0000000400)=0x8)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000200)={0x0, r6, 0x9})
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5)

15:32:17 executing program 1:
epoll_create(0x0)
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0)
sendmsg$key(r1, &(0x7f000033efc8)={0x0, 0xffffff7f, &(0x7f0000aa8000)={0x0}}, 0x0)
socket$key(0xf, 0x3, 0x2)

15:32:17 executing program 4 (fault-call:5 fault-nth:18):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:17 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000000)=""/237, &(0x7f0000000100)=0xed)
r3 = fcntl$dupfd(r1, 0x0, r0)
bind$rxrpc(r3, 0x0, 0x0)

[ 1655.023413] FAULT_INJECTION: forcing a failure.
[ 1655.023413] name failslab, interval 1, probability 0, space 0, times 0
[ 1655.068625] CPU: 1 PID: 14804 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1655.076666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1655.086028] Call Trace:
[ 1655.088618]  dump_stack+0x142/0x197
[ 1655.092257]  should_fail.cold+0x10f/0x159
[ 1655.096418]  should_failslab+0xdb/0x130
[ 1655.100394]  kmem_cache_alloc_node_trace+0x280/0x770
[ 1655.105490]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1655.110942]  __kmalloc_node_track_caller+0x3d/0x80
[ 1655.115883]  __kmalloc_reserve.isra.0+0x40/0xe0
[ 1655.120547]  __alloc_skb+0xcf/0x500
[ 1655.124164]  ? skb_trim+0x180/0x180
[ 1655.127797]  alloc_skb_with_frags+0x86/0x4b0
[ 1655.132192]  ? __dev_queue_xmit+0xd33/0x25e0
[ 1655.136759]  ? trace_hardirqs_on+0xd/0x10
[ 1655.140893]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1655.145472]  sock_alloc_send_pskb+0x5db/0x740
[ 1655.149954]  ? ip_finish_output2+0x77b/0x14a0
[ 1655.154433]  ? find_held_lock+0x35/0x130
[ 1655.158490]  ? sock_wmalloc+0xf0/0xf0
[ 1655.162291]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1655.166860]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1655.171882]  sock_alloc_send_skb+0x32/0x40
[ 1655.176114]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1655.181055]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1655.185395]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1655.191095]  ? ipv4_mtu+0x25e/0x3a0
[ 1655.194709]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1655.199014]  ip_make_skb+0x17a/0x1d0
[ 1655.202727]  ? ip_flush_pending_frames+0x30/0x30
[ 1655.207501]  ? lock_downgrade+0x740/0x740
[ 1655.211641]  ? ipv4_dst_check+0x10d/0x160
[ 1655.215780]  udp_sendmsg+0x16a6/0x1da0
[ 1655.219660]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1655.223967]  ? udp4_seq_show+0x520/0x520
[ 1655.228011]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1655.232756]  ? sock_has_perm+0x1ed/0x280
[ 1655.236814]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1655.241468]  ? dup_iter+0x260/0x260
[ 1655.245085]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1655.249828]  inet_sendmsg+0x122/0x500
[ 1655.253612]  ? inet_recvmsg+0x500/0x500
[ 1655.257580]  sock_sendmsg+0xce/0x110
[ 1655.261276]  ___sys_sendmsg+0x349/0x840
[ 1655.265236]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1655.269978]  ? trace_hardirqs_on+0x10/0x10
[ 1655.274199]  ? save_trace+0x290/0x290
[ 1655.277981]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1655.282896]  ? __might_fault+0x110/0x1d0
[ 1655.286940]  ? find_held_lock+0x35/0x130
[ 1655.290986]  ? __might_fault+0x110/0x1d0
[ 1655.295045]  __sys_sendmmsg+0x152/0x3a0
[ 1655.299004]  ? SyS_sendmsg+0x50/0x50
[ 1655.302703]  ? lock_downgrade+0x740/0x740
[ 1655.306842]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1655.311875]  ? check_preemption_disabled+0x3c/0x250
[ 1655.316878]  ? wait_for_completion+0x420/0x420
[ 1655.321464]  ? __sb_end_write+0xc1/0x100
[ 1655.325511]  ? SyS_write+0x15e/0x230
[ 1655.329212]  SyS_sendmmsg+0x35/0x60
[ 1655.332821]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1655.336953]  do_syscall_64+0x1e8/0x640
[ 1655.340822]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1655.345653]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1655.350826] RIP: 0033:0x45b399
[ 1655.353998] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1655.361687] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
15:32:17 executing program 5:
r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x44, 0xf, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR, @ANYRES32=r0], @ANYBLOB="0000000000000000000000000900010068000000180002001400010000000000", @ANYBLOB="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", @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882)
write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000d501040000faffffff000000dcec6c68000034be9284aaa5b5db0700000068000a0500b71feb1a"], 0x2b)
readv(r5, &(0x7f0000000480)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1)
r6 = dup3(r5, r3, 0x80000)
write$FUSE_GETXATTR(r6, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x2}}, 0x18)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r7, 0x8008ae9d, &(0x7f0000000a80)=""/152)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x25, "e88347c3ef8417005138151ad37d9a2be5c44e5ee3970f92a975e35ff7e23db55139586737"}, &(0x7f00000000c0)=0x49)
mlockall(0x5)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xec040000, 0x10000000002)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x9, 0x1, "559cb655cd7fd9a65a08a36962b150d0ce1ef7"})

15:32:17 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000440), &(0x7f0000000480)=0x4)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1655.368941] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1655.376211] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1655.383473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1655.390913] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000012
15:32:17 executing program 4 (fault-call:5 fault-nth:19):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 1655.476036] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1655.484296] overlayfs: failed to verify upper root origin
[ 1655.540764] overlayfs: workdir and upperdir must reside under the same mount
15:32:17 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000440), &(0x7f0000000480)=0x4)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1655.634868] FAULT_INJECTION: forcing a failure.
[ 1655.634868] name failslab, interval 1, probability 0, space 0, times 0
[ 1655.698551] CPU: 1 PID: 14829 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1655.706475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1655.716022] Call Trace:
[ 1655.718626]  dump_stack+0x142/0x197
[ 1655.722420]  should_fail.cold+0x10f/0x159
[ 1655.726590]  should_failslab+0xdb/0x130
[ 1655.730578]  kmem_cache_alloc+0x47/0x780
[ 1655.734777]  skb_clone+0x129/0x320
[ 1655.738333]  ip_mc_output+0x628/0xd40
[ 1655.742181]  ? ip_queue_xmit+0x1b10/0x1b10
[ 1655.746431]  ? ip_append_data.part.0+0x160/0x160
[ 1655.751200]  ? ip_flush_pending_frames+0x30/0x30
[ 1655.756001]  ip_local_out+0x97/0x170
[ 1655.759726]  ip_send_skb+0x3e/0xc0
[ 1655.763277]  udp_send_skb+0x616/0xb90
[ 1655.767092]  ? ipv4_dst_check+0x10d/0x160
[ 1655.771361]  udp_sendmsg+0x16df/0x1da0
[ 1655.774053] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1655.775256]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1655.775276]  ? udp4_seq_show+0x520/0x520
[ 1655.775286]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1655.775304]  ? sock_has_perm+0x1ed/0x280
[ 1655.790975] overlayfs: failed to verify upper root origin
[ 1655.795656]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1655.795671]  ? dup_iter+0x260/0x260
[ 1655.795691]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1655.795707]  inet_sendmsg+0x122/0x500
[ 1655.795718]  ? inet_recvmsg+0x500/0x500
[ 1655.826186]  sock_sendmsg+0xce/0x110
[ 1655.829931]  ___sys_sendmsg+0x349/0x840
[ 1655.833918]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1655.838677]  ? trace_hardirqs_on+0x10/0x10
[ 1655.842918]  ? save_trace+0x290/0x290
[ 1655.846710]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1655.851634]  ? __might_fault+0x110/0x1d0
[ 1655.855684]  ? find_held_lock+0x35/0x130
[ 1655.859800]  ? __might_fault+0x110/0x1d0
[ 1655.863866]  __sys_sendmmsg+0x152/0x3a0
[ 1655.867841]  ? SyS_sendmsg+0x50/0x50
[ 1655.871558]  ? lock_downgrade+0x740/0x740
[ 1655.875711]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1655.880584]  ? check_preemption_disabled+0x3c/0x250
[ 1655.885674]  ? wait_for_completion+0x420/0x420
[ 1655.890250]  ? __sb_end_write+0xc1/0x100
[ 1655.894322]  ? SyS_write+0x15e/0x230
[ 1655.898046]  SyS_sendmmsg+0x35/0x60
[ 1655.901668]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1655.905895]  do_syscall_64+0x1e8/0x640
[ 1655.909783]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1655.914708]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1655.919975] RIP: 0033:0x45b399
[ 1655.923177] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1655.930878] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1655.938198] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
15:32:18 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

15:32:18 executing program 0:
r0 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0d7983c7a83c29d58c9a9b640099061245c09cc7174378d14ded590b1358f7eac7f3117e2091bdd689690f798c73a6c37792387ff8d30edbcc6c823e0c4bb45df8d6b3e3c00b72fc9491f1546f59fbb78551680bcfdb9eefa328df5e64ed839776650db7800c0bfe381204531c0603b4d2176d28a7650dbf5f3bd037f0be17b7e561336c66d6dd9876f6f6f442ff6a3f8e90420c99bb33c30f94ab2ebe63841bce669129df21909269d6b83485008c1dc9"], 0x1)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0))

15:32:18 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000440), &(0x7f0000000480)=0x4)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1655.945474] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1655.952872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1655.960175] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000013
[ 1656.051086] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1656.058433] overlayfs: failed to verify upper root origin
15:32:20 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000440), &(0x7f0000000480)=0x4)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:20 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:20 executing program 4 (fault-call:5 fault-nth:20):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:20 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x30000739, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_script(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="5cacaae4d9dc692cfac118a88cbe7bb2851fb6d6c0557e771cb5e6507a0806f7e668988b5436d282b5a7b10d0f4acd81208d7a83ee0922bf26a3e0c927602e80bad2c03d2d6d941d5aae7e88cf80eaf3786d484287b031ff0f000000000000602fd7c75303ae426431dfe831e235659ffe708746d9d53e3ef69cb9077d0f1d6acdb056ef007e1b491e950a4edc2cbc97675aca57d98593ba9b11892f9b61c21c918e355e11a226015782ffab8c78e0432af864e843df8e3caf03a4d000000000ea991480aba1cf0b18"], 0xc9)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4)
readv(r0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/247, 0xf7}], 0x1)
sendto$inet(r0, &(0x7f0000000300)='\f', 0xc3f2, 0x11, 0x0, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x1, 0x2, 0x45, 0x80, 0x5, 0x8})

15:32:20 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

15:32:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = dup3(r1, 0xffffffffffffffff, 0x80000)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x3, &(0x7f0000000440)="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")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:32:20 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
connect$netrom(r1, &(0x7f0000000000)={{0x3, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
keyctl$update(0x2, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000008001b0000000000084029000000000014001400626f6e645f736c6176655f300000000008001f00"/52], 0x4c}}, 0x0)

[ 1658.099147] FAULT_INJECTION: forcing a failure.
[ 1658.099147] name failslab, interval 1, probability 0, space 0, times 0
[ 1658.142079] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1658.144043] CPU: 0 PID: 14855 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1658.157444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1658.166812] Call Trace:
[ 1658.169415]  dump_stack+0x142/0x197
[ 1658.173062]  should_fail.cold+0x10f/0x159
[ 1658.177224]  should_failslab+0xdb/0x130
[ 1658.178064] overlayfs: failed to verify upper root origin
[ 1658.181236]  kmem_cache_alloc_node+0x287/0x780
[ 1658.181250]  ? __lock_is_held+0xb6/0x140
[ 1658.181261]  ? check_preemption_disabled+0x3c/0x250
[ 1658.181278]  __alloc_skb+0x9c/0x500
[ 1658.181287]  ? skb_trim+0x180/0x180
[ 1658.181303]  alloc_skb_with_frags+0x86/0x4b0
[ 1658.192727] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1658.195703]  ? __dev_queue_xmit+0xd33/0x25e0
[ 1658.195719]  ? trace_hardirqs_on+0xd/0x10
[ 1658.195732]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1658.195751]  sock_alloc_send_pskb+0x5db/0x740
[ 1658.195770]  ? ip_finish_output2+0x77b/0x14a0
[ 1658.243088]  ? find_held_lock+0x35/0x130
[ 1658.247166]  ? sock_wmalloc+0xf0/0xf0
[ 1658.250986]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1658.255571]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1658.260587]  sock_alloc_send_skb+0x32/0x40
[ 1658.264830]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1658.269775]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1658.274114]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1658.279820]  ? ipv4_mtu+0x25e/0x3a0
[ 1658.283459]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1658.287779]  ip_make_skb+0x17a/0x1d0
[ 1658.291502]  ? ip_flush_pending_frames+0x30/0x30
[ 1658.296383]  ? lock_downgrade+0x740/0x740
[ 1658.300546]  ? ipv4_dst_check+0x10d/0x160
[ 1658.304700]  udp_sendmsg+0x16a6/0x1da0
[ 1658.308593]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1658.312920]  ? udp4_seq_show+0x520/0x520
[ 1658.316996]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1658.321751]  ? sock_has_perm+0x1ed/0x280
[ 1658.325803]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1658.330470]  ? dup_iter+0x260/0x260
[ 1658.334112]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1658.338873]  inet_sendmsg+0x122/0x500
[ 1658.342669]  ? inet_recvmsg+0x500/0x500
[ 1658.346653]  sock_sendmsg+0xce/0x110
[ 1658.350370]  ___sys_sendmsg+0x349/0x840
[ 1658.354354]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1658.359137]  ? trace_hardirqs_on+0x10/0x10
[ 1658.363362]  ? save_trace+0x290/0x290
[ 1658.367163]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1658.372143]  ? __might_fault+0x110/0x1d0
[ 1658.376217]  ? find_held_lock+0x35/0x130
[ 1658.380275]  ? __might_fault+0x110/0x1d0
[ 1658.384459]  __sys_sendmmsg+0x152/0x3a0
[ 1658.388425]  ? SyS_sendmsg+0x50/0x50
[ 1658.392145]  ? lock_downgrade+0x740/0x740
[ 1658.396286]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1658.401127]  ? check_preemption_disabled+0x3c/0x250
[ 1658.406141]  ? wait_for_completion+0x420/0x420
[ 1658.410724]  ? __sb_end_write+0xc1/0x100
[ 1658.414778]  ? SyS_write+0x15e/0x230
[ 1658.418486]  SyS_sendmmsg+0x35/0x60
[ 1658.422107]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1658.426362]  do_syscall_64+0x1e8/0x640
[ 1658.430248]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1658.435102]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1658.440286] RIP: 0033:0x45b399
15:32:20 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000440), &(0x7f0000000480)=0x4)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:20 executing program 0:
syz_mount_image$gfs2(&(0x7f0000000100)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x9, 0x0, 0x0, 0x102020, 0x0)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x101, 0x5, 0x0, 0x20, 0x7})

15:32:20 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1658.443469] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1658.451176] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1658.458467] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1658.465737] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1658.472998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1658.480263] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000014
15:32:20 executing program 4 (fault-call:5 fault-nth:21):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 1658.536502] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
15:32:20 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79bd2b316da4f0de8163f6242fa7323f1749d5ecc0d18bf7ff640439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2d7e43944c3b658f}, 0x48)
r1 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=<r5=>0x0, &(0x7f0000000200)=0x4)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000240)={r5, 0x80000001}, &(0x7f0000000300)=0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r7, 0xb701, 0x0)
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x6, 0x9, 0x4, 0x40000, 0x8, {0x0, 0x2710}, {0x0, 0x18, 0x0, 0x3f, 0x4, 0x7, "a5c57637"}, 0x2, 0x1, @planes=&(0x7f0000000080)={0x2, 0x7, @userptr=0x7, 0x400}, 0x5, 0x0, r7})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0)

15:32:20 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000440), &(0x7f0000000480)=0x4)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1658.578171] overlayfs: failed to resolve './file1': -2
15:32:20 executing program 0:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2)
r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f00000001c0))
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3c)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r4, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240))
r5 = fcntl$getown(r0, 0x9)
perf_event_open(0x0, r5, 0x0, r1, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x501400, 0x0)
r7 = syz_open_procfs(0x0, 0x0)
r8 = open(0x0, 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r8, 0x0)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
fcntl$dupfd(r9, 0x268b269490a4ad02, r8)
syz_genetlink_get_family_id$nl80211(0x0)
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000f70fe07730f5202bad07025614ac56cc80f6a537ef4b1eb35766463f963cf53383b744ce0daf972bff583e69c1a3ec5a05e1c4883c1ea508553b01c7d4fa99712c80158db2ed40c51274ab1e9385b809de387286edd8069da16468fc1de3fc79ecab283cfb0f87c4e96adaaa489a2a961b785abe1802a2d01010bfe8a966fbd65aad847b9cb8bd7009c4ab7b499025afafec451891d100"/172])
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000ff0f000000000000f33f466b94bdaae3093f37788c81a37b30550be9dfbbff6edc655d0446e5ca40a423b2f0ff030cfdf68041b5763fe0481e53dd5ee0b689ff6cdd6dd4cbd1569ea02e279786641310c7174f6e9eb5e1ed7d585d8a3d266daa69a6d878eef473b96670db589dc452f6742d0e8d5162e6a22efeedaf1e6735785fff52046525850fccb741348e43978758e4d32cfebf8c2c3ec7fd760f9fafdd822facca28ba68609605a36619d1003d1c3ce5b9413949f05c5b31e838c8a6e79b425f7db9d475648a3851ab899674b004901c3a52de006636cbefbe1c5727881b4bc3fbba4eeffc0e3983c5df67e6f632206b1cc25851b46ebd15fd997b6dd9"], 0xc)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r11, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r12 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x1c5202, 0x0)
write$cgroup_int(r12, &(0x7f0000000080)=0x7, 0x12)

[ 1658.649101] FAULT_INJECTION: forcing a failure.
[ 1658.649101] name failslab, interval 1, probability 0, space 0, times 0
[ 1658.702036] CPU: 0 PID: 14886 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1658.709972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1658.719339] Call Trace:
[ 1658.721943]  dump_stack+0x142/0x197
[ 1658.723121] overlayfs: failed to resolve './file1': -2
[ 1658.725621]  should_fail.cold+0x10f/0x159
[ 1658.725644]  should_failslab+0xdb/0x130
[ 1658.725657]  kmem_cache_alloc_node+0x287/0x780
[ 1658.743792]  ? __lock_is_held+0xb6/0x140
[ 1658.747866]  ? check_preemption_disabled+0x3c/0x250
[ 1658.752902]  __alloc_skb+0x9c/0x500
[ 1658.756666]  ? skb_trim+0x180/0x180
[ 1658.760309]  alloc_skb_with_frags+0x86/0x4b0
[ 1658.764722]  ? __dev_queue_xmit+0xd33/0x25e0
[ 1658.769150]  ? trace_hardirqs_on+0xd/0x10
[ 1658.773311]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1658.777908]  sock_alloc_send_pskb+0x5db/0x740
[ 1658.782548]  ? ip_finish_output2+0x77b/0x14a0
[ 1658.787053]  ? find_held_lock+0x35/0x130
[ 1658.791129]  ? sock_wmalloc+0xf0/0xf0
[ 1658.794965]  ? __local_bh_enable_ip+0x99/0x1a0
15:32:20 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000440), &(0x7f0000000480)=0x4)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1658.799557]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1658.804578]  sock_alloc_send_skb+0x32/0x40
[ 1658.808810]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1658.813740]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1658.818168]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1658.823931]  ? ipv4_mtu+0x25e/0x3a0
[ 1658.827564]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1658.831886]  ip_make_skb+0x17a/0x1d0
[ 1658.835590]  ? ip_flush_pending_frames+0x30/0x30
[ 1658.840346]  ? lock_downgrade+0x740/0x740
[ 1658.844502]  ? ipv4_dst_check+0x10d/0x160
[ 1658.848642]  udp_sendmsg+0x16a6/0x1da0
[ 1658.852586]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1658.856903]  ? udp4_seq_show+0x520/0x520
[ 1658.860955]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1658.865760]  ? sock_has_perm+0x1ed/0x280
[ 1658.869810]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1658.874613]  ? dup_iter+0x260/0x260
[ 1658.878249]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1658.883153]  inet_sendmsg+0x122/0x500
[ 1658.886944]  ? inet_recvmsg+0x500/0x500
[ 1658.891053]  sock_sendmsg+0xce/0x110
[ 1658.894829]  ___sys_sendmsg+0x349/0x840
[ 1658.898853]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1658.903669]  ? trace_hardirqs_on+0x10/0x10
[ 1658.907894]  ? save_trace+0x290/0x290
[ 1658.911772]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1658.916820]  ? __might_fault+0x110/0x1d0
[ 1658.920928]  ? find_held_lock+0x35/0x130
[ 1658.924982]  ? __might_fault+0x110/0x1d0
[ 1658.929045]  __sys_sendmmsg+0x152/0x3a0
[ 1658.933023]  ? SyS_sendmsg+0x50/0x50
[ 1658.936733]  ? lock_downgrade+0x740/0x740
[ 1658.940938]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1658.945823]  ? check_preemption_disabled+0x3c/0x250
[ 1658.950848]  ? wait_for_completion+0x420/0x420
[ 1658.955424]  ? __sb_end_write+0xc1/0x100
[ 1658.959478]  ? SyS_write+0x15e/0x230
[ 1658.963194]  SyS_sendmmsg+0x35/0x60
[ 1658.966812]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1658.970967]  do_syscall_64+0x1e8/0x640
[ 1658.974857]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1658.979776]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1658.984955] RIP: 0033:0x45b399
[ 1658.988253] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1658.996215] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
15:32:21 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fcntl$getownex(r1, 0x10, &(0x7f0000000040))
syz_mount_image$iso9660(&(0x7f0000002380)='iso9660\x00', &(0x7f00000023c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f726f634a3e40ce1fee778d451c"])

[ 1659.003483] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1659.010755] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1659.018156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1659.025458] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000015
[ 1659.112597] overlayfs: failed to resolve './file1': -2
15:32:23 executing program 4 (fault-call:5 fault-nth:22):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:23 executing program 5:
syz_read_part_table(0xfffffffffffffffe, 0x2, &(0x7f00000029c0)=[{0x0, 0x0, 0x10000000}, {&(0x7f00000019c0)="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", 0x1ca}])
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSCTTY(r1, 0x540e, 0x19e7dc10)

15:32:23 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

15:32:23 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0xbf, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36)
socket$kcm(0x10, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)

15:32:23 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1661.120143] FAULT_INJECTION: forcing a failure.
[ 1661.120143] name failslab, interval 1, probability 0, space 0, times 0
[ 1661.127949] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1661.141796] CPU: 1 PID: 14916 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1661.148852] overlayfs: failed to verify upper root origin
[ 1661.149792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1661.149798] Call Trace:
[ 1661.149819]  dump_stack+0x142/0x197
[ 1661.149841]  should_fail.cold+0x10f/0x159
[ 1661.175132]  should_failslab+0xdb/0x130
[ 1661.179141]  kmem_cache_alloc+0x47/0x780
[ 1661.183224]  skb_clone+0x129/0x320
[ 1661.186777]  ip_mc_output+0x628/0xd40
[ 1661.190595]  ? ip_queue_xmit+0x1b10/0x1b10
[ 1661.194977]  ? ip_append_data.part.0+0x160/0x160
[ 1661.199745]  ? ip_flush_pending_frames+0x30/0x30
[ 1661.204605]  ip_local_out+0x97/0x170
[ 1661.208333]  ip_send_skb+0x3e/0xc0
[ 1661.211891]  udp_send_skb+0x616/0xb90
[ 1661.215699]  ? ipv4_dst_check+0x10d/0x160
[ 1661.219861]  udp_sendmsg+0x16df/0x1da0
[ 1661.223769]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1661.228109]  ? udp4_seq_show+0x520/0x520
[ 1661.232177]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1661.236946]  ? sock_has_perm+0x1ed/0x280
[ 1661.241024]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1661.245744]  ? dup_iter+0x260/0x260
[ 1661.249392]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1661.254166]  inet_sendmsg+0x122/0x500
[ 1661.256924] ptrace attach of "/root/syz-executor.3"[14926] was attempted by "/root/syz-executor.3"[14927]
[ 1661.257974]  ? inet_recvmsg+0x500/0x500
[ 1661.257987]  sock_sendmsg+0xce/0x110
[ 1661.257997]  ___sys_sendmsg+0x349/0x840
[ 1661.258010]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1661.284108]  ? trace_hardirqs_on+0x10/0x10
[ 1661.288613]  ? save_trace+0x290/0x290
[ 1661.292411]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1661.297470]  ? __might_fault+0x110/0x1d0
[ 1661.301533]  ? find_held_lock+0x35/0x130
[ 1661.305598]  ? __might_fault+0x110/0x1d0
[ 1661.309660]  __sys_sendmmsg+0x152/0x3a0
[ 1661.313648]  ? SyS_sendmsg+0x50/0x50
[ 1661.317376]  ? lock_downgrade+0x740/0x740
[ 1661.321686]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1661.326529]  ? check_preemption_disabled+0x3c/0x250
[ 1661.331554]  ? wait_for_completion+0x420/0x420
[ 1661.336159]  ? __sb_end_write+0xc1/0x100
[ 1661.340227]  ? SyS_write+0x15e/0x230
[ 1661.343958]  SyS_sendmmsg+0x35/0x60
[ 1661.347587]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1661.351737]  do_syscall_64+0x1e8/0x640
[ 1661.355742]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1661.360695]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1661.365988] RIP: 0033:0x45b399
[ 1661.369177] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1661.376886] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1661.384224] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1661.391587] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1661.398961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1661.406219] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000016
[ 1661.446528]  loop5: AHDI p1
15:32:23 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:23 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:23 executing program 4 (fault-call:5 fault-nth:23):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:23 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

15:32:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x210000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000100)={0x6})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000440))
write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0xd, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x8000)
pipe2(&(0x7f00000004c0)={<r5=>0xffffffffffffffff}, 0x800)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000540)={0x6, 0x0, &(0x7f0000000500)=[0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000580)={r6})
r7 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
getsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x8)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x9, 0x2, 0x40000003, 0x0, 0xff, 0x0, 0x4cb, 0x0, 0x0, 0x98b4, 0x5], 0x4000, 0x2040})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x8001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1661.594837] FAULT_INJECTION: forcing a failure.
[ 1661.594837] name failslab, interval 1, probability 0, space 0, times 0
[ 1661.604366] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1661.619866] overlayfs: failed to verify upper root origin
[ 1661.644245] CPU: 1 PID: 14944 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1661.652309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1661.661768] Call Trace:
[ 1661.664365]  dump_stack+0x142/0x197
[ 1661.667996]  should_fail.cold+0x10f/0x159
[ 1661.672149]  should_failslab+0xdb/0x130
[ 1661.676127]  kmem_cache_alloc_node+0x287/0x780
[ 1661.680710]  ? __lock_is_held+0xb6/0x140
[ 1661.684772]  ? check_preemption_disabled+0x3c/0x250
[ 1661.689797]  __alloc_skb+0x9c/0x500
[ 1661.693426]  ? skb_trim+0x180/0x180
[ 1661.697053]  alloc_skb_with_frags+0x86/0x4b0
[ 1661.701566]  ? __dev_queue_xmit+0xd33/0x25e0
[ 1661.705985]  ? trace_hardirqs_on+0xd/0x10
[ 1661.710132]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1661.714720]  sock_alloc_send_pskb+0x5db/0x740
[ 1661.719219]  ? ip_finish_output2+0x77b/0x14a0
[ 1661.723749]  ? find_held_lock+0x35/0x130
[ 1661.727812]  ? sock_wmalloc+0xf0/0xf0
[ 1661.731612]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1661.736199]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1661.741225]  sock_alloc_send_skb+0x32/0x40
[ 1661.745465]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1661.750397]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1661.754724]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1661.760428]  ? ipv4_mtu+0x25e/0x3a0
[ 1661.764062]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1661.768385]  ip_make_skb+0x17a/0x1d0
[ 1661.772094]  ? ip_flush_pending_frames+0x30/0x30
[ 1661.776864]  ? lock_downgrade+0x740/0x740
[ 1661.781007]  ? ipv4_dst_check+0x10d/0x160
[ 1661.785161]  udp_sendmsg+0x16a6/0x1da0
[ 1661.789083]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1661.793446]  ? udp4_seq_show+0x520/0x520
[ 1661.797509]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1661.802276]  ? sock_has_perm+0x1ed/0x280
[ 1661.806342]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1661.811037]  ? dup_iter+0x260/0x260
[ 1661.814693]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1661.819455]  inet_sendmsg+0x122/0x500
[ 1661.823275]  ? inet_recvmsg+0x500/0x500
[ 1661.827255]  sock_sendmsg+0xce/0x110
[ 1661.830972]  ___sys_sendmsg+0x349/0x840
[ 1661.834946]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1661.839711]  ? trace_hardirqs_on+0x10/0x10
[ 1661.843938]  ? save_trace+0x290/0x290
[ 1661.847739]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1661.852805]  ? __might_fault+0x110/0x1d0
[ 1661.856884]  ? find_held_lock+0x35/0x130
[ 1661.860942]  ? __might_fault+0x110/0x1d0
[ 1661.865725]  __sys_sendmmsg+0x152/0x3a0
[ 1661.869691]  ? SyS_sendmsg+0x50/0x50
[ 1661.873406]  ? lock_downgrade+0x740/0x740
[ 1661.877661]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1661.882498]  ? check_preemption_disabled+0x3c/0x250
[ 1661.887576]  ? wait_for_completion+0x420/0x420
[ 1661.892167]  ? __sb_end_write+0xc1/0x100
[ 1661.896234]  ? SyS_write+0x15e/0x230
[ 1661.899957]  SyS_sendmmsg+0x35/0x60
[ 1661.903575]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1661.907727]  do_syscall_64+0x1e8/0x640
[ 1661.911620]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1661.916479]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1661.921686] RIP: 0033:0x45b399
[ 1661.924865] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1661.932581] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1661.939857] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1661.947146] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1661.954417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1661.961679] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000017
15:32:24 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000300))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:24 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0xbf, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36)
socket$kcm(0x10, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)

15:32:24 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
socket$nl_generic(0x10, 0x3, 0x10)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1662.079962] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1662.103064] overlayfs: failed to verify upper root origin
15:32:24 executing program 4 (fault-call:5 fault-nth:24):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 1662.254383] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
15:32:24 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:24 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1662.308222] overlayfs: failed to verify upper root origin
[ 1662.363381] FAULT_INJECTION: forcing a failure.
[ 1662.363381] name failslab, interval 1, probability 0, space 0, times 0
[ 1662.384545] CPU: 0 PID: 14963 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0
[ 1662.392582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1662.401952] Call Trace:
[ 1662.404562]  dump_stack+0x142/0x197
[ 1662.408217]  should_fail.cold+0x10f/0x159
[ 1662.412407]  should_failslab+0xdb/0x130
[ 1662.416407]  kmem_cache_alloc_node+0x287/0x780
[ 1662.421106]  ? __lock_is_held+0xb6/0x140
[ 1662.423449] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1662.425170]  ? check_preemption_disabled+0x3c/0x250
[ 1662.425192]  __alloc_skb+0x9c/0x500
[ 1662.425202]  ? skb_trim+0x180/0x180
[ 1662.425219]  alloc_skb_with_frags+0x86/0x4b0
[ 1662.442771] overlayfs: failed to verify upper root origin
[ 1662.444775]  ? __dev_queue_xmit+0xd33/0x25e0
[ 1662.444791]  ? trace_hardirqs_on+0xd/0x10
15:32:24 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1662.444802]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1662.444820]  sock_alloc_send_pskb+0x5db/0x740
[ 1662.444836]  ? ip_finish_output2+0x77b/0x14a0
[ 1662.476983]  ? find_held_lock+0x35/0x130
[ 1662.481471]  ? sock_wmalloc+0xf0/0xf0
[ 1662.485310]  ? __local_bh_enable_ip+0x99/0x1a0
[ 1662.489910]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1662.495060]  sock_alloc_send_skb+0x32/0x40
[ 1662.499330]  __ip_append_data.isra.0+0x1227/0x20f0
[ 1662.504423]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1662.508822]  ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0
[ 1662.514558]  ? ipv4_mtu+0x25e/0x3a0
[ 1662.518230]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1662.522568]  ip_make_skb+0x17a/0x1d0
[ 1662.526435]  ? ip_flush_pending_frames+0x30/0x30
[ 1662.531360]  ? lock_downgrade+0x740/0x740
[ 1662.535521]  ? ipv4_dst_check+0x10d/0x160
[ 1662.539687]  udp_sendmsg+0x16a6/0x1da0
[ 1662.543599]  ? ip_reply_glue_bits+0xb0/0xb0
[ 1662.547935]  ? udp4_seq_show+0x520/0x520
[ 1662.552002]  ? rw_copy_check_uvector+0x1f1/0x290
[ 1662.557001]  ? sock_has_perm+0x1ed/0x280
[ 1662.561080]  ? selinux_tun_dev_create+0xc0/0xc0
[ 1662.565762]  ? dup_iter+0x260/0x260
[ 1662.569407]  ? copy_msghdr_from_user+0x292/0x3f0
[ 1662.574179]  inet_sendmsg+0x122/0x500
[ 1662.577993]  ? inet_recvmsg+0x500/0x500
[ 1662.582104]  sock_sendmsg+0xce/0x110
[ 1662.585827]  ___sys_sendmsg+0x349/0x840
[ 1662.589839]  ? copy_msghdr_from_user+0x3f0/0x3f0
[ 1662.594613]  ? trace_hardirqs_on+0x10/0x10
[ 1662.598870]  ? save_trace+0x290/0x290
[ 1662.602838]  ? perf_trace_lock_acquire+0x10d/0x4f0
[ 1662.607782]  ? __might_fault+0x110/0x1d0
[ 1662.611860]  ? find_held_lock+0x35/0x130
[ 1662.615932]  ? __might_fault+0x110/0x1d0
[ 1662.620024]  __sys_sendmmsg+0x152/0x3a0
[ 1662.624015]  ? SyS_sendmsg+0x50/0x50
[ 1662.627742]  ? lock_downgrade+0x740/0x740
[ 1662.631907]  ? __mutex_unlock_slowpath+0x71/0x800
[ 1662.636758]  ? check_preemption_disabled+0x3c/0x250
[ 1662.641789]  ? wait_for_completion+0x420/0x420
[ 1662.646386]  ? __sb_end_write+0xc1/0x100
[ 1662.650585]  ? SyS_write+0x15e/0x230
[ 1662.654425]  SyS_sendmmsg+0x35/0x60
[ 1662.658271]  ? __sys_sendmmsg+0x3a0/0x3a0
[ 1662.662433]  do_syscall_64+0x1e8/0x640
[ 1662.666332]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1662.671193]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1662.676387] RIP: 0033:0x45b399
[ 1662.679579] RSP: 002b:00007f9a059d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1662.687293] RAX: ffffffffffffffda RBX: 00007f9a059d16d4 RCX: 000000000045b399
[ 1662.694590] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000005
[ 1662.701862] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1662.709135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1662.716413] R13: 00000000000008cc R14: 00000000004ca262 R15: 0000000000000018
[ 1662.736261] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1662.758396] overlayfs: failed to verify upper root origin
15:32:24 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1662.788227] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1662.811369] overlayfs: failed to verify upper root origin
[ 1662.857929] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1662.885584] overlayfs: failed to verify upper root origin
15:32:26 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:26 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:26 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:26 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
accept$alg(0xffffffffffffffff, 0x0, 0x0)

15:32:26 executing program 3 (fault-call:10 fault-nth:0):
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:26 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1664.671512] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1664.687249] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1664.713982] overlayfs: failed to verify upper root origin
15:32:26 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:26 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1664.845338] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1664.865182] overlayfs: failed to resolve './file1': -2
[ 1664.870127] overlayfs: failed to verify upper root origin
15:32:27 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:27 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:27 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="d957cecdb57c6601de1e530082f91fccedea3cf50900a5f28f3225cdaffbb735423aae0603c9ce00000000dfffffff00000000"], 0x1)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:27 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1664.991476] overlayfs: failed to resolve './file1': -2
[ 1665.012105] overlayfs: failed to verify upper root origin
15:32:27 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1665.098677] overlayfs: failed to resolve './file1': -2
[ 1665.108035] overlayfs: failed to verify upper root origin
15:32:27 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0xc000, 0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2001})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/23, 0x17}], 0x1, 0x0, 0x0, 0x10000890}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x8c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x646}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc15}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ac6}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x6040000)
r5 = dup(r4)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setuid(r8)
r9 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r10 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7ad584", 0xd3, r9)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
keyctl$chown(0x4, r10, r11, r12)
fchown(r6, r8, r12)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

15:32:27 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000300))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:27 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1665.244585] overlayfs: failed to verify upper root origin
[ 1665.263378] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:32:29 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
getrusage(0xffffffffffffffff, &(0x7f00000001c0))
ptrace$setregs(0xd, r0, 0x1ff, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:29 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:29 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000300))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:29 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
r3 = socket(0x1f, 0x1, 0x81)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000240)={{{@in=@loopback, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:29 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = eventfd2(0x0, 0x0)
r2 = socket(0x20000000000000a, 0x2, 0x0)
connect$inet6(r2, &(0x7f000004bfe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10000}, 0x1c)
getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170)
r3 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100)='wireguard\x00')
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={<r7=>0x0, @rand_addr, @remote}, &(0x7f0000000240)=0xc)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0xcb8, r5, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x2e4, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "06be94bc12c8d00af5bbe3b7f57ea92c028d5c5b916f558ac4a89a76b49d848a"}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4fbda69e90f07ed8f2663519f6011e2ccbe7a4c32952a8ee1bb26e56701c5b20"}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0xa}}]}]}]}, {0x168, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8174410b95c673a134060db254b7f86e3f4a3a6635db4309e227d1146007b3ca"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ALLOWEDIPS={0x108, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr="c10a66a3805145fd8eb3f652c072f0b0"}, {0x5, 0x3, 0x30}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x5c}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0xc}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="0e4b8fa46d83130bd40a41c14b77fa35"}, {0x5, 0x3, 0x2b}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x37}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x20}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x73}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1a}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, [], 0x3e}, 0x7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffe}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1f}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x4d}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x16}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x7b}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b57d03a520acc2b4350b00265fc27acfd1fa8d3714e4bbea087c977420dba81"}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PEERS={0x97c, 0x8, 0x0, 0x1, [{0x978, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @d}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ALLOWEDIPS={0x688, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0xc}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x38}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x32}}, {0x5, 0x3, 0x26}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x63}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x16}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x48}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1f}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x1}, {0x5, 0x3, 0x9}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x18}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2e}}}, {0x5, 0x3, 0x5d}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0xb}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3c}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x14}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x4}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1c}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x10}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x7d}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x73}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0xc}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x73}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1f}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x11}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1e}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x51}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x7}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x9}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x5a}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x1b}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x11}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x5}, {0x5, 0x3, 0xb}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x33}}, {0x5, 0x3, 0x26}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="e8e4f119ddde6af8ef742886e6984b7e"}, {0x5, 0x3, 0x73}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0xb}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x17}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @local}}, {0x5, 0x3, 0x68}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x4b}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x40}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x15}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x42}}, {0x5, 0x3, 0x53}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x17}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x54}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1d}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x12}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x16}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="b6ff0e5e01f4e3780d0bb565d8db6ddc"}, {0x5, 0x3, 0x7c}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x10}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3c}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "832f5b8352365885ef18a2f997a9135331a4deed789f8955b41c22b6cedcd91f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @loopback, 0x75f}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @d}, @WGPEER_A_ALLOWEDIPS={0x22c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x20}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0xb}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x10001}, {0x5, 0x3, 0x1f}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x44}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x16}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x28}}, {0x5, 0x3, 0x2a}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x16}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x4}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x14}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x75}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x48}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1c}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1a}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x69}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x17}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="98b1787eb91c2e49a67844d5ea3cc3fc"}, {0x5, 0x3, 0x47}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x13}}]}]}]}]}]}, 0xcb8}}, 0x20000004)
syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r8)
r9 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000})
creat(&(0x7f0000000040)='./bus\x00', 0x0)

15:32:29 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:29 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:29 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1667.786248] ovl_verify_origin: 3 callbacks suppressed
[ 1667.786258] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
15:32:30 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
socket$nl_generic(0x10, 0x3, 0x10)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:30 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1667.844381] overlayfs: failed to verify upper root origin
15:32:30 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:30 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1667.995360] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1668.025200] overlayfs: failed to verify upper root origin
[ 1668.043954] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:32:32 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x174, r3, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wireguard1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x51}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfe}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb626}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x2000c010}, 0x80800)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r4 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

15:32:32 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:32 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:32 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:32 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:32 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
sendmsg$nl_crypto(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@getstat={0xe0, 0x15, 0x120, 0x70bd26, 0x25dfdbfc, {{'drbg_pr_hmac_sha384\x00'}, [], [], 0x2000}, ["", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4048000)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:32 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1670.712883] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1670.737136] overlayfs: failed to verify upper root origin
[ 1670.749434] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:32:32 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:32 executing program 5:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='/proc/sys/\xc21S\xf9\xc6U\xd2\xd0onneled\x00\x00\x01\x00\x00\x00', 0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298)
mmap(&(0x7f00006d0000/0x4000)=nil, 0x4000, 0x4, 0x110, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x4, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00')
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000080)={0x8, 0x6, 0xef, 0x9, 'syz0\x00', 0xff})
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')

15:32:32 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:33 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:33 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000000)={0x16e, 0x1a, &(0x7f0000000240)="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"})
r5 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r7, 0xb701, 0x0)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r8, 0xb701, 0x0)
r9 = epoll_create(0x8)
r10 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x800, 0x40000)
getsockopt$inet_tcp_int(r10, 0x6, 0x22, &(0x7f00000001c0), &(0x7f00000006c0)=0x4)
r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r11, 0xb701, 0x0)
poll(&(0x7f0000000640)=[{r1, 0x8316}, {r5}, {r0, 0x2000}, {r6, 0x4482}, {r7, 0x8201}, {r8, 0xa004}, {r9, 0x40}, {r11, 0x100}, {r2, 0x400}], 0x9, 0x8)
r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0xa8880, 0x0)
ioctl$VT_RESIZE(r12, 0x5609, &(0x7f0000000740)={0x997d, 0x3993, 0xfff9})

15:32:33 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
tkill(r0, 0x37)
r1 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x204202, 0x0)
fstatfs(r2, &(0x7f00000001c0)=""/156)
process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/235, 0xeb}, {&(0x7f0000000380)=""/226, 0xe2}], 0x2, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)

[ 1670.920572] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1670.946631] overlayfs: failed to verify upper root origin
15:32:33 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:33 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r4, 0x0, 0x0)
ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={<r5=>0x0, @in6={{0xa, 0x4e23, 0x1, @loopback, 0x400}}, 0x0, 0x9, 0x7, 0x20, 0x10, 0xffffffff, 0x6}, &(0x7f0000000500)=0x9c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x81, 0x40, 0x8004, 0x7fff, 0x6, 0xfffffffb, 0x0, 0x10, r5}, &(0x7f0000000300)=0x20)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000580)=""/253)
fcntl$setpipe(r3, 0x407, 0x7)
select(0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x10001, 0x0, 0x24, 0xfffffffffffffffd, 0xfffffffffffffffb}, &(0x7f00000003c0)={0x40100, 0x4000000000000006, 0x5, 0x200000, 0x1, 0xec, 0x4a5ac95b, 0xfffffffffffffffd}, &(0x7f0000000340)={0x77359400})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x2, 0x4, 0x3, 0x7fffffff, 0x0, 0x0, 0xfffffffc}, 0x0)
r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x41)
write$UHID_INPUT(r6, &(0x7f0000000980), 0x10a9)
r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x46000)
lseek(r7, 0x40, 0x3)
r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000000), 0x10000}])
r10 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x14)
sendfile(r7, r10, 0x0, 0x8400fffffffb)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000002c0))
sendfile(r6, r6, &(0x7f00000000c0), 0x8080fffffffe)

[ 1670.979057] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1671.013413] overlayfs: failed to verify upper root origin
15:32:33 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:33 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000001c0)="753cdf5db6d4fc955cb3cfb066dc609f39ff05c52763b7a2dc89dd18cafd99273439b9e7c2627fcac632942acc713b17060bff272dc8385c25b700c08b76f0a3032fa386a15593")
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)

[ 1671.138227] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1671.168935] overlayfs: failed to verify upper root origin
15:32:33 executing program 1:
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1671.224372] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1671.238136] overlayfs: failed to verify upper root origin
15:32:33 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:33 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x57}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @default, @rose={'rose', 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]})
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
pipe(&(0x7f00000000c0)={<r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={<r8=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r8}}, 0x10)
r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r10=>0x0)
io_submit(r10, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r9, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
sendmsg$IPSET_CMD_HEADER(r9, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0xc, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x801)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x2, {0xa, 0x4e20, 0x6, @remote, 0x1ff}, r8}}, 0x38)
r11 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r12, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
r13 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00')
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f067964e4dd7789c51229d000000000000000000c22ae40bab41689847213bb92943fcb2eb124d52442a9e2daa551d43c26f96af47dda10dbdff000002800000000059fbff1fb602eb0359f21b41da67bd7e54cad822877ef808", @ANYRES16=r14], 0x2}, 0x1, 0x0, 0x0, 0x40004}, 0x40808)
sendmsg$NL80211_CMD_GET_WIPHY(r13, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="00002cbd7000fcdbdf25010000000c00990003000000ffffffff08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x8}}, 0x8001)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r14, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="2c71beda1b2a"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x80}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc004}, 0x8004)

[ 1671.263145] audit: type=1804 audit(1581175953.394:20140): pid=15138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="bus" dev="sda1" ino=17674 res=1
15:32:33 executing program 1:
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1671.393846] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1671.401463] overlayfs: failed to verify upper root origin
[ 1671.947716] audit: type=1804 audit(1581175954.074:20141): pid=15170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="bus" dev="sda1" ino=17674 res=1
15:32:36 executing program 1:
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:36 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:36 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:36 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac)
dup(0xffffffffffffffff)
chroot(&(0x7f0000000040)='./file0\x00')
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
sendmsg$sock(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)="322a066012045cd2658155fdfdb830b4", 0x10}, {&(0x7f00000001c0)="9f28f794061982fac495510992cd2ef7cc63e33696339516c6cd27974c7728f5c034a24b3e9d8256d858f9de1c395e5fa7e2a70d7bf89d9ea975c9c00b187bc3c7d5eefa204395", 0x47}, {&(0x7f0000000380)="7a712c26f5ba40ac7b2ed321bb9043bb467dac80e1557a4e225a0a0e7ef7fb1382cc8971e81d3baec66d2e71c8aefa203efb6b3b1ab91e6d3752ab64c9389b8a540986d1c055c5641c150b11dc99211279526968679b0f2a5917b473aad07fe3d6331643ffc13260b0aa9f25b8fd62a360a23ec08c8285838ffc95a503fa396d1d724e110ef4233f79a3bc450e9b77e8e1c6fe295fd592a871e5883adde2b3c39c557b92b204b0abeec91d674d3ef204eb47b8", 0xb3}, {&(0x7f00000004c0)="7ee432259c7c2ec6ee90c35a36d466a7dec54113aa54c1be9060150c278badaaa6d919baa4d57a176facfb662ef1c1d979262a87b949af48b58f35835b9ee5540186f45043a748168f4ec60203f847666cd252b862767c68addf7614a2ae077ff0e3fe5bc8a26d56b50b6dd359c8d6b3f6e387c6e58e207c6c512486d29ff25fabf2af17381d00fdd1522ccfa8129e9055bc556234c9059a54810396fa3d66c0a038e0d39d9a94fb3dcb9455389187f3156c1c0f5b8d31e27adc7b4598a0", 0xbe}, {&(0x7f0000000580)="8a93d5fdf95043fefdb5786ea44deeca1bf79f5edade6ad3f9c90dbaba55b8889282b8fe9a2fb3ee911f7b135cb4598dabe9af8abd269c28c8da47dce491550f0199759c90e9c905a2fd50d76c06a84b1043ed5d10381d84a8b21ab1003fd9b644a04dcf6b4730e807fcefcce2cbe0c95baecc5ec9067465fe408b72f66063d1e08e2d2608adfbca1dac46b686a4456606e3c6b5c5fc4514477f7bced13fe78f646758d1e57040fdffe808e1d1a5d4e3d41a958f5db93424dda2b94a81be96e8982fc56467e4f9d5653041bf31fe994152ff2a0fd6bba9729a1237e824d5656544b676a5c9f30d4ecef230bceff8a76c1c67b3f4592ad8", 0xf7}, {&(0x7f00000002c0)="40d619e7024137c6271eda842cf5fca905b681beace0bef7c146c5a84a633cf921b4895d6b5b016ea303281279f4280350df7b0f1b1da4a78ecada3450c668e388e47bf8c483e6c2", 0x48}, {&(0x7f0000000140)="8ea57ffefcf18adca6c3b5bfab389a558e4c6c65443c1164ef8b2cda0cd992600b728aa11a002bbff462182fe75c93dd07be19cace", 0x35}, {&(0x7f0000000240)="b85e893b4037063bacba370154bb1e25fa110ec0aaac947447a0ffb66564096744232a982b7f43e48bebd5", 0x2b}, {&(0x7f0000000680)="4f34791eacd07711ad92a300a1130b10938e7c4caefc8ebe6a097528e02043d1ab0c5a38bd1220e80e13af9a880be98cdfa485ff2036a243d158ec4bf7399d16302f8b4137b7fc19ec2231a0edc4e395dec46fe98b6b782f5662b0e0e32456a109acccdde5c9fdacb53f56f07d1a827ba4a8e0699e8fd62fdf46c3799c900ca233521ab328b163a26c08c367faf8bffd8d463cb053fd7845285fd6711c5abe1c196b6e0d31a0f61e2b54170882fb439591fc0f9e4e49", 0xb6}, {&(0x7f0000000740)="ea998d4a22deb3e05f52b9a7237a6bb371cbdf6b54afd4bb81787cf49be8e6f7c291f64f3846e256cd85450972eacbf42d", 0x31}], 0xa, &(0x7f0000000840)=[@txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x2b4}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xcbf}}], 0x90}, 0x20042080)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)

15:32:36 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x400200, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000001c0)={0x0, @adiantum})
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000e40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000001180)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="6c0200003dc8b0930dead7774f37a6a2e24bc9a8ade4312328429247597176d2075d8bf939f6c698cf40149998c1391fc423945420e9119554", @ANYRES16=r5, @ANYBLOB="10002abd7000ffdbdf250f000000100007800c00030001010000000000007001018008000300207a00001400028008000100200000000800020000000000180001006574683a76657468305f746f5f6272696467650044000400200001000a004e2300000009fe8000000000000000000000000000bb03000000200002000a004e2200000005fe880000000000000000000000000001b3f400002c0004001400010002004e24ac1414bb00000000000000001400020002004e23e000000100000000000000004c00028008000300b0000000080001001f000000080002002000000008000200d10a000008000200fcffffff08000400000000000800040015ffffff08000400000000000800030001010000380004001400010002004e23000000090000000000000000200002000a004e24fffffffbff020000000000000000000000000001ffff00003c000280080004000600000008000200000000800800010019000000080002000000000008000300020000000800030040000000080002009d040000080008000100640000004c0007800c00040002000000000000000c000400c0ff3f00000000000800010000000003080002003f0000000c000400000000000000000008000200200000000c00030003000000000000007c00058054000280080001001600000008000100130000000800030000000000080003000800000008000400a70000000800010002000000080001000d00000008000400000000fe08000200000800010017000000080001007564700007000100696200000c000280080001001a0000000800010075647000000000"], 0x3}}, 0x20008000)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x210, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffd7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x68c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x36c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1b}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3cfa7bc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

15:32:36 executing program 1:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:36 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1673.923273] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1673.943479] overlayfs: failed to verify upper root origin
15:32:36 executing program 1:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:36 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x2, r2})

15:32:36 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:36 executing program 5:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0xc32f, &(0x7f0000001140))
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x5)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00')
read(r2, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f000095dffc))
read(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x1000, 0xff, 0x8000, 0x5, 0x66a7, 0x101, 0xffff0001, 0x8}, &(0x7f0000000080)=0x20)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
dup3(r2, r4, 0x80000)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x300, r0, &(0x7f0000000000), 0x0, 0x100000}])

15:32:36 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r4 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

15:32:36 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
lsetxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xfffffeff, 0x6}]}, 0xc, 0x7)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:39 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:39 executing program 1:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:39 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7ff, 0x47a}, {0x4, 0x8}], r0}, 0x18, 0x1)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:39 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$inet(0x2, 0x4, 0x4)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={<r3=>0x0, 0xfff9, 0x9, 0x6, 0x6, 0xf6e3}, &(0x7f0000000140)=0x14)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)={r3, 0x6, 0x23, "36b378805c0eafdc0ab7132357c47ea566205c0a460804941aec86ba2e24243fc572df"}, 0x2b)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r4, 0x200004)
sendfile(r0, r4, 0x0, 0x80001d00c0d0)

15:32:39 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x280201, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r4, 0x5016, 0x0)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r5 = dup(r0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x101000, 0x0)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xc88)
r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r8=>0x0)
io_submit(r8, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r7, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
r10 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
r12 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r13=>0x0)
io_submit(r13, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r12, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f00000001c0)={0x2, 0x0, 0x200d, 0x2, 0x100, {0x8, 0x9}})
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r11, 0x3f, 0x0, 0x3, 0xba16}, &(0x7f0000000140)=0x18)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001580)={r11, 0x48, &(0x7f0000001500)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x764}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x36f, @rand_addr="ca63e80e727771ec1aee67f82b7cb133", 0x9}]}, &(0x7f00000015c0)=0x10)
setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r11, 0x3ff, 0xffffffff, 0x101}, 0x10)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4203011, r6, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

15:32:39 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1676.981329] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1676.989129] overlayfs: failed to verify upper root origin
15:32:39 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x2000, 0x4, &(0x7f00000004c0))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1677.144758] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1677.155247] overlayfs: failed to verify upper root origin
15:32:39 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4200, r0, 0x100, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self\x00', 0x0, 0x0)

15:32:39 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1c, &(0x7f0000000640), &(0x7f0000000680)=0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="84000000140000044b00"/20, @ANYRES32=r4, @ANYBLOB="14000300626f6e645f736c6176655f30000000001400060005000000000400000000000002000000140003007665746830000000000000000000000008000400ac14141814000300626f6e643000000000000000000000001400030076657468315f746f5f62617461647600"], 0x84}}, 0x8880)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
read$FUSE(r5, 0x0, 0x0)
lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_virtio(&(0x7f0000000340)='syz\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x1004010, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=virtio,access=user,debug=0xfffffffffffffffe,afid=0x0000000000000002,cachetag=/dev/null\x00,fscache,privport,access=any,hash,euid<', @ANYRESDEC=r6, @ANYBLOB='\x00\x00'])
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r8=>0x0)
io_submit(r8, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r7, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
write$UHID_CREATE2(r7, &(0x7f0000000880)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x9a, 0x6, 0x40, 0x6, 0x8, 0xffffffff, "454d8abc9e71ef55560c3ee18e36d231e88babb19b6a834b69a696d2e7dd7cef106fed9bbc4012b54d3301240e6b03aa7d3352651a182015c8ecfe662478878fbace73e74fbdd864345dd00d94baba950da9d8243121dc1d21d1df08e41c57477d20de28acee9c17be77e38b506d467fec990713651d6cf4124d3edd9a2cfee51610e3cffe155c415d41ded29fd96bb48f7640b38d7725944d5e"}}, 0x1b2)
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(', @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x4]}, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x3}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x0)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000002c0)=@usbdevfs_connect={0xff0000})

15:32:39 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:39 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002380)={{{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000002480)=0xe8)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f00000024c0)={0x84, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x80}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x1}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x61}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1}, @NL80211_MESHCONF_FORWARDING={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x7a}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff7, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x84}}, 0x68d0)
ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000180))

15:32:39 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1677.282265] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1677.302287] overlayfs: failed to verify upper root origin
15:32:42 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:42 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:42 executing program 0:
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:42 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r1=>r0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='-*\x00', 0xffffffffffffffff}, 0x30)
tgkill(0x0, r1, 0x1f)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:42 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x40, 0x7, 0x81, 0x0, 0x8001, 0x80, 0x3f, 0x0, 0x5, 0x5, 0x6, 0x8, 0x0, 0x8, 0x401, 0x3, 0x73, 0x7, 0x7, [], 0x5a, 0x100000000})
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400204)

15:32:42 executing program 5:
syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="0302056e49020100001400000000f7ff00000f000200000000bc015bd20000000000420000000000000000000000000000000000000000230000ffffdabe", 0x3e, 0x1c0}])
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:32:42 executing program 0:
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:42 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1680.122183]  loop5: p1 p2 p3 p4 p5 p8
[ 1680.126283] loop5: partition table partially beyond EOD, truncated
[ 1680.142904] loop5: p1 size 50464110 extends beyond EOD, truncated
15:32:42 executing program 0:
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:42 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1680.167924] loop5: p2 size 1310720 extends beyond EOD, truncated
[ 1680.190872] loop5: p3 size 3840 extends beyond EOD, truncated
[ 1680.198787] loop5: p4 size 12321115 extends beyond EOD, truncated
[ 1680.209404] loop5: p5 size 16896 extends beyond EOD, truncated
15:32:42 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r4 = dup(r0)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x7, 0x2, 0x5})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

[ 1680.232017] loop5: p8 size 65535 extends beyond EOD, truncated
15:32:42 executing program 0:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1680.416725]  loop5: p1 p2 p3 p4 p5 p8
[ 1680.420794] loop5: partition table partially beyond EOD, truncated
[ 1680.427498] loop5: p1 size 50464110 extends beyond EOD, truncated
[ 1680.435886] loop5: p2 size 1310720 extends beyond EOD, truncated
[ 1680.443816] loop5: p3 size 3840 extends beyond EOD, truncated
[ 1680.451215] loop5: p4 size 12321115 extends beyond EOD, truncated
[ 1680.458578] loop5: p5 size 16896 extends beyond EOD, truncated
[ 1680.465957] loop5: p8 size 65535 extends beyond EOD, truncated
[ 1680.550861] loop_reread_partitions: partition scan of loop5 () failed (rc=-16)
[ 1680.562971] print_req_error: 12 callbacks suppressed
[ 1680.562976] print_req_error: I/O error, dev loop5, sector 0
[ 1680.570274] print_req_error: I/O error, dev loop5, sector 0
[ 1680.577041] print_req_error: I/O error, dev loop5, sector 0
[ 1680.580961] print_req_error: I/O error, dev loop5, sector 0
[ 1680.587610] print_req_error: I/O error, dev loop5, sector 0
[ 1680.591815] print_req_error: I/O error, dev loop5, sector 0
[ 1680.599753] print_req_error: I/O error, dev loop5, sector 0
[ 1680.608706] buffer_io_error: 10 callbacks suppressed
[ 1680.608711] Buffer I/O error on dev loop5p5, logical block 0, async page read
[ 1680.621398] print_req_error: I/O error, dev loop5, sector 0
[ 1680.627263] Buffer I/O error on dev loop5p4, logical block 0, async page read
[ 1680.634656] print_req_error: I/O error, dev loop5, sector 0
[ 1680.640850] Buffer I/O error on dev loop5p8, logical block 0, async page read
[ 1680.648305] print_req_error: I/O error, dev loop5, sector 0
[ 1680.654092] Buffer I/O error on dev loop5p1, logical block 0, async page read
[ 1680.661470] Buffer I/O error on dev loop5p3, logical block 0, async page read
[ 1680.668921] Buffer I/O error on dev loop5p2, logical block 0, async page read
[ 1680.676305] Buffer I/O error on dev loop5p5, logical block 0, async page read
[ 1680.683732] Buffer I/O error on dev loop5p4, logical block 0, async page read
[ 1680.691129] Buffer I/O error on dev loop5p8, logical block 0, async page read
[ 1680.698479] Buffer I/O error on dev loop5p1, logical block 0, async page read
15:32:45 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:45 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:45 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000000c0))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

15:32:45 executing program 0:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x4400, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x7ffffffe}, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f0000000100))
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x63e, 0x640080)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8920, &(0x7f0000000080)={'sit0\x00', @ifru_settings={0x0, 0x0, @fr_pvc=0x0}})
recvmmsg(r6, &(0x7f0000008880), 0x75d, 0x44000122, 0x0)

15:32:45 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0xe, 0x5, 0xb44)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:45 executing program 0:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:45 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:45 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1683.435409] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1683.493461] overlayfs: failed to verify upper root origin
15:32:45 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:45 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:45 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmmsg(r1, &(0x7f0000003bc0)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @broadcast}, 0x1, 0x1, 0x1, 0x4}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000)="e809ebb3dfa059ddd52a07c63f4ff1f5eec1cb0b", 0x14}, {&(0x7f0000000240)="5a2a9bf2f24fbb86cd3e9976874e18a309703d327e1d745d65d2377d2779869c6bdb91cd01dd0e302ee8b5809e15481eaa2f3c208b4e5fe436f5c254b11dee1c1fcd3164ff769c977c98d93a819f526c66d75f606b9a78fdaa86585468ab18fe828b8d1dcacf9849400f651a8c09a17acfcdf8595873da28e5895593e89179ca5e6a8165a2f991d81f8714d81a919961df21bc74a0cad2f55da6911daa707057a7527c06788bd97db5fd8e25332a4a7d67c00f1899aa48812c27aaf0d7f178d9f0771a6e13c6a8b5e7c7378f8d9f214e7fdc3b3abd4e010162937ba9f4769686865f78", 0xe3}, {&(0x7f0000000340)="42b88fc5270ae7013f6f518f76368b28e9addd4cedd09676c027a0e7160dc38a8c877cc0f1cb9b0a1b62069b37137eb084ee258c391bf685fd7c76918bb1aea0c935f087d84172d5c38d042c68097be32a59ed50915845f2584e1c43b2a9883d0434e5cf6c4dce9d1d3f64af1b36fa02b48893ac290be677265f92b89a2fa614e7987818ab7e0ef81dbe410991e0e9d2d27d1399a9ef2171b0b081f253f4f7f8f3d00391b29f88524d407682c82638830977563761c1def5a3480ffdba30b64ccdfd16f3024ec311828080e19946a2ef6ed0", 0xd2}, {&(0x7f0000005ec0)="bdf826dd97c34760402e1497da960aec04abdaf70fe715179d99fce7ac69e27192637f47ab0efd39259588f7dbf1c703cc23f5b72057287fb63334544bd00a034639141ea9ad7b7bce04634b8bb39fc2db6220fae8f4e02ba1562c57f751ac10316262dd7d6fdd6edca69a11ea172d3158e252631b0225d80c28f5fc9cff6173833502d11dbe692b798d0a523e41f73b4538e54b3524464b79e9d72ff922a69b77083a81786affa10d86b58881c62c23b15aff1b2fd0cfeb194d1a714d6ab095d3f79594889ad3d792bef7020066c9194805698f5ae0bd12de4256dd2ac5c5e664bd776e6c0da8e6c89cd51a860f3071e36130610a1f6f5e25ca2f4978836e476afadc10040c0dfe63163a38afdf7c45a8c799a1ac65bca1b8b3083c7c63ec9ed49525a5567a687bb9972bd507337dbb8b23fce126cdcb71d9f0687e558282e4ae3c944c5e73d32ef8410cb109485e2f37708491856abc9315794de478b35e8f9acddbf9ea600e4e3e68ffe23fbf893c9ed184b15c59aa172c2aa89b737e92d726cf79ae8c61276b5a84747123ac34a0b6a276b82f8a2ec8d1bbf80dec1d3b540e04755facb914713682249d8714a11220be0aa3ad0eff471936577c92c05c8199b9165061d443f108a9bb2299b502dc5276e851f051f8215e3a5db8ac9d92679b1c468ac2fa3212b502dab7d31c29dee1cb515dad33393b585b8790f4c3ba9f0439b2c7c2902fed5563179a520e9deee736e8b84b48886c671a774a229eb8b098b1a7d8400e168b2727e3651bd9438eb43da1a22b3e953f9981c744f12487fb2825be65954884d1a8c0be15cd3f0c1ad1e7afdcc834631c275e4e1b55cccafcc22910277b829f623b74c5ebe00077abe83b4fab4b22301b9f1d1830bf5992d0acb422838d3a815ffa1b86993011fa31664f33b67f96656ea56ea21e1f9e2802a519ee026ccf4d0a2bf2b5e101cc48dcab3a5c6db058ca46d4985fa10c64827eb9bacff5bbdb40572a6c9a727fb89968a98fb6b250c347c6260b7bd8e003e07c6a5dc82692e88c3e59448693dcf3e80c51724b40ad6895a91bef835321d2bd37659653d324da56ea965876b760c3aed3ed1fabff32722603e4eaf7a03525e530acdf39e91f1462d172d0a9d12ae0b197f3ee8ed19e05f47b489e954f73c3bf0c2b895827b25bb079a1cae3d2646082adc6576f36e9048fefcb84d0c321da3e70300b205ebc457a0be3c0fffb80116d83b0ca668d8b672174f860191b65497b3142141056dfc8ddbc3f9bff3ffd8acb6bc0153377060f1f2f9b8f68e50c0340f37273013cfeddc59cdf29002888dc323d7bf2fe66b6ca5ee8d706eba041101b8744aa1c9b2c3a9468175849bcfab77baea8615642734eb26626a44484edfaebb547143e4214782fa14b9b7d9e8514a4971fe015f8b1c0b05efa515172b01747f710c6d1f7f9c1dacc2c3f8c0a67c3e5def5703a01e123226f21edd50977bc45478d03700dd475642fac9f0d9156380237a695302a3a1836c00bcf88566fbc484cb33918a97e2355696b9ca2a1d77de6065beb9709d4295bd7951eff87e7781e32c718f1e552e31f22d1bfc925a718c46ba645b2e1265b0a229939c2053457a3a69ba1f3489bdbc635f4a8d82f6fe3b73c957508773e07e0f0638586f4917e7ac8c08be1c7ef5aa43625191e11da2250c97162f9edfb2d4455f453d9f4678c1a79e9552d9a5d9df1cca0b9bc04c2945667bd5d5634862f8909158d872863cbe5e37df5adad82ad3e7596e82b51057acbbdd879e6d410edba9c3dad1749b1c7ffcbdc50b033533ff8f4f2326c348250c407af658ce1986fe9429f99c466f5dd217b4cdbbb5f54c11125efd743b6c0d01b3c8a3a2778ed9437b46c946fbcc312c6578f059163654958c899bfff7a25b9617a34990176773b29d308372b500ae0b1d52d614be0bc9b44f2eca6927851a5ee1bd5d04a845448b6ef7605e001e480081624b2cf2c35024bd0b5f4c32942ac901d3ce6312b39f9b4b504b8c70b699745eeaa4221d94550e5324c4b00b563cc507aad4bc01dc610638a4e1dfa800c0feb6eddadfb28c56762d689bfcd19a5e10aca26fb77b857161cebff18d3eb36309a1a95d0866e8693e1f9483d9643ecf39c25483ceb934a79d6db9ec406b7ca9b9e16c5fd101542796feb933caf74994c26e7a3e23c5074635a80399c4f0760bce52d1e08af48dc50ea98ea01f007da438f88a2f120404d4eacc66c041585ca38ffbd8726b7c6fd0239ced44da9676d83c32551e15704137c904fd95f91f674e7942da773250cdd3b2108c879712d312e0221f71b36545779e08c80f0169f4cc6091dc875dddbda8c4aed960b350b3cfdb6c922f43b269cf14a9884ef6d13f512c5399b5f3c9a97d59b558c819fce66542f4ec3d39df98364506c1ac46a337c7cbd35cd906ae3ef85da893266e2661b52c1cd9438b81dc2fe29680be06273b547d5526502c1acad00ee4c5ae3d00f80ab3912589db176d10c1ad58ac6b85f0377d56314a3e122b86497e8b6c014d0282c948b11f342660a965264521f57295def7ac14440d408f12d205e42cdf3b7c5bd1219b34e91b85e69d713fcb6e6d384d0f13d0b502f96d6367afdcbe7cfd35e441fd3ce75e05403ab1a837fe2312b2f6c4f9f750114aa430c7082824594134638ef43923355be7cc77dc0a18ddf670a53aa4ffdb37b8a15699ecf63c3a7d77068029457efedcb701141b68205c7f81e035446cfb457a06ff4bae357836993cd568df9d29dd5b4d6c1a9a48db8d1aaae182a5db00eb45994b3573d13ad3cbbd86b9893051815be2ba575508e1368c6e73068e6806465ed1f0ecfdf5ccf0aa42045651139972efaa562b5f20422ee39a7c69ae4547977f6c7b73f66218a7c1c2b53f282afd5c1a7331cefe505b14121df149b72390c1c08cd6d6ddb231f39fc0b67baa1bcbbf92b1e0e191f7716b829e85fd8a8e939bc184c40621f5092f9d2c720f5397af7e37a0fad1218c2d29e996efc5ae4d1df8b23cd7396adc02e56ca785553f282b252890e9e8ca91fd14df4d02c650d4b417b310e665f68c19194baab9adc4d411df3c8d9c12f0bd3794972106f268aba0fb6ebceaae015042c6d357ce128a52826b86a1dff449343e879dd7a6184346df8aab3f0f7c9721dffe503d9b1392278e6620cd3753fd72d2a4d8981e1886009e3f4f04b76930b5cc31ea5c39dfa8bdabb8a01df6aa653cfcae3ffb7e57f00707531c5d041b84274a4f1558ed6155db7f172e65b1723592a8bbdf999e889c01319b8b02d0da5214ce8176873a1e22faaf229de07f7d679bc8693ef44e0ba1fa37d67a62c0d5a7302482539d5217230469ab08e246615ece609f1fd4a9d840adc5b199cdfa695c8d9d7a2c7c503876bd8144595b920d8e9cd1758b3baf316983256ba44b72efccf77138812b2e345195cddfad99ae67a5b1fa865188a9cd7e89d70b3c9ff53bffbf3a34ca8b63043f4ff9a63b996e82d5ff835589ca2cb819ea73dd0fc768e82c6d9d7fcc01669a51767c2b7267a6db86bfffd67ef57830137d5f37177757145a39bd501bdf18476e050f6ae64028c2c151124bc3ca818e4c93f315cf9f69a4efed7395db05544de529e462907867ae645fa454fa06eb934c56b6c4b079ab255360667469664317c8ed828d8e456a25e3434b5aefe99dc87629410e049ecd6d73348c62ab334a9f1f3b6d1780d09e1005e96f181ccff6f06c6a9bd91774563cc040000000000000033df9e034cb9ce8c9a791af881db6075c177f41c130326fbfb090714631b7495d3532b82d952d04d74e52f3c70728a8c2f5318f5461afd05cbee187a2d397fd651df81eac376116c82cd913cbaa4101414d38abe312d2d96ed8e4effd1f2f5bd0350fac6df9a0337a29726cccdec7b77f058e3f3c58cd9d679fd94b7128933d04254c9bc4b39a47c181ce447122c170e30ef06e27c0fe2a130427e59381ed1be0ceff89c79f93a2d92e75017d712da794b4a48f919ff50ec0345df492851a8dbacaccd781e7cd989836053f1c878ec928571cc18235ae9aebaf8535a729c9367611e1e11bfb4932a6268e897494fc1237403874710a314cdbeb81ca4ec8f69bdf7c2355bbe06dafc334d984e305a5ff0d88391836b23bd9020b3a1d2240bd99fb8819df65843d5943851bbd2aee7ac4350bc0a691192e4bbd2c903a71aac2feaecd4e015c5cabe8ab3adf91dc9690cd945596f5902bd2c7cec291920775105176304e602bac4098ef05a0b3e7d0d97d2afb51f387fb13295d3ce53bd8eab0735f52262ac41af611b6eb20893bb9ff89f6fbc688cfe42700c0dcb53c078653c4299669a1bfb049f6f654ac0f413077c00066ae4112d41b7f1e10e016e7387b7bbec00accfa0ab53dfb1a01e45ed90c17c25586211e34ceecde27c20311ab087ffbfdfb48f038b815ca7937a18085a029101e15adb1b27770647a992ef1dc335071dba5227b5cad7da392a03233e9fe49fc35f08cbc0f08269d55b267ca4d3b893258d32901c48aa20243093eabffbe30ce87fac502b0135c84b0acac8db8fe70bda413ed7698198aa65905b7bec7d7966614ff9fd6601eaf26951b046d698f6a7536051f1346333edf3e0462d239e4d01206b194a1e2f59dce11cdce5914d5b0cb7dff190aa0a3d61e8ecc399d78cb1d2230e9d90e6c185b2fbef9dcc0acc0b7a6c01f823310e5785e0988985eda6fb2ad0e8656b0df1c2a2c060119f8f163f1f982d36b1fea9b8a84ac402c7fb4d5e31b880b7be58d37c95347a5c697e910dda9909a0753efb5b1fbde95e9d40fd52b8423d38edaed4498e4b9f30f4124288947952f831edf6a0c25190a2acef6eb0394cfd037a795da5838607a222a0182968001750d144ad8208dba1744ad68e81738b78e8a42dafaf0c3e4342539e53258b0a13458ee9dfab983133a113189db35b0e62884f7a7e4e56628134470b553a702997abb80341fe1d40019fe1a03688ce2ae5e3bd14f2f354a195b36a39fd3e0583bd61718ef3c4922e9cee8bcc3d91abc9c24803228ec5102bec93dd4607769ea60324625aa44b3860f40c663616a651d4dc5bfbe15e8b44aef9b801d6f3be5e2fb7eb2030177fb2fdcb9e8fac27e8eed4b865b662303f8c769d829173028253531b2df96dbaefea483d0d180877317d9601969eb8ae0769eb11a9d7027c3fec1edc5934f24d43aed80b9443fb8f438ffe5d642673a5e781d153fe1634a6299c39f8cca326cd3d5624a44c8fb261954ec06328331d327a6584fbd28ffa5e8e40524008eb30ae0b579fb95b4aada1e5276c64ee61b560e6f341c323bfd74ea4d115618a3e195158878166a573e6f0f5fed031626ba886aad479667e44b559c9ad5c5c76ff06be121884347f73651c0a26852f0e8c73c4bc0f9df865ca1bb3496ced079ab184bb382aa08668805bbf6ed8eda0008b644597b58a103be3fe2cbdfab125cd905e144c7e25f427dba024f4dfc9480109508af360cfd9b030dd0833a0cdc6480fc0a09228793a375a1d25d4a561f0ab13baf36cead9e60917e514f19e7f8f24c8ad1033e7017596977efda70fd484486625b4f0030fe9aa24593baedbbc350f62d02b4d3246d31af96492d7e21cf1b72576a36371d1810dcb21c03c2e5760d9662e7952384ee299138d4c16d07e8b2db6bf793c57f6cfad6e8d35365e796596dc5756233783e470132d8787f1ce18dc039cbed5de8e2300000000000000004a91924cf86ad0fe1477d76047fe9cb452cfcd3be581ced092e1e4058a9cd7e666cd75f129958a010f94a5456571ad182d94b34eb5a155bb1eac4b907ade56e1fa5ac60c5cd50c144d09ff4577a7", 0x103f}, {&(0x7f0000001440)="1058f6162002a7182b8e8575edb154d337cc55264401a3aeb6ca505bc7871ec68ba81439cabef86c1f5ced433f0c7e67ce0f58cf75571430d3129bacd5ce74d69630976f985803cc6362d7b72af2db1987fae7e095e3e2825268ed13d95f60d9de2a789c2bb98ffd141c21fdbd657c6d6fb3fc6316ca6b9d86b0be140d177d6193c37aa9855206b8062ccddf", 0x8c}, {&(0x7f0000000180)="2d8c65c67ada8a06263855e1e1b9776d8b3c5cd6c7bfa4787da567edcfad78574b422a839421eb71930fb8c4cfc9648efbe6e52bfd49ea25df668dabaede99", 0x3f}], 0x6, &(0x7f0000001580)=[{0x108, 0x10a, 0x5, "ba9b90cc3834add7bf1f04032815638b13a9fdd0c434bcdd8c09823fd8f48b81fba4b95724c0e99bbc02d1d915f983dbb33ba8225e19593f5420d993901281487dabb261781f952e2f3152ba0d6a0ab71135c0abb31478282b745852129eb167ffe3cc0ca025b959b47066885a93025249b564cb9501c9d20401897637db3e356ea734e33457435694e9a1956bed21934cc57de305afa8abb82d54b923b91a62888030b6dba004fdc84f26d6b051457d8d723dcf6bb11ba910b74c4fbcb6dd1aca4b6bea8617eb486ae91a72b77ad608951792801b261ec9c9f502710636c77fde555f7fe3f74add30ac12263731fe062381b4d08c471ba9"}, {0x40, 0x29, 0xff, "f1bc6255b7aca2481de4b3e090389937dc0db86de4abac806acb405c35cf711ec8a67b5f36913941b1a1"}], 0x148}}, {{&(0x7f0000001700)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000004d80)="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", 0x1123}, {&(0x7f0000002780)="d5ebb594a1dc08a0073acb894b0f2777e4e79885187aa047f2abf21a46b7fd0008f83fb7b64d440f1b1f70cbb1585b859509c986141a0ab3099a1f21117e5d716ffe1f20ae97b7f9bdb7ac7d58da7691ded416a4f16dcc5d5c39a14f94367de2aecb4f946cf86afbff5d785b786a7634ede17378736540f270a0a36365c8eea77c6e36ad7bc6b10ed26f31d4aa9f3dbe85f0bb269764f71cfc2350967d893f56c90becea227086eb65347b14934f4ab8c2fa1c17f1", 0xb5}, {&(0x7f0000002840)="d1d802522c6b825a4a21c8d9c9c9d911ceec04a117cb7ed321bc3e0982e448bd381f4b07fec768962489d89d5315b3270983727401fe6fbe185dd444eac60996cce718142b88771810bc0825a5020b6e0b8adec072c529a54f343d401ab867e3882f588a2470db9feccb05896a681b32c398f767e1f622c1cf", 0x79}, {&(0x7f00000028c0)="4061dcbf5db54d9b186e8bfc09eb9ab8de3f7b88f9acf29056f1159bd9e7204d90b6e7e6b2ba77aec93d551e95fb22c0c3abe51ae2fd462809934da174bbf9bf5c9ae25e43ec2422fe3a30755edd668fdb", 0x51}], 0x4, &(0x7f0000002940)=[{0xd0, 0x110, 0x1c0e, "6821615c6f29b6f877769bc871b07025e8eb86bc737b7fd032a525d2b0b3ecce7bfc9ee44201ed58fecf13870cdfa9486589e8722e9b9f51c3bf01367f63198e6803f614a0b25883e3eef572b8d2a4d96a776f1c7986a2e71e0a633c0e3818955f6987f4e3cae3bfdfe99f87c8f5aa96dfca12739c4137616a07523c929ece354ff172b1e379a88de2d9218403563e92d7373a6cd5834fa6b5c3f0ce3cd1c971de48aa19d1bd711d8e337e49c934093203afc10f13f4d3a60032d167"}, {0xf0, 0x101, 0x2, "423fa7eb868e7cc22a9857ef207e44c3bdf0b43a062d813a3a64f2d7c6d5178de006945699b473af0ca1aafe7eb4b7d67b5abfc57f27647aa9e5d1293672804fa277be6d7b7b17233afbb626d90edac80300000000000000003d834425280c08b1fdb2e07075661dac56c97a5a173fba6c638debb187007f44ea3ad5298bd594638df8402d38e4fb2aca9c3a7328e84a51964169deb0994f379cf6669abfb2f610e23ee8154f2630a99e80c59e0308771a2d78a1e3bc9f01815810b1a315c5c8acbabbb5281b155c68a8461ddd7653fb45266104955f000000000000040073"}, {0xa8, 0x1, 0x3f, "e8cc1c8dd3bce1dba790538db3fb13c8cf96d9243f7c4bbf10efd98d09f7e29edaea79c95ea46be5f61fc3ce967a917bdf1e79086833998fa1060cb6eba35696b670be3df88402c763d43d05b410e96007b4cc4fcf440657c9b11ae043ba246dcad52902d641b71298559cc9a7da22e169e050bca305594b1e516c72300e025865426b50159cfe9f279c6934c3b78eb40d677f393ef59cd9"}, {0x1010, 0x110, 0x40, "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"}], 0x1278}}], 0x2, 0xc0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 1683.661713] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1683.673228] overlayfs: failed to verify upper root origin
15:32:48 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:48 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:48 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:48 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="22055e7b38e21ea56c"], 0x1)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000002000/0x1000)=nil, 0x1000})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

15:32:48 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:48 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
link(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:48 executing program 5:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000040))
r2 = syz_open_dev$loop(&(0x7f0000000900)='/dev/loop#\x00', 0x120000000, 0x323a02)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000940)={0x0, r2, 0x1, 0x40, 0x2, 0x100000001})
r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4)
ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000980)={0x6, 0x9})
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/checkreqprot\x00', 0x2, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000a00)='/dev/input/mice\x00', 0x0, 0x543)
sendmsg$nl_route_sched(r4, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)=@deltaction={0x98, 0x31, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8f69}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/nvme-fabrics\x00', 0x10800, 0x0)
sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x6, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x4000)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000d00)=@assoc_id=<r6=>0x0, &(0x7f0000000d40)=0x4)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000d80)={r6, 0xffff, 0x20, 0x3756b0f, 0x7fffffff}, &(0x7f0000000dc0)=0x18)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000e80)={0x9a0000, 0x4, 0x9, <r7=>0xffffffffffffffff, 0x0, &(0x7f0000000e40)={0x990965, 0xfe, [], @p_u32=&(0x7f0000000e00)=0x4}})
ioctl$GIO_FONT(r7, 0x4b60, &(0x7f0000000ec0)=""/115)
r8 = creat(&(0x7f0000000f40)='./file0\x00', 0x101)
ioctl$SOUND_MIXER_READ_VOLUME(r8, 0x80044d05, &(0x7f0000000f80))
r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/bsg\x00', 0x40000, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r9, 0x89e5, &(0x7f0000001000)={0x9, "c0c456c39a3b9b7532bd819dacf67f960f41885d4b593476fd060e9722052b2e428b233457427fb93484ac7c514a8fd00849f96063f6b6ec3d271200cfb4aeb9d1283578207cc1d07b76e1719b9396d90f8a9ad1d0c8621e4f69dc951aa810dc6a9e7ea8c07d8418ec64a510bae34129ea232a71ceb28ea2703c7a28fbd504bf"})
ioctl$TIOCSSERIAL(r4, 0x541e, &(0x7f00000011c0)={0x10000, 0x6, 0x0, 0x2, 0x7, 0x200, 0xe6, 0xfffffffc, 0x80, 0x4, 0x20, 0x2, 0x5, 0x1a43, &(0x7f00000010c0)=""/223, 0x5, 0x5834, 0xb1c})
connect$llc(r8, &(0x7f0000001240)={0x1a, 0x322, 0x7, 0x6, 0x1, 0x1f, @dev={[], 0x10}}, 0x10)
ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000001380)={0x32, 0x20, &(0x7f0000001280)="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", {0x9, 0x9624, 0x32314d59, 0x5, 0x7560c83a, 0x6, 0xc, 0x4}})
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001400)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_VERSION(r9, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x94, r10, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x16, 0x1, '\x00em0)-lonodevppp1\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @empty}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x1a, 0x1, '/selinux/checkreqprot\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x10)
openat$null(0xffffffffffffff9c, &(0x7f0000001580)='/dev/null\x00', 0x228200, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000015c0)={<r11=>0x0, 0x5, 0x3, 0x4, 0x9, 0x81}, &(0x7f0000001600)=0x14)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000001640)={r11, 0xfff}, &(0x7f0000001680)=0x8)
timer_create(0x2, &(0x7f00000016c0)={0x0, 0x34, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000001700)=<r12=>0x0)
timer_gettime(r12, &(0x7f0000001740))
io_setup(0x80, &(0x7f0000001780)=<r13=>0x0)
io_submit(r13, 0x1, &(0x7f0000001880)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x3, 0x8001, 0xffffffffffffffff, &(0x7f00000017c0)="c15a24fc04c08ba94a13ae297333b27367ab49fb069a1ed5478adf9110f8896579a25114984be2bfa4a2d191535a7506d93b651758203751b1e2ef7134891225360ef8d1cf2af9ee48aa595714bec868618c3d7d9b11ff", 0x57, 0x0, 0x0, 0x1}])

15:32:48 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1686.185023] overlayfs: failed to resolve './file1': -2
15:32:48 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:48 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1686.318401] overlayfs: failed to resolve './file1': -2
15:32:48 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:48 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1686.417297] overlayfs: failed to resolve './file1': -2
15:32:51 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:51 executing program 5:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812})
io_setup(0x20000000002, &(0x7f0000000240)=<r4=>0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r6=>0x0)
io_submit(r6, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r5, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$VIDIOC_SUBDEV_G_EDID(r5, 0xc0285628, &(0x7f0000000100)={0x0, 0x1ef6, 0x9, [], &(0x7f00000000c0)=0x81})
io_submit(r4, 0x2, &(0x7f0000000580)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000180)='\f', 0x1}, 0x0])
fcntl$setown(r1, 0x8, r0)
r7 = memfd_create(&(0x7f0000000180)='&.\\keyring\x00', 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
r8 = getpid()
tkill(r8, 0x15)

15:32:51 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:51 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x4}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
fstatfs(r2, &(0x7f00000000c0)=""/7)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r7, 0xb701, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000100)={0x4, 0xd, 0x1})
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r9, 0xb701, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x400, 0x0)
r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r10, 0xb701, 0x0)
r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r11, 0xb701, 0x0)
r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r12, 0xb701, 0x0)
r13 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r13, 0xb701, 0x0)
r14 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)
socket$nl_crypto(0x10, 0x3, 0x15)

15:32:51 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:51 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x4, 0x3, 0x668, <r2=>r1, 0x0, &(0x7f0000000000)={0x9c0905, 0x8000, [], @value64}})
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:51 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1689.215137] overlayfs: failed to resolve './file1': -2
15:32:51 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000), 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r4 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

15:32:51 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:51 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:51 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1689.359311] overlayfs: failed to resolve './file1': -2
15:32:51 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1689.446231] overlayfs: failed to resolve './file1': -2
15:32:54 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:54 executing program 5:
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000bc0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:32:54 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:54 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:54 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000200)=""/258)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100))
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r4 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

15:32:54 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:54 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:54 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r1)
ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0xbb, 0x3, 0x43c9, 0x9, 0x0, 0x3})
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0xf0)

15:32:54 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:54 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)

15:32:54 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:54 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r1)
ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0xbb, 0x3, 0x43c9, 0x9, 0x0, 0x3})
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0xf0)

[ 1692.562211] overlayfs: missing 'lowerdir'
15:32:57 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)

15:32:57 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x400, 0x0)
ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f00000000c0))
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0046440b4e050228bd70009708000400fffffbff14000600626f6e6405736c6176655f"], 0x30}, 0x1, 0x0, 0x0, 0x4008801}, 0x79e720348e8c4ac3)

15:32:57 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:32:57 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:57 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r1)
ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0xbb, 0x3, 0x43c9, 0x9, 0x0, 0x3})
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0xf0)

15:32:57 executing program 3:
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xc0, &(0x7f0000000380)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r2}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='#\x00', r2}, 0x30)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
getpgrp(r3)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=<r4=>0x0)
prctl$PR_SET_PTRACER(0x59616d61, r4)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r5, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r5, 0x3c)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r5, 0x0, 0x0)

15:32:57 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)
quotactl(0x0, &(0x7f00000009c0)='./file0\x00', r10, &(0x7f0000000a00)="22c77b40f7bbc9a320cadea3fdfd61ac3a4a5f440fc6672b9de3d5fcff5e6a046b066df8d0dd")
syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x2, &(0x7f0000000180)=[{&(0x7f0000000200)="e0f873ad6a59219c996e99c528ba8d29978c0879bc797f47ae903389d089ef0cd8f206e4c2afe988dbaab8835427f52c3976ecc7c3fe1370d754fcd9c50f29dee97e3509435f11ec93165265922560d754e3f82dbfde8716155be51dda2200b15529abe347", 0x65, 0x8000}, {&(0x7f0000000340)="c8d512611342e943018bec3dd7983bcb7c8898322c212750962de33efb3059c78349b0fffca33151db3331dc9c146fc40e82b5ad7c93f89fbde36850072622664e2da31a5615e691c3b156d6c37ac7bb460bd0d64fa137501113b5887a8b51af531c285f3ce0a81d83b8b6597d0ccfb64c5f4ce803bc3262382737482cd48c178798b3d53b9f6d0ae314e38ee14f2e8b23513137516a0ce821c4be10a04e281d6a283583671e53b50bc676d969a9404e6ef541553c28c2d66a0b15311ab0e2d68518c32841a51d4df1a8f4b5a0f3d276c1eb9f742f3d1d9c1b7bf360081445bf06c3b3", 0xe3, 0x20}], 0x2808810, &(0x7f0000000440)={[{@errors_ro_remount='errors=ro-remount'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@hash_tea='hash=tea'}, {@hash_r5='hash=r5'}], [{@uid_eq={'uid'}}]})

[ 1695.294489] overlayfs: missing 'lowerdir'
15:32:57 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
ptrace$cont(0x7, r1, 0x400, 0x3)

15:32:57 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:32:57 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)

[ 1695.437571] overlayfs: missing 'lowerdir'
15:32:57 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [], 0xf603000000000000})

15:32:57 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)

15:32:57 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xc400, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000200)={{0x0, 0x5, 0xfffffff7, 0x3ff, 'syz1\x00', 0x200}, 0x2, 0x30000000, 0x2, r2, 0x1, 0x80, 'syz0\x00', &(0x7f00000001c0)=['/self\x00'], 0x6, [], [0x6, 0x8, 0x81, 0x6]})

15:32:57 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}, 0x4}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 1695.480303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pig=15540 comm=syz-executor.5
[ 1695.577362] overlayfs: missing 'workdir'
[ 1695.609626] overlayfs: missing 'lowerdir'
15:33:00 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/65, 0x41}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:00 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)
quotactl(0x0, &(0x7f00000009c0)='./file0\x00', r10, &(0x7f0000000a00)="22c77b40f7bbc9a320cadea3fdfd61ac3a4a5f440fc6672b9de3d5fcff5e6a046b066df8d0dd")
syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x2, &(0x7f0000000180)=[{&(0x7f0000000200)="e0f873ad6a59219c996e99c528ba8d29978c0879bc797f47ae903389d089ef0cd8f206e4c2afe988dbaab8835427f52c3976ecc7c3fe1370d754fcd9c50f29dee97e3509435f11ec93165265922560d754e3f82dbfde8716155be51dda2200b15529abe347", 0x65, 0x8000}, {&(0x7f0000000340)="c8d512611342e943018bec3dd7983bcb7c8898322c212750962de33efb3059c78349b0fffca33151db3331dc9c146fc40e82b5ad7c93f89fbde36850072622664e2da31a5615e691c3b156d6c37ac7bb460bd0d64fa137501113b5887a8b51af531c285f3ce0a81d83b8b6597d0ccfb64c5f4ce803bc3262382737482cd48c178798b3d53b9f6d0ae314e38ee14f2e8b23513137516a0ce821c4be10a04e281d6a283583671e53b50bc676d969a9404e6ef541553c28c2d66a0b15311ab0e2d68518c32841a51d4df1a8f4b5a0f3d276c1eb9f742f3d1d9c1b7bf360081445bf06c3b3", 0xe3, 0x20}], 0x2808810, &(0x7f0000000440)={[{@errors_ro_remount='errors=ro-remount'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@hash_tea='hash=tea'}, {@hash_r5='hash=r5'}], [{@uid_eq={'uid'}}]})

15:33:00 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [], 0xf603000000000000})

15:33:00 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000000c0)={@loopback, 0x13})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x4f, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="8a"], 0x1)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x190)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r6=>0x0)
io_submit(r6, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r5, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000200)={{0x3, 0x0, @reserved="c008a275a9e78845fbd07c742ea8e41ae2a6a6850aa975873710355124e06a9b"}})
getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000001c0)=0xc)

15:33:00 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)

15:33:00 executing program 4:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r4 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

15:33:00 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [], 0xf603000000000000})

[ 1698.362737] overlayfs: missing 'workdir'
[ 1698.375983] overlayfs: missing 'lowerdir'
15:33:00 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)
quotactl(0x0, &(0x7f00000009c0)='./file0\x00', r10, &(0x7f0000000a00)="22c77b40f7bbc9a320cadea3fdfd61ac3a4a5f440fc6672b9de3d5fcff5e6a046b066df8d0dd")
syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x2, &(0x7f0000000180)=[{&(0x7f0000000200)="e0f873ad6a59219c996e99c528ba8d29978c0879bc797f47ae903389d089ef0cd8f206e4c2afe988dbaab8835427f52c3976ecc7c3fe1370d754fcd9c50f29dee97e3509435f11ec93165265922560d754e3f82dbfde8716155be51dda2200b15529abe347", 0x65, 0x8000}, {&(0x7f0000000340)="c8d512611342e943018bec3dd7983bcb7c8898322c212750962de33efb3059c78349b0fffca33151db3331dc9c146fc40e82b5ad7c93f89fbde36850072622664e2da31a5615e691c3b156d6c37ac7bb460bd0d64fa137501113b5887a8b51af531c285f3ce0a81d83b8b6597d0ccfb64c5f4ce803bc3262382737482cd48c178798b3d53b9f6d0ae314e38ee14f2e8b23513137516a0ce821c4be10a04e281d6a283583671e53b50bc676d969a9404e6ef541553c28c2d66a0b15311ab0e2d68518c32841a51d4df1a8f4b5a0f3d276c1eb9f742f3d1d9c1b7bf360081445bf06c3b3", 0xe3, 0x20}], 0x2808810, &(0x7f0000000440)={[{@errors_ro_remount='errors=ro-remount'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@hash_tea='hash=tea'}, {@hash_r5='hash=r5'}], [{@uid_eq={'uid'}}]})

15:33:00 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)

15:33:00 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1698.481935] overlayfs: missing 'workdir'
15:33:00 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [], 0xf603000000000000})

[ 1698.544334] overlayfs: missing 'lowerdir'
15:33:00 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1698.572901] overlayfs: missing 'lowerdir'
[ 1698.654117] overlayfs: missing 'workdir'
[ 1698.678163] overlayfs: missing 'lowerdir'
15:33:03 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/65, 0x41}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:03 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)
quotactl(0x0, &(0x7f00000009c0)='./file0\x00', r10, &(0x7f0000000a00)="22c77b40f7bbc9a320cadea3fdfd61ac3a4a5f440fc6672b9de3d5fcff5e6a046b066df8d0dd")
syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x2, &(0x7f0000000180)=[{&(0x7f0000000200)="e0f873ad6a59219c996e99c528ba8d29978c0879bc797f47ae903389d089ef0cd8f206e4c2afe988dbaab8835427f52c3976ecc7c3fe1370d754fcd9c50f29dee97e3509435f11ec93165265922560d754e3f82dbfde8716155be51dda2200b15529abe347", 0x65, 0x8000}, {&(0x7f0000000340)="c8d512611342e943018bec3dd7983bcb7c8898322c212750962de33efb3059c78349b0fffca33151db3331dc9c146fc40e82b5ad7c93f89fbde36850072622664e2da31a5615e691c3b156d6c37ac7bb460bd0d64fa137501113b5887a8b51af531c285f3ce0a81d83b8b6597d0ccfb64c5f4ce803bc3262382737482cd48c178798b3d53b9f6d0ae314e38ee14f2e8b23513137516a0ce821c4be10a04e281d6a283583671e53b50bc676d969a9404e6ef541553c28c2d66a0b15311ab0e2d68518c32841a51d4df1a8f4b5a0f3d276c1eb9f742f3d1d9c1b7bf360081445bf06c3b3", 0xe3, 0x20}], 0x2808810, &(0x7f0000000440)={[{@errors_ro_remount='errors=ro-remount'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@hash_tea='hash=tea'}, {@hash_r5='hash=r5'}], [{@uid_eq={'uid'}}]})

15:33:03 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0)
fcntl$getown(r4, 0x9)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r6=>0x0)
io_submit(r6, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r5, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000240)={'filter\x00', 0x24, "267508622a11d8dc79e02b57759e97ead0ae8838ce359f6b8782e82c6131d0af01dbcf18"}, &(0x7f0000000080)=0x48)
r7 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

15:33:03 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [], 0xf603000000000000})

15:33:03 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:03 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [], 0xf603000000000000})

[ 1701.421994] overlayfs: missing 'workdir'
[ 1701.434687] overlayfs: missing 'lowerdir'
15:33:03 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:03 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)
quotactl(0x0, &(0x7f00000009c0)='./file0\x00', r10, &(0x7f0000000a00)="22c77b40f7bbc9a320cadea3fdfd61ac3a4a5f440fc6672b9de3d5fcff5e6a046b066df8d0dd")

15:33:03 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1701.564685] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore
[ 1701.584430] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1701.607423] overlayfs: missing 'workdir'
15:33:03 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:03 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000000)=0x2)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

15:33:03 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)
quotactl(0x0, &(0x7f00000009c0)='./file0\x00', r10, &(0x7f0000000a00)="22c77b40f7bbc9a320cadea3fdfd61ac3a4a5f440fc6672b9de3d5fcff5e6a046b066df8d0dd")

[ 1701.752061] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore
[ 1701.759927] overlayfs: missing 'lowerdir'
[ 1701.786023] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
15:33:06 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/65, 0x41}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:06 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:06 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:06 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x100, 0x4)

15:33:06 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)

15:33:06 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cachefiles\x00', 0x111001, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000004c0))
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x2, 0x70bd28}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x58, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x43}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008041}, 0x0)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x20004800)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3c)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r5, 0x0, 0x0)
ptrace$setregs(0xf, r5, 0x0, &(0x7f0000000340)="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")
ptrace$cont(0x9, r0, 0x0, 0x0)
syz_open_dev$vbi(&(0x7f0000000500)='/dev/vbi#\x00', 0x2, 0x2)

[ 1704.456696] overlayfs: missing 'lowerdir'
[ 1704.476459] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore
15:33:06 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1704.507405] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
15:33:06 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)

15:33:06 executing program 1:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)
quotactl(0x0, &(0x7f00000009c0)='./file0\x00', r10, &(0x7f0000000a00)="22c77b40f7bbc9a320cadea3fdfd61ac3a4a5f440fc6672b9de3d5fcff5e6a046b066df8d0dd")

15:33:06 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:06 executing program 1 (fault-call:4 fault-nth:0):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1704.663078] overlayfs: missing 'lowerdir'
15:33:06 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 1704.753238] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore
[ 1704.761678] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1704.785642] FAULT_INJECTION: forcing a failure.
[ 1704.785642] name failslab, interval 1, probability 0, space 0, times 0
[ 1704.817519] CPU: 0 PID: 15686 Comm: syz-executor.1 Not tainted 4.14.170-syzkaller #0
[ 1704.825445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1704.834819] Call Trace:
[ 1704.837606]  dump_stack+0x142/0x197
[ 1704.841276]  should_fail.cold+0x10f/0x159
[ 1704.845443]  should_failslab+0xdb/0x130
[ 1704.849442]  __kmalloc_track_caller+0x2ec/0x790
[ 1704.854323]  ? __sb_end_write+0xc1/0x100
[ 1704.858472]  ? strndup_user+0x62/0xf0
[ 1704.862294]  memdup_user+0x26/0xa0
[ 1704.865846]  strndup_user+0x62/0xf0
[ 1704.869503]  SyS_mount+0x3c/0x120
[ 1704.872966]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1704.876860]  do_syscall_64+0x1e8/0x640
[ 1704.880760]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1704.885627]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1704.890822] RIP: 0033:0x45b399
[ 1704.894016] RSP: 002b:00007f77063c3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1704.901838] RAX: ffffffffffffffda RBX: 00007f77063c46d4 RCX: 000000000045b399
[ 1704.909127] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1704.916404] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1704.923685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1704.931007] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000000
15:33:09 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/65, 0x41}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:09 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)

15:33:09 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:09 executing program 4:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$FBIOBLANK(r0, 0x4611, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f00000001c0)={0x0, 0x8, 0x9, [], &(0x7f0000000100)=0x40})
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r5 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r7=>0x0)
io_submit(r7, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r6, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$KDGETLED(r6, 0x4b31, &(0x7f0000000000))

15:33:09 executing program 1 (fault-call:4 fault-nth:1):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:09 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r3, &(0x7f0000000000), 0x0, 0x200000}])
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000f40)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000001040)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001080)={'ip6_vti0\x00', r5})
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r7=>0x0)
io_submit(r7, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r6, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x496000, 0x0)
recvfrom$packet(r6, &(0x7f00000001c0)=""/230, 0xe6, 0x0, &(0x7f0000000000)={0x11, 0x5, 0x0, 0x1, 0x3e, 0x6, @random="0514737cf8cb"}, 0x14)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
ioctl$SNDRV_PCM_IOCTL_STATUS64(r8, 0x80984120, &(0x7f0000000300))
write$FUSE_NOTIFY_DELETE(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r8, 0x4010aeab, &(0x7f00000002c0)={0x8001, 0x1000})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1707.525191] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore
[ 1707.539998] FAULT_INJECTION: forcing a failure.
[ 1707.539998] name failslab, interval 1, probability 0, space 0, times 0
[ 1707.550776] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1707.569783] CPU: 1 PID: 15700 Comm: syz-executor.1 Not tainted 4.14.170-syzkaller #0
[ 1707.577856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1707.587223] Call Trace:
[ 1707.589830]  dump_stack+0x142/0x197
[ 1707.593487]  should_fail.cold+0x10f/0x159
[ 1707.597758]  should_failslab+0xdb/0x130
[ 1707.601748]  __kmalloc_track_caller+0x2ec/0x790
[ 1707.606431]  ? kasan_check_write+0x14/0x20
[ 1707.610676]  ? strndup_user+0x62/0xf0
[ 1707.614492]  memdup_user+0x26/0xa0
[ 1707.618200]  strndup_user+0x62/0xf0
[ 1707.621948]  SyS_mount+0x6b/0x120
[ 1707.625421]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1707.629322]  do_syscall_64+0x1e8/0x640
[ 1707.633221]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1707.638092]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1707.643286] RIP: 0033:0x45b399
[ 1707.646478] RSP: 002b:00007f77063c3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1707.654195] RAX: ffffffffffffffda RBX: 00007f77063c46d4 RCX: 000000000045b399
[ 1707.661472] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
15:33:09 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:09 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/65, 0x41}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1707.668751] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1707.676288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1707.683567] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000001
15:33:09 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)

[ 1707.799618] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore
[ 1707.819324] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
15:33:10 executing program 1 (fault-call:4 fault-nth:2):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:10 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)

15:33:10 executing program 0 (fault-call:3 fault-nth:0):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:10 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000240)={0x0, "d0ca5a184c9f59704a0004ba326ed5612fb01546eb753023b19aed547516685be19a81d6efa686d35839809371093108c0e7427a76ebe18bbfb06c1401c0262c", {0xfff, 0x80}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x0, 0x0)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
r3 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 1707.972537] FAULT_INJECTION: forcing a failure.
[ 1707.972537] name failslab, interval 1, probability 0, space 0, times 0
[ 1707.997560] CPU: 1 PID: 15733 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1708.005482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1708.014849] Call Trace:
[ 1708.016459] FAULT_INJECTION: forcing a failure.
[ 1708.016459] name failslab, interval 1, probability 0, space 0, times 0
[ 1708.017448]  dump_stack+0x142/0x197
[ 1708.017471]  should_fail.cold+0x10f/0x159
[ 1708.017490]  should_failslab+0xdb/0x130
[ 1708.017572]  __kmalloc_track_caller+0x2ec/0x790
[ 1708.045175]  ? __sb_end_write+0xc1/0x100
[ 1708.049375]  ? strndup_user+0x62/0xf0
[ 1708.053185]  memdup_user+0x26/0xa0
[ 1708.056772]  strndup_user+0x62/0xf0
[ 1708.060405]  SyS_mount+0x3c/0x120
[ 1708.063899]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1708.067802]  do_syscall_64+0x1e8/0x640
[ 1708.071699]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1708.076555]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1708.081745] RIP: 0033:0x45b399
[ 1708.084959] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1708.092691] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1708.099970] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1708.107242] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1708.114510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1708.121778] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000000
[ 1708.129184] CPU: 0 PID: 15736 Comm: syz-executor.1 Not tainted 4.14.170-syzkaller #0
[ 1708.137079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1708.146441] Call Trace:
[ 1708.149064]  dump_stack+0x142/0x197
[ 1708.152692]  should_fail.cold+0x10f/0x159
[ 1708.156839]  should_failslab+0xdb/0x130
[ 1708.160832]  kmem_cache_alloc_trace+0x2e9/0x790
[ 1708.165773]  ? kasan_check_write+0x14/0x20
[ 1708.170097]  ? _copy_from_user+0x99/0x110
[ 1708.174243]  copy_mount_options+0x5c/0x2f0
[ 1708.178477]  SyS_mount+0x87/0x120
[ 1708.181931]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1708.185818]  do_syscall_64+0x1e8/0x640
[ 1708.189710]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1708.194571]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1708.199780] RIP: 0033:0x45b399
[ 1708.203071] RSP: 002b:00007f77063c3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1708.210781] RAX: ffffffffffffffda RBX: 00007f77063c46d4 RCX: 000000000045b399
15:33:10 executing program 0 (fault-call:3 fault-nth:1):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1708.218088] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1708.226134] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1708.233393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1708.240666] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000002
15:33:10 executing program 1 (fault-call:4 fault-nth:3):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:10 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)

15:33:10 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
pwrite64(0xffffffffffffffff, &(0x7f0000000240)="669d34185f937a56e1946c5fc120731896b698c635a97b3c47a81ecf3b3df6ab0d4f45ca74141290d1e3328ac9ea767dab5e5b288e7a137c55aa6152203374394d10307b7cbb7f478e975292edeee2cdf10f19dbdd058ea37112e566c093b3810af0842d55d253f86ce32ff5a652f0e69f9bd5f5f0a776d2610eeae79fd1069c3dae88bc477e1d5d29e5ee49e7d41a132d1df646d9d9bf566a4de0e71a579e83df6ffa9213e72b79997a98abafed2ddb9d38939881c7aee0e005153f2f9848cf0dee55c870697b12fa540110f4b63f1508f4e2f4703fba43e1f1e4b01d2634089c5bf8da214331f0acae06", 0xeb, 0x3)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
r5 = socket$inet(0x2, 0x3, 0x4)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000001c0)={<r6=>0x0, @local, @local}, &(0x7f00000000c0))
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c255f340000", @ANYRES16=r4, @ANYBLOB="110700000000000000000800000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0)
r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cachefiles\x00', 0x10200, 0x0)
ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f0000000580)={0x80fd, 0x2})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={<r8=>0x0, @empty, @empty}, &(0x7f0000000380)=0xc)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x2)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044041)
r9 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)

[ 1708.347315] FAULT_INJECTION: forcing a failure.
[ 1708.347315] name failslab, interval 1, probability 0, space 0, times 0
[ 1708.372390] CPU: 0 PID: 15746 Comm: syz-executor.1 Not tainted 4.14.170-syzkaller #0
[ 1708.380312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1708.389675] Call Trace:
[ 1708.392287]  dump_stack+0x142/0x197
[ 1708.395941]  should_fail.cold+0x10f/0x159
[ 1708.400244]  should_failslab+0xdb/0x130
[ 1708.404238]  kmem_cache_alloc+0x2d7/0x780
[ 1708.408401]  ? __schedule+0x7c0/0x1cd0
[ 1708.412308]  getname_flags+0xcb/0x580
[ 1708.416120]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1708.421155]  user_path_at_empty+0x2f/0x50
[ 1708.425494]  do_mount+0x12b/0x27d0
[ 1708.429215]  ? retint_kernel+0x2d/0x2d
[ 1708.433125]  ? copy_mount_string+0x40/0x40
[ 1708.437371]  ? copy_mount_options+0x18f/0x2f0
[ 1708.442015]  ? copy_mount_options+0x1a0/0x2f0
[ 1708.446609]  ? copy_mount_options+0x1fe/0x2f0
[ 1708.451134]  SyS_mount+0xab/0x120
[ 1708.451875] FAULT_INJECTION: forcing a failure.
[ 1708.451875] name failslab, interval 1, probability 0, space 0, times 0
[ 1708.454599]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1708.454616]  do_syscall_64+0x1e8/0x640
[ 1708.454627]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1708.454647]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1708.454655] RIP: 0033:0x45b399
[ 1708.454666] RSP: 002b:00007f77063c3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1708.494696] RAX: ffffffffffffffda RBX: 00007f77063c46d4 RCX: 000000000045b399
[ 1708.501957] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1708.509220] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1708.516484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1708.523750] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000003
[ 1708.542782] CPU: 1 PID: 15750 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1708.550694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1708.560056] Call Trace:
[ 1708.562659]  dump_stack+0x142/0x197
[ 1708.566299]  should_fail.cold+0x10f/0x159
[ 1708.570571]  should_failslab+0xdb/0x130
[ 1708.574552]  __kmalloc_track_caller+0x2ec/0x790
[ 1708.579234]  ? kasan_check_write+0x14/0x20
[ 1708.583474]  ? strndup_user+0x62/0xf0
[ 1708.587290]  memdup_user+0x26/0xa0
[ 1708.590839]  strndup_user+0x62/0xf0
[ 1708.594475]  SyS_mount+0x6b/0x120
[ 1708.597936]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1708.601832]  do_syscall_64+0x1e8/0x640
[ 1708.605721]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1708.610701]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1708.615888] RIP: 0033:0x45b399
[ 1708.619078] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1708.626830] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1708.634104] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1708.641611] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1708.648959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1708.656233] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000001
15:33:12 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000000)=0xfffffffe)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x80000, 0x100)
ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f00000001c0)={0x0, 0x5})
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
open(&(0x7f0000000240)='./bus\x00', 0x20001, 0xb8)
r5 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

15:33:12 executing program 1 (fault-call:4 fault-nth:4):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1710.534592] FAULT_INJECTION: forcing a failure.
[ 1710.534592] name failslab, interval 1, probability 0, space 0, times 0
[ 1710.550678] CPU: 0 PID: 15763 Comm: syz-executor.1 Not tainted 4.14.170-syzkaller #0
[ 1710.556143] audit: type=1804 audit(1581175992.684:20142): pid=15764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir027147406/syzkaller.vknXBC/1603/bus" dev="sda1" ino=17897 res=1
[ 1710.558610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1710.558615] Call Trace:
[ 1710.558636]  dump_stack+0x142/0x197
[ 1710.558659]  should_fail.cold+0x10f/0x159
[ 1710.605803]  should_failslab+0xdb/0x130
[ 1710.609787]  kmem_cache_alloc+0x2d7/0x780
[ 1710.613956]  ? lock_downgrade+0x740/0x740
[ 1710.618114]  alloc_vfsmnt+0x28/0x7d0
[ 1710.621836]  vfs_kern_mount.part.0+0x2a/0x3d0
[ 1710.625183] audit: type=1804 audit(1581175992.684:20143): pid=15764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir027147406/syzkaller.vknXBC/1603/bus" dev="sda1" ino=17897 res=1
[ 1710.626345]  do_mount+0x417/0x27d0
[ 1710.626356]  ? retint_kernel+0x2d/0x2d
[ 1710.626372]  ? copy_mount_string+0x40/0x40
[ 1710.626385]  ? copy_mount_options+0x19e/0x2f0
[ 1710.669761]  ? copy_mount_options+0x1fe/0x2f0
[ 1710.672205] audit: type=1804 audit(1581175992.684:20144): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir027147406/syzkaller.vknXBC/1603/bus" dev="sda1" ino=17897 res=1
[ 1710.674267]  SyS_mount+0xab/0x120
[ 1710.674277]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1710.674293]  do_syscall_64+0x1e8/0x640
[ 1710.674301]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1710.674319]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1710.722854] RIP: 0033:0x45b399
[ 1710.726042] RSP: 002b:00007f77063c3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1710.733754] RAX: ffffffffffffffda RBX: 00007f77063c46d4 RCX: 000000000045b399
[ 1710.735111] audit: type=1804 audit(1581175992.684:20145): pid=15765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir027147406/syzkaller.vknXBC/1603/bus" dev="sda1" ino=17897 res=1
[ 1710.741028] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1710.741035] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
15:33:12 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/65, 0x41}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:12 executing program 0 (fault-call:3 fault-nth:2):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:12 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)
socketpair(0x9, 0x6, 0x1f, &(0x7f0000000340))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_MARK={0x8}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x6}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0xc4}, 0x4004000)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='t'], 0x1)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0xfffb, 0x6, 0x8000, 0x3ff})

15:33:12 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
socket$inet_udplite(0x2, 0x2, 0x88)
setuid(0x0)

15:33:12 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
socket(0x1, 0x3, 0x3f)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 1710.741041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1710.741047] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000004
[ 1710.841606] FAULT_INJECTION: forcing a failure.
[ 1710.841606] name failslab, interval 1, probability 0, space 0, times 0
[ 1710.869805] CPU: 0 PID: 15773 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1710.877727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1710.887086] Call Trace:
15:33:13 executing program 1 (fault-call:4 fault-nth:5):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1710.889690]  dump_stack+0x142/0x197
[ 1710.893341]  should_fail.cold+0x10f/0x159
[ 1710.897581]  should_failslab+0xdb/0x130
[ 1710.901596]  kmem_cache_alloc_trace+0x2e9/0x790
[ 1710.906277]  ? kasan_check_write+0x14/0x20
[ 1710.910542]  ? _copy_from_user+0x99/0x110
[ 1710.914712]  copy_mount_options+0x5c/0x2f0
[ 1710.918955]  SyS_mount+0x87/0x120
[ 1710.922411]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1710.926306]  do_syscall_64+0x1e8/0x640
[ 1710.930201]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1710.935055]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
15:33:13 executing program 0 (fault-call:3 fault-nth:3):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1710.940230] RIP: 0033:0x45b399
[ 1710.943435] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1710.951132] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1710.958409] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1710.965671] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1710.972945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1710.980217] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000002
15:33:13 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
socket$inet_udplite(0x2, 0x2, 0x88)
setuid(0x0)

[ 1711.071696] FAULT_INJECTION: forcing a failure.
[ 1711.071696] name failslab, interval 1, probability 0, space 0, times 0
[ 1711.083599] FAULT_INJECTION: forcing a failure.
[ 1711.083599] name failslab, interval 1, probability 0, space 0, times 0
[ 1711.097487] CPU: 1 PID: 15792 Comm: syz-executor.1 Not tainted 4.14.170-syzkaller #0
[ 1711.105412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1711.114776] Call Trace:
[ 1711.117384]  dump_stack+0x142/0x197
[ 1711.121046]  should_fail.cold+0x10f/0x159
[ 1711.125214]  should_failslab+0xdb/0x130
[ 1711.129206]  kmem_cache_alloc+0x2d7/0x780
[ 1711.133374]  ? lock_downgrade+0x740/0x740
[ 1711.137630]  alloc_vfsmnt+0x28/0x7d0
[ 1711.141357]  vfs_kern_mount.part.0+0x2a/0x3d0
[ 1711.145888]  do_mount+0x417/0x27d0
[ 1711.149436]  ? retint_kernel+0x2d/0x2d
[ 1711.153342]  ? copy_mount_string+0x40/0x40
[ 1711.157594]  ? copy_mount_options+0x19e/0x2f0
[ 1711.162545]  ? copy_mount_options+0x1fe/0x2f0
[ 1711.167053]  SyS_mount+0xab/0x120
15:33:13 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000240)=""/247, 0xf7, 0x40001002, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @empty, 0x6945}, 0x1c)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 1711.170526]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1711.174425]  do_syscall_64+0x1e8/0x640
[ 1711.178326]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1711.183189]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1711.188396] RIP: 0033:0x45b399
[ 1711.191587] RSP: 002b:00007f77063c3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1711.199308] RAX: ffffffffffffffda RBX: 00007f77063c46d4 RCX: 000000000045b399
[ 1711.206604] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1711.213884] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1711.221164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1711.228589] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000005
[ 1711.238782] CPU: 0 PID: 15793 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1711.246947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1711.256455] Call Trace:
[ 1711.259037]  dump_stack+0x142/0x197
[ 1711.262683]  should_fail.cold+0x10f/0x159
[ 1711.266849]  should_failslab+0xdb/0x130
[ 1711.270812]  kmem_cache_alloc+0x2d7/0x780
[ 1711.274960]  ? __do_page_fault+0x358/0xb80
[ 1711.279191]  getname_flags+0xcb/0x580
[ 1711.282993]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1711.288027]  user_path_at_empty+0x2f/0x50
[ 1711.292172]  do_mount+0x12b/0x27d0
[ 1711.295717]  ? retint_kernel+0x2d/0x2d
[ 1711.299602]  ? copy_mount_string+0x40/0x40
[ 1711.303838]  ? copy_mount_options+0x18f/0x2f0
[ 1711.308345]  ? copy_mount_options+0x19e/0x2f0
[ 1711.312830]  ? copy_mount_options+0x1fe/0x2f0
[ 1711.317313]  SyS_mount+0xab/0x120
[ 1711.320945]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1711.324973]  do_syscall_64+0x1e8/0x640
[ 1711.328943]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1711.333900]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1711.339078] RIP: 0033:0x45b399
[ 1711.342255] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1711.349953] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1711.357325] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1711.364593] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
15:33:13 executing program 1 (fault-call:4 fault-nth:6):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:13 executing program 0 (fault-call:3 fault-nth:4):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1711.371953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1711.379348] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000003
15:33:13 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat(r1, &(0x7f0000000000)='./file0\x00', 0xa00, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r7, 0x3f, 0x0, 0x3, 0xba16}, &(0x7f0000000140)=0x18)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001580)={r7, 0x48, &(0x7f0000001500)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x764}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x36f, @rand_addr="ca63e80e727771ec1aee67f82b7cb133", 0x9}]}, &(0x7f00000015c0)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={r7, 0x3, 0x1, [0x4]}, 0xa)
ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000100))

[ 1711.493526] FAULT_INJECTION: forcing a failure.
[ 1711.493526] name failslab, interval 1, probability 0, space 0, times 0
[ 1711.505253] FAULT_INJECTION: forcing a failure.
[ 1711.505253] name failslab, interval 1, probability 0, space 0, times 0
[ 1711.508984] CPU: 0 PID: 15808 Comm: syz-executor.1 Not tainted 4.14.170-syzkaller #0
[ 1711.524607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1711.534138] Call Trace:
[ 1711.536737]  dump_stack+0x142/0x197
[ 1711.540362]  should_fail.cold+0x10f/0x159
[ 1711.544637]  should_failslab+0xdb/0x130
[ 1711.548608]  kmem_cache_alloc+0x2d7/0x780
[ 1711.552763]  ? lock_downgrade+0x740/0x740
[ 1711.557021]  alloc_vfsmnt+0x28/0x7d0
[ 1711.560739]  vfs_kern_mount.part.0+0x2a/0x3d0
[ 1711.565241]  do_mount+0x417/0x27d0
[ 1711.568803]  ? retint_kernel+0x2d/0x2d
[ 1711.572702]  ? copy_mount_string+0x40/0x40
[ 1711.576942]  ? copy_mount_options+0x19e/0x2f0
[ 1711.581446]  ? copy_mount_options+0x1fe/0x2f0
[ 1711.585971]  SyS_mount+0xab/0x120
[ 1711.589435]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1711.593324]  do_syscall_64+0x1e8/0x640
[ 1711.597208]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1711.602073]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1711.607256] RIP: 0033:0x45b399
[ 1711.610448] RSP: 002b:00007f77063c3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1711.618163] RAX: ffffffffffffffda RBX: 00007f77063c46d4 RCX: 000000000045b399
[ 1711.625434] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1711.632702] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1711.639971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1711.647238] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000006
[ 1711.654525] CPU: 1 PID: 15810 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1711.662416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1711.672486] Call Trace:
[ 1711.675092]  dump_stack+0x142/0x197
[ 1711.678744]  should_fail.cold+0x10f/0x159
[ 1711.682919]  should_failslab+0xdb/0x130
[ 1711.686907]  kmem_cache_alloc+0x2d7/0x780
[ 1711.691279]  ? __do_page_fault+0x358/0xb80
[ 1711.695541]  getname_flags+0xcb/0x580
[ 1711.699362]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1711.704400]  user_path_at_empty+0x2f/0x50
[ 1711.708565]  do_mount+0x12b/0x27d0
[ 1711.712114]  ? retint_kernel+0x2d/0x2d
[ 1711.716109]  ? copy_mount_string+0x40/0x40
[ 1711.720364]  ? copy_mount_options+0x18f/0x2f0
[ 1711.724880]  ? copy_mount_options+0x19e/0x2f0
[ 1711.729398]  ? copy_mount_options+0x1fe/0x2f0
[ 1711.734144]  SyS_mount+0xab/0x120
[ 1711.737605]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1711.741515]  do_syscall_64+0x1e8/0x640
[ 1711.745516]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1711.750484]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1711.755674] RIP: 0033:0x45b399
[ 1711.758910] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1711.766614] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1711.774098] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1711.781359] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1711.788626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1711.795891] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000004
15:33:16 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:16 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
socket$inet_udplite(0x2, 0x2, 0x88)
setuid(0x0)

15:33:16 executing program 1 (fault-call:4 fault-nth:7):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:16 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000000c0)={'ipvlan0\x00', {0x2, 0x4e21, @local}})
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r0)
r4 = openat$cgroup_int(r3, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0)
ioctl(r4, 0x80, &(0x7f0000000240)="f32ed0d7f04dd508af7fe0e4048b75db50cc2dc735a0e6877cb2ec6e9d9bd7727eeb2884929929d5378e1c2b0fb6086cdee5531a74df67adfb121934933e3b0fe5975fc91115b60e9d6fe8605a7b59a1c9f7483fd5f47f59e728b88825f03bbf3ba6a180f057975ee49164ff51e295b56e0691b087118fc53fd85fafa41e129d12e8a1a4886d374dbcae751b32d4b5b5d15deca065")
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

15:33:16 executing program 0 (fault-call:3 fault-nth:5):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:16 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x808a6180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x200000)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000001c0)={0x0, 0x4, 0x101, 0x0, 0x93, 0x7})
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000200)=0x52)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000240)={0xee, "4ae327846c2bea2d2f97d24959d9c1f7c35b875e5e8319a8c09933c6c273d9c6e0d91f56c7ef4d6b02890a6489eb82e3b06fb1ab524626acd6a004f4fc260091698c844315996b666257ea9c677c06ded90316aba6c2795c56bcdc56be7f6b87443812dcf2bccff67c2a61f2a6d47547f1b39f816a28342ac0597d9e2153b90007fe3caf1349ffc6a633df8e18e0c296f320cb315cc2178142f65e035f5e4ae503ab11bb08a93f8bd637ad2d9f293ed87f6b81e47b8fe8c0fea9589068fb45b0ec300644d223422dad9793b0ccc17b9a25218aca011a87579105fc64427efea6c5a9bc0d7016ab347221450e8425"})
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1713.915168] FAULT_INJECTION: forcing a failure.
[ 1713.915168] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1713.927104] CPU: 1 PID: 15825 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1713.933260] FAULT_INJECTION: forcing a failure.
[ 1713.933260] name failslab, interval 1, probability 0, space 0, times 0
[ 1713.934983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1713.934988] Call Trace:
[ 1713.935008]  dump_stack+0x142/0x197
[ 1713.935029]  should_fail.cold+0x10f/0x159
[ 1713.935047]  __alloc_pages_nodemask+0x1d6/0x7a0
[ 1713.970796]  ? fs_reclaim_acquire+0x20/0x20
[ 1713.975123]  ? __alloc_pages_slowpath+0x2930/0x2930
[ 1713.980147]  cache_grow_begin+0x80/0x400
[ 1713.984212]  kmem_cache_alloc+0x6a6/0x780
[ 1713.988467]  ? __do_page_fault+0x358/0xb80
[ 1713.992705]  getname_flags+0xcb/0x580
[ 1713.996515]  ? trace_hardirqs_on_caller+0x400/0x590
[ 1714.001545]  user_path_at_empty+0x2f/0x50
[ 1714.005725]  do_mount+0x12b/0x27d0
[ 1714.009297]  ? retint_kernel+0x2d/0x2d
[ 1714.013312]  ? copy_mount_string+0x40/0x40
[ 1714.017594]  ? copy_mount_options+0x18f/0x2f0
[ 1714.022096]  ? copy_mount_options+0x19e/0x2f0
[ 1714.026615]  ? copy_mount_options+0x1fe/0x2f0
[ 1714.031125]  SyS_mount+0xab/0x120
[ 1714.034600]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1714.038498]  do_syscall_64+0x1e8/0x640
[ 1714.042505]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1714.047362]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1714.052550] RIP: 0033:0x45b399
[ 1714.055735] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
15:33:16 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @rand_addr=0xfffffffe}, 0x141})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
readv(r5, &(0x7f0000001240)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/115, 0x73}, {&(0x7f0000000000)=""/63, 0x3f}], 0x3)
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1714.063546] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1714.070821] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1714.078099] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1714.085392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1714.092756] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000005
[ 1714.134612] CPU: 0 PID: 15827 Comm: syz-executor.1 Not tainted 4.14.170-syzkaller #0
[ 1714.142697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1714.146191] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1714.152056] Call Trace:
[ 1714.152080]  dump_stack+0x142/0x197
[ 1714.152100]  should_fail.cold+0x10f/0x159
[ 1714.152116]  should_failslab+0xdb/0x130
[ 1714.152126]  __kmalloc_track_caller+0x2ec/0x790
[ 1714.152142]  ? kstrdup_const+0x48/0x60
[ 1714.159545] overlayfs: failed to verify upper root origin
[ 1714.162024]  kstrdup+0x3a/0x70
[ 1714.162036]  kstrdup_const+0x48/0x60
[ 1714.162046]  alloc_vfsmnt+0xe5/0x7d0
[ 1714.162058]  vfs_kern_mount.part.0+0x2a/0x3d0
[ 1714.162073]  do_mount+0x417/0x27d0
[ 1714.162083]  ? retint_kernel+0x2d/0x2d
[ 1714.162097]  ? copy_mount_string+0x40/0x40
[ 1714.162109]  ? copy_mount_options+0x19e/0x2f0
[ 1714.220165]  ? copy_mount_options+0x1fe/0x2f0
[ 1714.224688]  SyS_mount+0xab/0x120
[ 1714.228133]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1714.232016]  do_syscall_64+0x1e8/0x640
[ 1714.235892]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1714.240833]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1714.246019] RIP: 0033:0x45b399
[ 1714.249194] RSP: 002b:00007f77063c3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1714.257108] RAX: ffffffffffffffda RBX: 00007f77063c46d4 RCX: 000000000045b399
[ 1714.264515] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1714.271777] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
15:33:16 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:16 executing program 0 (fault-call:3 fault-nth:6):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:16 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)

[ 1714.279038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1714.286304] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000007
15:33:16 executing program 1 (fault-call:4 fault-nth:8):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:16 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00')
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x14100, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r7, 0x3f, 0x0, 0x3, 0xba16}, &(0x7f0000000140)=0x18)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001580)={r7, 0x48, &(0x7f0000001500)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x764}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x36f, @rand_addr="ca63e80e727771ec1aee67f82b7cb133", 0x9}]}, &(0x7f00000015c0)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x4, 0x0, 0x7fffffff, 0x17ce, r7}, 0x10)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000fe4ea3c3dbdf25020000000c00040009000000000000000c00080000000000030000000c00060002000000000000000c000400056b0ab8215062245e00020055730000000000000c00040000000000000000000c00078008", @ANYRES32=r2, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r9 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
io_setup(0x1, &(0x7f0000000300)=<r10=>0x0)
io_destroy(r10)

[ 1714.362124] FAULT_INJECTION: forcing a failure.
[ 1714.362124] name failslab, interval 1, probability 0, space 0, times 0
[ 1714.416580] CPU: 1 PID: 15848 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1714.424728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1714.434093] Call Trace:
[ 1714.436701]  dump_stack+0x142/0x197
[ 1714.440352]  should_fail.cold+0x10f/0x159
[ 1714.444545]  should_failslab+0xdb/0x130
[ 1714.448781]  kmem_cache_alloc+0x2d7/0x780
[ 1714.452946]  ? lock_downgrade+0x740/0x740
[ 1714.457109]  alloc_vfsmnt+0x28/0x7d0
[ 1714.460837]  vfs_kern_mount.part.0+0x2a/0x3d0
[ 1714.465345]  do_mount+0x417/0x27d0
[ 1714.468898]  ? retint_kernel+0x2d/0x2d
[ 1714.472799]  ? copy_mount_string+0x40/0x40
[ 1714.477047]  ? copy_mount_options+0x19e/0x2f0
[ 1714.481562]  ? copy_mount_options+0x1fe/0x2f0
[ 1714.486086]  SyS_mount+0xab/0x120
[ 1714.489647]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1714.493549]  do_syscall_64+0x1e8/0x640
[ 1714.497446]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1714.502410]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1714.507606] RIP: 0033:0x45b399
15:33:16 executing program 0 (fault-call:3 fault-nth:7):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1714.510801] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1714.518538] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1714.525933] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1714.526948] FAULT_INJECTION: forcing a failure.
[ 1714.526948] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1714.533349] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1714.533355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1714.533361] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000006
[ 1714.567778] CPU: 0 PID: 15862 Comm: syz-executor.1 Not tainted 4.14.170-syzkaller #0
[ 1714.575745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1714.585203] Call Trace:
[ 1714.587903]  dump_stack+0x142/0x197
[ 1714.591531]  should_fail.cold+0x10f/0x159
[ 1714.595706]  ? __might_sleep+0x93/0xb0
[ 1714.599583]  __alloc_pages_nodemask+0x1d6/0x7a0
[ 1714.604248]  ? __alloc_pages_slowpath+0x2930/0x2930
[ 1714.609265]  alloc_pages_current+0xec/0x1e0
[ 1714.613593]  __get_free_pages+0xf/0x40
[ 1714.617482]  get_zeroed_page+0x11/0x20
[ 1714.621414]  mount_fs+0x1cc/0x2a1
[ 1714.624886]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1714.629390]  do_mount+0x417/0x27d0
[ 1714.632941]  ? retint_kernel+0x2d/0x2d
[ 1714.636830]  ? copy_mount_string+0x40/0x40
[ 1714.641062]  ? copy_mount_options+0x19e/0x2f0
[ 1714.645549]  ? copy_mount_options+0x1fe/0x2f0
[ 1714.650233]  SyS_mount+0xab/0x120
[ 1714.653676]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1714.657556]  do_syscall_64+0x1e8/0x640
[ 1714.661448]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1714.666307]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1714.671486] RIP: 0033:0x45b399
[ 1714.674667] RSP: 002b:00007f77063c3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1714.682467] RAX: ffffffffffffffda RBX: 00007f77063c46d4 RCX: 000000000045b399
[ 1714.689840] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1714.697157] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1714.704416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
15:33:16 executing program 1 (fault-call:4 fault-nth:9):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1714.711727] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000008
[ 1714.766171] FAULT_INJECTION: forcing a failure.
[ 1714.766171] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1714.778297] CPU: 0 PID: 15868 Comm: syz-executor.1 Not tainted 4.14.170-syzkaller #0
[ 1714.778985] FAULT_INJECTION: forcing a failure.
[ 1714.778985] name failslab, interval 1, probability 0, space 0, times 0
[ 1714.786185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1714.786191] Call Trace:
[ 1714.786212]  dump_stack+0x142/0x197
[ 1714.786234]  should_fail.cold+0x10f/0x159
[ 1714.786247]  ? __might_sleep+0x93/0xb0
[ 1714.786262]  __alloc_pages_nodemask+0x1d6/0x7a0
[ 1714.786272]  ? check_preemption_disabled+0x3c/0x250
[ 1714.786286]  ? __alloc_pages_slowpath+0x2930/0x2930
[ 1714.786298]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1714.786319]  ? __alloc_pages_nodemask+0x639/0x7a0
[ 1714.846814]  alloc_pages_current+0xec/0x1e0
[ 1714.851134]  __get_free_pages+0xf/0x40
[ 1714.855039]  get_zeroed_page+0x11/0x20
[ 1714.858930]  selinux_sb_copy_data+0x2a/0x390
[ 1714.863372]  security_sb_copy_data+0x75/0xb0
[ 1714.867784]  mount_fs+0x1ec/0x2a1
[ 1714.871245]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1714.875739]  do_mount+0x417/0x27d0
[ 1714.879275]  ? retint_kernel+0x2d/0x2d
[ 1714.883163]  ? copy_mount_string+0x40/0x40
[ 1714.887388]  ? copy_mount_options+0x19e/0x2f0
[ 1714.891883]  ? copy_mount_options+0x1fe/0x2f0
[ 1714.896372]  SyS_mount+0xab/0x120
[ 1714.899825]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1714.903711]  do_syscall_64+0x1e8/0x640
[ 1714.907585]  ? trace_hardirqs_off_thunk+0x1a/0x1c
15:33:17 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)

[ 1714.912561]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1714.917759] RIP: 0033:0x45b399
[ 1714.920934] RSP: 002b:00007f77063c3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1714.928639] RAX: ffffffffffffffda RBX: 00007f77063c46d4 RCX: 000000000045b399
[ 1714.935913] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1714.943184] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1714.950553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1714.957862] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000009
15:33:17 executing program 1 (fault-call:4 fault-nth:10):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1714.980280] CPU: 1 PID: 15869 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1714.988199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1714.997732] Call Trace:
[ 1715.000323]  dump_stack+0x142/0x197
[ 1715.005016]  should_fail.cold+0x10f/0x159
[ 1715.009166]  should_failslab+0xdb/0x130
[ 1715.013222]  __kmalloc_track_caller+0x2ec/0x790
[ 1715.017887]  ? kstrdup_const+0x48/0x60
[ 1715.021776]  kstrdup+0x3a/0x70
[ 1715.024968]  kstrdup_const+0x48/0x60
[ 1715.028669]  alloc_vfsmnt+0xe5/0x7d0
[ 1715.032376]  vfs_kern_mount.part.0+0x2a/0x3d0
[ 1715.036990]  do_mount+0x417/0x27d0
[ 1715.040645]  ? retint_kernel+0x2d/0x2d
[ 1715.044538]  ? copy_mount_string+0x40/0x40
[ 1715.049536]  ? copy_mount_options+0x19e/0x2f0
[ 1715.054022]  ? copy_mount_options+0x1fe/0x2f0
[ 1715.058510]  SyS_mount+0xab/0x120
[ 1715.061951]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1715.065831]  do_syscall_64+0x1e8/0x640
[ 1715.069885]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1715.074834]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
15:33:17 executing program 0 (fault-call:3 fault-nth:8):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1715.080065] RIP: 0033:0x45b399
[ 1715.083252] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1715.090970] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1715.098238] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1715.105572] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1715.112862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1715.120130] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000007
15:33:17 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3c, 0x111000)
ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000240)=""/217)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 1715.221379] FAULT_INJECTION: forcing a failure.
[ 1715.221379] name failslab, interval 1, probability 0, space 0, times 0
[ 1715.226086] FAULT_INJECTION: forcing a failure.
[ 1715.226086] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1715.233070] CPU: 1 PID: 15881 Comm: syz-executor.1 Not tainted 4.14.170-syzkaller #0
[ 1715.252729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1715.262202] Call Trace:
[ 1715.264806]  dump_stack+0x142/0x197
[ 1715.268452]  should_fail.cold+0x10f/0x159
[ 1715.272616]  should_failslab+0xdb/0x130
[ 1715.276619]  kmem_cache_alloc_trace+0x2e9/0x790
[ 1715.281291]  ? lock_downgrade+0x740/0x740
[ 1715.285558]  ? do_raw_spin_unlock+0x174/0x260
[ 1715.290064]  sget_userns+0xfe/0xc30
[ 1715.293691]  ? get_anon_bdev+0x1c0/0x1c0
[ 1715.297751]  ? get_anon_bdev+0x1c0/0x1c0
[ 1715.301827]  ? get_anon_bdev+0x1c0/0x1c0
[ 1715.305887]  sget+0xd6/0x120
[ 1715.309005]  ? selinux_sb_copy_data+0x21e/0x390
[ 1715.313771]  ? ovl_put_super+0x4b0/0x4b0
[ 1715.317828]  mount_nodev+0x31/0xf0
[ 1715.321372]  ovl_mount+0x2d/0x40
[ 1715.324763]  mount_fs+0x97/0x2a1
[ 1715.328140]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1715.332638]  do_mount+0x417/0x27d0
[ 1715.336168]  ? retint_kernel+0x2d/0x2d
[ 1715.340052]  ? copy_mount_string+0x40/0x40
[ 1715.344415]  ? copy_mount_options+0x19e/0x2f0
[ 1715.348909]  ? copy_mount_options+0x1fe/0x2f0
[ 1715.353400]  SyS_mount+0xab/0x120
[ 1715.356840]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1715.360735]  do_syscall_64+0x1e8/0x640
[ 1715.364724]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1715.369585]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1715.374768] RIP: 0033:0x45b399
[ 1715.377958] RSP: 002b:00007f77063c3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1715.385665] RAX: ffffffffffffffda RBX: 00007f77063c46d4 RCX: 000000000045b399
[ 1715.392933] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1715.400204] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1715.407565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1715.414832] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000000000a
[ 1715.433673] CPU: 0 PID: 15883 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1715.441588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1715.450952] Call Trace:
[ 1715.453653]  dump_stack+0x142/0x197
[ 1715.457297]  should_fail.cold+0x10f/0x159
[ 1715.461455]  ? __might_sleep+0x93/0xb0
[ 1715.465357]  __alloc_pages_nodemask+0x1d6/0x7a0
[ 1715.470039]  ? __alloc_pages_slowpath+0x2930/0x2930
[ 1715.475069]  alloc_pages_current+0xec/0x1e0
[ 1715.479389]  __get_free_pages+0xf/0x40
[ 1715.483273]  get_zeroed_page+0x11/0x20
[ 1715.487216]  mount_fs+0x1cc/0x2a1
[ 1715.490670]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1715.495155]  do_mount+0x417/0x27d0
[ 1715.498804]  ? retint_kernel+0x2d/0x2d
[ 1715.502781]  ? copy_mount_string+0x40/0x40
[ 1715.507015]  ? copy_mount_options+0x19e/0x2f0
[ 1715.511622]  ? copy_mount_options+0x1fe/0x2f0
[ 1715.516177]  SyS_mount+0xab/0x120
[ 1715.519639]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1715.523525]  do_syscall_64+0x1e8/0x640
[ 1715.527409]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1715.532256]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1715.537460] RIP: 0033:0x45b399
[ 1715.540645] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1715.548353] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1715.555609] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1715.562862] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1715.570126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1715.577397] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000008
15:33:19 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000229ec253a40000000cf00000000000000000000000000000000fe9e1c667e34377ec5bc3436db4170c46b95c367873353e8f66a4d7c323e72e28e15481b357503b0aba9a6de317062305c86398d2a57b3e7ceaa4af7b1d2ef92bc06650b73466014b39cd1fbc62e61856e3fbfd4daf515af7cea5410708af377d77a78"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40840)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)
r3 = getpid()
sched_getscheduler(r3)

15:33:19 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:19 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000d00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e803000008010000080100000000000000030000000300000003000004000000ed99c73960182af7a17ecb128be6974c380ebbb4cb1b7c844b29", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000801000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000100000073797a3000000000000000000000000000000000000000000000000007000000000000000001000100000007ff00000000000000010c00000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000ffff0000ff000000000000000000000000080007002000020009020076657468315f766c616e00000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000e800000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101ac14142500000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
tkill(r8, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)

15:33:19 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f00000000c0)=0x7, 0x4)
dup(r0)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
sendfile(r0, r3, &(0x7f0000000000)=0x9, 0x2c3)

15:33:19 executing program 1 (fault-call:4 fault-nth:11):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:19 executing program 0 (fault-call:3 fault-nth:9):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:19 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x9, 0x0, 0x6, 0x0, 'syz1\x00', 0x6})
r2 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r2, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)

[ 1717.371544] FAULT_INJECTION: forcing a failure.
[ 1717.371544] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1717.383524] CPU: 0 PID: 15902 Comm: syz-executor.1 Not tainted 4.14.170-syzkaller #0
[ 1717.387375] FAULT_INJECTION: forcing a failure.
[ 1717.387375] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1717.391433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1717.391440] Call Trace:
[ 1717.391463]  dump_stack+0x142/0x197
[ 1717.391484]  should_fail.cold+0x10f/0x159
[ 1717.391500]  __alloc_pages_nodemask+0x1d6/0x7a0
[ 1717.391510]  ? fs_reclaim_acquire+0x20/0x20
[ 1717.391525]  ? __alloc_pages_slowpath+0x2930/0x2930
[ 1717.391546]  cache_grow_begin+0x80/0x400
[ 1717.391560]  kmem_cache_alloc_trace+0x6b2/0x790
[ 1717.391570]  ? lock_downgrade+0x740/0x740
[ 1717.391596]  sget_userns+0xfe/0xc30
[ 1717.453646]  ? get_anon_bdev+0x1c0/0x1c0
[ 1717.457708]  ? get_anon_bdev+0x1c0/0x1c0
[ 1717.461796]  ? get_anon_bdev+0x1c0/0x1c0
[ 1717.465862]  sget+0xd6/0x120
[ 1717.468875]  ? selinux_sb_copy_data+0x21e/0x390
[ 1717.473689]  ? ovl_put_super+0x4b0/0x4b0
[ 1717.477954]  mount_nodev+0x31/0xf0
[ 1717.481512]  ovl_mount+0x2d/0x40
[ 1717.484890]  mount_fs+0x97/0x2a1
[ 1717.488264]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1717.492768]  do_mount+0x417/0x27d0
[ 1717.496312]  ? retint_kernel+0x2d/0x2d
[ 1717.500209]  ? copy_mount_string+0x40/0x40
[ 1717.504460]  ? copy_mount_options+0x19e/0x2f0
[ 1717.508972]  ? copy_mount_options+0x1fe/0x2f0
[ 1717.513528]  SyS_mount+0xab/0x120
[ 1717.516988]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1717.521086]  do_syscall_64+0x1e8/0x640
[ 1717.525105]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1717.529963]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1717.535154] RIP: 0033:0x45b399
[ 1717.538346] RSP: 002b:00007f77063c3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1717.546066] RAX: ffffffffffffffda RBX: 00007f77063c46d4 RCX: 000000000045b399
[ 1717.553347] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1717.560629] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
15:33:19 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
sendmsg$inet_sctp(r1, &(0x7f0000001280)={&(0x7f0000000000)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001200)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)="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", 0x1000}], 0x2, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000000000000840000000600000029008400000007000000e000000100000000"], 0x30, 0x40000}, 0x4)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
syz_open_dev$video(&(0x7f00000013c0)='/dev/video#\x00', 0x7fff, 0x4c4200)
ptrace$cont(0x9, r0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000001380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f0000001400)=ANY=[@ANYBLOB="24000000dc528ec34e1cb6c57cba320489623795b67fbede1a2835d08203b6d687b77981c6767a9c1841f97ca99da717a0ecb723190d6f09b2a4c3519d562d604d6c48b72e74cac47b2029b4e27fce7d49b9743403afb90d64113fb9619156281e0d05af15d6cbbb8121e349ee91455327", @ANYRES16=r3, @ANYBLOB="20002bbd7000fedbdf250300000008000c00010000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x1)

[ 1717.567915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1717.575297] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000000000b
[ 1717.583164] CPU: 1 PID: 15906 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1717.591066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1717.600433] Call Trace:
[ 1717.603031]  dump_stack+0x142/0x197
[ 1717.606679]  should_fail.cold+0x10f/0x159
[ 1717.610834]  ? __might_sleep+0x93/0xb0
[ 1717.614755]  __alloc_pages_nodemask+0x1d6/0x7a0
[ 1717.619567]  ? check_preemption_disabled+0x3c/0x250
[ 1717.624598]  ? __alloc_pages_slowpath+0x2930/0x2930
[ 1717.627161] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1717.629620]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1717.629637]  ? __alloc_pages_nodemask+0x639/0x7a0
[ 1717.629653]  alloc_pages_current+0xec/0x1e0
[ 1717.629668]  __get_free_pages+0xf/0x40
[ 1717.642141] overlayfs: failed to verify upper root origin
[ 1717.642330]  get_zeroed_page+0x11/0x20
[ 1717.664783]  selinux_sb_copy_data+0x2a/0x390
[ 1717.669477]  security_sb_copy_data+0x75/0xb0
[ 1717.673906]  mount_fs+0x1ec/0x2a1
[ 1717.677404]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1717.681922]  do_mount+0x417/0x27d0
[ 1717.685475]  ? retint_kernel+0x2d/0x2d
[ 1717.689382]  ? copy_mount_string+0x40/0x40
[ 1717.693632]  ? copy_mount_options+0x19e/0x2f0
[ 1717.698142]  ? copy_mount_options+0x1fe/0x2f0
[ 1717.702665]  SyS_mount+0xab/0x120
[ 1717.706124]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1717.710033]  do_syscall_64+0x1e8/0x640
[ 1717.713941]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1717.718805]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1717.724000] RIP: 0033:0x45b399
[ 1717.727195] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1717.728864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pig=15904 comm=syz-executor.5
[ 1717.734939] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1717.734946] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1717.734951] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
15:33:19 executing program 1 (fault-call:4 fault-nth:12):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:19 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x600080, 0x0)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
ioctl$TCSBRK(r5, 0x5409, 0x4)
ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000240)=""/4096)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000180)={0x1, 0x9c, 0x2})
r6 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

15:33:19 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)

[ 1717.734956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1717.734961] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000009
15:33:19 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x0, 0x0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

15:33:20 executing program 0 (fault-call:3 fault-nth:10):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1717.841129] FAULT_INJECTION: forcing a failure.
[ 1717.841129] name failslab, interval 1, probability 0, space 0, times 0
[ 1717.908326] CPU: 1 PID: 15923 Comm: syz-executor.1 Not tainted 4.14.170-syzkaller #0
[ 1717.916259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1717.922884] FAULT_INJECTION: forcing a failure.
[ 1717.922884] name failslab, interval 1, probability 0, space 0, times 0
[ 1717.925777] Call Trace:
[ 1717.939656]  dump_stack+0x142/0x197
[ 1717.943472]  should_fail.cold+0x10f/0x159
[ 1717.947625]  should_failslab+0xdb/0x130
[ 1717.951600]  __kmalloc+0x2f0/0x7a0
[ 1717.955346]  ? __list_lru_init+0x6b/0x660
[ 1717.959500]  __list_lru_init+0x6b/0x660
[ 1717.963495]  sget_userns+0x500/0xc30
[ 1717.967210]  ? get_anon_bdev+0x1c0/0x1c0
[ 1717.971294]  ? get_anon_bdev+0x1c0/0x1c0
[ 1717.975352]  sget+0xd6/0x120
[ 1717.978427]  ? selinux_sb_copy_data+0x21e/0x390
[ 1717.983129]  ? ovl_put_super+0x4b0/0x4b0
[ 1717.987211]  mount_nodev+0x31/0xf0
[ 1717.990768]  ovl_mount+0x2d/0x40
[ 1717.994135]  mount_fs+0x97/0x2a1
[ 1717.997515]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1718.002023]  do_mount+0x417/0x27d0
[ 1718.005588]  ? retint_kernel+0x2d/0x2d
[ 1718.009477]  ? copy_mount_string+0x40/0x40
[ 1718.013722]  ? copy_mount_options+0x19e/0x2f0
[ 1718.018227]  ? copy_mount_options+0x1fe/0x2f0
[ 1718.022859]  SyS_mount+0xab/0x120
[ 1718.026307]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1718.030198]  do_syscall_64+0x1e8/0x640
[ 1718.034092]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1718.038950]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1718.044140] RIP: 0033:0x45b399
[ 1718.047319] RSP: 002b:00007f77063c3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1718.055031] RAX: ffffffffffffffda RBX: 00007f77063c46d4 RCX: 000000000045b399
[ 1718.062303] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1718.069568] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1718.076839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1718.084107] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000000000c
[ 1718.091424] CPU: 0 PID: 15936 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1718.099321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1718.108684] Call Trace:
[ 1718.111412]  dump_stack+0x142/0x197
[ 1718.115067]  should_fail.cold+0x10f/0x159
[ 1718.119235]  should_failslab+0xdb/0x130
[ 1718.123222]  kmem_cache_alloc_trace+0x2e9/0x790
[ 1718.127900]  ? lock_downgrade+0x740/0x740
[ 1718.132156]  ? do_raw_spin_unlock+0x174/0x260
[ 1718.136666]  sget_userns+0xfe/0xc30
[ 1718.140609]  ? get_anon_bdev+0x1c0/0x1c0
[ 1718.144683]  ? get_anon_bdev+0x1c0/0x1c0
[ 1718.148759]  ? get_anon_bdev+0x1c0/0x1c0
[ 1718.152954]  sget+0xd6/0x120
[ 1718.155988]  ? selinux_sb_copy_data+0x21e/0x390
[ 1718.160672]  ? ovl_put_super+0x4b0/0x4b0
[ 1718.164742]  mount_nodev+0x31/0xf0
[ 1718.168292]  ovl_mount+0x2d/0x40
[ 1718.171765]  mount_fs+0x97/0x2a1
[ 1718.175143]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1718.179661]  do_mount+0x417/0x27d0
[ 1718.183211]  ? retint_kernel+0x2d/0x2d
[ 1718.187120]  ? copy_mount_string+0x40/0x40
[ 1718.191368]  ? copy_mount_options+0x19e/0x2f0
[ 1718.195886]  ? copy_mount_options+0x1fe/0x2f0
[ 1718.200422]  SyS_mount+0xab/0x120
[ 1718.203879]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1718.207759]  do_syscall_64+0x1e8/0x640
[ 1718.211642]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1718.216495]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1718.221679] RIP: 0033:0x45b399
[ 1718.224883] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1718.232592] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1718.239970] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1718.248019] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1718.255283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1718.262547] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000000000a
15:33:22 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:22 executing program 1 (fault-call:4 fault-nth:13):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:22 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f00000000c0)=0x8)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r4 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

15:33:22 executing program 0 (fault-call:3 fault-nth:11):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:22 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)

[ 1720.427172] FAULT_INJECTION: forcing a failure.
[ 1720.427172] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1720.439265] CPU: 1 PID: 15948 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1720.447175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1720.456557] Call Trace:
[ 1720.459274]  dump_stack+0x142/0x197
[ 1720.462936]  should_fail.cold+0x10f/0x159
[ 1720.467313]  __alloc_pages_nodemask+0x1d6/0x7a0
[ 1720.472027]  ? fs_reclaim_acquire+0x20/0x20
[ 1720.476473]  ? __alloc_pages_slowpath+0x2930/0x2930
[ 1720.481520]  cache_grow_begin+0x80/0x400
[ 1720.485607]  kmem_cache_alloc_trace+0x6b2/0x790
[ 1720.490293]  ? lock_downgrade+0x740/0x740
[ 1720.494586]  sget_userns+0xfe/0xc30
[ 1720.498225]  ? get_anon_bdev+0x1c0/0x1c0
[ 1720.502311]  ? get_anon_bdev+0x1c0/0x1c0
[ 1720.506385]  ? get_anon_bdev+0x1c0/0x1c0
[ 1720.510481]  sget+0xd6/0x120
[ 1720.513512]  ? selinux_sb_copy_data+0x21e/0x390
[ 1720.518220]  ? ovl_put_super+0x4b0/0x4b0
[ 1720.522293]  mount_nodev+0x31/0xf0
[ 1720.525846]  ovl_mount+0x2d/0x40
[ 1720.529328]  mount_fs+0x97/0x2a1
[ 1720.532838]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1720.537360]  do_mount+0x417/0x27d0
[ 1720.540904]  ? retint_kernel+0x2d/0x2d
[ 1720.544790]  ? copy_mount_string+0x40/0x40
[ 1720.549099]  ? copy_mount_options+0x19e/0x2f0
[ 1720.553600]  ? copy_mount_options+0x1fe/0x2f0
[ 1720.558104]  SyS_mount+0xab/0x120
[ 1720.561564]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1720.565459]  do_syscall_64+0x1e8/0x640
[ 1720.569354]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1720.574207]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1720.579412] RIP: 0033:0x45b399
[ 1720.582591] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1720.590298] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1720.597573] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1720.605089] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1720.612450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1720.619764] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000000000b
15:33:22 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x187c00, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file1', [{0x20, 'security'}, {}, {0x20, 'workdir'}, {0x20, 'upperdir'}, {0x20, '(keyring'}, {0x20, 'lowerdir'}, {0x20, 'overlay\x00'}], 0xa, "2761f6cf885c568e2ab6abdf295659c7161ed5660bdb0cf86d5f1d35df76137c0b577fb7b7485c623b879650d6d00e6ac3938809c6ac4ef42f022f10628586f905d4599b65746668856725fd4d501c0d4423b2184eae896c90ebc0171eea74cd3dff755fed1e6b3039808dbf8fddf260fe5e6c42ad8bfd5506ac452fc3b1b60d7d06843f690d82f53170b326dc00f25497880bf7bbbb296dd518fbe26feb153b71f056fd6348e4c175778d6e8eea5a58ec564525d296b267de8ed485a31e2c3e3e8d3df9e058706377df92a9534e94d3556880e491df8121b47c8b8f604ef8e519af9b3de6feef32e5851da83bb9290bc02864ca"}, 0x135)

[ 1720.629471] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1720.637063] overlayfs: failed to verify upper root origin
15:33:22 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x800)
fcntl$getown(r1, 0x9)

15:33:22 executing program 0 (fault-call:3 fault-nth:12):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:22 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpid()
tkill(r8, 0x9)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)

15:33:22 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x1e000, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

[ 1720.731874] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1720.739404] overlayfs: failed to verify upper root origin
[ 1720.747770] overlayfs: workdir and upperdir must reside under the same mount
15:33:22 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
r3 = socket$inet(0x2, 0x3, 0x4)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={<r4=>0x0, @local, @local}, &(0x7f00000000c0))
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x1c, r2, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2a19}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x80)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
sendto(r3, &(0x7f00000002c0)="3d72449c", 0x4, 0x4001060, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80)

[ 1720.822064] FAULT_INJECTION: forcing a failure.
[ 1720.822064] name failslab, interval 1, probability 0, space 0, times 0
[ 1720.846856] CPU: 1 PID: 15973 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1720.854955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1720.864421] Call Trace:
[ 1720.867032]  dump_stack+0x142/0x197
[ 1720.870687]  should_fail.cold+0x10f/0x159
[ 1720.874870]  should_failslab+0xdb/0x130
[ 1720.878983]  __kmalloc+0x2f0/0x7a0
[ 1720.879736] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1720.882536]  ? lock_downgrade+0x740/0x740
[ 1720.882549]  ? register_shrinker+0xbd/0x220
[ 1720.882562]  register_shrinker+0xbd/0x220
[ 1720.882576]  sget_userns+0x9bf/0xc30
[ 1720.882584]  ? get_anon_bdev+0x1c0/0x1c0
[ 1720.882602]  ? get_anon_bdev+0x1c0/0x1c0
[ 1720.882612]  sget+0xd6/0x120
[ 1720.882622]  ? selinux_sb_copy_data+0x21e/0x390
[ 1720.882634]  ? ovl_put_super+0x4b0/0x4b0
[ 1720.882643]  mount_nodev+0x31/0xf0
[ 1720.882654]  ovl_mount+0x2d/0x40
[ 1720.882666]  mount_fs+0x97/0x2a1
[ 1720.894454] overlayfs: failed to verify upper root origin
[ 1720.898444]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1720.898460]  do_mount+0x417/0x27d0
[ 1720.898472]  ? retint_kernel+0x2d/0x2d
[ 1720.898486]  ? copy_mount_string+0x40/0x40
[ 1720.913404] ptrace attach of "/root/syz-executor.3"[15979] was attempted by "/root/syz-executor.3"[15980]
[ 1720.914457]  ? copy_mount_options+0x19e/0x2f0
[ 1720.914470]  ? copy_mount_options+0x1fe/0x2f0
[ 1720.914485]  SyS_mount+0xab/0x120
[ 1720.980649]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1720.984566]  do_syscall_64+0x1e8/0x640
[ 1720.988468]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1720.993422]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1720.998766] RIP: 0033:0x45b399
[ 1721.002125] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1721.009977] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
15:33:23 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'], 0x1)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000))
ptrace$cont(0x9, r0, 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000200), 0x0, 0x200000}])
ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2)
syz_open_pts(r2, 0x242000)

[ 1721.017260] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1721.024542] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1721.031833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1721.039251] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000000000c
[ 1721.072583] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1721.079822] overlayfs: failed to verify upper root origin
15:33:25 executing program 0 (fault-call:3 fault-nth:13):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:25 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0x1, 0x27, "817784294933421d30e5b112cd20d5b92afab2dae13965672c8ecdbd85ddd2271da74d6e31b524"})
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:33:25 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:25 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='fuseblk\x00', 0x3000, &(0x7f00000001c0)='workdir')
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
llistxattr(0xfffffffffffffffe, &(0x7f0000000340)=""/5, 0x5)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7570706572a3ff1782db7ee57fa0f30fa264667f00000069723d2e2f66696c65312c776f726b646972362e2f66692f1354538a2c6c65315c00000000000000000000000000284bf71cc1ac312266c8eab89063602bde02b50982813ff47c423f60d989db85e5688ada7b5226000000"])
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x200000, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00'}, &(0x7f0000000240)=0x78)

15:33:25 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
tkill(0x0, 0x9)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)

[ 1723.445675] FAULT_INJECTION: forcing a failure.
[ 1723.445675] name failslab, interval 1, probability 0, space 0, times 0
[ 1723.446143] overlayfs: unrecognized mount option "upper£ÿ‚Û~å ó¢df" or missing value
[ 1723.485640] CPU: 1 PID: 16000 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1723.493574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1723.502939] Call Trace:
[ 1723.505541]  dump_stack+0x142/0x197
[ 1723.509206]  should_fail.cold+0x10f/0x159
[ 1723.510433] overlayfs: unrecognized mount option "upper£ÿ‚Û~å ó¢df" or missing value
[ 1723.513377]  should_failslab+0xdb/0x130
[ 1723.513390]  __kmalloc+0x2f0/0x7a0
[ 1723.529136]  ? lock_downgrade+0x740/0x740
[ 1723.533383]  ? register_shrinker+0xbd/0x220
[ 1723.537707]  register_shrinker+0xbd/0x220
[ 1723.541849]  sget_userns+0x9bf/0xc30
[ 1723.545548]  ? get_anon_bdev+0x1c0/0x1c0
[ 1723.549599]  ? get_anon_bdev+0x1c0/0x1c0
[ 1723.553825]  sget+0xd6/0x120
[ 1723.556841]  ? selinux_sb_copy_data+0x21e/0x390
[ 1723.561510]  ? ovl_put_super+0x4b0/0x4b0
[ 1723.565556]  mount_nodev+0x31/0xf0
[ 1723.569089]  ovl_mount+0x2d/0x40
[ 1723.572457]  mount_fs+0x97/0x2a1
[ 1723.575820]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1723.580329]  do_mount+0x417/0x27d0
[ 1723.583866]  ? retint_kernel+0x2d/0x2d
[ 1723.587747]  ? copy_mount_string+0x40/0x40
[ 1723.592037]  ? copy_mount_options+0x19e/0x2f0
[ 1723.596518]  ? copy_mount_options+0x1fe/0x2f0
[ 1723.601004]  SyS_mount+0xab/0x120
[ 1723.604446]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1723.608334]  do_syscall_64+0x1e8/0x640
[ 1723.612305]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1723.617231]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1723.622408] RIP: 0033:0x45b399
[ 1723.625580] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1723.633275] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1723.640592] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
15:33:25 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='openpromfs\x00', 0xb0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upper7ddir=./file0,lowerdir=./file1,workdir=./file1'])

[ 1723.647869] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1723.655141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1723.662484] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000000000d
15:33:25 executing program 0 (fault-call:3 fault-nth:14):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:25 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setgid(r0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:25 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
tkill(0x0, 0x9)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)

[ 1723.708322] overlayfs: unrecognized mount option "upper7ddir=./file0" or missing value
15:33:25 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1000, 0x0, <r0=>0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x990a7c, 0x9, [], @string=&(0x7f0000000140)=0x81}})
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x2, 0x7, 0x3, 0x0, 0x0, {0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x1)

[ 1723.763525] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1723.771019] overlayfs: failed to verify upper root origin
[ 1723.779296] overlayfs: workdir and upperdir must reside under the same mount
15:33:25 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x40, 0x1)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4000000000400204)

[ 1723.846421] FAULT_INJECTION: forcing a failure.
[ 1723.846421] name failslab, interval 1, probability 0, space 0, times 0
[ 1723.855315] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1723.868790] overlayfs: failed to verify upper root origin
[ 1723.878503] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1723.886679] overlayfs: failed to verify upper root origin
[ 1723.887318] CPU: 0 PID: 16023 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1723.900129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1723.909488] Call Trace:
[ 1723.912091]  dump_stack+0x142/0x197
[ 1723.915736]  should_fail.cold+0x10f/0x159
[ 1723.919904]  should_failslab+0xdb/0x130
[ 1723.923899]  kmem_cache_alloc_trace+0x2e9/0x790
[ 1723.928584]  ? register_shrinker+0x1a4/0x220
[ 1723.933011]  ovl_fill_super+0xdf/0x2660
[ 1723.936998]  ? up_write+0x1a/0x60
[ 1723.940458]  ? register_shrinker+0x1a9/0x220
[ 1723.944880]  ? ovl_put_super+0x4b0/0x4b0
[ 1723.948951]  ? sget_userns+0x76b/0xc30
[ 1723.952842]  ? get_anon_bdev+0x1c0/0x1c0
[ 1723.956924]  ? get_anon_bdev+0x1c0/0x1c0
[ 1723.960992]  ? sget+0xde/0x120
[ 1723.964193]  ? selinux_sb_copy_data+0x21e/0x390
[ 1723.968876]  ? ovl_put_super+0x4b0/0x4b0
[ 1723.972957]  mount_nodev+0x52/0xf0
[ 1723.976507]  ovl_mount+0x2d/0x40
[ 1723.979890]  mount_fs+0x97/0x2a1
[ 1723.983395]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1723.987906]  do_mount+0x417/0x27d0
[ 1723.991450]  ? retint_kernel+0x2d/0x2d
[ 1723.995353]  ? copy_mount_string+0x40/0x40
[ 1724.000328]  ? copy_mount_options+0x19e/0x2f0
[ 1724.004845]  ? copy_mount_options+0x1fe/0x2f0
[ 1724.009439]  SyS_mount+0xab/0x120
[ 1724.012879]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1724.016753]  do_syscall_64+0x1e8/0x640
[ 1724.020624]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1724.025461]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1724.030641] RIP: 0033:0x45b399
[ 1724.033813] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
15:33:26 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
ptrace$poke(0x4, r1, &(0x7f0000000000), 0x3)
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:26 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
tkill(0x0, 0x9)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)

15:33:26 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x88409c, &(0x7f0000000180)={[], [{@dont_hash='dont_hash'}], 0xf603000000000000})

[ 1724.041523] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1724.048782] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1724.056039] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1724.063301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1724.070647] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000000000e
15:33:28 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:28 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x6)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
init_module(&(0x7f0000000100)='.*#\x00', 0x4, &(0x7f0000000180)='\x00')
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xfff, 0x1, 0x7, 0x2}, {0x8, 0x20, 0x1, 0xfff}, {0x2, 0x4, 0x4, 0x100}]})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:33:28 executing program 0 (fault-call:3 fault-nth:15):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:28 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2700, 0x0)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000001c0)='syz0\x00')
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:28 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
dup3(r2, r3, 0x0)
r7 = getpid()
tkill(r7, 0x9)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)

15:33:28 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f00000012c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x3)
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x781002, 0x0)
recvfrom$x25(r0, &(0x7f00000002c0)=""/4096, 0x1000, 0x12121, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, r0, 0x1f224000)
r1 = accept4$llc(r0, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x10, 0x0)
getsockname$llc(r1, &(0x7f0000001300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001340)=0x10)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f668842ae27ad696c65312c776f726b6469723d2e2f6669daf87b7e0a7c081bfe4d38255f0f94219b536571bc7be92d43ce6f31411b26ab17e1c3552ed103000000cd66f29f"])

[ 1726.514985] FAULT_INJECTION: forcing a failure.
[ 1726.514985] name failslab, interval 1, probability 0, space 0, times 0
[ 1726.539117] o2cb: This node has not been configured.
[ 1726.545219] o2cb: Cluster check failed. Fix errors before retrying.
[ 1726.553680] CPU: 1 PID: 16051 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1726.561730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1726.571215] Call Trace:
[ 1726.573818]  dump_stack+0x142/0x197
[ 1726.577600]  should_fail.cold+0x10f/0x159
[ 1726.581779]  should_failslab+0xdb/0x130
[ 1726.585907]  __kmalloc+0x2f0/0x7a0
[ 1726.589499]  ? lock_downgrade+0x740/0x740
[ 1726.593894]  ? register_shrinker+0xbd/0x220
[ 1726.598357]  register_shrinker+0xbd/0x220
[ 1726.602526]  sget_userns+0x9bf/0xc30
[ 1726.606255]  ? get_anon_bdev+0x1c0/0x1c0
[ 1726.610336]  ? get_anon_bdev+0x1c0/0x1c0
15:33:28 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
wait4(r3, &(0x7f0000000000), 0x20000000, 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r4=>0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000240)={0x7f, 0x2, {0x2, 0x1, 0x0, 0x3, 0xf15}, 0x376a})
io_submit(r4, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$RTC_PIE_OFF(r2, 0x7006)
prctl$PR_SET_TSC(0x1a, 0x1)
r6 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

15:33:28 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="349100"], 0x1)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000))
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 1726.614411]  sget+0xd6/0x120
[ 1726.617446]  ? selinux_sb_copy_data+0x21e/0x390
[ 1726.622131]  ? ovl_put_super+0x4b0/0x4b0
[ 1726.626210]  mount_nodev+0x31/0xf0
[ 1726.629773]  ovl_mount+0x2d/0x40
[ 1726.633269]  mount_fs+0x97/0x2a1
[ 1726.636705]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1726.641226]  do_mount+0x417/0x27d0
[ 1726.644788]  ? retint_kernel+0x2d/0x2d
[ 1726.648706]  ? copy_mount_string+0x40/0x40
[ 1726.652960]  ? copy_mount_options+0x19e/0x2f0
[ 1726.657473]  ? copy_mount_options+0x1fe/0x2f0
[ 1726.662041]  SyS_mount+0xab/0x120
[ 1726.665517]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1726.669532]  do_syscall_64+0x1e8/0x640
[ 1726.673439]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1726.678474]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1726.683682] RIP: 0033:0x45b399
[ 1726.686992] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1726.694725] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1726.702014] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
15:33:28 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000340)=""/7, 0x7)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xb00, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000280)={0x7, 0xc, 0x4, 0x1000000, 0x3, {0x77359400}, {0x5, 0x1, 0x9, 0xa, 0x8, 0x8, "2fbcbc3f"}, 0xa4, 0x4, @planes=&(0x7f0000000240)={0x1f, 0x97, @userptr=0xa5a2}, 0x7, 0x0, r3})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x200000, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000003c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r5, &(0x7f0000000440)="d68542a0effd1488f69cafb7b1b6cf2c1e234f55d0e630c8400c4660ea06b7145ced626b14b595ade25d010000000090000000b38459b3e20be9ae7e9145cad30700f21d27e4c5d38e08bd3e18d47e74b112dc397f558f974a2e9b474eda08fb9ff52b1576b26c12cbd1ec934fb9a147548216942cb2b0b2a32e37c3c4dc4a80b78d9c878782", 0x86, 0x200000}])
ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0xc, 0x4)
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1726.709297] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1726.716687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1726.723973] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000000000f
[ 1726.747823] (syz-executor.1,16050,1):user_dlm_register:681 ERROR: status = -22
15:33:28 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
dup3(r2, r3, 0x0)
r7 = getpid()
tkill(r7, 0x9)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)

15:33:28 executing program 0 (fault-call:3 fault-nth:16):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1726.766182] (syz-executor.1,16050,1):dlmfs_mkdir:497 ERROR: Error -22 could not register domain "file0"
15:33:28 executing program 1:
mkdir(&(0x7f0000000040)='./file1\x00', 0xe1)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1726.952340] FAULT_INJECTION: forcing a failure.
[ 1726.952340] name failslab, interval 1, probability 0, space 0, times 0
[ 1726.967680] CPU: 0 PID: 16092 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1726.975605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1726.985098] Call Trace:
[ 1726.987704]  dump_stack+0x142/0x197
[ 1726.991336]  should_fail.cold+0x10f/0x159
[ 1726.995480]  should_failslab+0xdb/0x130
[ 1726.999568]  kmem_cache_alloc_trace+0x2e9/0x790
[ 1727.004244]  ? register_shrinker+0x1a4/0x220
[ 1727.008657]  ovl_fill_super+0xdf/0x2660
[ 1727.012696]  ? up_write+0x1a/0x60
[ 1727.016262]  ? register_shrinker+0x1a9/0x220
[ 1727.020678]  ? ovl_put_super+0x4b0/0x4b0
[ 1727.024733]  ? sget_userns+0x76b/0xc30
[ 1727.028616]  ? get_anon_bdev+0x1c0/0x1c0
[ 1727.032696]  ? get_anon_bdev+0x1c0/0x1c0
[ 1727.036757]  ? sget+0xde/0x120
[ 1727.040069]  ? selinux_sb_copy_data+0x21e/0x390
[ 1727.044744]  ? ovl_put_super+0x4b0/0x4b0
[ 1727.048870]  mount_nodev+0x52/0xf0
[ 1727.052405]  ovl_mount+0x2d/0x40
[ 1727.055761]  mount_fs+0x97/0x2a1
[ 1727.059232]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1727.063742]  do_mount+0x417/0x27d0
[ 1727.067465]  ? retint_kernel+0x2d/0x2d
[ 1727.071491]  ? copy_mount_string+0x40/0x40
[ 1727.075833]  ? copy_mount_options+0x19e/0x2f0
[ 1727.080320]  ? copy_mount_options+0x1fe/0x2f0
[ 1727.084932]  SyS_mount+0xab/0x120
[ 1727.088377]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1727.092490]  do_syscall_64+0x1e8/0x640
[ 1727.096522]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1727.101378]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1727.106566] RIP: 0033:0x45b399
[ 1727.109757] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1727.117478] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1727.124942] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1727.132315] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1727.139627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1727.146891] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000010
15:33:31 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:31 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x1, @multicast2}, 0xffffffffffffffb3)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000})
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

15:33:31 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
lstat(&(0x7f0000000240)='./file1\x00', &(0x7f00000001c0))
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:31 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
dup3(r2, r3, 0x0)
r7 = getpid()
tkill(r7, 0x9)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)

15:33:31 executing program 0 (fault-call:3 fault-nth:17):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1729.559742] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1729.568002] FAULT_INJECTION: forcing a failure.
[ 1729.568002] name failslab, interval 1, probability 0, space 0, times 0
[ 1729.576860] overlayfs: failed to verify upper root origin
[ 1729.580892] CPU: 0 PID: 16103 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1729.592817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1729.602292] Call Trace:
[ 1729.604903]  dump_stack+0x142/0x197
15:33:31 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = memfd_create(&(0x7f0000000880)='#em1#+\x00', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
bind$netrom(r4, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x10000a, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1729.608561]  should_fail.cold+0x10f/0x159
[ 1729.612733]  should_failslab+0xdb/0x130
[ 1729.616881]  __kmalloc+0x2f0/0x7a0
[ 1729.620433]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1729.626083]  ? match_strdup+0x5f/0xa0
[ 1729.629893]  match_strdup+0x5f/0xa0
[ 1729.633695]  ovl_fill_super+0x71a/0x2660
[ 1729.637765]  ? ovl_put_super+0x4b0/0x4b0
[ 1729.641826]  ? sget_userns+0x76b/0xc30
[ 1729.645715]  ? get_anon_bdev+0x1c0/0x1c0
[ 1729.649781]  ? get_anon_bdev+0x1c0/0x1c0
[ 1729.653962]  ? sget+0xde/0x120
[ 1729.657150]  ? selinux_sb_copy_data+0x21e/0x390
[ 1729.661826]  ? ovl_put_super+0x4b0/0x4b0
[ 1729.666010]  mount_nodev+0x52/0xf0
[ 1729.669739]  ovl_mount+0x2d/0x40
[ 1729.673105]  mount_fs+0x97/0x2a1
[ 1729.676578]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1729.681082]  do_mount+0x417/0x27d0
[ 1729.684621]  ? retint_kernel+0x2d/0x2d
[ 1729.688603]  ? copy_mount_string+0x40/0x40
[ 1729.692839]  ? copy_mount_options+0x19e/0x2f0
[ 1729.697334]  ? copy_mount_options+0x1fe/0x2f0
[ 1729.701840]  SyS_mount+0xab/0x120
[ 1729.705293]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1729.709292]  do_syscall_64+0x1e8/0x640
[ 1729.713174]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1729.718034]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1729.723302] RIP: 0033:0x45b399
[ 1729.726480] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1729.734295] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1729.741573] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1729.748911] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
15:33:31 executing program 0 (fault-call:3 fault-nth:18):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1729.756198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1729.763465] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000011
15:33:31 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r2, 0x2, 0x8000030, r3, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = getpid()
tkill(r5, 0x9)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)

15:33:31 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000001c0)=""/4096)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:32 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x2e, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 1729.835203] FAULT_INJECTION: forcing a failure.
[ 1729.835203] name failslab, interval 1, probability 0, space 0, times 0
[ 1729.911493] CPU: 1 PID: 16116 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1729.919415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1729.928887] Call Trace:
[ 1729.931527]  dump_stack+0x142/0x197
[ 1729.935183]  should_fail.cold+0x10f/0x159
[ 1729.939360]  should_failslab+0xdb/0x130
[ 1729.943354]  __kmalloc_track_caller+0x2ec/0x790
[ 1729.948152]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1729.953622]  ? rcu_read_lock_sched_held+0x110/0x130
15:33:32 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765f36469723d2e2f66db6065c5911d2a726b64698b3d2e2f66696c65315c00"])
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x90a80, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000400)={'caif0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[], 0x0)
connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x110, 0x1, 0xff, "84d2d5c9bc4d38776c40b291e5796e64", "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"}, 0x110, 0x1)

[ 1729.958763]  ? ovl_mount_dir+0x2a/0x1a0
[ 1729.962758]  kstrdup+0x3a/0x70
[ 1729.966096]  ovl_mount_dir+0x2a/0x1a0
[ 1729.969911]  ovl_fill_super+0x420/0x2660
[ 1729.974000]  ? ovl_put_super+0x4b0/0x4b0
[ 1729.978187]  ? sget_userns+0x76b/0xc30
[ 1729.982095]  ? get_anon_bdev+0x1c0/0x1c0
[ 1729.986182]  ? get_anon_bdev+0x1c0/0x1c0
[ 1729.990258]  ? sget+0xde/0x120
[ 1729.993466]  ? selinux_sb_copy_data+0x21e/0x390
[ 1729.998161]  ? ovl_put_super+0x4b0/0x4b0
[ 1730.002366]  mount_nodev+0x52/0xf0
[ 1730.006061]  ovl_mount+0x2d/0x40
[ 1730.009550]  mount_fs+0x97/0x2a1
[ 1730.012929]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1730.017432]  do_mount+0x417/0x27d0
[ 1730.020975]  ? retint_kernel+0x2d/0x2d
[ 1730.024903]  ? copy_mount_string+0x40/0x40
[ 1730.029253]  ? copy_mount_options+0x19e/0x2f0
[ 1730.033769]  ? copy_mount_options+0x1fe/0x2f0
[ 1730.038273]  SyS_mount+0xab/0x120
[ 1730.041742]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1730.045643]  do_syscall_64+0x1e8/0x640
[ 1730.049543]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1730.054503]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1730.059816] RIP: 0033:0x45b399
[ 1730.062995] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1730.070799] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1730.078123] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1730.085496] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1730.092887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1730.100156] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000012
15:33:32 executing program 0 (fault-call:3 fault-nth:19):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1730.174463] overlayfs: unrecognized mount option "loweódir=./fÛ`eÅ‘*rkdi‹=./file1\" or missing value
[ 1730.203838] overlayfs: unrecognized mount option "loweódir=./fÛ`eÅ‘*rkdi‹=./file1\" or missing value
[ 1730.242656] FAULT_INJECTION: forcing a failure.
[ 1730.242656] name failslab, interval 1, probability 0, space 0, times 0
[ 1730.270954] CPU: 0 PID: 16140 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1730.278907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1730.288273] Call Trace:
[ 1730.290950]  dump_stack+0x142/0x197
[ 1730.294585]  should_fail.cold+0x10f/0x159
[ 1730.298748]  should_failslab+0xdb/0x130
[ 1730.302727]  __kmalloc_track_caller+0x2ec/0x790
[ 1730.307412]  ? ovl_mount_dir+0x2a/0x1a0
[ 1730.311433]  kstrdup+0x3a/0x70
[ 1730.314624]  ovl_mount_dir+0x2a/0x1a0
[ 1730.318551]  ovl_fill_super+0x87b/0x2660
[ 1730.322630]  ? ovl_put_super+0x4b0/0x4b0
[ 1730.326762]  ? sget_userns+0x76b/0xc30
[ 1730.330649]  ? get_anon_bdev+0x1c0/0x1c0
[ 1730.334712]  ? get_anon_bdev+0x1c0/0x1c0
[ 1730.338932]  ? sget+0xde/0x120
[ 1730.342132]  ? selinux_sb_copy_data+0x21e/0x390
[ 1730.346807]  ? ovl_put_super+0x4b0/0x4b0
[ 1730.350984]  mount_nodev+0x52/0xf0
[ 1730.354518]  ovl_mount+0x2d/0x40
[ 1730.357978]  mount_fs+0x97/0x2a1
[ 1730.361355]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1730.365859]  do_mount+0x417/0x27d0
[ 1730.369536]  ? retint_kernel+0x2d/0x2d
[ 1730.373427]  ? copy_mount_string+0x40/0x40
[ 1730.377777]  ? copy_mount_options+0x19e/0x2f0
[ 1730.382288]  ? copy_mount_options+0x1fe/0x2f0
[ 1730.386793]  SyS_mount+0xab/0x120
[ 1730.390239]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1730.394126]  do_syscall_64+0x1e8/0x640
[ 1730.398013]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1730.402875]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1730.408192] RIP: 0033:0x45b399
[ 1730.411397] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1730.419097] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1730.426363] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1730.433643] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1730.441024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1730.448311] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000013
15:33:34 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:34 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r2, 0x2, 0x8000030, r3, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = getpid()
tkill(r5, 0x9)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)

15:33:34 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x844)

15:33:34 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
clock_gettime(0x0, &(0x7f00000001c0)={<r4=>0x0, <r5=>0x0})
io_getevents(r3, 0xffffffffe83ba323, 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000200)={r4, r5+30000000})
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000080)=0x100)
chdir(&(0x7f00000000c0)='./file0\x00')
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x3c)
ptrace$cont(0x18, r6, 0x0, 0x0)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r6, 0x0, 0x0)
r7 = gettid()
ptrace$setopts(0x4206, r7, 0x0, 0x0)
tkill(r7, 0x3c)
ptrace$cont(0x18, r7, 0x0, 0x0)
ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080))
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r8, 0xb701, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000380)={0x9a0000, 0x5, 0x3f, <r9=>r8, 0x0, &(0x7f0000000340)={0x98091d, 0xb9c, [], @p_u16=&(0x7f0000000240)=0x9}})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x10000, @dev={0xfe, 0x80, [], 0x20}, 0x2}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e22, 0x3, @remote, 0x6}, @in6={0xa, 0x4e23, 0x23, @dev={0xfe, 0x80, [], 0x37}, 0x5}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @local}], 0xb0)
ptrace$cont(0x20, r7, 0x0, 0x0)
rt_tgsigqueueinfo(r6, r7, 0x3a, &(0x7f00000002c0)={0xc, 0x1, 0x4})
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:34 executing program 0 (fault-call:3 fault-nth:20):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1732.591137] FAULT_INJECTION: forcing a failure.
[ 1732.591137] name failslab, interval 1, probability 0, space 0, times 0
[ 1732.615749] CPU: 1 PID: 16149 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1732.623678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1732.633275] Call Trace:
[ 1732.635892]  dump_stack+0x142/0x197
[ 1732.639549]  should_fail.cold+0x10f/0x159
[ 1732.643723]  should_failslab+0xdb/0x130
[ 1732.647725]  __kmalloc_track_caller+0x2ec/0x790
[ 1732.652407]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1732.658007]  ? rcu_read_lock_sched_held+0x110/0x130
[ 1732.663040]  ? ovl_mount_dir+0x2a/0x1a0
[ 1732.667183]  kstrdup+0x3a/0x70
[ 1732.670390]  ovl_mount_dir+0x2a/0x1a0
[ 1732.674214]  ovl_fill_super+0x420/0x2660
[ 1732.678309]  ? ovl_put_super+0x4b0/0x4b0
[ 1732.682386]  ? sget_userns+0x76b/0xc30
[ 1732.686291]  ? get_anon_bdev+0x1c0/0x1c0
[ 1732.690504]  ? get_anon_bdev+0x1c0/0x1c0
[ 1732.694583]  ? sget+0xde/0x120
[ 1732.697812]  ? selinux_sb_copy_data+0x21e/0x390
[ 1732.702505]  ? ovl_put_super+0x4b0/0x4b0
[ 1732.706575]  mount_nodev+0x52/0xf0
[ 1732.710127]  ovl_mount+0x2d/0x40
[ 1732.713508]  mount_fs+0x97/0x2a1
[ 1732.716875]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1732.721364]  do_mount+0x417/0x27d0
[ 1732.724900]  ? retint_kernel+0x2d/0x2d
[ 1732.728836]  ? copy_mount_string+0x40/0x40
[ 1732.733081]  ? copy_mount_options+0x19e/0x2f0
[ 1732.737599]  ? copy_mount_options+0x1fe/0x2f0
[ 1732.742145]  SyS_mount+0xab/0x120
[ 1732.745601]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1732.749492]  do_syscall_64+0x1e8/0x640
[ 1732.753375]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1732.758241]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1732.763430] RIP: 0033:0x45b399
[ 1732.766616] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1732.774326] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1732.781595] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
15:33:34 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
getresuid(&(0x7f0000000140), &(0x7f0000000180)=<r0=>0x0, &(0x7f00000001c0))
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xfffffff9, 0x2, 0x0, 0x38000000, 0x7f, "c18ba89c57717da7e31e03d0f71116bf30f00a", 0x4, 0x5})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00')
setuid(r2)
mount$overlay(0x40000f, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)={[], [{@euid_gt={'euid>', r0}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>', r2}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_user={'subj_user', 0x3d, '-'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x30, 0x33, 0x31, 0x39, 0x64, 0x61, 0x39], 0x2d, [0x63, 0x66, 0x36, 0x31], 0x2d, [0x64, 0x62, 0x63, 0x30], 0x2d, [0x32, 0x30, 0x36], 0x2d, [0x64, 0x66, 0x35, 0x66, 0x66, 0x62, 0x63, 0x35]}}}, {@dont_hash='dont_hash'}, {@measure='measure'}, {@dont_hash='dont_hash'}], 0xf603000000000000})

15:33:34 executing program 0 (fault-call:3 fault-nth:21):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1732.788870] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1732.796142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1732.803540] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000014
15:33:35 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r2, 0x2, 0x8000030, r3, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x2}, @in6={0xa, 0x4e23, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x2}], 0xffffff4a)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = getpid()
tkill(r5, 0x9)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)

[ 1732.915013] FAULT_INJECTION: forcing a failure.
[ 1732.915013] name failslab, interval 1, probability 0, space 0, times 0
[ 1732.926487] CPU: 1 PID: 16165 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1732.934511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1732.943990] Call Trace:
[ 1732.946600]  dump_stack+0x142/0x197
[ 1732.950259]  should_fail.cold+0x10f/0x159
[ 1732.951624] overlayfs: unrecognized mount option "euid>00000000000000000000" or missing value
[ 1732.954428]  should_failslab+0xdb/0x130
[ 1732.954442]  kmem_cache_alloc+0x2d7/0x780
[ 1732.954455]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1732.954472]  getname_kernel+0x53/0x350
[ 1732.980982]  kern_path+0x20/0x40
[ 1732.984370]  ovl_mount_dir_noesc+0x5f/0x140
[ 1732.988715]  ovl_mount_dir+0xf3/0x1a0
[ 1732.992540]  ovl_fill_super+0x420/0x2660
[ 1732.996629]  ? ovl_put_super+0x4b0/0x4b0
[ 1733.000767]  ? sget_userns+0x76b/0xc30
[ 1733.004762]  ? get_anon_bdev+0x1c0/0x1c0
[ 1733.008939]  ? get_anon_bdev+0x1c0/0x1c0
[ 1733.013266]  ? sget+0xde/0x120
[ 1733.016450]  ? selinux_sb_copy_data+0x21e/0x390
[ 1733.021249]  ? ovl_put_super+0x4b0/0x4b0
[ 1733.025318]  mount_nodev+0x52/0xf0
[ 1733.028854]  ovl_mount+0x2d/0x40
[ 1733.032351]  mount_fs+0x97/0x2a1
[ 1733.035719]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1733.040360]  do_mount+0x417/0x27d0
[ 1733.043915]  ? retint_kernel+0x2d/0x2d
[ 1733.047819]  ? copy_mount_string+0x40/0x40
[ 1733.052158]  ? copy_mount_options+0x19e/0x2f0
[ 1733.056807]  ? copy_mount_options+0x1fe/0x2f0
[ 1733.061471]  SyS_mount+0xab/0x120
[ 1733.064937]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1733.068837]  do_syscall_64+0x1e8/0x640
[ 1733.072726]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1733.077729]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1733.082960] RIP: 0033:0x45b399
[ 1733.086254] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1733.094004] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1733.101277] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1733.108711] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
15:33:35 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r4, 0x0, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000800)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7370f2f410a35d48}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x78, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x3c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:33:35 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000005c0)={{0xa, 0x3, 0x6b74, 0x1, '\x00', 0x5}, 0x0, [0x396f15a6, 0x4, 0x5, 0x9, 0x5, 0x100000000, 0x9, 0x9, 0x7, 0x3f, 0x2, 0x81, 0x8, 0xffffffff80000001, 0x1, 0x74ba, 0x7ff, 0x4, 0x8, 0x0, 0xc1, 0xffffffffffffffff, 0x1, 0x1ff, 0x7, 0x10000, 0x5, 0x3, 0x8, 0x2, 0x1000000000000, 0x2, 0x0, 0x5, 0xb99e, 0x3, 0x10001, 0xb39, 0xfffffffffffffeff, 0x100000000, 0x20000000, 0x7, 0x7fff, 0x3, 0xd405, 0xf4bf, 0x5, 0x0, 0x1ff, 0x1f, 0x800, 0x9, 0x4, 0x100, 0x4, 0x0, 0x0, 0x1fffc0000000000, 0x8, 0x2, 0x6, 0x8, 0x8, 0x8, 0x8000, 0x9, 0x0, 0xfffffffffffffffa, 0xc1e2, 0xfd93, 0x80000001, 0x1, 0x9, 0xa1, 0x400, 0x7ff, 0x7, 0x4, 0x6, 0x9, 0x6, 0x81, 0x8, 0x81, 0x6, 0x2a9, 0x1, 0x6, 0x165, 0x400, 0x1, 0xffffffff, 0x400, 0x5c16, 0xfc00000000000000, 0x5, 0x0, 0x8000000000, 0x0, 0x1f, 0x3, 0x109, 0x2, 0x7, 0x1, 0x2, 0x6, 0x7fffffff, 0xfffffffffffffffa, 0x3ff, 0x7, 0xfffffffffffffbff, 0x3, 0x2, 0x400, 0x0, 0x5, 0x8, 0x1f, 0xa741, 0x0, 0x1ff, 0xc8d, 0x400, 0x1000, 0x4, 0x3, 0x10000]})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8)
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x2f}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1f, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0xc}}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x33}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008030}, 0x20040000)

[ 1733.115994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1733.123277] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000015
15:33:35 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
pipe(&(0x7f0000000280))
r6 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = getpid()
tkill(r7, 0x9)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)

15:33:35 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
r4 = creat(&(0x7f0000000980)='./file1/file0\x00', 0x0)
write$6lowpan_control(r4, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x1c, r5, 0x200, 0x70bd2a, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x2004c084)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, r5, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004000)
r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r7 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7ad584", 0xd3, r6)
stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
keyctl$chown(0x4, r7, r8, r9)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r1, r3, r9}, 0xc)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r10 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r10, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r10, 0x3c)
ptrace$setregs(0xd, r10, 0x1, &(0x7f0000000540)="9cd434e0c802d7da34dbad9dd33b5a32c6ec484cb63e6215611d554348de212d2196")
ptrace$cont(0x9, r10, 0x0, 0x0)

[ 1733.181874] overlayfs: failed to resolve './file0': -12
[ 1733.236837] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1733.264453] overlayfs: failed to verify upper root origin
[ 1733.303992] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1733.323386] overlayfs: failed to verify upper root origin
15:33:37 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:37 executing program 0 (fault-call:3 fault-nth:22):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:37 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x90000, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f0000000240)=0x2)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={0x0, @default, @rose={'rose', 0x0}, 0xffffffcf, 'syz0\x00', @default, 0x0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:37 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
syncfs(r0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
syz_mount_image$ntfs(&(0x7f0000000200)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)="b69be81e0f3ced0b9942b691123ed8bee02d4bb5d2781dd73a236fb085120ffe1f05609376cecaf302d9d22ca60b3434d316a6194260bca6975e88162413575d1ba38c9923f791a7b3f5fb06972ca67946722ba5cb2a1a3bda175f829374c5f9d8415a90dd902038d4397baaf7b5e99e8065ab63de", 0x75}], 0x40800, &(0x7f0000000380)={[], [{@fsmagic={'fsmagic', 0x3d, 0xfffffffffffeffff}}, {@smackfsroot={'smackfsroot', 0x3d, '[*['}}, {@audit='audit'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'wlan0lo'}}, {@measure='measure'}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'em0'}}, {@dont_appraise='dont_appraise'}]})
futimesat(r1, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={{r2, r3/1000+10000}})

15:33:37 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
r6 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = getpid()
tkill(r7, 0x9)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)

15:33:37 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r6=>0x0)
io_submit(r6, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r5, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000100)={@local, @multicast2, <r7=>0x0}, &(0x7f0000000180)=0xc)
sendmsg$nl_route_sched(r3, &(0x7f0000000f80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000240)=@newchain={0xcec, 0x64, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffe0, 0x7}, {0x5, 0x18}, {0xa, 0x2}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xca0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_INDEV={0x14, 0x8, 'bridge0\x00'}, @TCA_U32_LINK={0x8, 0x3, 0xcbd3}, @TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_POLICE={0xc60, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x0, 0x6, 0x8, 0xfffffffb, 0x1, 0xa6, 0x7f, 0x2, 0x1, 0x9, 0x7fff, 0x7, 0x4f, 0x7, 0x0, 0x1, 0xee65, 0x6, 0x0, 0xfffffffb, 0x9, 0x3ff, 0x8001, 0x800000, 0x1, 0x1000, 0x9, 0xfffffffb, 0x8000, 0xffff, 0x10000, 0x5, 0x94, 0xe461, 0x13e52f1e, 0x0, 0x10000, 0x9, 0x9, 0x1, 0x4, 0x40, 0x80000001, 0x10000, 0x4, 0x5, 0x4, 0x6, 0x1, 0x28, 0x80, 0x800, 0x6, 0x4, 0x2, 0x7b, 0xf1fe, 0x5, 0x10001, 0x4, 0x0, 0x254a, 0x4, 0xcd0, 0xcbe, 0xffffff00, 0xe981, 0x1, 0x5, 0xffff1a64, 0x1ff, 0x6, 0x9, 0x4, 0xbf100000, 0x80000001, 0x2, 0x1, 0x7, 0x2, 0x8, 0x6, 0x1, 0x5, 0x8, 0x4, 0x3, 0x1, 0x64, 0x80, 0x0, 0x401, 0xfffffff7, 0x3, 0x1f, 0x3, 0x2, 0x7, 0x6, 0xa0b3, 0xffff8001, 0x401, 0x8000, 0x9, 0x1, 0x9, 0x3, 0x10000, 0x1, 0x0, 0x99b, 0x4, 0x1, 0x9, 0x8, 0x8001, 0x3, 0x5, 0x200, 0x2, 0x401, 0x2, 0x1, 0x81, 0x7, 0x12cf6bc2, 0x1ff, 0x80000000, 0xfffff800, 0x4, 0x7, 0x200, 0x0, 0x2, 0x2, 0x2, 0x6, 0x5, 0x7ff, 0xff, 0x3, 0x9, 0xa0e1, 0x40, 0x211, 0x2c36, 0x200, 0x0, 0x3ff, 0x80, 0x101, 0x101, 0x80, 0x9, 0x6, 0x5, 0x2, 0x5, 0x401, 0x80000001, 0x1c0f, 0x678049ff, 0x80000000, 0x5, 0x200, 0xe04, 0x3ff, 0xffff, 0x3, 0x8, 0x1, 0xc28, 0x7, 0x2, 0x1, 0x0, 0x4, 0x99, 0xe, 0xfffffff7, 0x4, 0x1, 0x2, 0x8000, 0x0, 0x829, 0x8001, 0x65, 0x128f, 0x1, 0x401, 0xd51, 0x100, 0x800, 0x2, 0x1, 0x9, 0x7, 0x8, 0x2, 0x2, 0x69, 0x7f, 0x8, 0x3f, 0x100, 0x80, 0x6, 0x6, 0x3, 0x400, 0x2, 0x20, 0xffffffff, 0x8, 0x40, 0x0, 0x80000000, 0x8f, 0x3ff, 0x1, 0x0, 0x0, 0x8000, 0xfa2a, 0x1, 0x6, 0x7ff, 0x3, 0xffff7fff, 0x65, 0x9, 0x81, 0xf86d, 0x8, 0x80000001, 0x1f, 0x2, 0x0, 0x3, 0x6, 0x0, 0x100, 0x2, 0x1, 0x7, 0x6, 0x0, 0x1ff, 0x3, 0x1, 0x6, 0x3, 0x6, 0xff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x9, 0x6f8, 0x5, {0xbf, 0x1, 0x7, 0xfff7, 0x3f, 0x2}, {0xfd, 0x0, 0xfd, 0x7, 0x200, 0x7}, 0x2, 0x1, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x8001, 0x1ff, 0x1f, 0x33111eda, 0xe0000000, 0x800, 0x1, 0x9, 0xd34, 0x7fff, 0x5, 0x8000, 0x850, 0x5, 0x1, 0x7, 0x1f, 0x6, 0x3, 0xe67, 0x8, 0xfd56, 0x8, 0x56a, 0x0, 0x80, 0x7, 0x3ff, 0x80000000, 0x20, 0x3ff, 0x8, 0xd456, 0x479, 0x9, 0x80000000, 0x6, 0x401, 0x48b, 0x9, 0x10001, 0x40, 0x80000001, 0x8000, 0x9e4, 0x8, 0x6, 0x80000001, 0x346, 0x800, 0xe51, 0xfd, 0x3, 0x0, 0x2, 0x7, 0x400, 0x10000, 0x7, 0x1, 0x7fffffff, 0x6, 0xfffffffc, 0xee4, 0x5, 0xa87, 0x7, 0x100, 0xf86, 0x7, 0x5, 0x4, 0x6, 0x9, 0x5, 0x9, 0x10000, 0x80000000, 0x9e9, 0xd32c, 0x9, 0x3f, 0x5, 0x6, 0x81, 0x80, 0x8000, 0x3, 0x80000000, 0x7, 0x4, 0x40000000, 0x5, 0x1f, 0x101, 0x89c, 0x4a0f, 0xfc00000, 0x12, 0xffffffe1, 0xa5c, 0x3, 0xff, 0x800, 0x1f, 0x0, 0xa1, 0x1400, 0x993, 0xdb0, 0xffff46f3, 0x3, 0x8001, 0x9, 0x3ff, 0x8, 0x4, 0x1ff, 0x6, 0x81, 0x6, 0x8, 0x100, 0x9, 0xfffffffb, 0x7fffffff, 0x2, 0xf2ec, 0xffffffff, 0x34a, 0x7, 0xf1b3, 0x10001, 0x1, 0x2, 0x1, 0x9, 0xfc52, 0x9, 0x2, 0x1, 0x0, 0x4, 0x3f, 0x0, 0x10001, 0x3, 0x8, 0x9, 0x5, 0x1, 0x0, 0x6, 0x283a8, 0x80000000, 0x5, 0x80000000, 0x7, 0x85, 0x6, 0x2, 0x8, 0x1, 0xfffffffd, 0x3, 0x4, 0x1, 0x0, 0xffff, 0x5c8b9cd3, 0x7ff, 0x31, 0x10001, 0x2, 0xb5, 0x9, 0xffffffff, 0x0, 0x0, 0x10001, 0x401, 0x1ff, 0x9, 0x9, 0xfffffe00, 0x3ff, 0xfffffff9, 0x7f, 0x4, 0x7fff, 0xfffffc00, 0x100, 0x8, 0x2ae81892, 0x7ff, 0x2d, 0x8, 0x5, 0xd89, 0xa4, 0x2, 0x2, 0x9, 0x6, 0xffff, 0x0, 0xfffffff9, 0x0, 0x1, 0x9, 0x4, 0x7fff, 0x9, 0x80000000, 0x8, 0x400, 0x3, 0x4, 0x8, 0x1747, 0x74a, 0x76, 0x6, 0x7, 0x80, 0x0, 0xffff, 0x400, 0x1, 0x7, 0x2, 0x80000000, 0x7, 0x4, 0x3f, 0x3, 0x0, 0xbde6, 0xfdc, 0x1, 0x8, 0x6, 0x401, 0x9, 0x80000000, 0xff, 0x5, 0x0, 0x7fff, 0x27a9, 0xbb2, 0xaa, 0x7fffffff, 0x80000001, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf407, 0x400, 0x3, 0x10000, 0xce, 0x6, 0x1, 0x5, 0x9, 0x2, 0x9, 0x2, 0x5, 0x4, 0x8, 0xfff, 0x1000, 0x8, 0x0, 0xa389, 0x0, 0x4, 0x3ff, 0x8, 0x9, 0x1, 0x2, 0x5, 0x7, 0x40, 0x40000000, 0x38b266a2, 0x1, 0x1, 0x4, 0x10000, 0x5, 0x7f, 0x2, 0x8a9e7c0e, 0x61af0839, 0x3, 0xb5, 0xffffffc2, 0x4, 0xfffffffa, 0x987, 0x94, 0x81, 0x4, 0x349, 0x80000000, 0xfc00, 0x2, 0xffff0001, 0x1, 0x4, 0x8001, 0x0, 0x6, 0x10001, 0x8d, 0xfff, 0x400, 0x8d, 0x8, 0x7f, 0x0, 0x4, 0x6, 0xb616, 0x2fd, 0x0, 0x2, 0x6f0, 0x3, 0x7ff, 0x518, 0x6, 0x6, 0x9, 0x9, 0x3f, 0x1, 0x7fffffff, 0x3, 0x3, 0x7, 0xea76, 0xfffffffa, 0x0, 0xc800, 0x3, 0x3ab8, 0x200, 0x1000, 0x3ec1400, 0xf101, 0x8, 0x0, 0x0, 0x3869, 0x1, 0x401, 0xffff, 0x1, 0x4, 0x1, 0xc9c, 0x20000000, 0x8001, 0x7c2, 0x757, 0x1, 0x1, 0xffff, 0xfffffffd, 0x100, 0x10000, 0x2, 0x1, 0x8, 0x9, 0x7fff, 0x4, 0xfff, 0x0, 0x401, 0x6, 0x80000001, 0x401, 0xfff, 0x0, 0x0, 0x3, 0x9, 0x8, 0x8, 0x9, 0x3, 0x9, 0x40, 0x2, 0x9, 0x1, 0x1, 0x1000, 0xe7, 0x80000000, 0x3, 0x3, 0x0, 0x6, 0xb21, 0x5, 0x10000, 0x6, 0xfffffff8, 0xfff, 0x34f, 0x6, 0x3, 0xedd, 0x7, 0x7, 0xffffff7f, 0x7, 0x4, 0x0, 0x5, 0x5, 0x6, 0x4, 0x1, 0x7, 0x538, 0xffffffff, 0x2, 0x3, 0x64c32c2c, 0x6, 0x5, 0x1, 0x527, 0x3f, 0xfff, 0x7fffffff, 0x8, 0x101, 0x20, 0x3, 0x6, 0x5, 0x6, 0x0, 0x6, 0x9, 0x1e, 0x4, 0x1, 0x1, 0x9, 0x3507, 0x9, 0x1ff, 0x5, 0x100, 0x100, 0x4, 0x3, 0x8, 0x3, 0x101, 0x1f, 0xe39, 0x5, 0x7, 0x0, 0x80000000, 0x6, 0x3, 0x4, 0x401, 0x7ff, 0x40, 0x6, 0x7, 0x5, 0x0, 0x2, 0x7fffffff, 0x646e, 0x6, 0x3, 0x1, 0x0, 0x2, 0x1, 0x7, 0x4, 0x200, 0x1f, 0x5, 0x3, 0x2, 0x1, 0x8, 0x5, 0x1, 0x6, 0x0, 0x3, 0x7, 0x4, 0x80000001, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x39}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x6e}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x1}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x101}, @TCA_RATE={0x6, 0x5, {0x21, 0x7}}]}, 0xcec}, 0x1, 0x0, 0x0, 0x40001}, 0x20004000)
r8 = gettid()
ptrace$setopts(0x4206, r8, 0x0, 0x0)
tkill(r8, 0x3c)
ptrace$cont(0x18, r8, 0x0, 0x0)
ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r8, 0x0, 0x0)
ptrace$setsig(0x4203, r8, 0x2, &(0x7f0000000fc0)={0x1, 0x9, 0x7})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
bind$pptp(r9, &(0x7f0000000000)={0x18, 0x2, {0x3, @broadcast}}, 0x1e)

15:33:37 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1735.656101] FAULT_INJECTION: forcing a failure.
[ 1735.656101] name failslab, interval 1, probability 0, space 0, times 0
[ 1735.693968] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1735.733269] CPU: 1 PID: 16198 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1735.741597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1735.751588] Call Trace:
[ 1735.754391]  dump_stack+0x142/0x197
[ 1735.758065]  should_fail.cold+0x10f/0x159
[ 1735.762538]  should_failslab+0xdb/0x130
[ 1735.766631]  kmem_cache_alloc+0x2d7/0x780
[ 1735.771034]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1735.777001]  getname_kernel+0x53/0x350
15:33:37 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
r6 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = getpid()
tkill(r7, 0x9)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)

[ 1735.781206]  kern_path+0x20/0x40
[ 1735.784721]  ovl_mount_dir_noesc+0x5f/0x140
[ 1735.789571]  ovl_mount_dir+0xf3/0x1a0
[ 1735.793650]  ovl_fill_super+0x87b/0x2660
[ 1735.797760]  ? ovl_put_super+0x4b0/0x4b0
[ 1735.802172]  ? sget_userns+0x76b/0xc30
[ 1735.806197]  ? get_anon_bdev+0x1c0/0x1c0
[ 1735.811422]  ? get_anon_bdev+0x1c0/0x1c0
[ 1735.815514]  ? sget+0xde/0x120
[ 1735.818727]  ? selinux_sb_copy_data+0x21e/0x390
[ 1735.824307]  ? ovl_put_super+0x4b0/0x4b0
[ 1735.828924]  mount_nodev+0x52/0xf0
[ 1735.832756]  ovl_mount+0x2d/0x40
[ 1735.836694]  mount_fs+0x97/0x2a1
[ 1735.840358]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1735.845082]  do_mount+0x417/0x27d0
[ 1735.848733]  ? retint_kernel+0x2d/0x2d
[ 1735.853198]  ? copy_mount_string+0x40/0x40
[ 1735.857491]  ? copy_mount_options+0x19e/0x2f0
[ 1735.862316]  ? copy_mount_options+0x1fe/0x2f0
[ 1735.867217]  SyS_mount+0xab/0x120
[ 1735.870791]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1735.874954]  do_syscall_64+0x1e8/0x640
15:33:38 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000100)=0x32, 0x4)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x80100, 0x0)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10)
shmget(0x2, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
[ 1735.879918]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1735.884800]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1735.890472] RIP: 0033:0x45b399
[ 1735.893683] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1735.901893] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1735.910157] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1735.917736] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1735.925115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
sendmmsg(r2, &(0x7f0000006d00)=[{{&(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @local}, 0x3, 0x4, 0x3, 0x1}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000007c0)="48b27de4c6819943d3a11e468adaf3a84c2f578f3a0fcb3b84915e8ea4d7de21b7d1642132410cb1aba1a088e002de46c9547b016e5e24936a8495f6", 0x3c}], 0x1, &(0x7f0000000840)=[{0x100, 0x10e, 0x5, "0ffb89b46c4b8c4ecae8af9556e45c0672bd52919ee1e7dbd43c2d5c1cd6c87c4014fb9a8a69f08f691126857df72f0e75ac48707e8baafb76dbe928edd7b0b73eafdf217c5f8ddf882c89fcdf3b56f9f76ade02e38754626e65fcaddfaaad3453cf56f1bae083c16f174c1f5bc77602bed97e1e643e8c08999e93ab1f6e8b6d6ac00007a8e0587376aee973ee24db00ea968db7592d2fc3475071afe0503b803d7a28ea6454326320751a86dca4ce5c740b1e7cb1290ab4595749aa852b7cd1abdab8c41b215fcb7a26130deff165685ca8c97ee8974b60e3719b352c8908143b7886a50f22e5c503e259"}, {0x1010, 0x108, 0x2, "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"}, {0xa8, 0x10b, 0x3ff, "9a6f1ffa611b24eedf7b26fc17025a7ca54db09e50f92866ef213b30c834827cd797a08845782fb76e3afcd5adb9b3ce0c4e65ae883f1faebb895a07d38d57d6220e1fe2f3d4d4c20b2a4bd86f8a9ac1056213fd339a03ffe0d7e458e9d56790de64adf08a6dd2a7c7504f787736eab5c76ac639f2b0ff140a3565e991ed50327ccf4d028004bbad9921ececba157f3f3add35"}, {0x48, 0x10b, 0x200, "61d3d54408bfb1c47a9348c6ca433fe024a567ba8d8f80e49d8f72239c01f30e4dc4b849b2acd5be4c0d8e580c59bb4691e686ba536c5b"}, {0xd8, 0x103, 0x1, "641a843b9f1bd5a923a1482d5ffca88478bdfad1f3512d6820b0dbce5b377671e2d2a3fe460908e3ddaa06ba1f41849d3a45862ba432893eb7ba5c03a44b3b007e76675c7e5e2fc1fd20ccf7d1a7a77622f70af85027a18b196b234a4ccdac2dacd772e4647dbe823b1cd99eda89fb6e69064b7bd8bafee41d1ab5feb10b03d578de2020e06a8c86c10c74f3a3cb25d77dd760e7b392f64c4b33e2828bdc7da1256594b83967ef5bf029bad104e0f29821df419181f7cda1625060ab4edb2309421fa01547b87bc0"}], 0x12d8}}, {{&(0x7f0000001b40)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @multicast1}, 0x0, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001bc0)="bf1e26daf52bd42fe76f1573cb422e78395e48788ab0efcbefe7086390975a3944", 0x21}, {&(0x7f0000001c00)="6b4cb114bcd7982716508db22cc7e1ba1117fb1d936443e58c49f9539b2d8aeea1b02138bb7225057d55f3a60e4439818418c48ad230a981422a2a62061d4bd967451a3df7481f7f1662f86e9aeeb2306bd7585ee53a1fbce776f8d3d21d96dd8900ac97fda9dd5f4416cc010c87a822297c711908d17ca8fc3c3c282547fd6e1e60a560e34964864708903b3eab8af08a131df85916aae44a318e5f5bb614a641c1356555b9d9ccae28cf35e99d286b551cd4af4ab8", 0xb6}, {&(0x7f0000001cc0)="1c376d94d63f2f2f4c5dfaecb3cbc341bcbf225ab30dbfda3569a8e60438e856fe4fea236c15e1e3c0d3014e5a474cd71aa437a0ff59040f54e428bbb626495160f14faf9b321ebc9370a08f697b51295adb991a692aaf70f8db32f959660b4bb35180c17a8b9a04c3c4d1dbe072d23d98a2b4992d1411a9f41d7d48bd9f27574a69ec2fd7a95405bfb8df5f7c544aca708a270b8b9509d338386c6a6068cf5be5bd30e40bd084d3691e6166c818c9c2a29539576f57db64b4a5de203c6097bc47bb183d0d051f8a85facf49cace9d74f40ee3cf9c6af57817b0cc016f63", 0xde}, {&(0x7f0000001dc0)="555ee86b5862626f779bb7dc51c7bee90c185bca201bf2bd9aef633ad7f381add9da39be15068c75fd3e3cd079680cd1c002936b53168f16ffeff038fffea6c3479ca0fbd87254936ed09741f562a328032fdcbc8df4227442cbcfefbd97ad82697f5aaa4178a5249c9da37bb0ea97ea8d37b0791d8ef149ad7da5035bbf9815c9d9e06f7d262569dfcb5fac497bca47858b", 0x92}, {&(0x7f0000001e80)="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", 0x1000}], 0x5, &(0x7f0000002f00)=[{0xf8, 0x1, 0x2, "dae89d612394d4fede32eb7f1a600f85fd91f1feb5ecf6e5c265cbcc22eca85b8c44c56bfbfa4ef04d859efd5dbb73e72fc0e4dd5f15631ca8199a46fed1e5722815341660390136ec13269b16bae66d0d0cf8107123e1724cb7a05c0b2881ef4a524fba5bcd9bb7bbc28cce0422b8506123f872561a398b066466430851ebca016a3bde1f902708351e81d0cea30ecef8280d124ca922ccd9ef7f83df0e148ee37a6d55d192ccd945c76d47448d8e645e50e15df4ace92579732b4769a0d816b38b61063cf985ee3858447fdcaabc7dc7b8f9882ecb3b71e9567a46c00f61bf352d"}, {0x18, 0x111, 0x8, "b1ca"}, {0xa8, 0x100, 0x1, "4e7602edbe4f992fd73ca78bbf7745260994b6700d540fe75bc61455250e4a20541962655b892a4541ab3220155651bdcb38c2c44a4ca8e34d63e1babfdabc9174fcc61fb73932f9897c07d3260fe3328f6ada6d63f62b3aa9ed7db4c245bd6a0135051d602d81c2e3468f0f534965d768e33dba86ce41b2d3aba70eb95a19ffec02a06a6dbc664afdf665dd045189e70c015068"}, {0xd8, 0x10b, 0xfffff714, "c39eb2176b11240ed3568d36636bee0393858d74c6113db86084d9a00822b685b4ec766b1d59a5b494c72f3c74726c8a6b2ad176a35b961bd9d10421a7e210cf7897581aa0984c5cd50f34aaaad96d6c2ef19a43c2a458f72eee48212ca262104288a89b82d83b3b63c030caf3efbe8ac42816a6e0bdf713023dac75840a2ad4950cc908c78ca6dceb09d4f28ea3d86756ee99c6b36adeb3549af50d137e892a9b26c611a34dff08027225b844ed4f756fabe4e82ee59254dd776474f2be1a2dcbfe"}, {0xe8, 0x111, 0x3, "cabafcf333ba0957134328ae13b1fcfba4f21c2e4f39b4d5be8f3871a904c92d4249bfd1e0007fd0d80f64973d64aee9c3b2fd4017b1a1aa4141db98f00de47d32aeef3dd335c29389b8c8c56adf7f0e25aebd3ebdef53292b82d4ca8665a691f06a46aef70b07aff724bd0bf79d191b0775dda8698bbbf87fd87a18eca77413ef9f0b1ee2c5407be77988cce0b51e48388e53dac1ff83661c086bc53e737cd7858af2436d373491c1fb4b6682cd6109e0a77a1f9101219c9519153c93dee869f24cc3235dc4d8047ab1e32122ac1836b1c4"}, {0xf0, 0x109, 0x9135, "f759b4bfb715ddaeea69dda95fc28cf34c936451632efa7e1705223ae09deeaa9afb52d19ed953101f51d082ea92a55ef21fd45e598e44349c55ef5acf28074db9702adef299865db80cf3192b68df85beb64586f19739b1c9628b6b6b6373921c531cd8ad7aa7cde5eb2e584cb252a1e833e4f55a336244566dfe57d5bd29e4e58e91fbf844bd94dbff2e7bd83fc0c091dd6ce61964c76dfaf41b23e9fceea20313762e10129511c1f22e7041836c16f63462cfbd94dcab8d0c875c226deb81b32791e7604f744a785ac0cc49181384f93b10a730e4a351ea66afe02eb2"}, {0xd8, 0x3a, 0x0, "f72c35ef0d98ff8f4c031c3cbab6df789dc60db9305756c3101f30fe6880c33e53ccad678efe2791815969f7475fb15f8625a4406a908c80e20a1d29797ad4db3b0f1924778d1273b5c4d0e8de67e11a9dc62ebb8bbf843402ca862b4df354f79f7b0843f4c5351bcc429bc605b8ab29aab815f58c512024730e2cb531d68067975cb769e3d0d865513680e8d6afb39dd653809bf061851d5ce42717af648b76887e1c1209d1b9ced701bce034ac197c241371d780a26c020950af4de698359f7c5e8b5887"}, {0xa0, 0x10f, 0xfffff85a, "1e7e25009ec4e67135047f28666455d1f23ca17b102f71664fd7b378a0cd4c254632f0aa04ef3fea08b237939a76a872a77d47ce114b59f59b71065bf89d7244219681abef2e5822fe02fb31c7f22592ed6e4ea08f5164f9f2feece7e047bf91ebda0ad5ad1c739dd72f7cf0725bd28c270dcb996d275d2aae2b9b166af4514bac035ff705c078e82dad"}], 0x5e0}}, {{&(0x7f0000003500)=@phonet={0x23, 0x2a, 0x8, 0x7}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003580)="4858a42d75810252dbe2669693876174b818456db7d8608fe32c54976cb9979706d17a7261a3071ec129bfd2eea7d56a2d96c0773d314280a6f39827cb77d8eb3a111e723f02e0af7aba0ad188172d9d405f282bb94fd6a0e4204afe0208caf6bcfb2b010471d90109877fa3c281f5d7d1d1c7e8d2a9dbcb6967c47ed362ada6b06586619fc16c5e939447539ffbc8fe86f2b13be15c26046d79a58e8e91cb5ca36bead224c28806ae07171ceacce386a40397a1249127df93dea6bfd37a", 0xbe}, {&(0x7f0000003640)}, {&(0x7f0000003680)="b7e34b594173365f3b078cdb03ee8fcfe92c1acebcd2cddbd90ab2bada17a115bb59437411a3600e962940594403ef4309dcb5a3e38c2f0922d93a17a8bf67065529d2aaee6f08f6945b40a9bd70ea2587df784a", 0x54}, {&(0x7f0000003700)="edbc38c8cc0544982777d402d909b8078fa786de0e2519452f36318ce586a3435d981c636029b2cac341c45c8f73fbeb38a2d4bacdb1702deab5dac8e66725e4b48a", 0x42}], 0x4, &(0x7f00000037c0)=[{0x1010, 0x108, 0x5, "87e25bb971adc794607c388559afb0bc2456f7431de53856ef23cdf9c08b2ff4dd4cfdef74b77769335d635ba1a00bac116c6710d348a0f3f5ba8b91a90d9ca21921ec1aea52f4891d3fd2775167b96bde6ab974ea61aca5a15c8895c72b5fbb450a14a56cbe57d66a00c51d32220db91303ac604ebecbadf27f0fd434cd06506d44834cb22f01a828ed6fb1f4b47a6c9cfe80da4ad6daeff31e9b2bdbb79e1554212fb5c6a866484eb96a4f1cd096d5504fb526461bb4931e069824b7a8c6a2ff9dbf485fd6979eb2bf84a1832d751f22fce0f232e26e1c1f05a81f5f399cf2ff0fde806dcb041fe8c3968331085915c49911be920326559ea26bb72da4c8cebc773cec12c5d133cf3a749a75e935cafcf49cf251787e4106c21f40a41bd86f8f13fdccad4b7bf9cd2c540f79677ec81ca9c4d6dbafc896db725f440a1b5b157e9a8394ad14a8c81faf0a62318e2de7a11b29b711a64d1f8b22b0ac785aee380fa1ecaf4bbb33738e740563613093233a186dc24c1c23dd3809c1317bc6b7550db3ff745ed5b17ce8d4db35d8a246abdefcd54ea8569bec7a4daff7b7a2bb928986ca6360efda729117afc20a6e9645d4279cb16a2101379c069db5a95d44cd358b5742014a0944620733b3f2737b947ed9a872023aed39b46e18c71694d1d52db925204b77e55d5f28e15ec242c6ccfc21e81997158a6c253eed692d1f78620b59f451685074107a2581e401df310bbc78b005b8170a6a5b460f76747ea23c5aa37a7a017692c4713df4ac262abe1ccd272f612dd7fe46bc0ff0b19fed636a01bf7d7ea38c20f580904d282a72413fc90838914e9c762b645995106ba7f3b5c9fcd59b64d83bae9bc3a70a5b2817138f06e40a94841222965b6dc6ef9125716f3708e279c386573b9b6563d28772c9c174c4d3bdffc8a73774658543754460cccb17c0a19ddfb82b4dc4015e700e9afc42fbb5c50d957bcf1aac76ee692adb50e9cc086fc1f86c376224cfd8b61757d1e1eca500cdf8fcc372dc6880f9c3e8d801255ba203e31626231f0d7c90016dd4ae9370f72667d87bfb54bc1660581aee2bd6afc1fe5ed925908d0939c4f5c9b2c17f3b6d1ce392171349388dc78230a87bc010db50b6bd2ae0e892a4e99ec4383a96ad5c7092b2c91a5c54e5c21dbd2caca79d2c32f7e70a539221baf9022703127d1082c9e2be97ec487bccf341fdb706f44b5620d04566d9f40af9a072efaa66ef2614e31a4271bb044b253498a6268dd39255107ddf4eeb6be72e6d5a421a330de392425a62ca9be0707e2e9cf063450972e765c7e85742d79713715de57cf6822866efbd6bdadcfa3d5c4da91e3be9f14770f88023f0d47d0ea7828d64f4beab1825929f3175f893a096900b240bd1564b7ab24ae1d09fa7b40ac7a4a1e5ae50ceb13def5e63d61ad7af37238bf49e12f460d298f8ef2bbe5e2aaca52c428adc40d1c335fbdfc24536677d922a55090381857760469a4ac73cab085b000951edc24ac9896a2b43a8fe2775bfcc7e5e5be12442cef2daaa781e96ac8f19df14c53fb3b69f1d25f7bcc040325b0e80f764e560f7d95de319d1495bfdfefd75670bad62608a2b8b765068889bddcc9325e0f19ca7a78b7f66682a76e35165ce56ee006953573aef3e9d0ad491d75b0198b2b170b337dbf317c40ae2c06d66f99cd6570e5d912c42ec52433e072627e25192e701a29e592f82e755667361392420f386cb831a177e5e9b6d9fccf3fc9cfca025dcabeadacdda5b66270859cc99cfa4144a435a82563624eb294e28706dfc6ef26c90f61bab28d77948bed21fcdef53d701f54e68129ca1acc85588f5160f934c02ca2f6d5d04921eec7ed5640c41af044e7e7324b876b248356ef134022fac8fc62de0af8e4a50248f29e3937a12ce53088b1a4aed2f678e7fefc77d45b5c3873e128fc5adb200f68535fc0dcfff32d1024489f0702d515e11dd2ea6793577e7fd191db40c7408f4522660160729d23d612f5970a5dcba4ded94a17d1276f41a33603a618d81605704d7b8db6d7fa8357a5271cfc73b9291fe24be256ceee72d78dfa2f80536f64ce3b1f6d18dd278a6ca1be4101533ce0c8afe1a88c6f8b3489749636803ea45cadafa0f0e30aadf3367370db476ad4ada94c3f9bd12a3418c7a112cb1c42dcd385c8634a467ef25d5e12afbd0f8a56533c7f1dc0d08bf36c4d082193e3d90aa492e55b97cb4c128b8dfa1fba565f1a428aef8a3e035638c2ab7995f44c3602abd0fd910d6e252fe5dcdb68b4485a822005cb2b4d7328c062f25a1840975ab8d923b251c090821f6954b740d6f88f3e9687317605117d381b848638b233b3869fd676dde38f867f8c2b0868449f8b473306a11f2df74630bf67f2f22341b1efb51fa7cae8091d7b6a8d1d27e60584941a18a60e539d2d164092c54af55e89985ed8efc21348d789b4a8d020b2e6e559f7ee8c17d89f66ec3154e71a764767d5d45f0db64e9dfb5f91c9cee8352a7a0f41a5bb25510a6e35b4fe69e1201cc3ab82d9b0229f259e8fb50e90b3e6e9d17710c3f83ad17f5f9d6267880832a52dffbcba7282a012efc460248eb99989cd8fd4a162252567854e60564c97bc87fc157cb3108c53cb0da77d66d111bb57be84b540c374a7dd351446beec3d1376c5d226abf2ed281c786640824730997a6175856e7c41b32199b6df85f7be16a731a11d6e6497b6c93c6d7d036bc87449aee809f6c58a1e068a4f6beef9036129448d903594ea56df143b613829979106382ad7a40c1faf336555ff5ba61972b12593fc6d7866eb53905a2674eb54520823af796cbbda39b69055f9863abb717a3774af1a549d784b3c8ab2544a7e24d4131cb4ad992597660d3cf2c7dd74f10d307f7f9f1148ec28f4f18d6a2586eda3c5fcbb651592896e04015732f8c0444a5936354bd36543be96ea0a0425c91985e21ec86cac1b0f1f9e144dd4bab549c82e1a2d8452530830058884d3c727df276c99cec8e2ac5d7e0f166f1e89ac3e0e34821a8db40dcb26df8272695ea94caddd290e95c9b3cdb41fd4b358b3db24628506087aca040cff341534d995a20475b1743c0ce8a2ab1d020f08e6995014ba4c4ab90797c2f84336701c4747bd4bbbab64935b50d25d8f9f872dcb407a3efbcf114e9a05ccb03152ceaaa69c7d11f1efbc1b3de37d88588babdebcad9d98058ec385e03aaf59b0262c70f1ee7f5afcc16a7b40398284be7bebf2b5467dbfd6c3c82c5c78712eb4e167ba1fffb37a75a15a88259d64d6094f459442a51ad5773c14d5ab2738db50e7c8aa3763abb739a44124c163ac04aa9ad83ef12eac10716bb66dd622eab90a6f2fee1cbcefdfb3d77fcfe8b9a35d7665ca76fec4f73492c2ef737efb81d1ec0db414ffd270860f75455602b8957d2ac431f9fa71915e6aad89e3712869d6ad787ff932024d64e1f269b77aafff6b924da46b81615239f09b3e375c893c7da8b47f65ea0854a7c33f019b7c8c4fa02d677d2ef8746b24118dd200864888fed5e5e009650be9e49061548fbadbb8ee49e832549254b32453a30d2a8fc5aa46b4c608af3a8521e736ed88ca4b7a58a5e3ff920b7a054f989f8a5190002a805198e9ed242c5ce773f7f19b7c387c27b4841ad0c350296274a0199dc7f08c78c8666375ba8fa6f7130926b571818550ef7bb6d14ed4f2d525eeae435b895edbf731354d2c796f4380239e1063f6fbba50b63761f7cb91bdfd1033470ed12195dc5277e3249c75b29afa9f8e44890184efe5ed54e71dc016badf45ba912977fc441404de462fb38b17307965f68f9c378964c1c654a3e74c15830c1ffe09cdb82f711ac28832a94089969a5a072a08e6ba7cbf138dff863652ec55498f5f8a47667fbfd9e68da1b108f14a9c67ca3a064d0eaaa938cd40204c69a679cf49ced8a8226f2d0bfa445928e5c7ef0a032270b748b3deff489a99dc2381a680520e62abdc541bd95327510b44042dbcf0e2881ff11017b874969be34309303571f53c590752b5775fdd4b64546c34dbab7e14c144123232681d3f0c91ccaca5bc20ef11059827d33d545dd1e7492993850be38a732d380272f72f2a43fbba7cdc781a6f322df181e78f1c339e6abb7c9c4607af1ba81c25d9b75b39d70f65397bc1ecd5c7ae979c5ac977405f107a7bf4d57ca6deec33cf74dbc40c82e6e73c197a4531f894bfe30193c6ffecf2cc08a7bd2b2e853b81b15d29dde35c761dc902bbdac2b820d41360701c45d821ab5c47e507622ab1b9c4581ef02ba68b2e0d803410b3c58ea3eb4b0aa5123ed36de46f393a6ae5c6daae6d5c7e59c4140f3b934fa0196bc829b8f79d425d1b352d230c91be90035983145dbe5b72991614a3f589d15e05d1298cb45e8b2c449788eb012ae3863149a757dc12f19f175186b4a145b4c9874cb17cb789f475fa2a86e82014d6c30097a391d88cfcfd6c48d939ce155d7c745041545f6a7b271bef77f2e8f42cae8a12e151ab59f3cc4d3c32bc09050e6e0291529bdcd0ca54509c80e6bedca1588ca8fd7c9f2fef55fea27bf3dac0dcbdec2c08bd3ec85bf79a935ade27c3cb0b796a8c7b84bf90e73333f19d2a4d897da668602e371fc4d872daca96da879bc0b01d17f1d3772afb8b82b2d4c444391b670907d987e33620a51c81ad99b7cd75858bd357d28720382e5ec177a21768ab75a85f1d57add604f41e2b294479fa1cd87f46294f3de02ea264c47cbd54082e4fdd3010b60ec75cbd258deeee0bc6e008af19e6cce4aaf4d2ce66d2a9e9d315e56e45a1ac353bd766f65b99e7120d0d8d563bfa0741662807a0aae8f682b0a3272c70f6c9398840f189f5da1c46254e8c8c08b5faeb4dbe205c14e9f8255d34013f9a412ee6be48387207de2a1dd6527044c3cab91bdd6c20fd424d179dedb6f0b47c2ac0ed01c69f1835f0ffbe5b4fdb142e7ba45de29fe35500275642330d396aec640a90f33f51fea08de321fca515b29e39d58249abe7d8144668b76d637f47a962bb4ac78a1bf60ea7ba40eb17f79ac87ca55befb9178c589b27eee9b60a357ee4eb99870d2aea577924dd45ede70769ac472591228b01d72dd52f3ca24dac92a6996b73c8405db10c61b4b632d009a1982fa63a7de7db330e22febf8c7eac8a54f171f6d9c830b2d61bd444b8ecc00cb2fe1a9efffb6631fed9872b68c5b71f3387499e716d24c3b77aa522c40caa30ceb514ac2157063dfb53eda42b2fb608cd0476179255b9371614dbab8e7db89766542085d5a9bf36b923eee75d9f31b17b54bd81d786b7d56251ee50fe5ea45654a7bdda7e0f7841f4065d3adfa02c688dd61f84fe8f5b47f92b82f0bd102acc87cdfe6d306b84aaa992e19fff36784e6b0aafe69a3878bec3131a1ffa0c6cb448929a90b62c87e9e97886fec733f057f74501437a5c626a805ef2ea531096b0f3a48c70ba412c8781b6ae4afc56473590cc0c0e040d55a8b1b570effcbf65ae662dc456ff4af32285509ac02d3be7d3297b55d6df8a6988dcc5e074351841f45cec11ba153889b864fd748fca613bdd5460c42f831e269f7668d3a3f3e81be06e61776840d62191710b82d362913ccaf6dd8c616956e4f51bf71addacca499cd5a1af6aea50cc9be0ffe7e180ecc35a33ab9007ecdc05592dcb20ec74b3db2bb8bcbad5897831a0dbe51291882acf9b1f8e300edc0805425e4a3babb76bb8d2537913dda54a9445301e78c6f1fcba6beb7e7c4695b27362d4c76934103"}, {0x78, 0x104, 0x5, "100c100ae78877525a4513fce6278e997c3d6d9eb627bfc5527a136df5c99b0c2920013ce0cfabb9497bbc2a8e1aa7aa3a35360aee4810b2305b7e5dc119c016912e45f3468d859a0e55e62f559aaecc63bb2b7c8045488755b1eee6be2f4b0bbbfa68e6a9"}], 0x1088}}, {{&(0x7f0000004880)=@generic={0x9, "d32336276d1cae81489f1f6ba84f5547495a575f1a07ac279c9d53fb89e973e0325c1b5b36c32d4ea9d07fa493489f3181aa6a74c5954ae9e57a889232b0392a7c544a0ce50f976485e3a9003430df432b4e699b22bd31eb3025b3c42be3bf91b7107d69e325b9e50343a5165e235f0964bee56cb7d6485e6d980a6336e8"}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004900)="734aa9410c01bf451e044f92c86c3aec6d341f58587b508bf92cf7ced17c4b20f2fa504dd3f33002260b800568f36c2a386f653f0521bda2620822755c533b35f203e8a94b8a9f1d82757539b4d5c43a299d8fd5f9bbb099fe05e9ad4bf1b890ce0bbe8a17ae4419b8afadf331363c502f6b8100b9989b8d56b50c66353a39612c7151b8adb6c772d7ff19711b98b7d2fb8be076ba42097f604103da709e5859", 0xa0}, {&(0x7f00000049c0)="ed0e04e20d48aabc11c8eadf5eee19b4f6c404073e784a2cd56b9088edbbf9e4db18aa001cdc1bce368802c551f020a2e5dd71c8dbdbe39e2845d0658ea71ce0c31703a7aac12745fbd04ae447a77dafd527bec9593b84ad751e7b1299b21150a4a2796347b06fffa72aa520d4af3f7f4d7bc602", 0x74}, {&(0x7f0000004a40)="5ae16f7b7a0138abe7dbe42429a9237c46048d22a563a29ff40245b6f41dc3a65fa6ea0bad28a0f3fd8b76975f98f70b4d767744e0ab54bdaaa760334f0878a9aba2862a69053e6941bf4d683b711376b146135cfec89bb69436dd72f458169ed63b8dad73aaefe69340c50c12aefb4c7ea8725e5a3b9d0c41fc72f731849c661ac01c56ceeedde9d4f129eb9d87dc215bc3f101cc9d4c6ae3f9881d59c93c9e456bde2ca50bdb6e5efd7d1ab5f525367a77e1278af0d4646c52da7fddee6cd51bfb0aac38ecbe0dcf232e7c9134842a38e572a028c5a8afc80860b556a234", 0xdf}, {&(0x7f0000004b40)="2e2d653f7e6baafd7ef83d6eed8323def6c8e5865e485b3a8a1d01f67a61a829247eef2db9", 0x25}], 0x4}}, {{&(0x7f0000004bc0)=@llc={0x1a, 0x322, 0x1f, 0x3, 0x20, 0x2, @local}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004c40)="05895b0a7be605690aa9f11ae0773c5bf80ea2c2cee026f41733e453f5fefeb7a920796e0dc73c730ec016d7395dc29a3a9ef4359e0a4582c35f7df0c3eb03672a0e741b6396a43f2ffad7ac1a5425986283ae75b71dc1dbfcae944c3f86b58d871114b3f9129fcf96e090f78c6cbfceacda859b8dc6cfa6b5a9929ba90bf5faa8cd361178e99276a11a7dd4775c6e189618a80cab319cafb21b88b761261d1a09a1f1b4ed86463694c17f33789e84896637fbf1758704a884caf94c1b1d9dd60c42c29f4df1bb630f0d8b535933616f028636b6b91a598f6f7f", 0xda}, {&(0x7f0000004d40)="432374e58a39dd124898312be9cfe04e5ca4b4569b3a4be6106b046d724c8c3204b9f4d5b2b398141a020c22a1e5478cf69d7f98cfe3978e295c23e41c42a32c311bdfd55c565232ce87509938089493754b7a7dab5e8b4d67a9acef89c24f822138a6bf634817b2e50ed2a568c2208fb8ed491e1e2c37c1c33c8e4adc2378a0", 0x80}, {&(0x7f0000004dc0)="30c11ca6800593391fdc59e909e92d16c1d71a8c5da4b525f9ffe6ce61cd2c0d36e84c98123e0de203b4722d523e42d26c9d254db04f251f2415c56cba0a9c3425a9c7a3582ad90f0e0c5626c4a3238f113a258e1a0846638c62b05c1d4c90ae7403bfd812d04bf6aa516846b6fe1726f3660cfe3d925c9a8fb41966c2b830de89b87c5bec33923bb6fa708b06ec96fdf3c278a6b32d44a2dd64d6", 0x9b}, {&(0x7f0000004e80)="80d330e7cfbf751ff6dda49637f53cfa0d1aa92c55e843af3f303987e1", 0x1d}, {&(0x7f0000004ec0)="f31c77d63dd11ab20853eccaa3a1eb876ba6fcd652d0b4dbf8accf8965c2536a591edaedafd1ce0c05b56ad49fe6445ff343b096511d", 0x36}], 0x5, &(0x7f0000004f80)=[{0x30, 0x104, 0x5ad78473, "c72c47373bf703efdc73d7aad284eb86a6f9ab6c03304fe708a1d6373a45"}, {0x40, 0x101, 0x1, "236866ac2a1eeaa258c1d04180a4361855a66de1e1b889e3548e551afcc1dfc0dfa3ffb8d41e7fc01a05d5"}], 0x70}}, {{0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000005000)="30aba125ee1fa0bad7dc441d593cc9dc1a3d88f99f4c9fe27701a03cec1252abf8bff32a7884e8d008fdb40d8890c331d0c7f731c4278d89e344563fb1d2b123079f9fe477662cf964d8645d974e2d72a6e60a2cd845477ac87aa89ee25213d9d01a5d6ccba2d9ff124e3ec5db3a9714a5f6a2ae8cf7eb7441", 0x79}, {&(0x7f0000005080)="6b23e50efb503036b464194c0c24969f69b31ef81eafb9143995e239117328b660d1ebfe54c9f6642f653720fbe06c568d030086682bc1b611b7d17beb11647adf23340bbb48330025b6b90ef792e37498c3c432831f8296c5938ffd46074ea85f594163c927caf441d0cfb12a663904a134ee069fc48c0d18794c20e3d9323d7461f79f7bd3c0d57a9e84545324b1178b6280da90f182bbb24cc355e0d1dc2aebbb0a", 0xa3}, {&(0x7f0000005140)="25d492b28bacc47bb512693e50957e655c197828d30eef2d137a79439a6066f670bed41d516799f150ad657575d4b219dac573926f735df13a14b9b49bbd201be9c904eb15937072cb11e598512affc480", 0x51}, {&(0x7f00000051c0)="353599a202572c9ef2", 0x9}, {&(0x7f0000005200)="ae1e0a792b7db0f871432e71107b0cef12a9dc67925deeea886c2d57d09ecb4f9789d4aeb4d817b50960ac9cccf818", 0x2f}, {&(0x7f0000005240)="4c7214765134674dba403af3a3e001ff872c69d9ced8dc071ccaab9fb1b71f86d0d991b2bac61c4836eb2e1d515d0c316894a094b3b0dced8fa4b935a779be1b125fbe8d7c9aabb00e8a1d81", 0x4c}, {&(0x7f00000052c0)="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", 0x1000}, {&(0x7f00000062c0)="d087f774af5a081515fb11aea0b5b5aeccf551f0eb425b15a736992c77d0d12c3fd6dabc74162b34b65e7190343cae6da13f44bcea3f66691d1f75451161117432c5d7f8cd00a76a51fe513a67a2888a7db1435e80a2183be6b2ee34a69af111dc9e3ab5a2256da3d02c5ffe5c999358aed046ca8143be437a7e4e17138beab50e016c819370a69e90c9ab109186d1da45e1441d70", 0x95}], 0x8, &(0x7f0000006400)=[{0xd8, 0x112, 0x9, "a117c290511061b62b0633407ae9fa5a568b252b81101196be78a1966d168e8de78b9129bb12d54c7432ecc2c786f85bfdf209636b0e4182aefeedf363b277b93c5df6658190269cca97833a30a502d819c954d7b2a494983e0c6dd0579405dfd9b0bb96bec46657106d10c8a74ec072c967191ed9a53b894fe7fd0840b0cd4424806b89c2713335a66859d7afdc98ae6c24b07750570bea97317248e881030643e2492fb6a23c0400c5d8623fa7c496ef8adab1ad04872bed5ead38235472c60b9dda69"}, {0xe0, 0x101, 0x1000000, "346f8b7aaf861801b20e753f285914b7c101eee8905f494ab64f016997209a64c90c555f4974c8c79291415b0c40fac0f67819ca4fc2e272f4566b0bfe7a2ecdc2b89cc09ff40dbcefc08966e0d789f4871171317e206041d1d7be7e7c9c76590788e0c9c35aad1f2a3702c1157fced404fc7baf78a8cd439ba060f9f579137a89924180a3f358a29e8cffed97ca1258b28db72092ecbf4bd6feab90f2e701d369160d09487aa33e177eb350fd4db20f023b8398ccdcfc8519bf123b9c267651e9c9e32cc95ebd0e0d45e9d5"}, {0xf8, 0x101, 0x5, "34f2b8a67cc1cd3c7ff70c9bd5801585ff62d222f70f2ebb0b9ee5e2c6c20099da8d1362e7ef4ac4b7f7df367fcfe2df8afac0dd84a28a147544e360a441d821174d3e617c177e6c15fef6286a0c0806a55bacc8c4332f6f1868647076a65d9aaf30691b1bbe0c4f9e7b630fb3007c3df6880ce56847a93930d0f3305c6cedfff26a558318383627a10a384555ebb0cd3773cdbb8ccc7fe81d0ac9ae2671936f6a3ea5fc1248a2599d3edaaac51ad1b8f44beb8e8943be9791d50bdaa2a336cefa8ce21975f948ed553883349ec8b6516561e24315391eda7292fc2528e355bdad90"}, {0x88, 0x33, 0x6, "8af5d8846db76a5909c994f641493deaecad7656bfa5539fc56907efa2c30f3b81a0a6ec3a8dca603bd826f3102a7971b882f82324bdbf87024b4f80d7965413b4336e442381a2a7b2058847e3d170ba1d51f73826bb33b7af2c70528a9527e27f1ec24f5e2eadcba71108cc7dbdeb6f88c9"}], 0x338}}, {{0x0, 0x0, &(0x7f0000006b00)=[{&(0x7f0000006740)="fed14bf85d688d6f8e8518ec78e58cbbf85eff2d03e0709aa200790664407eaa0bf30500a579cbc241914ade630c272ee64bfa17edc3ce2524ec1a4ce7161e0d6fe65b36fdcfe7571e889d1a93b6f47514dcb32ae9a1569988beec65538ea79b4297448ae94c6c7f56d1d1e1dd4af4651ce8179336", 0x75}, {&(0x7f00000067c0)="91d594337a1addeeeb3d03dcd8c803a01a2b79cf44b7ee1dc36ee8be768bda76680408530dfff8ebfcfd223694cd482b82b6c0ce084d5c7431b22952c5a16e9f2d69a27a56509bd4a9b67b640a8fdec96e0534082660415754de48d59997a88fb0dbaac02dec64cf7111c2975429bb4517aabcc4d920ec057f9261620a3011e8b0bc9db95cfa032de12d116a9ea0b5fb9e44d4bddfd5e0d57698abd80cc04f7db9523d0fccaf645b9dd8e9f9eee0651325b675bde9c4e5c0832c0b523f06f5e240ad", 0xc2}, {&(0x7f00000068c0)="8c763336ecf056c3b5870154930483b1588dc56b0a958ca018eba6636d26197ea269f4f152d33c37ce0a9d43c1eebd5884ea1488418aaee06c65a5b67d73dc1a239fe016e9208b60f2c56c4279f39ffc28414e825ba84182d4da4c4373c8b7a9ef7d08ee7b6233a904141d34ff95de5ee8a29b21cbf7ae19ae4342736f0bf8513ceb252b83188a3409b6a7be08dc35767c797e2a66640c66e9938a756945f07a94aa0672cfb9334e16093384895f177798466e98050704e09214a7f28d007c6a2cbfb16e86820426196c938957a9d746275a3f06", 0xd4}, {&(0x7f00000069c0)="9518116d7d9768f97a9e5de221c619836e60d304b1289660906e5616612620cdcb", 0x21}, {&(0x7f0000006a00)="641cef9b781d7c95edf37e95e766e9740002fd047782571e453fb96e14af2510cb738df79dc3cd8c97b602f3f42d88792b7b599ffe0a5e6253f180d71da768ad9dbcc852fed72ff5078e422f27ab2ea636015bd6e84151862b10010e4e2e18ea595cc6dbb61b36b134de91a511692bf8d4e08d5c6e9d6492e5a2a64cd5009e9cdc2164", 0x83}, {&(0x7f0000006ac0)="84e4336656e1", 0x6}], 0x6, &(0x7f0000006b80)=[{0x28, 0x107, 0x81, "4fc3d5cc477d533b564f546a65bc2d433cd46a8aaeb5"}, {0x40, 0x1, 0xffffffff, "bf288d71378ddc6d177083426bba3c9cd129bd965db35b09c9c7a0f16498d848a594b999fd2bd10028e2fb04f6826c2a"}, {0x80, 0x10c, 0x40181f6a, "9bb31a17f084e05be9c44cf53dc82724bd75f687a4b22d21e1c8bc6422fb284e5689c6f94e99309ebc59ff7bb0394b56aa570ec9aac354a0306dcc7e984424438f0fb344aa41cb698a264e6266fb3a3ceb6eb883ba8e63137ab217e498b22213e081361d8d6f54dd4b"}, {0x80, 0x108, 0x9, "7d5ee0773343e0a2bbca6a31bdfd108f66fafa0cffd79256e4b9dfdd1adf9de25ecadfbc6d571a0c26be14374d602be41786216b0ce227b8f12ecd774289420ec170f2387f91a2edc0646fc511afb6cd217ea6e17925719fe8d88d3835d346c270cd6c3b56b90ca50e636856"}], 0x168}}], 0x7, 0x44880)
lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="747f541de3bc395176f37465642e2227"])
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="e72790c0c3870a5756fe1dd85d0a6078302cb4db8d6dbd880263841a9964106a5b2d4089503b78ed8e97b006ff92df85cb41d53c9d65a0f768068fb387b05a0f22cc3266aa1ee3747692f0c67f28bc8ebeb1fbb0887dabd607622045ffffffffffff2046d1e8d42d2ec2e66f2d0c7ecf4276be4c2988f15d3b9e35134c3b2a2ab709062109008d7a"], 0x1)
r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r8=>0x0)
io_submit(r8, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r7, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
statx(r7, &(0x7f0000000200)='./file0\x00', 0xa800, 0x400, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r11 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7ad584", 0xd3, r10)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x100, 0x2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000440), 0x0, r7}, 0x68)
keyctl$chown(0x4, r11, r12, r13)
setregid(r9, r13)
prctl$PR_GET_TSC(0x19, &(0x7f0000000440))
ioctl$SNDCTL_DSP_GETTRIGGER(r6, 0x80045010, &(0x7f00000001c0))
r14 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)

15:33:38 executing program 0 (fault-call:3 fault-nth:23):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1735.932949] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000016
[ 1735.949087] overlayfs: failed to resolve './file1': -12
15:33:38 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
fanotify_mark(r4, 0x2, 0x8000030, r5, &(0x7f0000000540)='./file0\x00')
r6 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = getpid()
tkill(r7, 0x9)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)

15:33:38 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x22}, 0x36}, {0xa, 0x4e24, 0xb6, @local, 0x1}, r4, 0xffffffad}}, 0x48)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r5 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

[ 1736.093132] FAULT_INJECTION: forcing a failure.
[ 1736.093132] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1736.105537] CPU: 0 PID: 16230 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1736.113861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1736.123865] Call Trace:
[ 1736.126658]  dump_stack+0x142/0x197
[ 1736.130408]  should_fail.cold+0x10f/0x159
[ 1736.135097]  __alloc_pages_nodemask+0x1d6/0x7a0
[ 1736.140203]  ? __alloc_pages_slowpath+0x2930/0x2930
[ 1736.145787]  cache_grow_begin+0x80/0x400
[ 1736.150256]  kmem_cache_alloc+0x6a6/0x780
[ 1736.154523]  getname_kernel+0x53/0x350
[ 1736.158635]  kern_path+0x20/0x40
[ 1736.162247]  ovl_mount_dir_noesc+0x5f/0x140
[ 1736.166836]  ovl_mount_dir+0xf3/0x1a0
[ 1736.170870]  ovl_fill_super+0x87b/0x2660
[ 1736.175118]  ? ovl_put_super+0x4b0/0x4b0
[ 1736.179699]  ? sget_userns+0x76b/0xc30
[ 1736.184198]  ? get_anon_bdev+0x1c0/0x1c0
[ 1736.188576]  ? get_anon_bdev+0x1c0/0x1c0
[ 1736.193122]  ? sget+0xde/0x120
[ 1736.196613]  ? selinux_sb_copy_data+0x21e/0x390
[ 1736.201297]  ? ovl_put_super+0x4b0/0x4b0
[ 1736.205453]  mount_nodev+0x52/0xf0
[ 1736.209301]  ovl_mount+0x2d/0x40
[ 1736.212884]  mount_fs+0x97/0x2a1
[ 1736.216279]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1736.221349]  do_mount+0x417/0x27d0
[ 1736.225225]  ? retint_kernel+0x2d/0x2d
[ 1736.229440]  ? copy_mount_string+0x40/0x40
[ 1736.233924]  ? copy_mount_options+0x19e/0x2f0
[ 1736.238525]  ? copy_mount_options+0x1fe/0x2f0
[ 1736.243418]  SyS_mount+0xab/0x120
[ 1736.246894]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1736.251025]  do_syscall_64+0x1e8/0x640
[ 1736.255267]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1736.260392]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1736.266301] RIP: 0033:0x45b399
[ 1736.269538] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1736.277473] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1736.285163] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1736.292783] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1736.300663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1736.308338] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000017
[ 1736.318504] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1736.326417] overlayfs: failed to verify upper root origin
15:33:40 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:40 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
timerfd_gettime(r0, &(0x7f0000000080))
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000140)={0xc80, 0x8, 0x2, 0x1}, 0x8)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000380)={{&(0x7f00000002c0)=""/140, 0x8c}, &(0x7f0000000240), 0x1}, 0x20)
chdir(&(0x7f00000000c0)='./file0\x00')
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000200)=0x101, 0x4)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7520acc09ce2ff06707065726469723d2e2f66696c65302c6c6f7765722469723d2e2f66696c65312c776f726b6469723d2e2f4226174b9a5c7382c25353d316d9de7c052a37bd4e9bb0fb074f19cc10c2b7b1a5831e9877d0343a641a8f618033d5b1f9fad9bf7ad06e878426d26e555b3b002cb7e8771c2e49d08d6378c282849bc23f15b3d871729b8643948b08398b39b9517e8c8300ac3f69f962e38984ac9d8b57d1f87ab0e33e3d296bcf47e9793b91308c5b2e727b587a9d97659228e802c06167ea9b1e8d8e9b15bccf3d726b6ba81d4faf852180e78353f615da3195504db169db4edb26360af6f08ccb8d079da552aa2f948da8769157c4e74005b100d47c6c2340310f3150c45cbdec57d0b67b243b3db48b8d8fc4fc9c89b07074985d86aa0820f0987a65ca738770529d62be0b7ad449480b4e7b05461f37bb955f9c9828240233a9bde867bb6e9ef5cff8bc610d98fc48f4fe64e96f44f014a90cef7f45a2d5123fdb243a4788c1ef2c10016e38cf38b39205cfe84290b427591668b40ea8b49aa1ab8573d05c576b06b17650e4c97243294ddb41381cbf7b422da79053929d0c48eaa438e622c5c1fa6169e8809175e8e97549bec468f2e5dd267ee1dc0c390b89f36cf03e02ff456dcdeafff1f724f73380e3187e4ffbbfa8e450cfb7477bb4caaad915d7fd00d15147058a3f06b5a2406e37e0cf9e1b3c1ceebdd2f13ff64e4aa2d1854897e77223a13f88eb3ecdd04b316c28d2ac7854b5933f71a4d0b8864b43fa650a825a345168fccb889ad6b16ac3ee3fd93ee68f73b72fe04f562a5b93734e9f53d80000000000003b1986e68147dc87d603d148653f"])
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000180)=0x6)

15:33:40 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="0f34", 0x2}, {&(0x7f00000003c0)="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"}], 0x36, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/151, 0x97, 0x2020, &(0x7f0000000100)={0xa, 0x4e21, 0xfffffff9, @remote, 0x93}, 0x1c)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:40 executing program 0 (fault-call:3 fault-nth:24):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:40 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x73)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x9}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r0)
ioctl$KDADDIO(r3, 0x4b34, 0x8)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
sendfile(r1, r4, 0x0, 0x81)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

15:33:40 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
pipe(&(0x7f0000000280))
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = getpid()
tkill(r5, 0x9)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)

15:33:40 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b57da626f31f324c3fa2458f2ee7c2"], 0x1)
openat$cgroup_int(r2, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
write$P9_RCREATE(r2, &(0x7f0000000240)={0x18, 0x73, 0x1, {{0x20, 0x4, 0x4}, 0x9}}, 0x18)
r4 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

15:33:40 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
pipe(&(0x7f0000000280))
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = getpid()
tkill(r5, 0x9)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)

[ 1738.749592] FAULT_INJECTION: forcing a failure.
[ 1738.749592] name failslab, interval 1, probability 0, space 0, times 0
[ 1738.802007] CPU: 0 PID: 16252 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1738.810724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1738.820937] Call Trace:
[ 1738.823557]  dump_stack+0x142/0x197
[ 1738.827390]  should_fail.cold+0x10f/0x159
[ 1738.831920]  should_failslab+0xdb/0x130
[ 1738.835178] overlayfs: unrecognized mount option "u ¬Àœâÿpperdir=./file0" or missing value
[ 1738.836124]  kmem_cache_alloc+0x2d7/0x780
[ 1738.836139]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1738.836158]  getname_kernel+0x53/0x350
[ 1738.836171]  kern_path+0x20/0x40
[ 1738.836188]  ovl_mount_dir_noesc+0x5f/0x140
[ 1738.867904]  ovl_mount_dir+0xf3/0x1a0
[ 1738.872505]  ovl_fill_super+0x87b/0x2660
[ 1738.876612]  ? ovl_put_super+0x4b0/0x4b0
[ 1738.881199]  ? sget_userns+0x76b/0xc30
[ 1738.881212]  ? get_anon_bdev+0x1c0/0x1c0
[ 1738.890031]  ? get_anon_bdev+0x1c0/0x1c0
[ 1738.894206]  ? sget+0xde/0x120
15:33:41 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1738.897519]  ? selinux_sb_copy_data+0x21e/0x390
[ 1738.902908]  ? ovl_put_super+0x4b0/0x4b0
[ 1738.907181]  mount_nodev+0x52/0xf0
[ 1738.910752]  ovl_mount+0x2d/0x40
[ 1738.914658]  mount_fs+0x97/0x2a1
[ 1738.918051]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1738.922658]  do_mount+0x417/0x27d0
[ 1738.926317]  ? retint_kernel+0x2d/0x2d
[ 1738.930897]  ? copy_mount_string+0x40/0x40
[ 1738.935401]  ? copy_mount_options+0x19e/0x2f0
[ 1738.940134]  ? copy_mount_options+0x1fe/0x2f0
[ 1738.944834]  SyS_mount+0xab/0x120
[ 1738.948397]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1738.952566]  do_syscall_64+0x1e8/0x640
[ 1738.956562]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1738.962704]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1738.968331] RIP: 0033:0x45b399
[ 1738.972018] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1738.980931] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1738.989009] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
15:33:41 executing program 0 (fault-call:3 fault-nth:25):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1738.996913] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1739.004433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1739.011912] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000018
[ 1739.020433] overlayfs: failed to resolve './file1': -12
15:33:41 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
pipe(&(0x7f0000000280))
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = getpid()
tkill(r5, 0x9)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)

[ 1739.122231] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1739.135565] overlayfs: failed to verify upper root origin
[ 1739.148319] FAULT_INJECTION: forcing a failure.
[ 1739.148319] name failslab, interval 1, probability 0, space 0, times 0
15:33:41 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001500)={@broadcast, @rand_addr, <r2=>0x0}, &(0x7f0000001540)=0xc)
sendmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="ad56d2cc6289510941a78f43f0d3f311c6cfb6cf27ad22e87980ec9b9455eb3e65ea033f7ab7f6218d14397ea422be461d7da3a1c19159799a0a6ec726ca865a1d51726ea585726a670bea9df6957db28c5969b5264e9c90e74c05071f79f864a9632434614ed2294e2ec88dbc3d12e53ac14c6a5706d07d4d2be772c5ee85bf575a179e0c9b0c9e9bdfcd7e01a291f86f1c398af20a461c5ba849f301e8cade5a22d0df12afc5e4605c2866533f4f26bc350bd579d2ac61e6d881465b9b4ea621c2e671f335acf9a342d1e6a2fc20d65823fe4184fc979db668c030b760fce9270fda8b550f73e01ec462afc2b29b4792c87f8e216a7f43d293cd1f8de61a7bafef8bea01d48e4c8c2d471baa0e7ccbb2e6ae97b96f7593e22ca81f0b394cb2a5c4268bdfe6d4ea928201a28863f3f72c4ff61c5d1db480491ab01f95e6a55196446dfdf2b8e7d32d0673b0afb64a8a49c6115e91e0bf7a302ec91ed1882ed18471cf1e96ed8be651ed012fa121e57ab2b62edf66d4c78905c3d22aee9acf9cc2386bfdfb3e6045738ef816326b42ffcad8148affeeef83a5781eb9befb699dd0d3aa0953abfc315a1dc5198d0d250f8a97a4259abd1b22219ffbd399d28aec82129d29b18bb90922919816eba7cbe5fa9bbb914c5710081c4300172fd6c1cae04b7dfe67691b753cc5a9b10a4d9f6eec31bff1bb2ba9fc6d6dd67aad54330c5decb95f358f9ab8a6869a48d8a742ed3b24a785d14c33d62e73405602bf0a2a21c7354980ee78b4d9d5671be2da86d4f1637aa43106daf41cdec1a4e717c288b95c536bd717a1c92ecdb44eebf6fed6cf2c19388f50138c7c2669f0a33462f7e11b9273e8e2e90121c071b9f2c599f5a03b40f6ccb8d605673d8995848c5f4b65b5f6a9965df6549e3e42764cace1ec1966d92d8e54b8fb50e2561fe0b9c560513c46ba0f7159578e9015154f3badf6f73a88d057ef3ce37d6025e4928671cf72afcc06746de76951ea2db710abb7c4aecf7df430820907350a045d057167223f1239c82d58f5ace8e9c101bac0ce30e619d57008ad85761e85b9ab99d52bf990bd10d1a0800f095896d42ab9fc7bef4268c23232e2f1819027ccf5e4264e64af22969aba7d46d7180059e2522296624d2009b945178c2e1d9a051e7bdfc4ade4cceecfb4a4e6f9b97f8e8457835e555139eb74d6565b745cfbed41350672aec65b171a0c1d9d9fbac44114fe200014dd8fb24ce35d75cb2ec9df7df33e773fbac7c61fdda0a3698768e011f878838c9a5bd253c64bdd406f4e5ed75df2fe78308763cbe57628e602c49306d62a440e26629bd79acfeb898557aee79d7e0d3167c6581ebee3d58dd17e8fc60678002486a18e32da3bf6ec2d24141b52df487afd1acc783390c77c962e2036c8487132fa549c39b61cdb9b2407a37ffd235e9f039022281b04dee093e39e46b8bfe4b69135e2ab8fbca331a854696dfc44e9fe02df9173bdebeb1413293eb89daf0b49ff6bb3e2f2cb86621a181788b913ed76aecb1e7022608dc8f4c64b0f6b1b4db0dea3bdaafb5da054668ffa3bd88a90bc410a982004700e01faf744c5e978f3aed26de0e8673ff3cb12fb1a44d4094a21dc12d9323a5b114fa095e4c257791369a2346bf726b795c048480dc829bb013de9eec7a96b68150b0e239c4ace5cc8cea44abff31cf903a50c6cb4373a3822252ab9d683b983d10d4af711a1ad3773ae6da7bc25d795e93dcb5a14145265c365d97d4b2490d190952b709a61c834cc62e0d7475bcdeb8c175fec4e01f08ea8c26f410facab0f746a2b3a1cf2bbab1a55d98c617a1758e85c40b9c831cc2a8e57655d3b57187626f51bd60c7a19b40898cd7fd4c1f5c6f3211e1787432904d14b5b3933e03ae8776e4bdb19d1498743d390843b271ea8d6ab4dad71e4e59714dd6def755e2b0b67f9ea3abab438537ad324033ccb02f5f29f29c6ec28ec37dca3d068089b66ae160ccc6cde6c676a6c9841e5cc1e4ac68a2fe9a6b360a11c26f8359104209b0cb14e3fd6cc644c87105376d4629d00c6dc7107fb64d250400a8e29bc64cc11b998be6a4e80b2573b4dffb5dc05bae02f4fffd62a7404e025762e7533c79ac67afe70a6ac6c0c8dd6f25ec1acd011706d12ffe38a47f853c6acfde944a22dd1f6d18fdbf3f2242b349dcf250a19a97c9799fac2da21ba70c8dd811b32ab1f5eede5b9dbcf7fcea9cc4e15f8f49016920e6354192ff15e5a612f06b299f80752bc4389503f4e4f8c9a37cca0f772eafd16839b76ee5b17f5a8274764b3ad572cfd886a8fecf32aa4c94ea613509a051bce3c0f4d53a7b7f822517cb2b677fab7ee0905c9677f8ad7f780db0e834afb66ed103024e4f5977f54e11a646056ef7fd78e7ef535b61f7beecc059cf33bff7d3c6117de3912a5efdd44525d0ff4660e0fc7d6684cc04e4a44eedcfc09a4cc0b0585abb9849355bba25c29128e0f4015f27ef094bbeccc7ef38e1862e12aed525b3a46b9b37595c88e13db4d88563b7a8579202280d415541c945147a937bf26d59bdefc902a2d5d4d5ac788fb8dd32d4da4e4f1d37bcef1e4764a28d85783b5472bb114efe4d1346d322892431820e723a48ec4b491b99326c310ddfaf4c5f3dfd4a3759e403ede345da60eafa41ef97181aed592e116c20ffd00d4c52dc4af1459c923581dc0543320b3034ea7b27c41c457e659cec06b01ba1ffc86786cc0aa10271c50aba98fa943db15426485e3dd5c5c0c3eb53f1fc327719fa08874985682dc2b671a9bb690cc3af41251660ae4364b5198ed4bf96ab0695699daf75c01aff09d5574ac8526e7bf4405a40a7a2211511897f1fabf273a9e0fdfad5907a0216896481b8de8a5ecc4a96602c6fa03aa7a1d8618c11dd9e28aafaf26560256f7811b875224565eabbd0dac754978bf93052d7d428168aa4d0fa48eb56e027c4d7a0e66d85bf36812ec7df0731efdb3b8d15e80fc71a827ccf4d46355898efa2287180cace4803f23ad548028c6bbc56fb09668c26c737c0382b0275921b5936c4388f74d51df9f9019337fe58cb295ce3599a326c68da34819a794643ac1df96dd87d7b828229b076db8f58ecb28043360676b9f3743c676e4d3872c619c6679d24b6855abe7460b8b244cf8b47120c112c81f92be650536df8a8f176c3546f4849ff94fe66e4be7621fcd9491e6650678581ce04ca40502f6428f000bf78b5235360d2f714ea1429eff65ce2c31961e179d4c67977cb5aa88b7e5657f035b1a88b4302c089f612b3f99a4163565ca2d60cddcd59c68453aa8c7b178814efe6a4c8ac0d2fe23c5d3609db4cfcb60816ce136fa33564f828074cea7ddc57938fa7284d315c400bc03197c2b9fcf0e071a4507ec22000114906a568c3f4f9b57a46b40c09520bacd448c7e3efb866e59775d1704c63e3555e9b9f28b029ad3dd47e2247d745b34bfcbdb5dc0b44c5d656e5b9218914b4ee5abe468adbb81aafda7a8fea7a97e6ca16c859378a526d31d154e652c7e18bae546df515211a8c9cbe9e56ae5dfe6f186b9392e324193aef99edbde6dbabbe7296ae3e99839543bf68d23c804c66ff6e8e11739a714e4e853e75f74eb4d4e357612e13f87d96682b4724a7fb7e81e2748ef9f9a094c6f6439a76c21a27c25724fca82d9749c733614bbcbb542895bc350047fad6bbcf3a35f5083e47cbb92265e64e23f4b0ed66b82e9032952881bfc3b462adbd06ed7c923b318f89d95329de246b3c8a381a126068836cc5a11795facd29e16ccd5b80e2e5dd1e88342feca07dde91a34acfd03bbd485c4ef5fbaa6474166a966a9004e8baea56321ee1d8300b3a03eb34a424680ec87673efd118b7192ff649074774619ad3e11c1141dfb6f231dadec995bb93f609e45b27d5db74bff7a5f37dec33d9700828891ac6d893a9f61ce926d037345d726b29695dc56ee9623d9786362596e56f58e683b09366dccb49f6508b14a622532c7c99735944002372d373b4b8744c63b6911764d235d287a2eb17581b659bd46667188ea7059b2ea4f6d0582d83c8d13e8968f2e60c647470eae77b47ef694869013ee093368fd63480d773f6d8a99865090e904d1a6c4fe0f40507133e4ac674824a53494c921e057dfd8e76b54665613a2f77abe995499508f4d23b6797be892ba8265c39e677a9de9ff0d7e709d0a80f746af3c27bc0f0e872b233949fd337878e6efd9861930cbdd82594a61c5f4748a3ffe261cdbe98ca3df10ceeb85eefea7e1ceea3ffba15ba87307b4309d78a20bf0b2b3a105f20661d2b2a1857a2500fdede12d5515fd2182dfcb68e1a0693f43e2e4c202d2fed194f90e600117559c38e6a7aba3f3602d458bdbce60b08b5f46e1521adb20538a3edf04177129312149f868d4dc9756ad6f45247b55349bb4212c6f13db3d9b8389c2417966605518ae05861642de80ee2392600865550972de61237f454a3ceb2274faf4e0d4193e38af104dc1455e075bb0b4aada51ce09c54a18835e4bfb54f4520efc271f1b989cfdbacac31902050c82f08206fc5f644d4ca8c42780a6c6abc06b8f6773c75c081342eb835197e07c5ff547ec61f6d10eab84d12039e2d34c7fa95fd297924e85039eaaf9baf2b6615bed3e2cbc6d7240a5acd6c72816d507a577c388b6616702c697faf508af58af62213d502add47ee1a70e1e1f554b06cc5254b556808a83c556e555502378f450b40280d3f2917b055e117cec0a04dc6a0451a2ffef63ddca4999e1a557f8b68021d9c18f4b1c2ceb682a2743d65e91b72b869537be73249fe835eaafe1713e6eb1bb0cf5beebd53b83cf4e3f67de5f7d4ddc22e981dd20913f564817d7773266dfb3eba1b3e2ab586d26d763c73107ddd670e6821b73f92afbb7235499b685a772b4b893b07b128ca5e81110b28b07dc100e6178d8d7252577f11c18bc9b43deb2df629eec457460de4e9af8161d830ed92d9f354aa1b7742404df30091c2ac34ebfdc528ab3545ffc238ff920a8103851267ba144f28f4a6694a3e42c5ffd51424e761933658aeb102beb605163684d29b6a3b84a3562dddf4f7fb11c13233c50f87114adc92e73b7b8a313f8edb6e55da2badfc3ed0f87f3f2113701b48c0ce5476b7a7a0022d8f573aa30c5be15e1aa4a2163ef4aeafafe3d7b8715fe8c8e6db9a09bcba2b152ec08530a8cfab0df54b1dc725f826a4fb63dfe74324c271d2a33e72b9f763b45b2dd084d507b6532b846d68eb3d88231d5aaf05cce9e356a158bc4304d5d86b01c396b0d1cc242b9bf092abde53b5b7aee1a05f92fa4b43ddc9663c20ff6bd475d7c55bfd76eb2938df0dca432dfd07565ba62e0e88bd88e4986d2ac25d6f668fc69f99ee548615ba30121de1c1473300c9865101981704f407186319789d759c6b91cae50871c041a48c5b28f03f6cf19c85104de59395791a88cb3255b101b1af1431dde50eb1dc24e21fa399629686e6744523f5f0365c9406e81b6f7f76a4550749294622ee3792dd2c180fa2c8c5894c4252640b447f58f4cdf385e3c82090c4cd0d21cbadee3131021165f78083831687683714b74e1e595cf13ca97c8613319f8890ea63b6edd23c69f6d3074efa4726046170b870c89d6119ae0b3fa5c0ceec6bb604560e0bac372a361fd6ee5f6d94c7e5b310464bbfed9a9ca76ef3a2c497dc78f120219ff7fe5af3087ec9da5843d3719d5825779a29096de283d9c4d1e2a21e059af0f3008ee201f01f2101fce83457"}, {&(0x7f0000000000)="06ba4d2592e9129182db9279b216d904db1fa5f08ccbf4f5ae2c1d9499465ced37ce7a1f80364d50da4c077225158127520edc764eccf442ffa214c2a091429c"}, {&(0x7f00000000c0)="cad8de6159bee50750a5f8"}, {&(0x7f0000001240)="4e1b38436325dfee93490f291b37131ff3716371be54cb843f525989e8dedfe994797049b2c1bc178bd68e3f5491bc75427bdfa44d32fc0eb5551543a66a9179cb569ac13528bba726a1bad151b8b82ca47adc6b24635f889d5482e6bf8a5d13dedb56c75dba227c78404c537eeb32a91469f2554c4d977490166472f2a95c6313e5e6c040a2d1d38a08bb9fe9c4c35f12b0f5bea864ac9a5f2e4a89c5c9dd92df8666919100de88ca9ecc8675a7f3ac360463bb6cf1e2b7b1cdb558824aedd3b199a0"}, {&(0x7f0000001340)="f432e16d8cc5f5f3a26b1840a55b6041cbba092a937fc27f3cfb0211a81c878da9f7095a8f2faefa19957dd03ae5b45cbae198916948b54c73aff8cacc110bdf2bdf10e7a068aaed7d61266893d5b9009171b9785281e95ddc9f7a1b62a3ddaff050948d37ec1e62f867b5c7ce224b6471d04869bc9cf131b59f95e614423bd3197053d84a057a02ff9862e7c51937d97ec3f14fe8ddbf89"}]}}, {{&(0x7f0000001580)=@ll={0x11, 0x9, r2, 0x1, 0x6}, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001600)="97b5f1ad5a36a5edfaf09ab2d2f84a4ffab4ca102d08cc2fae9512af19de4ad020f7e7071988b38e186b880cdad298b6d1034fcc4539f4dffb44f5a455434f8ba5383e1a2510832addc6c16ae6db442a6c99eacbacb2e8415ab68c16065ff46e8278835c9429534357377735f068ff315235"}, {&(0x7f0000001680)="a65bf48ee4ec91f4f509e8f75caf3e00154aa6e943290e101586403cae1992e692bdffac0902b4d1a0f9053eb3b844157fe0efc847d3ed2c22aeff11bb2671a971cbfa9c807ffd8c2d5eb9d25f0fa6efb8a8532759ae0560c2a5131f37d1cbdd3979"}, {&(0x7f0000001700)="4bd4b3e58a032d3f70b6b8726d8aa0669943f8758fd00c31e7d677da37d09907797886446468c7c6d7bb0f25aff284574600e7213825a6ce5f4f545e9d6f5c4b033f5001a1ae6113cbb91226006a351859262c9e8caf89c68ecd1030e8df5fd24ac07b872144d662bae2da398a6974b44aafa14a9c7695782be3e0ecf1e6487f7a31e889b236714abf865a39ebf1838e3b21e6148e479e8edb616abaca135300b95e2ef117440c7c6fd192e3b1591b79be08bb296d13360ca98f53572712527cbe1680e4c0582ccc43be174185cedd6146ddc67092"}, {&(0x7f0000001800)="09f5ebb5f3d63e7f65cf0af38a256e29aadb391b3f25d8e24e5503b6880738547c65dbe30c14ed3aa042e37922ad7f7b3b27e5609e55f3499db3639742f2059a685931e03f8e402b7a12353e12157fc2672788a38b5a38a9bcb73d4315ef520bd69ba0ba4dcec663c99d5d55844ef7bd83c0f6513e6e37e2a57b3703fd386dab55960265c0bbce603205eabadeb13137"}, {&(0x7f00000018c0)="d5ad960ed65a2fc528ea7d20c10272a46f401c05a065f730efbc332c8726861985d9ebd7e2314d2933d9adea3c5bed8e26699987953e550030e5af3e8696f5ea1d48e37edc0d9430c6a8e8475b48b50a87c3ad9e101d144c0bb5134b7526ce9fd68104d813e6a4f1c40e2cf11698f071ff82e08469774d3cbbdf159280ec9e1e3ef84b0eb6b455380925dc5a86550d81950fcd09c473424b0c9f7f63e7927c7a2689f6581749b15869ba5f5b980d21b9a2604b5ff6fe6e535c9d80a6bddf7dd812d007d61419a734e4"}, {&(0x7f00000019c0)="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"}, {&(0x7f00000029c0)="58b379691dcaac526b97fe376af9a30e5e24b5ba21017c7471dabbaf49e809c36d3cd93eb6e2f916a0461d7a090157cdf6ed19a5b063b37164e76dceb7982f30ac3b6ab638e8d95db39ccb21585994cb188d6af7b5cdf061dcf340ffe166a9f31ff66f81ba2c899d5265f249a3a42564289bf978b62f"}, {&(0x7f0000002a40)="eadfe7dca1748cfab2d2b8764a36669eb709c0823adaa2448c4bd228cd298c222dc23c6953903edda08216ec25a7bd21b0259f492d82eba86c2af819e1237beb37471299485d40b5bfc3f353365ae569469a44edf5e9ae67d374b40e988994f499b167bb5a07ae3e8ea71b472febccb23f7b534ce5fd166e50"}, {&(0x7f0000002ac0)="a279dc6f707622bcb7632b17b840d7e2623c51d51f755111339c9efc96265f2ed995a4c0eceb964d375769f33b97704a311b09703979004fe6b1626fedee23284cff796091d893a042e616b842f3331e6b9349e46d0ba73d1185d79a6047203d7f5a521e092509ce0a996fbea00ab21e4026d00befb9ed52ad948137fd858f9752ee1478c2a0d05e097e9500ab7004630fabc033fafb2c4a2bacecaddc2e3eda3b13b6708ba3b202a6d66273f876e922d599616d47c3cbcbb1a008f27aa3f6bab4f159fdf929a36a27006c88f3c132c5f6168a492218a2ea6a9e074c39355af79412afb948771b9d94f3c5b9fb90df0bcc353139707caf"}], 0x0, &(0x7f0000002c80)=[{0x0, 0x113, 0x0, "b949b8308bd075ab30eb872a440d40b12bf535ce6c63ccc75bec11d27b643bdb2c07699ca31b3a28a3213a411afad4e330d4311696acd512c00d0279ce63d1e606561fc2608ba5b55efd4d527b08aacfd6e477bfd305b9ffd218855a3f0424e457faacaaed88de8b14ca65ebead1c6ea1c4090027119f893735b2bb39bb498abc79f02d65c7001be113b3b7191688e5b953da9d1b6d6758319502167168010a7a0c9b2c47a5c582818926626b499c6533cadfc0c9772eff0deef2bb6123675"}, {0x0, 0x116, 0x7fffffff, "22435243bff042cd48908c2808826b776112f89075280af4445ef798b91ff1aba42dfbb166c208f9557837385205cdb8ad3458575efcade6036278cc92e6693d8a803c2474e45892e6b27779e2d52805684ebff877f83e8f7d2cad188c"}]}}, {{&(0x7f0000002dc0)=@ax25={{0x3, @default, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x0, &(0x7f0000003140)=[{&(0x7f0000002e40)="badc5431649b16106159a204bf76f9f51e53f5efcb58781b46f9a12e22ff1c7240a9fae79790da445aa90be0478c8574b273f83e808e91b3d6b38dc85ada0c342ae4a55dcea425d125c7efe887bedfefac356388700ac81f3328deebb8cd8eb7764c6f"}, {&(0x7f0000004c40)="657db24706c34951f7b96f39d0e58107b8d078457b06a5063090fa900e6cdde341650d9b9a52c6f6dcbd84f194b01158ca065fc0a1d6c6258cd47986cf860dd22b8a70555420f14ba474e75ecbe7b7e46c3c0a740b9f2cdaab30c8efef8d46"}, {&(0x7f0000002f40)="22c77897a36a6a4635dc23f27cd93a1d9d88c3b9e61f006da307eefb7fd8081b8f9b28fa1c33fa51c1e546d45adc1a16f9910e89524b0c7e9d7c63fc09fde860ea4468c97a10a73db51fb4d334285acf591a892ed535212ae1a57d39fc0b0aa4107bc80e92efc6775e527b754cd36c064bc345affb81b42895edb513395472c18707ca23742feccd412c5d73c19f8a2b2744894f742d743eedf987df901bda"}, {&(0x7f0000003000)="e8b1f071cd60cffba6ae912044bc785ff2f44c27dd0b83d524bab747f1d5100947ec1f9e9aa4eb2643a921758e08051071f6c2c8b4eef8bf6225199fb36044089258ac3ba9a5249aeee5061e7acc532319ce7c4a73bc074d8580817e37a8e90780a2121bcb891ff4a602c3bcea73e7c7f9ed3c6369cc4392ff6744bf982a606bd054450f2883d91a6901f40f4e312583e087f1b4ec19436d8973d00c43dc1ff3e686c18a9d114b562997"}, {&(0x7f00000030c0)="e40dd047cb4246a28da6f3a93510589d3e28eb003ca54f17f753e60eccf9f48203e3a0f9f4bcaa7b51c69e9aa9d71b55e2774022cb017e8e5280c5c081c228c206591793e8685e93a6a9965ec10fd7b0eb84ca4949c56d229291e3"}], 0x0, &(0x7f00000031c0)=[{0x0, 0x10a, 0x2, "0d09cae33d3f6c649e66843f3981d19c8f7f7c13a44848fac7889ed1a1c62cd2c5889083124e4647b3d0f4f9f9b5a2b760235c47d330e1bfe68922f44a253bf31ff29426ea456b9b2d145ae763207303e3f5d7330687394eb0ed650d26a942abc5192e6183e50521f80e8119bfe31920edbdd74210bf0fc6f8eb01419679d2e3a10aa8a076d4209abe8679a3d1d29529d4780f5541573c484e512b9313616cba66013be3702d1b007eac8668ea35ad8dd76ac9e5250e4a763ac7eba5e65ca6bdbaff41e28ea5010f129f0b9b1628b6fc3d370d72f586f1324e7485ca74170dfc2ccee3c2"}, {0x0, 0x0, 0x1, "48c65e6992ea69a60a060ef81f7ee79804380f1ce45d42ae479c61b56bfa7784436085403010ab72b062ac333bba36f9327c34904df9ba0a81cf52c245d1b3f913f1e50444b2d9716ff85a436d2629e0a55aaa3bd8ef0a81c49172d4e5bcf39bc31b9842b80a8928148c064f338bfe7e87b81992ea4d790f5fb935512dc443e696ec5cd882f9740e27088077dc87980718ad20fd5bb072700b007d"}, {0x0, 0x88, 0x0, "944eeceee1a0481f1b46523022fd8fd6c08fe53255d2cda52e2cf5da5ba73ea72c188ee845a573a44e9e7ad16a6a302ae5a774d6a6973febf6842996d56843d69df33334957f928cca15d040abc0814201c9ce51415b0c8bffb41f4882f87b172bda8f967e928d23549b9d413c6f9379eb87a8cef6064a9e6f96deebea47db15d9e04591e89655711676c94be1fa2e174c668eeaf0857835b9498879f73db65275bcc16498623b"}, {0x0, 0x115, 0x3, "62c5f63942a309db49bb728842fd73e2262b1a6a6a7d85f2a001a5"}, {0x0, 0x107, 0x1000000, "8efe03ccbeda33484097fe8ad7185a97086e26706f26c84028df1b017a2c7e3ff82b75f5f42d3d"}, {0x0, 0x113, 0x0, "62e3d313307b0048c80469931f2a48085503170f0e3fd39763f976e7daf20f08bc2a23ad4d109d695f6457be6e8c37a8ad7af03aac9f5fd8e72eb9bdda25333f76df17f637b1baae39516522f4e9484f0002d97f4918207cd46e6df8b91b20846668a9322c583b1ce67dc3d0e273070b2195a2c361c26fba9beda7442c51de2dccd58017e8f2e49c83ac7e2713b3005954f0b4087eb40270bafa8f42"}]}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000003540)="34fdfe690c2779"}], 0x0, &(0x7f00000035c0)=[{0x0, 0x0, 0x2, "cb05316222f0734ef481a4275bb6906ec87b20d678fd77e3612acd2fe72d971f8b3ccc07fa06fd5a0b339419b8953ec90feac1d0a9cb53aafa542ab421ff3ab020395f6fa1555fe453d6b0cee338be33e96c02db8473c5895d02df1aee5d3c45080697fb8f6811a6e2619a40"}]}}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000003640)="e891bebace71de6c"}, {&(0x7f0000003680)="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"}, {&(0x7f0000004680)="69a0013fee2ac71af542dc60421c2c7e396e26dcda995a23ac5240c75a7067ae7d6c68113a49d910172738f265c33318a10e3d1677cca01421c30d4d753add909a5a6d1f"}, {&(0x7f0000004700)="c34384f2f5658640768ff82359c93435d8d36e0ad1344078ab9856dc012811cfc730e7741481ea2c01ac2cfbd54ed5e7a67361521bffd4914339edb0ce09cbf901b5332384f784350d55e61f5c"}, {&(0x7f0000004780)="fc97069593c500d04154c6caa3e094220e0b5043f4ee42170d55b9c7197fa72036027e1607d41bf805e5de14748260d2d149b69de9de7f64a6df566d11532cfe8dcf7258a14c61160776846386fd79c5ae32521b4ccbf9a8362289c8a9ea1cd91e9ebff0de194ec5c0fe45d9a28bbbde5b08a4b1698a037918211c80b7ab8fe1adcb72d7149a5d390c9adb367fb6c28bbe27838172a2b328ed8d53edaf9675b65dc7fe30aaff530570f6a6803fea17321776bab887e8b0e6fd4826077922c6ecf3bfc4080290b999da6a00fce1214945484acea65c2e8f2c9c4ac90ea628cfba4e7d7b4236f50217960091fb0c"}], 0x0, &(0x7f0000004900)=[{0x0, 0x8103bcd801780a60, 0x5, "3138e789fbbbdc1319d86e560c4ea3101169b4c9"}, {0x0, 0x103, 0x2, "ca62af265d047cd4d2675b4c5ef6c5c3de730659f81bc3256c5a682237617323fa16d38b31405c7534bfa73147d43b25d06ebbaf73fa62e18c6a98ab3ab5727f6e71feb7124290bc70f8d168b6f61a8e412afec0a916545797a904bd7c32cd6a8ca82c3daa8efbcfe215934df398afd1f90f9f229411685165693bedfabdf729f291df6e4cb676371308ffbff1918c71aa68887b38a7afa1c5013f88371ca4c4fdf85fc90fa068acc01bc350dded5ff44f9d4966f5a4e9e1e1359b254a1fbd38d34991dcd67b"}, {0x0, 0x10c, 0xed6, "db48ef02dfd175b56da8f9291bb9a43ea773d8aa57e13d60beb317d24c096c815107b7d7bfff60050f3df49682dd9b346a33e8ffab9f66867d6c89765b5f213eb04e6fd44305badc70ce4923c76f0a6fdca8ce026999ceac84210bf2b65ce8c7a195fc3a5e2b68e22c29cb09497ab68e17dd59e75f7893ff2c713b85b3d4353ba297a6659fc7c03bc556f80e28e4faf1173f51368a5915bf0c91972ad3506bbda1bf0b60cc1999b27c2c72fc55b1507db176c1"}]}}], 0xc24a921dc5c284, 0x0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 1739.164888] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1739.184502] CPU: 0 PID: 16280 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1739.192811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1739.202537] Call Trace:
[ 1739.205244]  dump_stack+0x142/0x197
[ 1739.209099]  should_fail.cold+0x10f/0x159
[ 1739.213726]  should_failslab+0xdb/0x130
[ 1739.217738]  __kmalloc+0x2f0/0x7a0
[ 1739.221415]  ? memcpy+0x46/0x50
[ 1739.224894]  ? ovl_fill_super+0xb96/0x2660
[ 1739.229308]  ovl_fill_super+0xb96/0x2660
[ 1739.233702]  ? ovl_put_super+0x4b0/0x4b0
[ 1739.238397]  ? sget_userns+0x76b/0xc30
[ 1739.242752]  ? get_anon_bdev+0x1c0/0x1c0
[ 1739.246852]  ? get_anon_bdev+0x1c0/0x1c0
[ 1739.250935]  ? sget+0xde/0x120
[ 1739.254659]  ? selinux_sb_copy_data+0x21e/0x390
[ 1739.259949]  ? ovl_put_super+0x4b0/0x4b0
[ 1739.264154]  mount_nodev+0x52/0xf0
[ 1739.268170]  ovl_mount+0x2d/0x40
[ 1739.271566]  mount_fs+0x97/0x2a1
[ 1739.274980]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1739.279896]  do_mount+0x417/0x27d0
[ 1739.284116]  ? retint_kernel+0x2d/0x2d
[ 1739.288382]  ? copy_mount_string+0x40/0x40
[ 1739.293034]  ? copy_mount_options+0x19e/0x2f0
[ 1739.297917]  ? copy_mount_options+0x1fe/0x2f0
[ 1739.302835]  SyS_mount+0xab/0x120
[ 1739.306395]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1739.310528]  do_syscall_64+0x1e8/0x640
[ 1739.314600]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1739.320290]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1739.326140] RIP: 0033:0x45b399
[ 1739.329878] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1739.338055] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1739.345415] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1739.353583] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1739.361042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1739.369026] R13: 0000000000000750 R14: 00000000004c8c25 R15: 0000000000000019
15:33:43 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:43 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000340)=0x34, 0x3)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x21000, 0x0)
poll(&(0x7f0000000180)=[{r4, 0x104}, {r3, 0x9400}, {r5, 0x288}, {r3, 0x40}, {r6}, {r0, 0x16}], 0x6, 0x401)
getsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/212, &(0x7f00000001c0)=0xd4)

15:33:43 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x8001, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000140)=[0x5, 0x3], &(0x7f0000000180)=[0x0, 0x0], 0x2, 0xfffffffb})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)

15:33:43 executing program 0 (fault-call:3 fault-nth:26):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:43 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x40, 0x0)
pipe(&(0x7f0000000280))
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = getpid()
tkill(r5, 0x9)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)

15:33:43 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x200000}])
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x3, 0xf, [], 0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/15}, &(0x7f0000000300)=0x78)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13d})
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x82, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r2, 0x3a)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)

15:33:43 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x9)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[ 1741.835320] FAULT_INJECTION: forcing a failure.
[ 1741.835320] name failslab, interval 1, probability 0, space 0, times 0
[ 1741.849162] CPU: 0 PID: 16304 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1741.858210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1741.867691] Call Trace:
[ 1741.870306]  dump_stack+0x142/0x197
[ 1741.873963]  should_fail.cold+0x10f/0x159
[ 1741.878137]  should_failslab+0xdb/0x130
[ 1741.882135]  __kmalloc_track_caller+0x2ec/0x790
[ 1741.886835]  ? lock_downgrade+0x740/0x740
[ 1741.891030]  ? do_raw_spin_unlock+0x174/0x260
[ 1741.895538]  ? ovl_fill_super+0xa30/0x2660
[ 1741.899795]  kstrdup+0x3a/0x70
[ 1741.903012]  ovl_fill_super+0xa30/0x2660
[ 1741.907106]  ? ovl_put_super+0x4b0/0x4b0
[ 1741.910145] ptrace attach of "/root/syz-executor.2"[16316] was attempted by "/root/syz-executor.2"[16318]
[ 1741.911202]  ? sget_userns+0x76b/0xc30
[ 1741.911214]  ? get_anon_bdev+0x1c0/0x1c0
[ 1741.911233]  ? get_anon_bdev+0x1c0/0x1c0
[ 1741.911243]  ? sget+0xde/0x120
[ 1741.911255]  ? selinux_sb_copy_data+0x21e/0x390
[ 1741.911268]  ? ovl_put_super+0x4b0/0x4b0
[ 1741.911279]  mount_nodev+0x52/0xf0
[ 1741.948607]  ovl_mount+0x2d/0x40
[ 1741.952132]  mount_fs+0x97/0x2a1
[ 1741.955520]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1741.960030]  do_mount+0x417/0x27d0
[ 1741.963651]  ? retint_kernel+0x2d/0x2d
[ 1741.967695]  ? copy_mount_string+0x40/0x40
[ 1741.972041]  ? copy_mount_options+0x19e/0x2f0
[ 1741.976660]  ? copy_mount_options+0x1fe/0x2f0
[ 1741.981174]  SyS_mount+0xab/0x120
[ 1741.984638]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1741.988622]  do_syscall_64+0x1e8/0x640
[ 1741.992529]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1741.997392]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1742.002660] RIP: 0033:0x45b399
[ 1742.005857] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1742.013583] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1742.020862] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1742.028140] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
15:33:44 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = dup(r0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000240)={0x0, @reserved})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

15:33:44 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:44 executing program 0 (fault-call:3 fault-nth:27):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1742.035547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1742.042830] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000000001a
15:33:44 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xacdb, 0x9})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:44 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
pipe(&(0x7f0000000280))
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = getpid()
tkill(r5, 0x9)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)

15:33:44 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="13"], 0x1)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x8)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r3 = dup(r0)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 1742.151337] FAULT_INJECTION: forcing a failure.
[ 1742.151337] name failslab, interval 1, probability 0, space 0, times 0
[ 1742.187484] CPU: 0 PID: 16333 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1742.188372] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1742.195580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1742.195587] Call Trace:
[ 1742.195609]  dump_stack+0x142/0x197
[ 1742.195630]  should_fail.cold+0x10f/0x159
[ 1742.195649]  should_failslab+0xdb/0x130
[ 1742.195658]  __kmalloc+0x2f0/0x7a0
[ 1742.195671]  ? memcpy+0x46/0x50
[ 1742.195684]  ? ovl_fill_super+0xb96/0x2660
[ 1742.195700]  ovl_fill_super+0xb96/0x2660
[ 1742.195720]  ? ovl_put_super+0x4b0/0x4b0
[ 1742.195729]  ? sget_userns+0x76b/0xc30
[ 1742.195738]  ? get_anon_bdev+0x1c0/0x1c0
[ 1742.195754]  ? get_anon_bdev+0x1c0/0x1c0
[ 1742.195766]  ? sget+0xde/0x120
[ 1742.217800] overlayfs: workdir and upperdir must reside under the same mount
[ 1742.219594]  ? selinux_sb_copy_data+0x21e/0x390
[ 1742.219610]  ? ovl_put_super+0x4b0/0x4b0
[ 1742.219625]  mount_nodev+0x52/0xf0
[ 1742.286760]  ovl_mount+0x2d/0x40
[ 1742.290138]  mount_fs+0x97/0x2a1
[ 1742.293521]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1742.298051]  do_mount+0x417/0x27d0
[ 1742.301602]  ? retint_kernel+0x2d/0x2d
[ 1742.305514]  ? copy_mount_string+0x40/0x40
[ 1742.309769]  ? copy_mount_options+0x19e/0x2f0
[ 1742.314280]  ? copy_mount_options+0x1fe/0x2f0
[ 1742.318794]  SyS_mount+0xab/0x120
[ 1742.322259]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1742.326163]  do_syscall_64+0x1e8/0x640
[ 1742.330175]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1742.335041]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1742.340252] RIP: 0033:0x45b399
15:33:44 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000080)={0x18, 0x3, 0x7, 0x93})
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='Xpperdir=./file0;lowerdir=./filfile1\\\x00'])

15:33:44 executing program 0 (fault-call:3 fault-nth:28):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1742.346226] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1742.353956] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1742.361238] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1742.368528] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1742.375910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1742.383291] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000000001b
15:33:44 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000100), &(0x7f0000000180)=0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="36187b060000000f7e0bb69f2c941d5e1a8358ba3433afc8d07c2705f5ee4587be23688f0162d400b0cea72a9d63ac545eebd55cb3057617a08586bbd3d078c283172c2ec6b6c733135c8e6d1d0dae3092ad562a897b3024718ef34b3f08387d6e2f7899d6379b8d3e6b0291843212d195e85361c79d828b89d41dd73598d3eb617a38d9fc780849da60fa04fe7e9a4f68dedc14768294ddc6ed8a996bab512175b35d5d7d8e06feb480d4ea45df64a0ff56033f456714cb10617eed478c573ca319efce"], 0x1)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x400000, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000000c0)=0x9, 0xffffffffffffff10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000000000))
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r6 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

15:33:44 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
pipe(&(0x7f0000000280))
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = getpid()
tkill(r5, 0x9)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)

[ 1742.486984] overlayfs: unrecognized mount option "Xpperdir=./file0;lowerdir=./filfile1\" or missing value
[ 1742.507459] FAULT_INJECTION: forcing a failure.
[ 1742.507459] name failslab, interval 1, probability 0, space 0, times 0
[ 1742.519262] CPU: 1 PID: 16356 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1742.527163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1742.536650] Call Trace:
[ 1742.539269]  dump_stack+0x142/0x197
[ 1742.543019]  should_fail.cold+0x10f/0x159
[ 1742.547192]  should_failslab+0xdb/0x130
[ 1742.551206]  __kmalloc+0x71/0x7a0
[ 1742.554871]  ? mls_compute_context_len+0x3f6/0x5e0
[ 1742.559822]  ? context_struct_to_string+0x33a/0x630
[ 1742.564966]  context_struct_to_string+0x33a/0x630
[ 1742.569934]  ? security_load_policycaps+0x320/0x320
[ 1742.575321]  security_sid_to_context_core+0x18a/0x200
[ 1742.580534]  security_sid_to_context_force+0x2b/0x40
[ 1742.585907]  selinux_inode_init_security+0x493/0x700
[ 1742.591179]  ? selinux_inode_create+0x30/0x30
[ 1742.595704]  security_inode_init_security+0x18d/0x360
[ 1742.600916]  ? shmem_enabled_show+0x1f0/0x1f0
[ 1742.605563]  ? security_kernel_post_read_file+0xd0/0xd0
[ 1742.610948]  ? set_cached_acl+0x57/0xb0
[ 1742.614957]  ? shmem_get_inode+0x404/0x750
[ 1742.619214]  shmem_mknod+0xbf/0x1d0
[ 1742.622857]  ? selinux_inode_mkdir+0x23/0x30
[ 1742.627283]  shmem_mkdir+0x29/0x50
[ 1742.630834]  vfs_mkdir+0x3ca/0x610
[ 1742.634591]  ovl_create_real+0x1f5/0x250
[ 1742.638696]  ovl_workdir_create+0x323/0x4e0
[ 1742.643057]  ? ovl_mount_dir+0x1a0/0x1a0
[ 1742.647134]  ? _raw_spin_unlock+0x2d/0x50
[ 1742.651309]  ovl_fill_super+0x100c/0x2660
[ 1742.655483]  ? ovl_put_super+0x4b0/0x4b0
[ 1742.659554]  ? sget_userns+0x76b/0xc30
[ 1742.663711]  ? get_anon_bdev+0x1c0/0x1c0
[ 1742.667790]  ? get_anon_bdev+0x1c0/0x1c0
[ 1742.671868]  ? sget+0xde/0x120
[ 1742.675085]  ? selinux_sb_copy_data+0x21e/0x390
[ 1742.679956]  ? ovl_put_super+0x4b0/0x4b0
[ 1742.684041]  mount_nodev+0x52/0xf0
[ 1742.687689]  ovl_mount+0x2d/0x40
[ 1742.691055]  mount_fs+0x97/0x2a1
[ 1742.694418]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1742.699009]  do_mount+0x417/0x27d0
[ 1742.702539]  ? retint_kernel+0x2d/0x2d
[ 1742.706430]  ? copy_mount_string+0x40/0x40
[ 1742.710755]  ? copy_mount_options+0x19e/0x2f0
[ 1742.716219]  ? copy_mount_options+0x1fe/0x2f0
[ 1742.720995]  SyS_mount+0xab/0x120
[ 1742.724443]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1742.728324]  do_syscall_64+0x1e8/0x640
[ 1742.732204]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1742.737101]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1742.742669] RIP: 0033:0x45b399
[ 1742.745848] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1742.753576] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1742.760891] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1742.768175] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1742.775657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1742.782965] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000000001c
[ 1742.791982] overlayfs: failed to create directory ./file1\/work (errno: 12); mounting read-only
15:33:46 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@remote, 0x13d})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/65, 0x41}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:46 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x5, 0x400)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)

15:33:46 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x9c0000, 0x2e98, 0x8, <r3=>0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9a0909, 0x9, [], @ptr}})
recvfrom$inet6(r3, &(0x7f0000000240)=""/79, 0x4f, 0x10000, &(0x7f0000000180)={0xa, 0x4e20, 0x5, @local, 0x5}, 0x1c)
r4 = dup(r0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
ioctl$KVM_PPC_ALLOCATE_HTAB(r5, 0xc004aea7, &(0x7f0000000000)=0x10000)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

[ 1744.830517] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1744.845916] overlayfs: failed to verify upper root origin
[ 1744.868461] overlayfs: workdir and upperdir must reside under the same mount
15:33:47 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
pipe(&(0x7f0000000280))
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
tkill(r3, 0x9)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)

15:33:47 executing program 0 (fault-call:3 fault-nth:29):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:47 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:47 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
getpeername$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10)

15:33:47 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3f, 0x40002)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 1745.061316] FAULT_INJECTION: forcing a failure.
[ 1745.061316] name failslab, interval 1, probability 0, space 0, times 0
[ 1745.080460] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1745.082493] CPU: 0 PID: 16383 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1745.101598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1745.111305] Call Trace:
[ 1745.113901]  dump_stack+0x142/0x197
[ 1745.117542]  should_fail.cold+0x10f/0x159
[ 1745.122202]  should_failslab+0xdb/0x130
[ 1745.122214]  kmem_cache_alloc+0x2d7/0x780
[ 1745.130390]  ? __d_lookup+0x3a2/0x670
[ 1745.134209]  ? mark_held_locks+0xb1/0x100
[ 1745.138366]  ? d_lookup+0xe5/0x240
[ 1745.138702] overlayfs: workdir and upperdir must reside under the same mount
[ 1745.141912]  __d_alloc+0x2d/0x9f0
[ 1745.141927]  d_alloc+0x4d/0x270
[ 1745.141943]  __lookup_hash+0x58/0x180
15:33:47 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./fi0,lowerdir=./file1,workdir=./file1\\\x00\x00\x00'])

[ 1745.141956]  lookup_one_len+0x27b/0x3a0
[ 1745.141968]  ? __lookup_hash+0x180/0x180
[ 1745.141975]  ? dput.part.0+0x170/0x750
[ 1745.141993]  ovl_workdir_create+0x232/0x4e0
[ 1745.142011]  ? ovl_mount_dir+0x1a0/0x1a0
[ 1745.180344]  ? _raw_spin_unlock+0x2d/0x50
[ 1745.184494]  ovl_fill_super+0x100c/0x2660
[ 1745.188642]  ? ovl_put_super+0x4b0/0x4b0
[ 1745.192815]  ? sget_userns+0x76b/0xc30
[ 1745.196811]  ? get_anon_bdev+0x1c0/0x1c0
[ 1745.200885]  ? get_anon_bdev+0x1c0/0x1c0
[ 1745.204998]  ? sget+0xde/0x120
[ 1745.208177]  ? selinux_sb_copy_data+0x21e/0x390
[ 1745.212948]  ? ovl_put_super+0x4b0/0x4b0
[ 1745.217001]  mount_nodev+0x52/0xf0
[ 1745.220539]  ovl_mount+0x2d/0x40
[ 1745.223958]  mount_fs+0x97/0x2a1
[ 1745.227313]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1745.231922]  do_mount+0x417/0x27d0
[ 1745.235453]  ? retint_kernel+0x2d/0x2d
[ 1745.239331]  ? copy_mount_string+0x40/0x40
[ 1745.243558]  ? copy_mount_options+0x19e/0x2f0
[ 1745.248053]  ? copy_mount_options+0x1fe/0x2f0
[ 1745.252781]  SyS_mount+0xab/0x120
[ 1745.256340]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1745.260225]  do_syscall_64+0x1e8/0x640
[ 1745.264265]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1745.269126]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1745.274431] RIP: 0033:0x45b399
[ 1745.277610] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1745.285405] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1745.292664] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
[ 1745.299933] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
15:33:47 executing program 0 (fault-call:3 fault-nth:30):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

[ 1745.307842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1745.315182] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000000001d
[ 1745.330678] overlayfs: failed to create directory ./file1\/work (errno: 12); mounting read-only
15:33:47 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:47 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
pipe(&(0x7f0000000280))
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
tkill(r3, 0x9)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)

[ 1745.455740] overlayfs: failed to verify origin (/file1, ino=44838, err=-116)
[ 1745.474117] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1745.489914] overlayfs: failed to verify upper root origin
[ 1745.512928] overlayfs: workdir and upperdir must reside under the same mount
15:33:50 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="3499cdb1a04c439f63d7bfc977b90e19a7cd9f08e70bbb46eb6dd3c869514ac4"], 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
prctl$PR_SET_FPEXC(0xc, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={@ipv4={[], [], @dev}, 0x13d, r2})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0x2d}, {0x0}, {&(0x7f00000001c0)=""/76, 0x4c}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:33:50 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x1, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})

15:33:50 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
pipe(&(0x7f0000000280))
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
tkill(r3, 0x9)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)

15:33:50 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e23, 0x0, @local, 0x5}, {0xa, 0x4e20, 0x5, @empty, 0xd2}, 0x875a, [0x2, 0x8, 0x0, 0x0, 0x3ff, 0x1, 0x3, 0xffff]}, 0x5c)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="61407db1db2b3e48606f24c4026cec76436a5190a1da3484ba89b10935d6e4517da8b0ec1c833e95a40efa565ca9594f81ad77d34f658f1d933526e146e25280ace41d49aaf66759378ad6b490f580e7250f1ac0"], 0x1)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
r4 = socket$inet(0x2, 0x80001, 0x84)
mount(&(0x7f0000000440)=@sr0='/dev/sr0\x00', &(0x7f0000000480)='./file2\x00', &(0x7f00000004c0)='ext2\x00', 0x800, &(0x7f0000000500)='overlay\x00')
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r5, 0x3f, 0x0, 0x3, 0xba16}, &(0x7f0000000140)=0x18)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001580)={r5, 0x48, &(0x7f0000001500)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x764}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x36f, @rand_addr="ca63e80e727771ec1aee67f82b7cb133", 0x9}]}, &(0x7f00000015c0)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={r5, 0x2664}, &(0x7f0000000380)=0x8)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{0x6, 0x1}, 'port1\x00', 0x2a, 0x20001, 0x2f, 0xbf12, 0x101, 0x3ff, 0xe0e7, 0x0, 0x0, 0x3})
chdir(&(0x7f00000000c0)='./file0\x00')
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x121000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0xfff)
ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f0000000540))
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x5c}], [{@smackfsroot={'smackfsroot', 0x3d, 'eth1'}}, {@permit_directio='permit_directio'}], 0xf603000000000000})

[ 1747.949942] overlayfs: failed to create directory ./file1\/work (errno: 30); mounting read-only
[ 1747.971186] overlayfs: unrecognized mount option "permit_directio" or missing value
[ 1747.992628] 
[ 1747.994298] =====================================
[ 1747.999136] WARNING: bad unlock balance detected!
[ 1748.003979] 4.14.170-syzkaller #0 Not tainted
[ 1748.008584] -------------------------------------
[ 1748.013435] syz-executor.0/16418 is trying to release lock (sb_writers) at:
[ 1748.020556] [<ffffffff8196cd5e>] mnt_drop_write+0x3e/0x50
[ 1748.026087] but there are no more locks to release!
[ 1748.031103] 
[ 1748.031103] other info that might help us debug this:
[ 1748.037899] 1 lock held by syz-executor.0/16418:
[ 1748.042751]  #0:  (&type->s_umount_key#60/1){+.+.}, at: [<ffffffff818ffe51>] sget_userns+0x551/0xc30
[ 1748.052042] 
[ 1748.052042] stack backtrace:
[ 1748.056539] CPU: 0 PID: 16418 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1748.064418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1748.073877] Call Trace:
[ 1748.076474]  dump_stack+0x142/0x197
[ 1748.080169]  ? vprintk_func+0x65/0x159
[ 1748.084063]  ? mnt_drop_write+0x3e/0x50
[ 1748.088076]  print_unlock_imbalance_bug.cold+0x114/0x123
[ 1748.093545]  ? mnt_drop_write+0x3e/0x50
[ 1748.097527]  lock_release+0x616/0x940
[ 1748.101448]  ? lock_downgrade+0x740/0x740
[ 1748.105607]  ? check_preemption_disabled+0x3c/0x250
[ 1748.110646]  __sb_end_write+0xc1/0x100
[ 1748.114549]  mnt_drop_write+0x3e/0x50
[ 1748.118359]  ovl_workdir_create.cold+0x101/0x10d
[ 1748.123240]  ? ovl_mount_dir+0x1a0/0x1a0
[ 1748.127305]  ? _raw_spin_unlock+0x2d/0x50
[ 1748.131589]  ? clone_mnt+0x65a/0xee0
[ 1748.135315]  ovl_fill_super+0x100c/0x2660
[ 1748.139474]  ? ovl_put_super+0x4b0/0x4b0
[ 1748.143580]  ? sget_userns+0x76b/0xc30
[ 1748.147493]  ? get_anon_bdev+0x1c0/0x1c0
[ 1748.151566]  ? get_anon_bdev+0x1c0/0x1c0
[ 1748.155641]  ? sget+0xde/0x120
[ 1748.158841]  ? selinux_sb_copy_data+0x21e/0x390
[ 1748.163526]  ? ovl_put_super+0x4b0/0x4b0
[ 1748.167713]  mount_nodev+0x52/0xf0
[ 1748.171263]  ovl_mount+0x2d/0x40
[ 1748.174743]  mount_fs+0x97/0x2a1
[ 1748.178122]  vfs_kern_mount.part.0+0x5e/0x3d0
[ 1748.182630]  do_mount+0x417/0x27d0
[ 1748.186172]  ? retint_kernel+0x2d/0x2d
[ 1748.190066]  ? copy_mount_string+0x40/0x40
[ 1748.194313]  ? copy_mount_options+0x19e/0x2f0
[ 1748.198812]  ? copy_mount_options+0x1fe/0x2f0
[ 1748.203922]  SyS_mount+0xab/0x120
[ 1748.207380]  ? copy_mnt_ns+0x8c0/0x8c0
[ 1748.211360]  do_syscall_64+0x1e8/0x640
[ 1748.215247]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1748.220106]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1748.225295] RIP: 0033:0x45b399
[ 1748.228582] RSP: 002b:00007ff9400c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1748.236437] RAX: ffffffffffffffda RBX: 00007ff9400c56d4 RCX: 000000000045b399
[ 1748.243704] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f
15:33:50 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x20000, 0x0)
pipe(&(0x7f0000000280))
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = getpid()
tkill(r4, 0x9)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)

15:33:50 executing program 2:
io_submit(0x0, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0c, 0x1f00, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x13c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1748.250975] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000
[ 1748.258352] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1748.265748] R13: 0000000000000750 R14: 00000000004c8c25 R15: 000000000075bf2c
15:33:50 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x8000, &(0x7f0000000140)=ANY=[])
prctl$PR_SVE_SET_VL(0x32, 0x26e68)

[ 1748.319539] ------------[ cut here ]------------
[ 1748.324340] WARNING: CPU: 0 PID: 18335 at fs/namespace.c:1178 cleanup_mnt+0x104/0x150
[ 1748.332307] Kernel panic - not syncing: panic_on_warn set ...
[ 1748.332307] 
[ 1748.339679] CPU: 0 PID: 18335 Comm: syz-executor.0 Not tainted 4.14.170-syzkaller #0
[ 1748.347559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1748.357510] Call Trace:
[ 1748.360109]  dump_stack+0x142/0x197
[ 1748.363747]  panic+0x1f9/0x42d
[ 1748.366943]  ? add_taint.cold+0x16/0x16
[ 1748.370933]  ? cleanup_mnt+0x104/0x150
[ 1748.374829]  ? cleanup_mnt+0x104/0x150
[ 1748.378737]  __warn.cold+0x2f/0x2f
[ 1748.382279]  ? ist_end_non_atomic+0x10/0x10
[ 1748.386748]  ? cleanup_mnt+0x104/0x150
[ 1748.390779]  report_bug+0x216/0x254
[ 1748.394417]  do_error_trap+0x1bb/0x310
[ 1748.398309]  ? math_error+0x360/0x360
[ 1748.402115]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1748.407223]  ? debug_object_active_state+0x23c/0x370
[ 1748.412333]  ? trace_hardirqs_off_thunk+0x1a/0x1c
15:33:50 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x80000000, 0x5, 0x4, 0x80000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x2, 0x0, 0x0, "6e52a9ff"}, 0x7, 0x0, @offset=0xfffffffb, 0x800, 0x0, <r2=>0xffffffffffffffff})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x80082102, &(0x7f0000000000)=r3)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r4 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

[ 1748.417183]  do_invalid_op+0x1b/0x20
[ 1748.420906]  invalid_op+0x1b/0x40
[ 1748.424358] RIP: 0010:cleanup_mnt+0x104/0x150
[ 1748.428851] RSP: 0018:ffff88802916fe28 EFLAGS: 00010297
[ 1748.434217] RAX: ffff88808e248000 RBX: ffff88805b773200 RCX: 0000000000000002
[ 1748.441488] RDX: 0000000000000000 RSI: 0000000000000040 RDI: ffffffff88b22a68
[ 1748.448760] RBP: ffff88802916fe38 R08: ffff88808e248000 R09: ffff8880aec2c1c0
[ 1748.456129] R10: 0000000000000000 R11: ffff88808e248000 R12: dffffc0000000000
[ 1748.463451] R13: ffff88805b773238 R14: 0000000000000000 R15: ffff8880804a9038
[ 1748.470755]  ? cleanup_mnt+0x104/0x150
[ 1748.474653]  __cleanup_mnt+0x16/0x20
[ 1748.478379]  task_work_run+0x114/0x190
[ 1748.482395]  exit_to_usermode_loop+0x1da/0x220
[ 1748.486992]  do_syscall_64+0x4bc/0x640
[ 1748.490880]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1748.495735]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1748.500928] RIP: 0033:0x45ddc7
[ 1748.504124] RSP: 002b:00007ffd9d018698 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[ 1748.511837] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045ddc7
[ 1748.519111] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffd9d018740
[ 1748.526492] RBP: 0000000000000cc3 R08: 0000000000000000 R09: 000000000000000c
[ 1748.533776] R10: 0000000000000005 R11: 0000000000000206 R12: 00007ffd9d0197d0
[ 1748.541167] R13: 0000000001645940 R14: 0000000000000000 R15: 00007ffd9d0197d0
[ 1748.549947] Kernel Offset: disabled
[ 1748.553587] Rebooting in 86400 seconds..