0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(0x0, 0x1) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:16 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x800) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x24000041) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x140) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:41:16 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file0\x00') 18:41:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x1000) 18:41:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r3 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x6b) 18:41:16 executing program 2: 18:41:16 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:16 executing program 2: 18:41:16 executing program 2: 18:41:19 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:19 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:19 executing program 2: 18:41:19 executing program 4: 18:41:19 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:19 executing program 1: 18:41:19 executing program 4: 18:41:19 executing program 1: 18:41:19 executing program 2: 18:41:19 executing program 4: 18:41:19 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:19 executing program 1: 18:41:22 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:22 executing program 4: 18:41:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="39000000110009", 0x7}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x19c04, 0x0) 18:41:22 executing program 1: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, &(0x7f0000000100)}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, &(0x7f00000002c0)) 18:41:22 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:22 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4, 0x7}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 18:41:22 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:22 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:22 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:22 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(0x0, 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:22 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) [ 356.629476][T14583] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 18:41:25 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:25 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(0x0, 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:25 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:25 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="020181ffffff0a000000ff45ac00000000000500e931190000000000000680ffffffa9000000e100e2ff877700720030070085ffffff00000000008000da55aa", 0x56, 0x1c0}]) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) getrandom(&(0x7f0000000840)=""/139, 0x8b, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x0) 18:41:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}}, 0x0) 18:41:25 executing program 1: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)) ftruncate(r1, 0x8200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 18:41:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syncfs(r0) socket$inet6(0x10, 0x3, 0x0) 18:41:25 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f0000000680)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 18:41:25 executing program 2: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, &(0x7f0000000100)}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r0+10000000}, &(0x7f00000002c0)) 18:41:25 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(0x0, 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:25 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:25 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) [ 359.766859][T14608] loop4: p1 p2 < > p3 p4 < p5 > [ 359.771983][T14608] loop4: p1 size 11290111 extends beyond EOD, truncated [ 359.790298][T14608] loop4: p3 start 4293001441 is beyond EOD, truncated [ 359.797762][T14608] loop4: p5 size 11290111 extends beyond EOD, truncated 18:41:28 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:28 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x4, 0x0, 0xf}]}}, &(0x7f0000000080)=""/264, 0x26, 0x108, 0x8}, 0x20) 18:41:28 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:28 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 18:41:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000002280)=[{&(0x7f0000000640)='~', 0x1}], 0x0, 0x0) socket(0x0, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:41:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syncfs(r0) socket$inet6(0x10, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100), 0x0) 18:41:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:28 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:28 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r0+10000000}, 0x0) [ 362.685168][T14672] overlayfs: filesystem on './bus' not supported as upperdir 18:41:31 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:31 executing program 1: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc8) 18:41:31 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:31 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:31 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) ustat(0x5, &(0x7f0000000040)) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) getgroups(0x0, &(0x7f0000000080)) socket(0x0, 0x800000003, 0x0) 18:41:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000440)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:41:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}]) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x3e9, 0x0, 0x0, 0x0, {0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x38}}, 0x0) socket(0x10, 0x803, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:41:31 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:31 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xecsU4\xde{\xa6\xb3\x14^\b', 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x102002700) 18:41:31 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:34 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="665f07000005eb3014203873bc33760036f300000000007dc0c6b18f7f8054617cbed5f8000400001500", 0x2a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:41:34 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:34 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:34 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:34 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:34 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:34 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:34 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:34 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000) 18:41:34 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:34 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:34 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 369.427812][T14740] overlayfs: statfs failed on './file0' 18:41:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x8, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) 18:41:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000) 18:41:37 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:37 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:37 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:37 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000) 18:41:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) 18:41:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xd0, 0x0, 0x208, 0xd0, 0x0, 0x2e0, 0x2d8, 0x2d8, 0x2d8, 0x2e0, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @loopback}, @mcast1, [], [], 'wg0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1, [], [], 'rose0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@inet=@set4={{0x50, 'set\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7eedfcb3000000000000000041901a8d235bd39675399e5719d27a532748"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xd0, 0x0, 0x208, 0xd0, 0x0, 0x2e0, 0x2d8, 0x2d8, 0x2d8, 0x2e0, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @loopback}, @mcast1, [], [], 'wg0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1, [], [], 'rose0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@inet=@set4={{0x50, 'set\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7eedfcb3000000000000000041901a8d235bd39675399e5719d27a532748"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 18:41:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) 18:41:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) 18:41:37 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:37 executing program 1: 18:41:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 18:41:37 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:37 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) [ 371.680194][T14800] x_tables: duplicate underflow at hook 2 [ 371.686605][T14800] x_tables: duplicate underflow at hook 2 [ 371.697514][T14800] x_tables: duplicate underflow at hook 2 18:41:37 executing program 1: 18:41:38 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:38 executing program 1: 18:41:38 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 18:41:38 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:38 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:38 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:38 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 18:41:38 executing program 1: 18:41:38 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 372.432476][T14786] overlayfs: statfs failed on './file0' 18:41:38 executing program 1: 18:41:38 executing program 1: 18:41:38 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) 18:41:39 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$inet_udplite(0x2, 0x2, 0x88) setresuid(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:39 executing program 1: 18:41:39 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:39 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:39 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) 18:41:39 executing program 1: 18:41:39 executing program 1: 18:41:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) [ 373.258697][T14836] overlayfs: statfs failed on './file0' 18:41:39 executing program 1: 18:41:39 executing program 1: 18:41:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:40 executing program 1: 18:41:40 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) [ 374.086636][T14864] overlayfs: statfs failed on './file0' 18:41:42 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:42 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$inet_udplite(0x2, 0x2, 0x88) setresuid(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:42 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:42 executing program 1: 18:41:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:42 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x0, &(0x7f0000000540)) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:42 executing program 1: 18:41:42 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:42 executing program 1: 18:41:42 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:42 executing program 1: 18:41:42 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 377.099369][T14898] overlayfs: statfs failed on './file0' 18:41:45 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:45 executing program 1: 18:41:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:45 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x0, &(0x7f0000000540)) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:45 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:45 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$inet_udplite(0x2, 0x2, 0x88) setresuid(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:45 executing program 1: 18:41:45 executing program 1: poll(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 18:41:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 380.117930][T14924] overlayfs: statfs failed on './file0' 18:41:48 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:48 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:48 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x0, &(0x7f0000000540)) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:48 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:48 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 18:41:48 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:48 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) 18:41:48 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) 18:41:48 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:48 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) 18:41:48 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) 18:41:48 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) [ 383.135623][T14958] overlayfs: statfs failed on './file0' 18:41:51 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:51 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:51 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) 18:41:51 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:51 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}, 0x955}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 18:41:51 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:51 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) 18:41:51 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:51 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:51 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x88382, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='[\'userself\"*wlan1\xe8trusted*eth1nodev\xb3/\x00', 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000140)='\xa4\x00\x00\x00\xc3\x00\x10x\xf4D\x82@\xe6\xe0\xce\xc56\x1a\n', r1) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000001c0)={0x0, 0x1ff, 0x137}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/216) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f00000002c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 18:41:51 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 386.161284][T14997] overlayfs: statfs failed on './file0' 18:41:54 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:54 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:54 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) 18:41:54 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:54 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x8, 0x3, 0x0, 0x20}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x1) io_setup(0x2, &(0x7f0000000240)=0x0) r8 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 18:41:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:41:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000) 18:41:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000) 18:41:54 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) [ 389.178880][T15032] overlayfs: statfs failed on './file0' 18:41:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000) 18:41:57 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:57 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:57 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:57 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:57 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='/dev/usbmon#\x00', &(0x7f0000000080)='./file0\x00', r1) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x20102) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000006, 0x11, r2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 18:41:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, 0x0, 0x0, 0x800000) 18:41:57 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='/dev/usbmon#\x00', &(0x7f0000000080)='./file0\x00', r1) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x20102) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000006, 0x11, r2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 18:41:57 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, 0x0, 0x0, 0x800000) 18:41:57 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='/dev/usbmon#\x00', &(0x7f0000000080)='./file0\x00', r1) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x20102) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000006, 0x11, r2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 18:41:57 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:41:57 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:41:57 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:00 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, 0x0, 0x0, 0x800000) 18:42:00 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='/dev/usbmon#\x00', &(0x7f0000000080)='./file0\x00', r1) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x20102) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000006, 0x11, r2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 18:42:00 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:00 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:00 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x0) 18:42:00 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='/dev/usbmon#\x00', &(0x7f0000000080)='./file0\x00', r1) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x20102) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000006, 0x11, r2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 18:42:00 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x0) [ 394.426108][T15104] fuse: Bad value for 'fd' 18:42:00 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x0) [ 394.474488][T15125] fuse: Bad value for 'fd' 18:42:03 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:03 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x0, &(0x7f0000000540)) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:03 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:03 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='/dev/usbmon#\x00', &(0x7f0000000080)='./file0\x00', r1) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x20102) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000006, 0x11, r2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 18:42:03 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2a6482a, &(0x7f0000000280)) 18:42:03 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x8, 0x3, 0x0, 0x20}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f00000019c0)={0x8, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003307358550d043e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e13bcaac000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c5a9b3084f1b70b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x5}}, 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x1) io_setup(0x2, &(0x7f0000000240)=0x0) r8 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 18:42:03 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x8, 0x3, 0x0, 0x20}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f00000019c0)={0x8, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003307358550d043e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e13bcaac000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c5a9b3084f1b70b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x5}}, 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x1) io_setup(0x2, &(0x7f0000000240)=0x0) r8 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) [ 397.449986][T15143] EXT4-fs (sda1): re-mounted. Opts: [ 397.457536][T15148] fuse: Bad value for 'fd' 18:42:03 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:03 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x0, &(0x7f0000000540)) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:03 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 397.539344][T15162] overlayfs: failed to resolve './file0': -2 [ 397.559036][T15164] overlayfs: failed to resolve './file0': -2 18:42:06 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:06 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:06 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:06 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x0, &(0x7f0000000540)) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:06 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./fi'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2a6482a, &(0x7f0000000280)={[{@nombcache='nombcache'}]}) 18:42:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x8, 0x3, 0x0, 0x20}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f00000019c0)={0x8, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003307358550d043e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e13bcaac000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c5a9b3084f1b70b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x5}}, 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x1) io_setup(0x2, &(0x7f0000000240)=0x0) open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 18:42:06 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 400.465428][T15181] overlayfs: failed to resolve './file0': -2 18:42:06 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:06 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x8, 0x3, 0x0, 0x20}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f00000019c0)={0x8, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003307358550d043e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e13bcaac000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c5a9b3084f1b70b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x5}}, 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x1) io_setup(0x2, &(0x7f0000000240)=0x0) open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 18:42:06 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:06 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:06 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:07 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:09 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:09 executing program 4: mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:09 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(0x0, 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:09 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:09 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:09 executing program 2: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f00000000c0)={0x7f8, 0xd, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7ac, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x394, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0xa4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "c1d531c8fcb0e2d8ebf73cd911710b2f9977ec3a7b1d782e12fc601b36b51bab343480a51bed28e2a48240f268e4d7fdd000bb8ad6522250f13826163e4ec5fa0a451c6f846596660cf0af3a4c27828beb5f1736376227690909fd6581276ec67b9e406477d09c00e1e7c0bdbb542afa9e8c77ca850b733ec3fc65e08e7110465814bf14c8cdb3dad438b40a49cffcb12c1d0e839c51708140d1"}]}, @NFTA_SET_ELEM_KEY={0x2e0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "460a89956969fef92597ece228da96380f795f6be2fb74bee361fc69e62dc852827046e975a50ffc0325fb24f4200b87ab59693156fbfe0fae358da4dd3e682dfb0d5865350f67a43cd8f91842b811f091fdbdf40f77055ee74fd487a2530fc89b75c4628245e68979679fcd9d97a9ba09a3989dd4054f0b9a4f7c8ea92bff07e6fbf054fd90fd998f15c36793b8d66a6bd22f3569b1eee44b9c0b0729afd50eb8576311b54756fe9da9c1dc33de5f37a7d9cfc7d3930c7137cafb9a073478d15dc8c9fcf591f1567828cab0efba0d11df6ab8e211192eb9d567706a300ba32e3e64df2436edcb7f49f83a0fe3"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x6a, 0x1, "69560ca765223aed823a21f28c2c66c18d8ddde3925902329145eeebdbfb1a2a19d9e553a10fe9f4eb59c11bf5c847a87385c6dcfc478c446594adcdeeb01a5798c9d70043a0227df9f5799a4b4f8268751b50764cfe5eaa36e56ceb032e542fe61eaa7c22f4"}, @NFTA_DATA_VALUE={0x97, 0x1, "4c21e854af25c8dec65adf345dc4dc3002ce0f1c585caf6116417b439493583bd0d6ac4c45ba6ddba1ea8406d7b40746e9a03e92d7ae1acc0bcc564c7122f747f5e6906c8c6e7f16463c69f87678b6f1de9a143248e00da1adbfbbc99bb5bddb33025155cf13b535653b51bf9ec3c9768b42dd7bb9951fbc9acef8187bfba286adba31a905cc308201672ccb52c3e8c3ff3955"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x52, 0x1, "fdb5ef1b8fa28b18772e714b2c45b545210fcb70c4a734d34fef2a1736eca93fef84abffdbd9d932f658605b95c00e65ca728536a31451e11b7dcfe190122b5854e1439e9c2e7c90b26eee718e4b"}]}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x2e, 0x6, 0x1, 0x0, "113f69724cf55275f21928310d41528768b3d535949b1a42102fb1b2207b9b178a8bd029b8f9767cb863"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1ff}]}, {0x390, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x138, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "b482dc34a3470c48a05a842a269ccbea268c22e79df1db1adee53a49091602d47ebde1417b247a71529bf905a0f14bc2751ab92c6873006738b779388a931cc0de55f18fcd5279df8eddfd5e860da9c54e40edd30889b761f82891ed765ee1703ec298e0ad1305e5407395043a511473488618bc185811f0dbaa1a90d7309e2dc9b99636298f19057a8bf0cd9005026f814ef4521296fb2c112215c65b6c184aec87fb829bf2a756178fa647e3260968abddaa3d44313a35e5ae852367e9738ae43ad6f4a41d5019c6eca972ec"}, @NFTA_DATA_VALUE={0x5e, 0x1, "c10b15cc53b8933ca52a03baecd3b7353dabafec918e0f8e5be906e8871ab8e0000fd6a4f29fad480d8c1c0a9c0ded3599a04f84e7c282227aa113d097cf8291f98d00f76d5fe2d6c8bfb9f407bbfc396e2d575fb6bcc96a4120"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x779a}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa3, 0x1, "796924d8ae601b8d4e99c6fa3cca85f8519242a31b3fedc73479508c392757fb81a014994333c2800e6cad8035f39b2003b7c2c1e58893f142d7e5e39b19612d020fc0e5582e3bf5c73393be7342292f9b811799095e171ad05a10c8a674ee174dec174d724f81ebd606b7fc12bd69d5c7abf93bf92056c5873a9e9a965abfb629f01b15b4e9c0dd6d217dc1dc9a07ba056b9ab090c1cc2e926c6e9c836416"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x174, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "bcd6a8d48f47b46d90a7f8aa32a652358083b5dffc4dd5e2c1d31c59f3b86f6615cffe907bad0d6be4f700751179bf63c527f0121a392f347e361ed2017e82668e0da515ddc21c3814b5855e79140c9fcbf769b5d92f2036c24cc04a6b7a6179ff5bf8b61f92dd125f37bd19f326baa0683891691c6f89a1506b573facbdd06fa916b2b0b02e992a525890f580db4109118506efee83c3524ceafc00df1811cf38c323794d6019aa2fb9634bce3bb182c44b1b55ae587e30abbcd3ef44"}, @NFTA_DATA_VALUE={0x55, 0x1, "9d7d16618eaf734cb2dbea439681d081a7c26b286a8f27fef114f191c13384efb6014dc3ea74f6df16ae63f76dacdb57a330f900f3bb332e7cc22c3ee7c3fe1414efcedd7ef6d9287f74ca6691a543f160"}]}]}]}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x20008001}, 0x80) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x20102) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000006, 0x11, r0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940)='devlink\x00') socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r3}, 0x80, 0x0}}], 0x1, 0x2404c040) connect$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x5, r3, 0x1, 0xbb, 0x6, @random="976cc420b6fe"}, 0x14) 18:42:09 executing program 4: mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:09 executing program 4: mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:09 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x8, 0x3, 0x0, 0x20}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f00000019c0)={0x8, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003307358550d043e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e13bcaac000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c5a9b3084f1b70b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x5}}, 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x1) r7 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) [ 403.487312][T15233] overlayfs: failed to resolve './file1': -2 [ 403.519318][T15243] overlayfs: failed to resolve './file1': -2 18:42:09 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(0x0, 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:09 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 403.566895][T15247] overlayfs: failed to resolve './file1': -2 [ 403.603878][T15259] overlayfs: failed to resolve './file1': -2 18:42:12 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x8, 0x3, 0x0, 0x20}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f00000019c0)={0x8, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003307358550d043e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e13bcaac000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c5a9b3084f1b70b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x5}}, 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x1) io_setup(0x2, &(0x7f0000000240)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 18:42:12 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(0x0, 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:12 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:12 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:12 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffd}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x88c0}, 0x10000011) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) dup(0xffffffffffffffff) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "00000100000000000800449420eba71a4976e252922cb18f6e2e2aba000100012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b080000000049740000000000000025ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e001903c42d3358f63742f9381290bb", @ANYRES32=r4], 0x2}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, r4, 0x26}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) 18:42:12 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:12 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:12 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) [ 406.512300][T15279] overlayfs: failed to resolve './file1': -2 [ 406.539536][T15286] overlayfs: failed to resolve './file1': -2 18:42:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:13 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:15 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:15 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:15 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:15 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:15 executing program 2 (fault-call:5 fault-nth:0): recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 409.526137][T15324] FAULT_INJECTION: forcing a failure. [ 409.526137][T15324] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 409.539770][T15324] CPU: 1 PID: 15324 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 409.541542][T15323] overlayfs: failed to resolve './file0': -2 [ 409.549906][T15324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.549909][T15324] Call Trace: [ 409.549925][T15324] dump_stack+0x14a/0x1ce [ 409.549936][T15324] ? devkmsg_release+0x11c/0x11c [ 409.549943][T15324] ? show_regs_print_info+0x12/0x12 [ 409.549953][T15324] ? stack_trace_save+0x1f0/0x1f0 [ 409.549962][T15324] ? __kernel_text_address+0x93/0x110 [ 409.549971][T15324] should_fail+0x6fb/0x860 [ 409.549978][T15324] ? setup_fault_attr+0x3d0/0x3d0 [ 409.549989][T15324] __alloc_pages_nodemask+0x1ee/0x7c0 [ 409.549999][T15324] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 409.550008][T15324] ? __kasan_slab_free+0x1f2/0x230 [ 409.550017][T15324] ? __rcu_read_lock+0x50/0x50 18:42:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 409.550024][T15324] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 409.550036][T15324] kmalloc_order_trace+0x2a/0xf0 [ 409.586932][T15329] overlayfs: failed to resolve './file0': -2 [ 409.588686][T15324] __kmalloc+0x268/0x2d0 [ 409.588695][T15324] ? proc_fail_nth_write+0x18f/0x250 [ 409.588710][T15324] kmalloc_array+0x2b/0x50 [ 409.616197][T15331] overlayfs: failed to resolve './file0': -2 [ 409.619513][T15324] rw_copy_check_uvector+0x8a/0x310 [ 409.619524][T15324] import_iovec+0x113/0x380 [ 409.619538][T15324] ? dup_iter+0x110/0x110 18:42:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 409.657418][T15333] fuse: Bad value for 'fd' [ 409.661030][T15324] do_preadv+0x1d9/0x350 [ 409.661038][T15324] ? do_writev+0x5b0/0x5b0 [ 409.661045][T15324] ? fput_many+0x42/0x1a0 [ 409.661059][T15324] ? ksys_write+0x25d/0x2c0 [ 409.696824][T15324] do_syscall_64+0xcb/0x150 [ 409.701301][T15324] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 409.707163][T15324] RIP: 0033:0x45ca59 [ 409.711026][T15324] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 409.730599][T15324] RSP: 002b:00007f904780ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 409.738977][T15324] RAX: ffffffffffffffda RBX: 00000000004fb020 RCX: 000000000045ca59 [ 409.746918][T15324] RDX: 0000000000000315 RSI: 00000000200017c0 RDI: 0000000000000005 [ 409.754874][T15324] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 409.762818][T15324] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000006 18:42:15 executing program 2 (fault-call:5 fault-nth:1): recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 409.770772][T15324] R13: 0000000000000879 R14: 00000000004cb652 R15: 00007f904780f6d4 18:42:16 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) [ 409.800347][T15338] FAULT_INJECTION: forcing a failure. [ 409.800347][T15338] name failslab, interval 1, probability 0, space 0, times 0 [ 409.810457][T15335] fuse: Bad value for 'fd' [ 409.830067][T15338] CPU: 0 PID: 15338 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 409.840231][T15338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.850273][T15338] Call Trace: [ 409.853557][T15338] dump_stack+0x14a/0x1ce [ 409.857874][T15338] ? devkmsg_release+0x11c/0x11c [ 409.862860][T15338] ? show_regs_print_info+0x12/0x12 [ 409.868026][T15338] ? _raw_spin_unlock+0x5/0x20 [ 409.872760][T15338] ? handle_mm_fault+0xb3a/0x40a0 [ 409.877752][T15338] should_fail+0x6fb/0x860 [ 409.882176][T15338] ? setup_fault_attr+0x3d0/0x3d0 [ 409.887168][T15338] ? finish_fault+0x230/0x230 [ 409.891811][T15338] ? kvmalloc_node+0xc2/0x120 [ 409.896459][T15338] should_failslab+0x5/0x20 [ 409.900942][T15338] __kmalloc+0x5f/0x2d0 [ 409.905116][T15338] kvmalloc_node+0xc2/0x120 [ 409.909594][T15338] traverse+0xfb/0x540 [ 409.913647][T15338] ? mutex_trylock+0xb0/0xb0 [ 409.918224][T15338] ? do_user_addr_fault+0x55c/0x9f0 [ 409.923448][T15338] seq_read+0xc62/0xd30 [ 409.927574][T15338] ? memset+0x1f/0x40 [ 409.931526][T15338] ? seq_open+0x160/0x160 [ 409.935856][T15338] proc_reg_read+0x227/0x350 [ 409.940414][T15338] ? proc_reg_llseek+0x330/0x330 [ 409.945326][T15338] ? security_file_permission+0x1e9/0x300 [ 409.951013][T15338] do_iter_read+0x43b/0x550 [ 409.955484][T15338] do_preadv+0x213/0x350 [ 409.959693][T15338] ? do_writev+0x5b0/0x5b0 [ 409.964093][T15338] ? fput_many+0x42/0x1a0 [ 409.968405][T15338] ? ksys_write+0x25d/0x2c0 [ 409.972879][T15338] do_syscall_64+0xcb/0x150 [ 409.977365][T15338] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 409.983224][T15338] RIP: 0033:0x45ca59 [ 409.987087][T15338] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 410.006675][T15338] RSP: 002b:00007f904780ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 410.015053][T15338] RAX: ffffffffffffffda RBX: 00000000004fb020 RCX: 000000000045ca59 [ 410.023014][T15338] RDX: 0000000000000315 RSI: 00000000200017c0 RDI: 0000000000000005 [ 410.030956][T15338] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 410.038981][T15338] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000006 [ 410.046919][T15338] R13: 0000000000000879 R14: 00000000004cb652 R15: 00007f904780f6d4 18:42:18 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:18 executing program 1 (fault-call:0 fault-nth:0): syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:42:18 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:18 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:18 executing program 2 (fault-call:5 fault-nth:2): recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:42:18 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:18 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 412.528490][T15352] fuse: Bad value for 'fd' [ 412.539018][T15355] FAULT_INJECTION: forcing a failure. [ 412.539018][T15355] name failslab, interval 1, probability 0, space 0, times 0 [ 412.557588][T15355] CPU: 0 PID: 15355 Comm: syz-executor.1 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 412.567744][T15355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.577787][T15355] Call Trace: [ 412.581080][T15355] dump_stack+0x14a/0x1ce [ 412.585381][T15355] ? devkmsg_release+0x11c/0x11c [ 412.590396][T15355] ? show_regs_print_info+0x12/0x12 [ 412.595581][T15355] ? proc_fail_nth_read+0x1d0/0x1d0 [ 412.600759][T15355] should_fail+0x6fb/0x860 [ 412.605150][T15355] ? setup_fault_attr+0x3d0/0x3d0 [ 412.610163][T15355] ? getname_flags+0xb8/0x610 [ 412.614816][T15355] should_failslab+0x5/0x20 [ 412.619297][T15355] kmem_cache_alloc+0x36/0x260 [ 412.624029][T15355] getname_flags+0xb8/0x610 [ 412.628500][T15355] do_sys_open+0x33d/0x7d0 [ 412.632903][T15355] ? ksys_write+0x25d/0x2c0 [ 412.637412][T15355] ? file_open_root+0x450/0x450 [ 412.642236][T15355] do_syscall_64+0xcb/0x150 [ 412.646707][T15355] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 412.652567][T15355] RIP: 0033:0x416851 [ 412.656486][T15355] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 18:42:18 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x8, 0x800000) 18:42:18 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:18 executing program 1 (fault-call:0 fault-nth:1): syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) [ 412.676084][T15355] RSP: 002b:00007f8b017657a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 412.684461][T15355] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416851 [ 412.692401][T15355] RDX: 0000000000000000 RSI: 0000000000000041 RDI: 00007f8b01765850 [ 412.700369][T15355] RBP: 000000000078bf00 R08: 000000000000000f R09: 0000000000000000 [ 412.708324][T15355] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 412.716266][T15355] R13: 0000000000000c3b R14: 00000000004ce917 R15: 00007f8b017666d4 18:42:18 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x4f) 18:42:18 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x9f) [ 412.749023][T15367] FAULT_INJECTION: forcing a failure. [ 412.749023][T15367] name failslab, interval 1, probability 0, space 0, times 0 [ 412.762605][T15367] CPU: 1 PID: 15367 Comm: syz-executor.1 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 412.772854][T15367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.782899][T15367] Call Trace: [ 412.786184][T15367] dump_stack+0x14a/0x1ce [ 412.790515][T15367] ? devkmsg_release+0x11c/0x11c [ 412.795457][T15367] ? show_regs_print_info+0x12/0x12 [ 412.800650][T15367] ? unwind_get_return_address_ptr+0x130/0x130 [ 412.806796][T15367] should_fail+0x6fb/0x860 [ 412.811200][T15367] ? setup_fault_attr+0x3d0/0x3d0 [ 412.816216][T15367] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 412.822278][T15367] ? __alloc_file+0x26/0x390 [ 412.826860][T15367] should_failslab+0x5/0x20 [ 412.831349][T15367] kmem_cache_alloc+0x36/0x260 [ 412.836106][T15367] __alloc_file+0x26/0x390 [ 412.840493][T15367] ? alloc_empty_file+0x49/0x1b0 [ 412.845399][T15367] alloc_empty_file+0xa9/0x1b0 [ 412.850146][T15367] path_openat+0x11e/0x3d10 [ 412.854621][T15367] ? arch_stack_walk+0xd8/0x120 [ 412.859439][T15367] ? stack_trace_save+0x123/0x1f0 [ 412.864439][T15367] ? stack_trace_snprint+0x150/0x150 [ 412.869715][T15367] ? do_filp_open+0x440/0x440 [ 412.874359][T15367] ? __kasan_kmalloc+0x12c/0x1c0 [ 412.879279][T15367] ? kmem_cache_alloc+0x1d5/0x260 [ 412.884271][T15367] ? getname_flags+0xb8/0x610 [ 412.888912][T15367] ? do_sys_open+0x33d/0x7d0 [ 412.893468][T15367] ? do_syscall_64+0xcb/0x150 [ 412.898118][T15367] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 412.904183][T15367] do_filp_open+0x20d/0x440 [ 412.908654][T15367] ? vfs_tmpfile+0x220/0x220 [ 412.913219][T15367] ? _raw_spin_unlock+0x5/0x20 [ 412.917956][T15367] ? __alloc_fd+0x4e8/0x590 [ 412.922428][T15367] do_sys_open+0x387/0x7d0 [ 412.926866][T15367] ? ksys_write+0x25d/0x2c0 [ 412.931340][T15367] ? file_open_root+0x450/0x450 [ 412.936162][T15367] do_syscall_64+0xcb/0x150 [ 412.940637][T15367] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 412.946497][T15367] RIP: 0033:0x416851 [ 412.950383][T15367] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 412.970054][T15367] RSP: 002b:00007f8b017657a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 412.978431][T15367] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416851 [ 412.986385][T15367] RDX: 0000000000000000 RSI: 0000000000000041 RDI: 00007f8b01765850 [ 412.994324][T15367] RBP: 000000000078bf00 R08: 000000000000000f R09: 0000000000000000 [ 413.002263][T15367] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 413.010213][T15367] R13: 0000000000000c3b R14: 00000000004ce917 R15: 00007f8b017666d4 18:42:21 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800002) 18:42:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:21 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:21 executing program 1 (fault-call:0 fault-nth:2): syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:42:21 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800003) 18:42:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800004) [ 415.560416][T15393] FAULT_INJECTION: forcing a failure. [ 415.560416][T15393] name failslab, interval 1, probability 0, space 0, times 0 [ 415.574374][T15393] CPU: 1 PID: 15393 Comm: syz-executor.1 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 415.584529][T15393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.594571][T15393] Call Trace: [ 415.597857][T15393] dump_stack+0x14a/0x1ce [ 415.602186][T15393] ? devkmsg_release+0x11c/0x11c 18:42:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800005) 18:42:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800006) [ 415.607116][T15393] ? show_regs_print_info+0x12/0x12 [ 415.612306][T15393] should_fail+0x6fb/0x860 [ 415.616715][T15393] ? setup_fault_attr+0x3d0/0x3d0 [ 415.621735][T15393] ? security_file_alloc+0x32/0x200 [ 415.626919][T15393] should_failslab+0x5/0x20 [ 415.631410][T15393] kmem_cache_alloc+0x36/0x260 [ 415.636166][T15393] security_file_alloc+0x32/0x200 [ 415.641184][T15393] __alloc_file+0xc6/0x390 [ 415.645592][T15393] alloc_empty_file+0xa9/0x1b0 [ 415.650346][T15393] path_openat+0x11e/0x3d10 [ 415.655360][T15393] ? arch_stack_walk+0xd8/0x120 18:42:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800007) 18:42:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800008) [ 415.660203][T15393] ? stack_trace_save+0x123/0x1f0 [ 415.665220][T15393] ? stack_trace_snprint+0x150/0x150 [ 415.670487][T15393] ? do_filp_open+0x440/0x440 [ 415.675144][T15393] ? __kasan_kmalloc+0x12c/0x1c0 [ 415.680070][T15393] ? kmem_cache_alloc+0x1d5/0x260 [ 415.685080][T15393] ? getname_flags+0xb8/0x610 [ 415.689750][T15393] ? do_sys_open+0x33d/0x7d0 [ 415.694328][T15393] ? do_syscall_64+0xcb/0x150 [ 415.698998][T15393] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 415.705053][T15393] do_filp_open+0x20d/0x440 [ 415.709547][T15393] ? vfs_tmpfile+0x220/0x220 [ 415.714133][T15393] ? _raw_spin_unlock+0x5/0x20 [ 415.718883][T15393] ? __alloc_fd+0x4e8/0x590 [ 415.723379][T15393] do_sys_open+0x387/0x7d0 [ 415.727783][T15393] ? ksys_write+0x25d/0x2c0 [ 415.732281][T15393] ? file_open_root+0x450/0x450 [ 415.737100][T15393] do_syscall_64+0xcb/0x150 [ 415.741576][T15393] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 415.747433][T15393] RIP: 0033:0x416851 [ 415.751383][T15393] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 415.770964][T15393] RSP: 002b:00007f8b017657a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 415.779344][T15393] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416851 [ 415.787290][T15393] RDX: 0000000000000000 RSI: 0000000000000041 RDI: 00007f8b01765850 [ 415.795250][T15393] RBP: 000000000078bf00 R08: 000000000000000f R09: 0000000000000000 [ 415.804057][T15393] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 415.811999][T15393] R13: 0000000000000c3b R14: 00000000004ce917 R15: 00007f8b017666d4 18:42:24 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800009) 18:42:24 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:24 executing program 1 (fault-call:0 fault-nth:3): syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:42:24 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:24 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x80000a) 18:42:24 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 418.564722][T15431] FAULT_INJECTION: forcing a failure. [ 418.564722][T15431] name failslab, interval 1, probability 0, space 0, times 0 [ 418.589874][T15431] CPU: 1 PID: 15431 Comm: syz-executor.1 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 418.600078][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.610126][T15431] Call Trace: 18:42:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x80000b) 18:42:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x80000c) [ 418.613410][T15431] dump_stack+0x14a/0x1ce [ 418.617734][T15431] ? devkmsg_release+0x11c/0x11c [ 418.622661][T15431] ? show_regs_print_info+0x12/0x12 [ 418.627852][T15431] ? avc_has_perm_noaudit+0x30c/0x400 [ 418.633221][T15431] should_fail+0x6fb/0x860 [ 418.637628][T15431] ? setup_fault_attr+0x3d0/0x3d0 [ 418.642666][T15431] ? avc_has_perm_noaudit+0x30c/0x400 [ 418.648031][T15431] ? usbdev_open+0xa4/0x710 [ 418.652524][T15431] should_failslab+0x5/0x20 [ 418.657020][T15431] kmem_cache_alloc_trace+0x39/0x280 18:42:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x80000d) 18:42:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x80000e) [ 418.662298][T15431] usbdev_open+0xa4/0x710 [ 418.666653][T15431] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 418.672280][T15431] ? usbdev_mmap+0x800/0x800 [ 418.676863][T15431] ? __fsnotify_parent+0xeb/0x310 [ 418.681888][T15431] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 418.688646][T15431] chrdev_open+0x585/0x640 [ 418.693060][T15431] ? __fsnotify_parent+0x310/0x310 [ 418.702155][T15431] ? cd_forget+0x150/0x150 [ 418.706554][T15431] ? security_file_open+0x1f8/0x2c0 [ 418.711723][T15431] ? cd_forget+0x150/0x150 [ 418.716109][T15431] do_dentry_open+0x8f7/0x1070 [ 418.720852][T15431] ? finish_open+0xd0/0xd0 [ 418.725254][T15431] ? vfs_open+0x2b/0x80 [ 418.729392][T15431] ? memcpy+0x38/0x50 [ 418.733357][T15431] path_openat+0x12db/0x3d10 [ 418.737933][T15431] ? do_filp_open+0x440/0x440 [ 418.742590][T15431] ? do_sys_open+0x33d/0x7d0 [ 418.747159][T15431] ? do_syscall_64+0xcb/0x150 [ 418.751827][T15431] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 418.757882][T15431] do_filp_open+0x20d/0x440 [ 418.762355][T15431] ? vfs_tmpfile+0x220/0x220 [ 418.766930][T15431] ? _raw_spin_unlock+0x5/0x20 [ 418.771687][T15431] ? __alloc_fd+0x4e8/0x590 [ 418.776182][T15431] do_sys_open+0x387/0x7d0 [ 418.780614][T15431] ? ksys_write+0x25d/0x2c0 [ 418.785097][T15431] ? file_open_root+0x450/0x450 [ 418.789977][T15431] do_syscall_64+0xcb/0x150 [ 418.794474][T15431] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 418.800339][T15431] RIP: 0033:0x416851 [ 418.804204][T15431] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 418.823779][T15431] RSP: 002b:00007f8b017657a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 418.832160][T15431] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416851 [ 418.840104][T15431] RDX: 0000000000000000 RSI: 0000000000000041 RDI: 00007f8b01765850 [ 418.848063][T15431] RBP: 000000000078bf00 R08: 000000000000000f R09: 0000000000000000 [ 418.856163][T15431] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 418.864263][T15431] R13: 0000000000000c3b R14: 00000000004ce917 R15: 00007f8b017666d4 18:42:27 executing program 1 (fault-call:0 fault-nth:4): syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:42:27 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800010) 18:42:27 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:27 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:27 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) [ 421.595837][T15474] FAULT_INJECTION: forcing a failure. [ 421.595837][T15474] name failslab, interval 1, probability 0, space 0, times 0 [ 421.608582][T15474] CPU: 1 PID: 15474 Comm: syz-executor.1 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 421.618735][T15474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.628762][T15474] Call Trace: [ 421.632030][T15474] dump_stack+0x14a/0x1ce [ 421.636427][T15474] ? devkmsg_release+0x11c/0x11c [ 421.641333][T15474] ? memset+0x1f/0x40 [ 421.645287][T15474] ? show_regs_print_info+0x12/0x12 [ 421.650454][T15474] ? unwind_next_frame+0x1c90/0x2330 [ 421.655713][T15474] should_fail+0x6fb/0x860 [ 421.660098][T15474] ? setup_fault_attr+0x3d0/0x3d0 [ 421.665089][T15474] ? __perf_event_task_sched_in+0x4f7/0x560 [ 421.670951][T15474] ? usb_control_msg+0xb7/0x4c0 [ 421.675783][T15474] should_failslab+0x5/0x20 [ 421.680258][T15474] kmem_cache_alloc_trace+0x39/0x280 [ 421.685512][T15474] usb_control_msg+0xb7/0x4c0 [ 421.690196][T15474] ? usb_anchor_empty+0x40/0x40 [ 421.695020][T15474] ? __schedule+0x920/0xef0 [ 421.699508][T15474] hub_ext_port_status+0x108/0x660 [ 421.704594][T15474] hub_activate+0xcee/0x2050 [ 421.709153][T15474] ? _raw_spin_lock+0x170/0x170 [ 421.713974][T15474] ? hub_irq+0x340/0x340 [ 421.718186][T15474] ? _raw_spin_lock_irq+0xa2/0x180 [ 421.723285][T15474] hub_resume+0x9d/0x3f0 [ 421.727519][T15474] ? hub_suspend+0xb30/0xb30 [ 421.732078][T15474] ? hcd_bus_resume+0x529/0x600 [ 421.736898][T15474] ? mutex_unlock+0x19/0x40 [ 421.741369][T15474] usb_resume_both+0x538/0x9d0 [ 421.746104][T15474] __rpm_callback+0x15d/0x4d0 [ 421.750748][T15474] ? autosuspend_check+0x560/0x560 [ 421.755846][T15474] rpm_resume+0xfd6/0x1a00 [ 421.760336][T15474] ? autosuspend_check+0x560/0x560 [ 421.765420][T15474] ? __pm_runtime_resume+0x90/0x90 [ 421.770529][T15474] ? _raw_spin_lock+0x170/0x170 [ 421.775378][T15474] ? device_match_fwnode+0x30/0x30 [ 421.780468][T15474] ? mutex_lock+0xa6/0x110 [ 421.784871][T15474] ? mutex_trylock+0xb0/0xb0 [ 421.789457][T15474] ? usbdev_open+0xa4/0x710 [ 421.793940][T15474] __pm_runtime_resume+0x6a/0x90 [ 421.798846][T15474] usb_autoresume_device+0x1f/0x60 [ 421.803943][T15474] usbdev_open+0x199/0x710 [ 421.808330][T15474] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 421.813946][T15474] ? usbdev_mmap+0x800/0x800 [ 421.818532][T15474] ? __fsnotify_parent+0xeb/0x310 [ 421.823527][T15474] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 421.830273][T15474] chrdev_open+0x585/0x640 [ 421.834677][T15474] ? __fsnotify_parent+0x310/0x310 [ 421.839786][T15474] ? cd_forget+0x150/0x150 [ 421.844177][T15474] ? security_file_open+0x1f8/0x2c0 [ 421.849412][T15474] ? cd_forget+0x150/0x150 [ 421.853801][T15474] do_dentry_open+0x8f7/0x1070 [ 421.858637][T15474] ? finish_open+0xd0/0xd0 [ 421.863039][T15474] ? vfs_open+0x2b/0x80 [ 421.867178][T15474] ? memcpy+0x38/0x50 [ 421.871234][T15474] path_openat+0x12db/0x3d10 [ 421.875797][T15474] ? do_filp_open+0x440/0x440 [ 421.880460][T15474] ? do_sys_open+0x33d/0x7d0 [ 421.885021][T15474] ? do_syscall_64+0xcb/0x150 [ 421.889666][T15474] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 421.895734][T15474] do_filp_open+0x20d/0x440 [ 421.900218][T15474] ? vfs_tmpfile+0x220/0x220 [ 421.904782][T15474] ? _raw_spin_unlock+0x5/0x20 [ 421.909537][T15474] ? __alloc_fd+0x4e8/0x590 [ 421.914029][T15474] do_sys_open+0x387/0x7d0 [ 421.918420][T15474] ? ksys_write+0x25d/0x2c0 [ 421.922893][T15474] ? file_open_root+0x450/0x450 [ 421.927816][T15474] do_syscall_64+0xcb/0x150 [ 421.932294][T15474] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 421.938158][T15474] RIP: 0033:0x416851 [ 421.942089][T15474] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 421.961778][T15474] RSP: 002b:00007f8b017657a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 421.970177][T15474] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416851 [ 421.978118][T15474] RDX: 0000000000000000 RSI: 0000000000000041 RDI: 00007f8b01765850 [ 421.986064][T15474] RBP: 000000000078bf00 R08: 000000000000000f R09: 0000000000000000 18:42:28 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800011) 18:42:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:28 executing program 1 (fault-call:0 fault-nth:5): syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) [ 421.994019][T15474] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 422.002049][T15474] R13: 0000000000000c3b R14: 00000000004ce917 R15: 00007f8b017666d4 [ 422.011087][T15474] hub 6-0:1.0: hub_ext_port_status failed (err = -12) [ 422.045443][T15487] FAULT_INJECTION: forcing a failure. [ 422.045443][T15487] name failslab, interval 1, probability 0, space 0, times 0 [ 422.061613][T15487] CPU: 1 PID: 15487 Comm: syz-executor.1 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 422.071859][T15487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.081905][T15487] Call Trace: [ 422.085198][T15487] dump_stack+0x14a/0x1ce [ 422.089565][T15487] ? devkmsg_release+0x11c/0x11c [ 422.094470][T15487] ? show_regs_print_info+0x12/0x12 [ 422.099647][T15487] should_fail+0x6fb/0x860 [ 422.104077][T15487] ? setup_fault_attr+0x3d0/0x3d0 [ 422.109075][T15487] ? usb_alloc_urb+0x3d/0x140 [ 422.113722][T15487] should_failslab+0x5/0x20 [ 422.118198][T15487] __kmalloc+0x5f/0x2d0 [ 422.122342][T15487] usb_alloc_urb+0x3d/0x140 [ 422.126815][T15487] usb_control_msg+0x18f/0x4c0 [ 422.131648][T15487] ? usb_anchor_empty+0x40/0x40 [ 422.136483][T15487] hub_ext_port_status+0x108/0x660 [ 422.141847][T15487] hub_activate+0xcee/0x2050 [ 422.146450][T15487] ? _raw_spin_lock+0x170/0x170 [ 422.151282][T15487] ? hub_irq+0x340/0x340 [ 422.155507][T15487] ? _raw_spin_lock_irq+0xa2/0x180 [ 422.160608][T15487] hub_resume+0x9d/0x3f0 [ 422.164823][T15487] ? hub_suspend+0xb30/0xb30 [ 422.169383][T15487] ? hcd_bus_resume+0x529/0x600 [ 422.174201][T15487] ? mutex_unlock+0x19/0x40 [ 422.178677][T15487] usb_resume_both+0x538/0x9d0 [ 422.183412][T15487] __rpm_callback+0x15d/0x4d0 [ 422.188059][T15487] ? autosuspend_check+0x560/0x560 [ 422.193139][T15487] rpm_resume+0xfd6/0x1a00 [ 422.197539][T15487] ? autosuspend_check+0x560/0x560 [ 422.202622][T15487] ? __pm_runtime_resume+0x90/0x90 [ 422.207702][T15487] ? _raw_spin_lock+0x170/0x170 [ 422.212521][T15487] ? device_match_fwnode+0x30/0x30 [ 422.217606][T15487] ? mutex_lock+0xa6/0x110 [ 422.221995][T15487] ? mutex_trylock+0xb0/0xb0 [ 422.226552][T15487] ? usbdev_open+0xa4/0x710 [ 422.231040][T15487] __pm_runtime_resume+0x6a/0x90 [ 422.235950][T15487] usb_autoresume_device+0x1f/0x60 [ 422.241030][T15487] usbdev_open+0x199/0x710 [ 422.245520][T15487] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 422.251138][T15487] ? usbdev_mmap+0x800/0x800 [ 422.255698][T15487] ? __fsnotify_parent+0xeb/0x310 [ 422.260696][T15487] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 422.267448][T15487] chrdev_open+0x585/0x640 [ 422.271835][T15487] ? __fsnotify_parent+0x310/0x310 [ 422.276911][T15487] ? cd_forget+0x150/0x150 [ 422.281323][T15487] ? security_file_open+0x1f8/0x2c0 [ 422.286487][T15487] ? cd_forget+0x150/0x150 [ 422.290876][T15487] do_dentry_open+0x8f7/0x1070 [ 422.295615][T15487] ? finish_open+0xd0/0xd0 [ 422.300000][T15487] ? vfs_open+0x2b/0x80 [ 422.304123][T15487] ? memcpy+0x38/0x50 [ 422.308091][T15487] path_openat+0x12db/0x3d10 [ 422.312677][T15487] ? do_filp_open+0x440/0x440 [ 422.317323][T15487] ? do_sys_open+0x33d/0x7d0 [ 422.321884][T15487] ? do_syscall_64+0xcb/0x150 [ 422.326529][T15487] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 422.332563][T15487] do_filp_open+0x20d/0x440 [ 422.337035][T15487] ? vfs_tmpfile+0x220/0x220 [ 422.341596][T15487] ? _raw_spin_unlock+0x5/0x20 [ 422.346326][T15487] ? __alloc_fd+0x4e8/0x590 [ 422.350798][T15487] do_sys_open+0x387/0x7d0 [ 422.355183][T15487] ? ksys_write+0x25d/0x2c0 [ 422.359833][T15487] ? file_open_root+0x450/0x450 [ 422.364676][T15487] do_syscall_64+0xcb/0x150 [ 422.369168][T15487] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 422.375029][T15487] RIP: 0033:0x416851 18:42:28 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:28 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:28 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800012) [ 422.378893][T15487] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 422.398462][T15487] RSP: 002b:00007f8b017657a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 422.406855][T15487] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416851 [ 422.414798][T15487] RDX: 0000000000000000 RSI: 0000000000000041 RDI: 00007f8b01765850 [ 422.422758][T15487] RBP: 000000000078bf00 R08: 000000000000000f R09: 0000000000000000 [ 422.430712][T15487] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 422.438671][T15487] R13: 0000000000000c3b R14: 00000000004ce917 R15: 00007f8b017666d4 18:42:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 422.472678][T15487] hub 6-0:1.0: hub_ext_port_status failed (err = -12) 18:42:30 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:30 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800025) 18:42:30 executing program 1 (fault-call:0 fault-nth:6): syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:42:30 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:30 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(0x0, 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:30 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) [ 424.613821][T15517] FAULT_INJECTION: forcing a failure. [ 424.613821][T15517] name failslab, interval 1, probability 0, space 0, times 0 [ 424.630127][T15517] CPU: 1 PID: 15517 Comm: syz-executor.1 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 424.640374][T15517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.650492][T15517] Call Trace: [ 424.653762][T15517] dump_stack+0x14a/0x1ce [ 424.658080][T15517] ? devkmsg_release+0x11c/0x11c [ 424.662987][T15517] ? arch_stack_walk+0xd8/0x120 [ 424.667827][T15517] ? show_regs_print_info+0x12/0x12 [ 424.673011][T15517] should_fail+0x6fb/0x860 [ 424.677408][T15517] ? setup_fault_attr+0x3d0/0x3d0 [ 424.682402][T15517] ? _raw_spin_lock+0xa1/0x170 [ 424.687145][T15517] ? _raw_spin_trylock_bh+0x190/0x190 [ 424.692544][T15517] ? kzalloc+0x1b/0x30 [ 424.696635][T15517] should_failslab+0x5/0x20 [ 424.701106][T15517] __kmalloc+0x5f/0x2d0 [ 424.705231][T15517] kzalloc+0x1b/0x30 [ 424.709097][T15517] usb_hcd_submit_urb+0x8b9/0x1b60 [ 424.714174][T15517] ? hub_resume+0x9d/0x3f0 [ 424.718563][T15517] ? usb_resume_both+0x538/0x9d0 [ 424.723477][T15517] ? __rpm_callback+0x15d/0x4d0 [ 424.728299][T15517] ? __pm_runtime_resume+0x6a/0x90 [ 424.733388][T15517] ? chrdev_open+0x585/0x640 [ 424.737948][T15517] ? do_filp_open+0x20d/0x440 [ 424.742593][T15517] ? usb_hcd_map_urb_for_dma+0x12e0/0x12e0 [ 424.748369][T15517] ? usb_submit_urb+0xc5b/0x13e0 [ 424.753283][T15517] usb_start_wait_urb+0x12e/0x390 [ 424.758377][T15517] ? usb_api_blocking_completion+0xa0/0xa0 [ 424.764154][T15517] ? __kmalloc+0xf7/0x2d0 [ 424.768973][T15517] ? usb_alloc_urb+0x3d/0x140 [ 424.773618][T15517] usb_control_msg+0x2b5/0x4c0 [ 424.778351][T15517] ? usb_anchor_empty+0x40/0x40 [ 424.783173][T15517] hub_ext_port_status+0x108/0x660 [ 424.788272][T15517] hub_activate+0xcee/0x2050 [ 424.792920][T15517] ? _raw_spin_lock+0x170/0x170 [ 424.797751][T15517] ? hub_irq+0x340/0x340 [ 424.801977][T15517] ? _raw_spin_lock_irq+0xa2/0x180 [ 424.807069][T15517] hub_resume+0x9d/0x3f0 [ 424.811293][T15517] ? hub_suspend+0xb30/0xb30 [ 424.815865][T15517] ? hcd_bus_resume+0x529/0x600 [ 424.820700][T15517] ? mutex_unlock+0x19/0x40 [ 424.825169][T15517] usb_resume_both+0x538/0x9d0 [ 424.829992][T15517] __rpm_callback+0x15d/0x4d0 [ 424.834637][T15517] ? autosuspend_check+0x560/0x560 [ 424.839738][T15517] rpm_resume+0xfd6/0x1a00 [ 424.844129][T15517] ? autosuspend_check+0x560/0x560 [ 424.849209][T15517] ? __pm_runtime_resume+0x90/0x90 [ 424.854289][T15517] ? _raw_spin_lock+0x170/0x170 [ 424.859107][T15517] ? device_match_fwnode+0x30/0x30 [ 424.864186][T15517] ? mutex_lock+0xa6/0x110 [ 424.868588][T15517] ? mutex_trylock+0xb0/0xb0 [ 424.873145][T15517] ? usbdev_open+0xa4/0x710 [ 424.877616][T15517] __pm_runtime_resume+0x6a/0x90 [ 424.882524][T15517] usb_autoresume_device+0x1f/0x60 [ 424.887616][T15517] usbdev_open+0x199/0x710 [ 424.892004][T15517] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 424.897604][T15517] ? usbdev_mmap+0x800/0x800 [ 424.902184][T15517] ? __fsnotify_parent+0xeb/0x310 [ 424.907176][T15517] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 424.913906][T15517] chrdev_open+0x585/0x640 [ 424.918303][T15517] ? __fsnotify_parent+0x310/0x310 [ 424.923390][T15517] ? cd_forget+0x150/0x150 [ 424.927783][T15517] ? security_file_open+0x1f8/0x2c0 [ 424.933113][T15517] ? cd_forget+0x150/0x150 [ 424.937613][T15517] do_dentry_open+0x8f7/0x1070 [ 424.942353][T15517] ? finish_open+0xd0/0xd0 [ 424.946751][T15517] ? vfs_open+0x2b/0x80 [ 424.950879][T15517] ? memcpy+0x38/0x50 [ 424.954851][T15517] path_openat+0x12db/0x3d10 [ 424.959417][T15517] ? do_filp_open+0x440/0x440 [ 424.964070][T15517] ? do_sys_open+0x33d/0x7d0 [ 424.968631][T15517] ? do_syscall_64+0xcb/0x150 [ 424.973282][T15517] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 424.979337][T15517] do_filp_open+0x20d/0x440 [ 424.983811][T15517] ? vfs_tmpfile+0x220/0x220 [ 424.988373][T15517] ? _raw_spin_unlock+0x5/0x20 [ 424.993123][T15517] ? __alloc_fd+0x4e8/0x590 [ 424.997595][T15517] do_sys_open+0x387/0x7d0 [ 425.001999][T15517] ? ksys_write+0x25d/0x2c0 [ 425.006472][T15517] ? file_open_root+0x450/0x450 [ 425.011292][T15517] do_syscall_64+0xcb/0x150 [ 425.015770][T15517] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 425.021649][T15517] RIP: 0033:0x416851 [ 425.025530][T15517] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 425.045103][T15517] RSP: 002b:00007f8b017657a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 425.053576][T15517] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416851 18:42:31 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800048) 18:42:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:31 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x80004c) 18:42:31 executing program 1 (fault-call:0 fault-nth:7): syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) [ 425.061546][T15517] RDX: 0000000000000000 RSI: 0000000000000041 RDI: 00007f8b01765850 [ 425.069501][T15517] RBP: 000000000078bf00 R08: 000000000000000f R09: 0000000000000000 [ 425.077457][T15517] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 425.085404][T15517] R13: 0000000000000c3b R14: 00000000004ce917 R15: 00007f8b017666d4 [ 425.108512][T15517] hub 6-0:1.0: hub_ext_port_status failed (err = -12) 18:42:31 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(0x0, 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:31 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) [ 425.148008][T15531] fuse: Bad value for 'fd' 18:42:33 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:42:33 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:33 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800068) 18:42:33 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(0x0, 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:33 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:33 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x80006c) 18:42:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x72, 0x41) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') 18:42:33 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:33 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800074) [ 427.636550][T15554] fuse: Bad value for 'fd' 18:42:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) membarrier(0x1, 0x0) 18:42:33 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x80007a) [ 427.696668][T15570] fuse: Bad value for 'fd' 18:42:36 executing program 3 (fault-call:8 fault-nth:0): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800300) 18:42:36 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:36 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:36 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r3}, 0x80, 0x0}}], 0x1, 0x2404c040) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4400204}, 0xc, &(0x7f0000000500)={&(0x7f0000003900)=ANY=[@ANYBLOB="e8020000250001002cbd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="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"], 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x20004010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x8c, 0x4, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6802}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040850) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r7}, 0x80, 0x0}}], 0x1, 0x2404c040) sendmmsg$sock(r4, &(0x7f0000003800)=[{{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)="aabf30c44d13091ed4287980b7d7233119a86ca1df4b2ed9ddf48dbd0ecc630cb1f248af1fcecb14f2a42ad1ad2a0b9bdadf13f403e6523b59bea3825d7faa6ebe9b782f8dc2ec9eb86eadd041117e477a775a43806b594d796c641364466eb5328677d5f962d95532e7af148d9f", 0x6e}, {&(0x7f0000000680)="576038d8115cb1a4bda6fc6fa9dd5fb027e987ba4bfba3ce2ce9ab20ce2c1d87eb73387a912d2a5fc514daef8a2aa493be400b622f054ab656c0b8edcaa6c9a18b5899a035c968a82b888ebe9ba0dcdd02a6814ca63711744c5505fb88abcbc48b037bebbc29c4978e55421361a4749300c28ce7e1368c903d584ad0c91f1efe676d186362111d6284b3169c7cb90f113b213e47b06f0baa881d3368f08f073792476d56178555af1840474f34241b0d296ed03ba0c66fb926c6dfd87264b38190ce9548b70541bc3f51ab16dfb744af557b4acdc91039a7ad74e15fd9df814f", 0xe0}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="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", 0x1000}], 0x4}}, {{&(0x7f00000028c0)=@ll={0x11, 0xf7, r7, 0x1, 0x4d, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002940)="f422ce6adfb7642ee958e56f207a4a8e5079f1cbdc02872e40a7df8ffd131ba3e710c07d249d3642ce20c52f399aa3d279bd0c056aebd850deb8e05d00563db176", 0x41}, {&(0x7f00000029c0)="535873dcf94352826b08afd0aea95fc93e443e275fb1630466ea91cf4ef64647f5fb7d02a47949c3370aed9852189cb979ffebc1fb2d826c026c3c581b7f7cf1ca68ef86c59106afdda21b9b81545b186820b0f5c73ab718f8311c0d", 0x5c}, {&(0x7f0000002a40)="16c951ce7b91e2200fdd60816c7370bd29f9366a09e50ec83e930600b8024196a1006b80c81134c962df8e6ea5229768c47a0176160e83e57b6509e7cf8df2a82023f8f89c2038bce0d08ef2376bc963cc5b9936f74784fa3cb0c6dc73dd9f66097ebbac2b85d2e0ce4a05cf71892f50def84c503064f4f37d496a3af9bbd86790caf1befc33c1c0ab8e01cb1337a8cdedbdfee3c66411", 0x97}], 0x3, &(0x7f0000002b40)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xac5d}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x181}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0xf0}}, {{&(0x7f0000002c40)=@caif=@dgm={0x25, 0x8, 0x1f}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002cc0)="32e2874ba610a9545c4d88e1d5f5857ff84011eb4b886a4df5b55bc82497a71133434712ce70bb587130e5e844988ff0e608dbd1364eb1e2143b574836", 0x3d}, {&(0x7f0000002d00)="4d1f45386d4371806c691fe6091f4967c85ffdeb53451f6d82d5fb9a088e953f51f6e3dfc36a2ec2492f0a66d8fdf8b58083111f24cb0eb898e84e18818fd78d8d2f2f2d4d4ef4121051710432420d1db99621d7164a5911e033630dcf538ee2c6eb4b844b449a0b4f8e30a38c0c75f946151f45607a6ae5054adb6c9344bfccf2bc2bad8e92b95e1684c2c3571df6f4290839797da47843a177fbf413031a1efc83aca54a52cc65931bf4c5204f26e8c36998a500ddd37a56a9", 0xba}, {&(0x7f0000002dc0)="7bf0eea1901fb72440da83a3989c264dc7ec023d881f38c20c5205a8b4c065db184708ea00f0e299f4e7348b3af48227d6fbac781dd41661c4b7024e6dade78cbee25327f1f674234eea6b5b142618446345f8bcb95c9e53edc0634bd459a5ac9a26f8446b7a996da7a138d6a385f0624245ae388312f14d4c02448b9bfd86f7bb1e0793e1057e93958838b1cf5257fd905816209430e82f8ee596137cd13a16660b70fd4805c7f9adb21e8be1a97a", 0xaf}, {&(0x7f0000002e80)="0a47d0d21b123decbb2e4887cdc4c4c955c9d40756b029dd36419e81d3b4183efc7cb9999e8b2ef8c2dcd131ed4929fec53f2ed7aa02acf557", 0x39}, {&(0x7f0000002ec0)}, {&(0x7f0000002f00)="f7986766bea66123", 0x8}], 0x6, &(0x7f0000002fc0)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff9}}, @mark={{0x14, 0x1, 0x24, 0x3f}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xc1d}}, @timestamping={{0x14}}, @timestamping={{0x14}}], 0xc0}}, {{&(0x7f0000003080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3ff}}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003100)="cf0c9c7942a187973032823524e9a178da430502aefd421cb1d3b62e9a32191e395556c621d7f497ed326baa88095479f27f96e16108a574757084421e87ab050f6fb23bcc45789c730917881a894aa63566cc9e2ca10f51ff3263da5a5fced4cffb34580c181b35f3867cb208b2928b012bb09586400036ea39ae5fcbbc7a4ad9dbf42c21bfe1761e8fb702638ba5cc2bace7e6ed804109134ed6632f5747b75b6005edf55cbdd58ba0fb9780e7eabd83b3eb09eafc2e09ec602865fd6edb55e6950b9526468eb10c14c01f3f228d9a030fd667784211", 0xd7}, {&(0x7f0000003200)="4b166f503a12c8e0ef8d465bdf708a9862f26fb4a9f1d317a8441b8a993f1c95e83cebef675fbbc11e377efdd94c6c3508fd830339c867eec3c1b91d252a30cc58d0fc10ecde00f97cc70f0003ead172389247e13a041f2938efba090c80d1e2b4938083b5cc97c695f7a5190bf3e12358100100dbd3f705e4d68ab7b0d4b09a215bec608106609104208bec055a2658d80f75805712404a94a1ffad50f2d97877def54e60ca0e131cfde288858cd2e8bfa61aeac30e2bde5987c2a9f7934571e7b593bca1c660", 0xc7}, {&(0x7f0000003300)="75d2165485e588ecca3bc744006027ff9ba87a48b6351a", 0x17}, {&(0x7f0000003340)="f1328e55cffd47d7b75d51732eec2ac7c4a42aeeecbbbe047dd0508de874387e1e0a549cae62967105ee6af4b494406d157941a08bf23a3bb31b5e52c5bbfa664c105891bd0967d5e7c9c4f686e21efac1de24f06cfbe029be11a1f8306bbf2b4a1df141d54c743c5b2ab2ee1eb116e5d19455119b5f62de13a059b0ded31c3c31a50719f3f523660aada3ed7e7e121cd4de46ce68be559cdc0bfd2f2b6b5b27d8abdf947f2778124ee00633cf46458dd85c4a6594b21dce08", 0xb9}, {&(0x7f0000003400)="8772428f9f91689610b679f4453e244423ffe74ac7534aa5f57e0687fcfafc562bde2ec6efd37dde1a26cc3a466a9c5dfa013edd62d72c2dfac0b984241687e8c0e34c9810973f34b83417b7dd6ecf32e723c97c45f25e3eeb553e470da19700d3f9a8a5129d801e1a0e7ba07a9b5f07904c00dd4a4ab63c829ce2d77a183c4058e4eb872570d9478e804ff7103ebb59e945a2e524d0c4439aa70596ded329ed5c8350fa50a7742f8693416fdbca266118708d4dc64d2dc7a84d8f85d51ff1fe058e0150f79a75459ee1ba424e9d39bca24d88c52e04bcaf5e0e7fbd", 0xdc}, {&(0x7f0000003500)="8c296a6e7a7b8f9f6505e7bc2ee94841062daf6f94f0409aa25638449d3c7fad5e03cc57326cd955c62da4b320b9da29676fcf547d94bfbaa086cbc085741620d9d7", 0x42}, {&(0x7f0000003580)="175e1adf9c9a97117bde1e55662cde0999e7d961b5a4dd7d0ff705beb8e662c0e4c269314d86adbedf4a6e5ff83664a4ab50e1d4d5b8e168a9b7e74711dd722a4754067b3ccdddc3d3df8a56a7ede36cb33d7cd9a5ddb77233c00d47bc2308a1a4aba64b53f76ef92c00fec52d221fb3cc25d001462a28ca40c773d671d4ff9417b2259341e17fbdf4304757d9864b159f7a9660eb4597be402b570fd6", 0x9d}, {&(0x7f0000003640)="571ae9db2a3fbf94743f13a69245fb16c9393b0037d91d6e5daceffe779cb3d5d6869679b8c5e367866b1dc86e48642f58a0800c60e6117a408a417271eddbb9b2e1816fefca75a0c7ef6dcc1019b128c6c2eaf1259082c6c1128a073a8b0c86229bd9ae95aa32cb3217049f57eac0577b5d2c829ef237741d780d49c1c254b6b5797c58892db62c5e152ad505fe743b1c2e28fee46b54b5750d27f5d23bc6033513e6f28b4eac26a6cefc0a", 0xac}, {&(0x7f0000003700)="397d92f9fbf94255dabed035b534d5b4d33f311c96007218feddd01d0749fb006b79d1d8a00c0c", 0x27}], 0x9}}], 0x4, 0x8800) 18:42:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800500) [ 430.653815][T15585] fuse: Invalid rootmode [ 430.660904][T15584] FAULT_INJECTION: forcing a failure. [ 430.660904][T15584] name failslab, interval 1, probability 0, space 0, times 0 [ 430.679925][T15584] CPU: 1 PID: 15584 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 430.690192][T15584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.700240][T15584] Call Trace: [ 430.703519][T15584] dump_stack+0x14a/0x1ce [ 430.707824][T15584] ? devkmsg_release+0x11c/0x11c [ 430.712858][T15584] ? show_regs_print_info+0x12/0x12 [ 430.718036][T15584] ? is_bpf_text_address+0x290/0x2b0 [ 430.723316][T15584] should_fail+0x6fb/0x860 [ 430.727701][T15584] ? setup_fault_attr+0x3d0/0x3d0 [ 430.732693][T15584] ? arch_stack_walk+0xd8/0x120 [ 430.737519][T15584] ? alloc_pipe_info+0xa1/0x3a0 [ 430.742364][T15584] should_failslab+0x5/0x20 [ 430.746836][T15584] kmem_cache_alloc_trace+0x39/0x280 [ 430.752097][T15584] alloc_pipe_info+0xa1/0x3a0 [ 430.756757][T15584] splice_direct_to_actor+0x94e/0xb00 [ 430.762103][T15584] ? kstrtol_from_user+0x320/0x320 [ 430.767191][T15584] ? __kasan_slab_free+0x1f2/0x230 [ 430.772274][T15584] ? __rcu_read_lock+0x50/0x50 [ 430.777008][T15584] ? avc_policy_seqno+0x17/0x70 [ 430.781827][T15584] ? do_splice_direct+0x3e0/0x3e0 [ 430.786823][T15584] ? pipe_to_sendpage+0x300/0x300 [ 430.791821][T15584] ? security_file_permission+0x128/0x300 [ 430.797544][T15584] do_splice_direct+0x28b/0x3e0 [ 430.802367][T15584] ? splice_direct_to_actor+0xb00/0xb00 [ 430.807886][T15584] ? avc_policy_seqno+0x17/0x70 [ 430.812725][T15584] ? security_file_permission+0x128/0x300 [ 430.818430][T15584] do_sendfile+0x8d6/0x1100 [ 430.822917][T15584] ? compat_writev+0x3d0/0x3d0 [ 430.827659][T15584] ? vfs_write+0x427/0x4f0 [ 430.832046][T15584] __x64_sys_sendfile64+0x1d4/0x230 [ 430.837224][T15584] ? __ia32_sys_sendfile+0x250/0x250 [ 430.842479][T15584] do_syscall_64+0xcb/0x150 [ 430.846953][T15584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 430.852831][T15584] RIP: 0033:0x45ca59 [ 430.856697][T15584] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 430.876272][T15584] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 430.884649][T15584] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 430.892592][T15584] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 18:42:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800600) 18:42:37 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800700) [ 430.900596][T15584] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 430.908542][T15584] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 430.916501][T15584] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 18:42:37 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800900) [ 430.957499][T15606] fuse: Invalid rootmode 18:42:37 executing program 3 (fault-call:8 fault-nth:1): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 431.023042][T15619] FAULT_INJECTION: forcing a failure. [ 431.023042][T15619] name failslab, interval 1, probability 0, space 0, times 0 [ 431.036332][T15619] CPU: 0 PID: 15619 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 431.046458][T15619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.056486][T15619] Call Trace: [ 431.059768][T15619] dump_stack+0x14a/0x1ce [ 431.064069][T15619] ? devkmsg_release+0x11c/0x11c [ 431.069088][T15619] ? show_regs_print_info+0x12/0x12 [ 431.074259][T15619] should_fail+0x6fb/0x860 [ 431.078647][T15619] ? setup_fault_attr+0x3d0/0x3d0 [ 431.083658][T15619] ? kcalloc+0x32/0x60 [ 431.087703][T15619] should_failslab+0x5/0x20 [ 431.092187][T15619] __kmalloc+0x5f/0x2d0 [ 431.096352][T15619] ? kmem_cache_alloc_trace+0xc3/0x280 [ 431.101789][T15619] kcalloc+0x32/0x60 [ 431.105670][T15619] alloc_pipe_info+0x1b9/0x3a0 [ 431.110406][T15619] splice_direct_to_actor+0x94e/0xb00 [ 431.115748][T15619] ? kstrtol_from_user+0x320/0x320 [ 431.121351][T15619] ? __kasan_slab_free+0x1f2/0x230 [ 431.126451][T15619] ? __rcu_read_lock+0x50/0x50 [ 431.131190][T15619] ? avc_policy_seqno+0x17/0x70 [ 431.136007][T15619] ? do_splice_direct+0x3e0/0x3e0 [ 431.141002][T15619] ? pipe_to_sendpage+0x300/0x300 [ 431.145997][T15619] ? security_file_permission+0x128/0x300 [ 431.151685][T15619] do_splice_direct+0x28b/0x3e0 [ 431.156521][T15619] ? splice_direct_to_actor+0xb00/0xb00 [ 431.162036][T15619] ? avc_policy_seqno+0x17/0x70 [ 431.166878][T15619] ? security_file_permission+0x128/0x300 [ 431.172565][T15619] do_sendfile+0x8d6/0x1100 [ 431.177052][T15619] ? compat_writev+0x3d0/0x3d0 [ 431.181799][T15619] ? vfs_write+0x427/0x4f0 [ 431.186360][T15619] __x64_sys_sendfile64+0x1d4/0x230 [ 431.191621][T15619] ? __ia32_sys_sendfile+0x250/0x250 [ 431.196874][T15619] do_syscall_64+0xcb/0x150 [ 431.201348][T15619] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 431.207210][T15619] RIP: 0033:0x45ca59 [ 431.211076][T15619] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.230648][T15619] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 431.239027][T15619] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 431.246966][T15619] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 431.254918][T15619] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 431.262872][T15619] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 431.270816][T15619] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 18:42:39 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:39 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800a00) 18:42:39 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:39 executing program 3 (fault-call:8 fault-nth:2): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:39 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000074, 0x105800) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x76cc}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80001) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb5a}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8810}, 0x20000000) 18:42:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800b00) [ 433.673394][T15628] FAULT_INJECTION: forcing a failure. [ 433.673394][T15628] name failslab, interval 1, probability 0, space 0, times 0 [ 433.690925][T15633] fuse: Invalid rootmode [ 433.700772][T15628] CPU: 0 PID: 15628 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 433.710933][T15628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.720983][T15628] Call Trace: [ 433.724268][T15628] dump_stack+0x14a/0x1ce [ 433.728571][T15628] ? devkmsg_release+0x11c/0x11c [ 433.733582][T15628] ? show_regs_print_info+0x12/0x12 [ 433.738751][T15628] ? touch_atime+0x259/0x290 [ 433.743315][T15628] ? current_time+0x2f0/0x2f0 [ 433.747979][T15628] should_fail+0x6fb/0x860 [ 433.752380][T15628] ? setup_fault_attr+0x3d0/0x3d0 [ 433.757374][T15628] ? current_time+0x1be/0x2f0 [ 433.762021][T15628] ? atime_needs_update+0x570/0x570 [ 433.767287][T15628] ? kmalloc_array+0x2d/0x50 [ 433.771849][T15628] should_failslab+0x5/0x20 [ 433.776323][T15628] __kmalloc+0x5f/0x2d0 [ 433.780452][T15628] kmalloc_array+0x2d/0x50 [ 433.784838][T15628] iter_file_splice_write+0x229/0xf60 [ 433.790193][T15628] ? current_time+0x2f0/0x2f0 [ 433.794846][T15628] ? generic_file_splice_read+0x524/0x780 [ 433.800532][T15628] ? splice_from_pipe+0x210/0x210 [ 433.805555][T15628] ? direct_splice_actor+0x25/0x120 [ 433.810726][T15628] splice_direct_to_actor+0x496/0xb00 [ 433.816070][T15628] ? do_splice_direct+0x3e0/0x3e0 [ 433.821066][T15628] ? pipe_to_sendpage+0x300/0x300 [ 433.826066][T15628] ? security_file_permission+0x128/0x300 [ 433.831756][T15628] do_splice_direct+0x28b/0x3e0 [ 433.836579][T15628] ? splice_direct_to_actor+0xb00/0xb00 [ 433.842095][T15628] ? avc_policy_seqno+0x17/0x70 [ 433.846917][T15628] ? security_file_permission+0x128/0x300 [ 433.852607][T15628] do_sendfile+0x8d6/0x1100 [ 433.857094][T15628] ? compat_writev+0x3d0/0x3d0 [ 433.861844][T15628] ? vfs_write+0x427/0x4f0 [ 433.866250][T15628] __x64_sys_sendfile64+0x1d4/0x230 [ 433.871421][T15628] ? __ia32_sys_sendfile+0x250/0x250 [ 433.876765][T15628] do_syscall_64+0xcb/0x150 [ 433.881242][T15628] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 433.887116][T15628] RIP: 0033:0x45ca59 [ 433.890991][T15628] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.910573][T15628] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 18:42:40 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:40 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x40, 0x40041) 18:42:40 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800c00) 18:42:40 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000300)={0x2, "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"}) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x15, 0x0, 0x2b2}], 0x18) 18:42:40 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) [ 433.918961][T15628] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 433.926919][T15628] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 433.934866][T15628] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 433.942824][T15628] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 433.950767][T15628] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 [ 434.794706][T15652] overlayfs: statfs failed on './file0' 18:42:42 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800d00) 18:42:42 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74e, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000240)={0x7, 0x4, 0x0, 0x8, "1a7f1de841d46d4ec069ac6941d3f695b471ab16eea9b91279e3078ff93e310f"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x60, 0x14, 0x9, 0x9, 0x0, 0xfffffff7, &(0x7f0000000080)}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c010010", @ANYRES16=r2, @ANYBLOB="000025bd7000fbdbdf2503000000c8000c803c000b8008000a00c874000008000a002cdf000008000a001aff000008000a00d3ee00000800090068ba3c4c0800090036a8c12d08000900bd7c792c34000b8008000a001a90000008000a008631000008000900fe29ec0f08000a00e91a000008000a00ed7a000008000a0047e5000024000b80080009003dcb72250800090053c55548080009007577f00308000a005dc6000024000b8008000900939e8763080009004e3c034808000900c2e664090800090034a3663e0c000b8008000900a94b227a90000c803c000b800800090001ec7c2108000a00336d0000080009005f30b52908000a007b9a000008000a00abd9000008000900259d7c7208000900611cf80c44000b80080009004ec54e5608000900612bdc5108000a00d1290000080009005d65222d0800090040e5474308000a00acef000008000900035f184b08000a007d9000000c000b8008000a00b3eb0000"], 0x16c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x40, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, {0xa, 0x4e20, 0x2, @private2, 0x3c}, 0xada, [0x1, 0x2, 0x4, 0x7, 0x3, 0x3ff, 0x5, 0x3]}, 0x5c) 18:42:42 executing program 3 (fault-call:8 fault-nth:3): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:42 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:42 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:42 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800e00) 18:42:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x801100) [ 436.700218][T15674] FAULT_INJECTION: forcing a failure. [ 436.700218][T15674] name failslab, interval 1, probability 0, space 0, times 0 [ 436.715615][T15674] CPU: 0 PID: 15674 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 436.725776][T15674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.735822][T15674] Call Trace: [ 436.739107][T15674] dump_stack+0x14a/0x1ce [ 436.743429][T15674] ? devkmsg_release+0x11c/0x11c 18:42:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x801200) 18:42:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x802500) [ 436.748392][T15674] ? xas_find_marked+0x8ec/0xa10 [ 436.753323][T15674] ? show_regs_print_info+0x12/0x12 [ 436.758543][T15674] ? xas_set_mark+0x187/0x1e0 [ 436.763238][T15674] should_fail+0x6fb/0x860 [ 436.767655][T15674] ? setup_fault_attr+0x3d0/0x3d0 [ 436.772679][T15674] ? page_writeback_cpu_online+0x2f0/0x2f0 [ 436.778502][T15674] ? ext4_init_io_end+0x25/0xf0 [ 436.783341][T15674] should_failslab+0x5/0x20 [ 436.787836][T15674] kmem_cache_alloc+0x36/0x260 [ 436.792590][T15674] ext4_init_io_end+0x25/0xf0 18:42:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x804000) 18:42:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x804800) 18:42:43 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 436.797256][T15674] ext4_writepages+0x158e/0x3f30 [ 436.802183][T15674] ? memset+0x1f/0x40 [ 436.806160][T15674] ? unwind_next_frame+0x1c90/0x2330 [ 436.811435][T15674] ? ext4_readpage+0x2b0/0x2b0 [ 436.816190][T15674] ? unwind_get_return_address_ptr+0x130/0x130 [ 436.822337][T15674] ? stack_trace_save+0x1f0/0x1f0 [ 436.827696][T15674] ? memset+0x1f/0x40 [ 436.831671][T15674] ? unwind_next_frame+0x1c90/0x2330 [ 436.836953][T15674] ? arch_stack_walk+0xb8/0x120 [ 436.841822][T15674] ? memset+0x1f/0x40 [ 436.845794][T15674] ? ext4_readpage+0x2b0/0x2b0 [ 436.851250][T15674] do_writepages+0x13a/0x280 [ 436.855836][T15674] ? __writepage+0xc0/0xc0 [ 436.860252][T15674] ? unwind_get_return_address_ptr+0x130/0x130 [ 436.866401][T15674] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 436.872463][T15674] filemap_write_and_wait_range+0x3b2/0x460 [ 436.878349][T15674] ? filemap_write_and_wait+0x420/0x420 [ 436.883975][T15674] ? __rcu_read_lock+0x50/0x50 [ 436.888774][T15674] ? percpu_counter_add_batch+0x12d/0x150 [ 436.894585][T15674] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 436.900286][T15674] generic_file_direct_write+0x18b/0x6d0 [ 436.905916][T15674] ? pagecache_write_end+0xa0/0xa0 [ 436.911190][T15674] ? file_update_time+0x2fd/0x3f0 [ 436.916197][T15674] ? file_remove_privs+0x640/0x640 [ 436.921287][T15674] ? ext4_issue_zeroout+0x160/0x160 [ 436.926490][T15674] __generic_file_write_iter+0x25f/0x440 [ 436.932098][T15674] ext4_file_write_iter+0x8d9/0x1070 [ 436.937362][T15674] ? iter_file_splice_write+0x229/0xf60 [ 436.942899][T15674] ? ext4_file_read_iter+0x140/0x140 [ 436.948172][T15674] ? __x64_sys_sendfile64+0x1d4/0x230 [ 436.953514][T15674] do_iter_readv_writev+0x651/0x8e0 [ 436.958702][T15674] ? vfs_dedupe_file_range+0xa00/0xa00 [ 436.964134][T15674] ? security_file_permission+0x128/0x300 [ 436.969844][T15674] do_iter_write+0x16d/0x570 [ 436.974410][T15674] ? kmalloc_array+0x2d/0x50 [ 436.978980][T15674] ? __kmalloc+0xf7/0x2d0 [ 436.983298][T15674] ? vfs_iter_write+0x69/0xa0 [ 436.987977][T15674] iter_file_splice_write+0x7bf/0xf60 [ 436.993330][T15674] ? splice_from_pipe+0x210/0x210 [ 436.998330][T15674] ? direct_splice_actor+0x25/0x120 [ 437.003499][T15674] splice_direct_to_actor+0x496/0xb00 [ 437.008844][T15674] ? do_splice_direct+0x3e0/0x3e0 [ 437.013840][T15674] ? pipe_to_sendpage+0x300/0x300 [ 437.018836][T15674] ? security_file_permission+0x128/0x300 [ 437.024525][T15674] do_splice_direct+0x28b/0x3e0 [ 437.029344][T15674] ? splice_direct_to_actor+0xb00/0xb00 [ 437.034874][T15674] ? avc_policy_seqno+0x17/0x70 [ 437.039696][T15674] ? security_file_permission+0x128/0x300 [ 437.045389][T15674] do_sendfile+0x8d6/0x1100 [ 437.049870][T15674] ? compat_writev+0x3d0/0x3d0 [ 437.054626][T15674] ? vfs_write+0x427/0x4f0 [ 437.059023][T15674] __x64_sys_sendfile64+0x1d4/0x230 [ 437.064194][T15674] ? __ia32_sys_sendfile+0x250/0x250 [ 437.069464][T15674] do_syscall_64+0xcb/0x150 [ 437.073957][T15674] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 437.079819][T15674] RIP: 0033:0x45ca59 18:42:43 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x74, 0x40001) [ 437.083686][T15674] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 437.103267][T15674] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 437.111671][T15674] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 437.119624][T15674] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 437.127673][T15674] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 437.135639][T15674] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 437.143645][T15674] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 18:42:43 executing program 3 (fault-call:8 fault-nth:4): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x804c00) [ 437.290452][T15722] FAULT_INJECTION: forcing a failure. [ 437.290452][T15722] name failslab, interval 1, probability 0, space 0, times 0 [ 437.303876][T15722] CPU: 1 PID: 15722 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 437.314088][T15722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.324135][T15722] Call Trace: [ 437.327398][T15722] dump_stack+0x14a/0x1ce [ 437.331724][T15722] ? devkmsg_release+0x11c/0x11c [ 437.336638][T15722] ? show_regs_print_info+0x12/0x12 [ 437.341808][T15722] should_fail+0x6fb/0x860 [ 437.346195][T15722] ? setup_fault_attr+0x3d0/0x3d0 [ 437.351192][T15722] ? ext4_init_io_end+0x25/0xf0 [ 437.356012][T15722] should_failslab+0x5/0x20 [ 437.360498][T15722] kmem_cache_alloc+0x36/0x260 [ 437.365245][T15722] ext4_init_io_end+0x25/0xf0 [ 437.369907][T15722] ext4_writepages+0x17bf/0x3f30 [ 437.374820][T15722] ? memset+0x1f/0x40 [ 437.378777][T15722] ? unwind_next_frame+0x1c90/0x2330 [ 437.384033][T15722] ? ext4_readpage+0x2b0/0x2b0 [ 437.388786][T15722] ? unwind_get_return_address_ptr+0x130/0x130 [ 437.394919][T15722] ? stack_trace_save+0x1f0/0x1f0 [ 437.399913][T15722] ? memset+0x1f/0x40 [ 437.403971][T15722] ? unwind_next_frame+0x1c90/0x2330 [ 437.409229][T15722] ? arch_stack_walk+0xb8/0x120 [ 437.414047][T15722] ? memset+0x1f/0x40 [ 437.418003][T15722] ? ext4_readpage+0x2b0/0x2b0 [ 437.422741][T15722] do_writepages+0x13a/0x280 [ 437.427328][T15722] ? __writepage+0xc0/0xc0 [ 437.431718][T15722] ? unwind_get_return_address_ptr+0x130/0x130 [ 437.437846][T15722] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 437.443885][T15722] filemap_write_and_wait_range+0x3b2/0x460 [ 437.449752][T15722] ? filemap_write_and_wait+0x420/0x420 [ 437.455296][T15722] ? __rcu_read_lock+0x50/0x50 [ 437.460045][T15722] ? percpu_counter_add_batch+0x12d/0x150 [ 437.465735][T15722] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 437.471427][T15722] generic_file_direct_write+0x18b/0x6d0 [ 437.477038][T15722] ? pagecache_write_end+0xa0/0xa0 [ 437.482209][T15722] ? file_update_time+0x2fd/0x3f0 [ 437.482765][T15671] overlayfs: statfs failed on './file0' [ 437.487231][T15722] ? file_remove_privs+0x640/0x640 [ 437.487240][T15722] ? ext4_issue_zeroout+0x160/0x160 [ 437.487250][T15722] __generic_file_write_iter+0x25f/0x440 [ 437.487263][T15722] ext4_file_write_iter+0x8d9/0x1070 [ 437.513920][T15722] ? iter_file_splice_write+0x229/0xf60 [ 437.519452][T15722] ? ext4_file_read_iter+0x140/0x140 [ 437.524705][T15722] ? __x64_sys_sendfile64+0x1d4/0x230 [ 437.530051][T15722] do_iter_readv_writev+0x651/0x8e0 [ 437.535337][T15722] ? vfs_dedupe_file_range+0xa00/0xa00 [ 437.540767][T15722] ? security_file_permission+0x128/0x300 [ 437.546462][T15722] do_iter_write+0x16d/0x570 [ 437.551020][T15722] ? kmalloc_array+0x2d/0x50 [ 437.555846][T15722] ? __kmalloc+0xf7/0x2d0 [ 437.560160][T15722] ? vfs_iter_write+0x69/0xa0 [ 437.564809][T15722] iter_file_splice_write+0x7bf/0xf60 [ 437.570150][T15722] ? splice_from_pipe+0x210/0x210 [ 437.575155][T15722] ? direct_splice_actor+0x25/0x120 [ 437.580322][T15722] splice_direct_to_actor+0x496/0xb00 [ 437.585726][T15722] ? do_splice_direct+0x3e0/0x3e0 [ 437.590721][T15722] ? pipe_to_sendpage+0x300/0x300 [ 437.595723][T15722] ? security_file_permission+0x128/0x300 [ 437.601413][T15722] do_splice_direct+0x28b/0x3e0 [ 437.606231][T15722] ? splice_direct_to_actor+0xb00/0xb00 [ 437.611766][T15722] ? avc_policy_seqno+0x17/0x70 [ 437.616586][T15722] ? security_file_permission+0x128/0x300 [ 437.622286][T15722] do_sendfile+0x8d6/0x1100 [ 437.626758][T15722] ? compat_writev+0x3d0/0x3d0 [ 437.631489][T15722] ? vfs_write+0x427/0x4f0 [ 437.635874][T15722] __x64_sys_sendfile64+0x1d4/0x230 [ 437.641056][T15722] ? __ia32_sys_sendfile+0x250/0x250 [ 437.646316][T15722] do_syscall_64+0xcb/0x150 [ 437.650805][T15722] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 437.656666][T15722] RIP: 0033:0x45ca59 [ 437.660538][T15722] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 437.680122][T15722] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 18:42:43 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:43 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:43 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000005380)='/dev/urandom\x00', 0x80180, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r4 = open$dir(&(0x7f0000005f40)='./file0\x00', 0x40, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000006d40)=[{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000006740)=[{&(0x7f0000000440)="4a63b8bda1d7730630dc63299636c527772e6af66b4ce1880630d0636dbf1ebe7a60023dcfd2e69e57c5b9f01694f63b0f479a06725a2d4cafc8663e650e08dbba3c155f31f0401a44ea32ceb6ae83f9b7b45d64c4d64ed43b932fa4643cfb94c05afd9d1e2469ca24471f5c9afc48bdb25af823a18488e0b96948cbb298d4ea780b4f9d9870d79149c39c1c1c3e6ac30ca916f17f3e28f9ce36370e8d4433f81a", 0xa1}, {&(0x7f0000000500)="48f950101bd2633757e94147a8c611da4397a24f62508636bb324b9e8aa619c431eb95c803862554c8cf0406786031a88fb0a89377d1f4a3e1f3875d717e08f0fb24c31cab5f5a9bfee0f1989a97c5a8468cf805a586ab86e26bd70b531d9e4874f3e3083d67a6562d6668df", 0x6c}], 0x2, 0x0, 0x0, 0x40004}, {&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)="20ee017e90e062b0365248cc6a473497e85034c8679d7a3426ccc447666209047a19eacf692f71ce68a494d4cf666ee00f174257428b3cc3a3595955abb7b2691e9c5f7ed7d1ecc216adbf2dd1e93ced3291620ff5dc2b3dcb9f8cc6ee8d37ac8f2f10714e1cce8c8d4b76e037149df0fdf367f791fb23e002719f2ae738d65c196440760ddb1361f534e7bf662492297356877c5455b3ac0d20e581a19bf029af886b3623bfbe605ddd14a2f890bd57178c27f248d0955576631b", 0xbb}, {&(0x7f00000008c0)="baf9a594f0da2ddbe54bcae162fd9de6f2fa13550640f12c4a0a8af60c6ec8f3f1ed513918d77f248b63892e7d8a1135edd8413e5320d92a1c6d4929fb50937d3820bd599b2d6425f8fc9ae8cf7800af2ed8aef1d7b477498ea15fe7048cf33b527031c70f893d0ac18ab40bd67ba046b0c9d0f8e0154cee0d1318cb5d5276a7da7411ec7a6bee7950633ad1c350c0f7993a704f6dc3eb96f0aa3d77b0fcfda4d0da44f74a53258ad3674d123a933948bb835b57964ed65c25a946c960d6112854b834e7", 0xc4}], 0x2, 0x0, 0x0, 0x4048800}, {&(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f00000009c0)="5c4ebb76e417519e705e681808232623d1e318d136e8bb94a8d8682db23b68674ea0da28430e873b586120790dce06edb4c7dcccfe68720fdd656c09cf4597360316e5b83e98da6d92b25007e6b160964150a1bf4e92b16f29ee2f4741bcfdcbb6dcc764a8e8a92f22e5aa5ba3e04426cb988e4d3f0f58ad556d19f1bf7324734b830d4b72b3573b273bf7acadd2", 0x8e}, {&(0x7f0000000a80)="16b773956ca8e2ccddd1a91eef9429b906379e3743b256edafe3ed129eed813c5c61094d08e9f7dd8fd428698a44b3b92872cdfda34e4627fc86431a44323bb82b79c0b1f0a0bff933115aa0f6424d359c4627ff7d472a8d", 0x58}, {&(0x7f0000000b00)="303c7f0964cf773f68c1eb032277f10c7abca127a647f72a6bb5c60ded56e17e036e1979c0eeb0ca6cc1428f6910eb2e07955ad2b200f3891f53b64722f44f4965c6d959654107d2ba3f32683ec9014a6146a56306190752d9da7cd304124d2c6ff4d7c0aa5a9d620d944b877bb297d2a981a28945c9bbd7e20e5112cd0703d23fd27954e24203b9ad797dfea68501f922689b3dcc5f88697b1af4a37837", 0x9e}, {&(0x7f0000000bc0)="a5661f87a18a4e3d9efd61c51d486575a1c46d85912f8ff2baf70c6bfa5a5cbb54dd6c6af75a5778615f1fa017aa348190d60d3e95f88f6e7200e591c65e4c2919b91c61abff26454731efa60e0112375696a26d803a03fdbcb22a7304098dfbe6a60b1e2d7d5b73ed8b5b4358ab2d14d816f31a504ae32de1124e3ef33a42cc7155dc97f5b5ba1502a5704a6406", 0x8e}, {&(0x7f0000000c80)="3ff4beb83803f0f694aadc7c4a7e675050de2e0a97425f7c78608eec54255a8d1b918e4d663d81fabe5000f698063a1fce50fcb2adec2d24b025f55544d209fb82340f66d082795e33bce5e3cb9ff6cfa5746d5d9bf2c09ea3f9ea3634b50da839c7f4bd6b47c734b5d560c6fe0fc729555005a82c86d1ed2ad209e440a05c25dc6a356c59c8e6170c8f1316242e17d53705be26507d22a42920fb9a429c19b81f9449325c0340", 0xa7}, {&(0x7f0000000d40)="054a724e15c6b6a1a5cde3379ec61f5553aab71dc04e8d05a06ef772d99c82592a9ebbafe5b78beeb924f4d06fa69e7f0745ae287c8f0f601255ccb49e2644790a2646becb015952507c5a97eb16d9efde121ca4cc11240f0509c3b25e6349cc6dd0a82122ade3f7203779eaf491b58eddeed7eb75a99e867a743196bfa7a605ae", 0x81}], 0x6, 0x0, 0x0, 0x20000040}, {&(0x7f0000000e80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000f00)="12d23550a2587560e6ba4576e6c5ee3a7f997ce6019f09fc902687fa9df39f611160566c8c5b690dfa06604ec12fe55710b09434e687c4d3ce665d319e8842abe8ceb0ba5f7ccf79fe338c73b6f728fe6d826e930c02d74ceb097cbd203806074395b6b00382012d375f529369978d24c146c3266d14a62abc3411d6fe487673043050a9251080e8b4e68a67b30a7a62a26a7c5afc7a586dac4516fe45e490b55bc84fa20f98e8490bc909ebfc6ab63c5f45be862d85ba052f08fa9053efdb6fe2e077b95051785a3b76a6a6bb2993e77b", 0xd1}, {&(0x7f0000001000)="b5bcb4f8d0a5844b02e95e5a979e5d78ceb1d0abe8bab010ba3cd4", 0x1b}, {&(0x7f0000001040)="8418b8de694daff21b47647c0382b44fef801832fc5bc32133d866ca1917507922852ed0620ca34636bed674b1425fda2797788fec70391120454a9dea37684c7f24bd890d17f9282a1173b78429291aab1668f5ed955547c590ed846b0d4ade9d552eccda6a6bbed1306da12d5cb47a2aa85b01c04294b33e319381ff05160abe0c01092b2eb4084c7c65737ccdc41d6ba090a281fff3a24b1d66125e9ba11b0687afe337d066d68bb488aea4bcffbb229cef46acb470ec67a87f4b2f0203708e0543b566cb81aa8f29414f156d5a", 0xcf}, {&(0x7f0000001140)="8bcef4b27709a57ce97e8e961ec79702a809766c2bab1c4525c36f4210f862e17cc81180ac6fcbc8c40d10a51963a0b7cb1f2e2b42d4d08900994ef1a600e0a928bde82d000d566414d24c", 0x4b}, {&(0x7f00000011c0)="fcd378396a7546b7b2e96743b8f002c523c00ca94494a262eeddc385dd3cc8c1b4bf17d994793e387d1f26118fec4b2a28c698557dea309b1c5cb0ef8d58716b3e1f5a8bb51ed29803b32db9557ddf802f3faea32dc125b135b8f55bdbacf630612b4764fd50691baddb2532e311656c774b676b16253415570eab4aca8d7d585152285576506651d4eaa5a8bd466951d666047f5d3604f24941abb0ad123f6d4f2f9ec69398bdecaa88e086527297ba21928845e39d2ad43df9c0ce73d6b31e46016031f8b1e689dfa3c45ff192c76e71bd1328f22a", 0xd6}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f00000012c0)="b31d2eecaa5ae93961c0c47893d7d3b3be18e23e38510e7233723d73fa32a2173103a68e8213b86d4de37551f9f300b6141aa9", 0x33}, {&(0x7f0000001300)="1052b0f46206e29c7864ad9ad4d79325e7f8240927b1fd2ece4b7ca1878cc32b8a6d74a3a8d92f34348402750a5c1c3a5761e139387061bf32bcd6d5a5c27c34e1fbb1cc820bd50c460f23117833e345e3048574a39f1c47b7fb9f97ce5066f2d59d9134aadb3d53b7e3b0149b1787dd0d36342b38d6dc27ed51aaa278ddb02998be5544bf14bd9ebdb0fe497e8bdb5aab9243cc717ccbbaf22e", 0x9a}, {&(0x7f00000013c0)="196866e2ffe6b00f6f2ca7d02a38cd1a4ea32ed6942eea4d6f88dbfcd7182d1fb1a460cd4027d477d1b6f7edbc915e6c0f7adef2729eb42ab3b2a761f01e6dee5ee5447e972ee452180408b4afbe9e6724eff3d16ef8f64eaadc3b761dd6e75b6825028364df463f97073cd321893e270039daf64f3831d9eafb3da29ce056a8b77df8b2f07f08d503cdd06d415c19d3f6710444ee8f0b38abec271c", 0x9c}, {&(0x7f0000002ec0)="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", 0x1000}], 0xa, &(0x7f0000001540)=[@cred={{0x1c}}], 0x20, 0x4000000}, {&(0x7f0000001580)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001600)="a6e52247ab89fc34b770a56b34c46c1eca45126553175c04ab2eab0ba539faafd258da4d860a52b847d371dcd24752ee9a0d93241d0ec7167a49eb6ac34c45146e516a37a2261bcdb35035b95bbbeb80834bccdf0aef4e2af5b253cf773003101d94c87a2a1756c796462a380a0c2fcd955a64de647576d0a5b31422915806c5da9a0c52386a79c399db72aba4d4339d7e14d3c136a67bf94dc60f5a38ac5d040bff09fcc7df1dd98ff3ff3ff363c57cdc0b2344fe5e573a171555f923847a72d646ca0e6c892f4375f8090abe92c97f1b5dcd6c6f93882a4135c49476b7438b77efab7da519edaeb416bc1b353daa8400d37dbd9b", 0xf5}, {&(0x7f0000001700)="c7d6eeaa6451a27abbb6a65d41666399b7b3dd8df6ed9333171fe09065177dea3eb9ba9686f5e4e8d9bd37c758e0691d7dc44593deabfd679a2ed093b2b9323bbfef83be71ada02bc8ef3c91bae2461e182940f1f12833d5931c3656b8743c6f131facf9968688e0667898981d9347cff5c0f4bae5c69178c22ecf23f1ed34724ae302f5ab1ae88d91d0a846a3521d9e5635b26de7d2bef9386275af9aff646fc2b282f07788c50ccb0a58f482ad0f3932", 0xb1}, {&(0x7f00000017c0)="f0e2c5c63cef6ef37c84e5b7c0355204ca874cf2b27c653c0138792d62b99b5dd2acae4885f3d8a2f56dad08a216d2c9585f5d46e6ca0bf3e0e9a09fe8d7dba2ab44c218a94bc44c6087cd4437d4b2b7515197c81b88f34852e48dab4fbdad076d498509c1de6c63a0d7a538dcd6de179017055fcb6c26a25cad3547494132b77ef37637bb0e6ac78d2f63842a0d9e4f348380b6a14f2d2c051de57dcae811538d2e20da03cddd01e07d267d6b7a48f4c73f1edabab563e2e0b5a8", 0xbb}, {&(0x7f0000001880)="8be0bd02a5522678deebb07997f3fda1cb9af4df7664d09c7c562e44a57b46bcbfd53cfe09839a24f5c5556a6997e8419f76b92de72d4aa29918d5b6cd18bff76cdeac6308485797ea63e3d1d704eb8655f8ecf3f2e35a0469990ad34c7bfeeb6e5c10f955e24d175acab177081ee176dc2db6d87188e39245110d6e3146e414c1769e8bfddb5aba8c419a5be3ed65f831134e0949cd17b2478c2b7e605d373713a51a17ce74d43fcdf2a6aa1fa4c0a5b6d18ce7bb5c4f8c", 0xb8}, {&(0x7f0000001940)="d01a1a31e5e09daa5a9721bd99d89635e5d8767c0ed6a86ec17eee27678b0fe07bdd189ae729d38cde0880891e0cc8e0e6ceac54b89376a52fa8db91a92a1e684416dd3048073fe15a7235f99a45c9f95da0e7ac9a4e11d6a2ea7f105e4036cb199714b74334aa45f1471093a1302e0f607f656ac97b3082dd29d172d7b6b0a79b8981c02832919eed027a4a81f9518c1225e0376bf0026534446fc1f02f07f62ba0ccc4df403abe7e6cb41229285b863e45975f01e11a77f887e6b2f65dfd1dcf165f5493e3c3ff74d2aaea5941e01071def3f9670539ff6398c8e6b3ae0eeea9941573e6b422f514cf85bc85", 0xed}, {&(0x7f0000001a40)="11362193893bde2d670981f03a7cce2b20", 0x11}, {&(0x7f0000001a80)="5c02887d3a30414f282fe2479ad8bd3103af38fd07a17debc88cb97fd584c14e57b081ed31da2739ecb3eb97aebf15ec4c9f7b2524a724097d665fad6e921e6901bf00bf2a3869bafe0dcbf60d7df3b30f609856e7ba3ea2203ca1772fa5", 0x5e}], 0x7, 0x0, 0x0, 0xf177c4df02cdd48b}, {&(0x7f0000001b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005140)=[{&(0x7f0000001c00)="4cf4de494d7c1d085fa2b82c9f4fd9962dce19f4fb091df9d0bcc7bd2fae63d90635050599c24cae050b876ae7a0dbdf818d1e9e6d90", 0x36}, {&(0x7f0000001c40)="35e23d518e7f569f2cba8b531ed61e18807b220ba7bcb3688666", 0x1a}, {&(0x7f0000001c80)="099df0e6a21c4c84711797dd8a9deb6645b29d08acf05fd01692dfc5ad809bc9dfa015e7f7298a261eb0985d8d340d01e64bd8834a57984b052d46333fb9f83a89b861eec314d395393c5178e0bdd2f37a4dc4fbe3fc38770a261563c2e9ba806bff8b36fef2da8178de6af80bf74c00f2ba92f4997b63d7700d0acd1352c320d24be77b8688f6a8d7fa9b1027aed993ad0af3ee0877d77bb6728650a622f8ff87c18f833b010d198a0649434638a94b291e47364731076c89af1d1ba13202e0f3c238077e4ad6c96e41db44ac4a3d0348fe5443f2c15875775d37a61cb2a0e7d42250ef8a97c828d7a6f918a2d6e1a23abf2562", 0xf4}, {&(0x7f0000003ec0)="81bd8fb71f912555ce4f58fc4252eef9c157644ff1072727d386a88bf361ed9d46d6fd29bcbec209db69abe7e1776ee08fd80cbe8092725fdc049d1f829b0a53b282a5efddf4ec35ee1b5e445f6afc4df64922fd5d93934ddcfe892d3398ad6d15764aae2f6cda24d82c7ab15dc4c9afe786f8cfa97936d06fa260135abbbb78804689efa0199e8187de1f229c7589b6dfa59b2ee24f71afc6a9508618bcd6b0258a1f9474ce59b288ccaa12946bf440643436470b12f47aa88074f269ab74eec10521b50859338548c64f43ef5a50ae6ecc361daf390b34c1e1b3ec71713948e494644e583760599d9c9fe60f8294e29416ef8cdc904491f2b5d96f2a961812eef63dd597dac42c740b6886cd4ba636adb809849568dfa272d7aefbb46ef13ed258853268e6033044cd576552b0909b011fdc322fc2578556896eb66e4c5f0fbb6f5a9add1e0003d9101fd302c0ec98d30922d1a969470b0c0c34dfbf8175a40aa9b1a8635b3488577aef70d050e532de2d0d2838cc57406a8aca825e4d249ac57965be7d2a14ffaf0fb8470b8446e19631dee67dd527a067d3b6a36cf30ed5bb0deccf6d9b48ac387f0a3e492c906bea62db977531a04c2dd691a6f590a46c4a8b499909f4cc74e5a80babf15c85f6669f6f19c000a53377025943dc6bbe271f7cd6043001fd2b060dc82e73f968e120de3075760710f307a88f8dee86590f98069d3f32fe884319b4455daa2ca3319cf43f811cd083105593539ecdfe5312bf5cd52525c76ac095340fb679fe45bbad1333c9dfb223077842229b57140905135e56834ee1623f5979da5d40061487e66269733cb300a33d99368119789f6e5662c04162cfbe165a64087631ae7a37fc6ef9a3b08a82070eff05e2d1bded2b08dc56c9e6fad632a91571abf9cc2db373d238e651f089f1034d2f3be315d8f8643c20bcdb690a15bcc617150d6941041edd0a496201e925aac2ac3ed7f699a6e134100b034f557879a787ee6abe3f8bf2425af31240c53b1745bc6666acd4063cf08f0f335f812d129724f5b866219ecdbaaab853a2b0c4d55693e0eb4aaa8d6c3f73a443cfba99c0b2ba23f9e3c7bd43cf4ea951277931c48da6af081f1a6436bda948da5055cbd7a4d642f91dadc2dff679845f30fb2ca148218028b346295011628c003f0cc1a31728311debf69d1c02ea3313937355f433e805f45918027d2338014d01df74aea61f04cdbfae4c2660e755aa417131ed095fbde523ec4d8f81a1618ab4bbc6d4656558936259ee4be40e868c3e7f2cbc17cbe0f759dbe923cd6c150451f36302222031fbd0aeab01860dca2622741622f1a5d797820d4baed0866ea59689409f9a337d8ebd2977d3ee5d48d75a8fbf024329e63b8e5905045801d81d273f754bd08dc7eaac8e6b371bd70ce45a00e901c83a90e8c63bdcabba8918549c4fe943e095dc0d7cb595f048d6e9d5e41be76f5258b0b49d4f11488d69579d1e9c5ed9d038970b8d168004a5d66a487f83ccce30e8b2adb745cc3fb5faaa855c5c023a6a769579909467088087d8931133146a32a517b876fa8fa4ba411d329bd78c093a909331978ab4f7bca455d1d11135070145ec0220d16ea8fb850c1d15010665fcc0d9bb2bdf9a61c34a8014aebb3409f700bc6c9d676c4da2685d68ee7dd9a597750ce60ce0c24c8d40a9c904f531fc38a439a99a3e040ec2c86f99e438cf7b2b67d68512b909baa77437f9289e9840a57d043b7ce931542ab84443ae8d39d574ee23b26942ccd83d3e52c9a71843c27a0b71ddc2a5f2a758d7b276ef70bdaf18de47f92acb5abab604ec1a3dc2faacf01e6dd3a62297ca0053da392b5c958ff740c36ff4284154a3807c986359b3a495369f44df94537194b50acac9ad9564f225a019ce551287e96e4e4d36203159ce4b62df241e01a67c25cba84daaf3c624569efb7f343e5ff2639344abcc9c1ab0e998b34bfcc072a1057fa5279de8dadd443e0aafe2b164227fe43d1842a34e877ce88c02542facc34f4bbf206f5e4c32281ea8633a846e37d57bf1db44720c8e9c6965ff0f5de5858e8eaaa978a3d71c3c71f857e76565f51772b10b1525d8dbe84dfa725f498b5b08ffebb4ef73fea6fd1167946b341662b04482c2da4951a054e67d8e53669a445242a4bd0a1a66e3ac06418c6ea779b423fdd4ea0692ae54f075ca0776792b4124a982a47e6194df6dad2afc1ef68527492b34c8eb5fd8b8dd7c51c8f92d99557c9ea4d7d8a583325d214cd24acc6e48a19a64cbb3ae5e9f830e6754ab01cc1002c2eb9c206412efaa58df95b90e4a7d65faafc4351a451fd50a3b4a907ccbc84a01b1e00aa66c5347f426c9cc0166490c4dff28f46b19c290f1f54f7c21665fcd05419a1b7c0dc51cf678216a5db0339ce35df235d991f14ae094a3f3df3eb0540717c8684dac9d22cd01efb4061a8ada605fbbde80a51c093f91cac59060ea023487b3117b2298b4a478d90cc10dd5db1dada6e8f86aff626aaecf00b8d77ec01833ff9b80e0c6ad3bf25d509ff3daed1b4799ee07530a1c55a17f917d694124bce20db982bd152b758884113020a0791dd1203cbf0711e4a829132e72213e6b8cd9c202c0d3c7dc90e59495d26ad7a74545bd1a9b208ea33be4f2c5f22446fa178ad48862c73ce67d3832af66b7d0fc1c00ad96cd54305c7efe012c830e9d579f260b59c41286e244fe648be4204c45e2650b93ae3ba3f28cd4bb1c3d951b53d717acbe585d3e63a9bf4b62030bd4ae1a3c61cc744a5828fc1a962310dad5ff453007e6fbfee78f455fc8e252d2a24498b3e46482fd9536d518feb026a8200a8088fca4b95ee95b14ef747b2ab3e0ce3f4dca5660029e8141a7cd09b8855d219b3d1d05342b921d0bcee9536fefacfab1f47771a80f7d30123b01bb3625826898c4c03dc624907b15ad89e4f67380b3d5c8f833925da66225e8e7ce9c8b299f64d2c0933b6504224b3c944845d5d183ed4eb40c536127ae591e39fa2f17bd1a4c0250d8817ecc95e4c752993ea64743cf01906736b6b7b2b184aeacdba7dc7a7fc17f0f2bacc1dd877b1df8b2ab58c98c67116a327df002330df89125399ceae9ba3db117e098c53f5f1f878b8637b6b8a2ca5b1cf7e14ccafe6b4c2f140e9799b75dc6de63f5b00791d4a56d8e40d0ae0965222b1ad3f1cb90f045ad1b1da4f679bd8ad1d5458a5d9fe5ff1670b56d09a87c68bd7befdb51646b96e28980e510d9684663251f95f963112abaec22407e8d72f796267672b1aec1c9922044b4127a5cc41e46314a3202ef08d6c1ffe3c853a340e3e32dd00ddf731945e175b53b88d973552a114bdafff5a9db7267464d0bbbb9fd3ac86fd11a3d4c1fc496eab6edea35ed1a0e63a0b76fd8ee0905d861e6f1582c8b9b21376459d0027fca0426ddbb12254ce22d3a3596decc7b20f94ba0fe3f163d916a079baa8f19f116e4a34f6ad23ef95a80e8c8a2cafbfde1e230a7d5d9d2a683d3a9312511acd1804e408d2a2c2359de5e85fdaed10400102b98464e2a1a0ec074af09bd58b40ae6dff7ba632a34b2fc18ef2f1cd466fa600009020c6cc675c8d15e18bc229532c38c84b667d5c6fbde999b9cc66fa2b6379b2272a5dd91bc4d1baf9086220490eb677186736ef57db5bcd27a90139b3564dd68f7dfdfc2b47d076330b316b1f6cb7f6bc5f75c9fcd3e42bf815b9dcc25b0b50305df3976f4ac53f2a808ae2e399302846a10f0e59057d33dba6ead3cccbf47de2e5e92446a4b219ea272a5fe70729d9d2223b77cbd07b0cfc0494f438333a0cc1f114d70ccaf07152203336af51a85cc0c3439a41b5fdda79be3ef65eb740433575bbd3366a7b39f21c2d1e1b8172ee5807f56579e3b689bfccb63b8f4155050d1f461e3db0b8fe333a98979e07a90ec17567ad7dcec47efcd0170030cd47247092595a724b43025e7c0410e03e54abb47b3244c5e3b08317ea047a8cce87b2f4f1183cca748a99706e9f683b04ed1537f388341876d54ac8435f3b044619971d7a89f88c96f804cc2c03e2fb9d95a562582b1b5073edaa74830ca866663d428e72db5d88ea890a62b183d274c0bc08f6c4c425f9589a5b604d2c39a50791190f761a7165b030982fe8300cd8081d1c23bf37dd976b47d238eab4866fd533bf04163079baa8d149042d98e31b9396e29a693677882178a070bcbdfa5d13b679187c631736d8a31f8e5e803b3fbd52bf11d8d48d841c9486b0efab0dbe6917914d6d8abe2f3c072ccf4cdcde382f83c2e0ce41aadc50846c5791275049adac630ea566cb76846f3e2995d1b611af077c1b1db638f01a59cf8c7b2bc3ef0e615f2902085cad032e53a568f4c19291b28085a7c35dcab06cda645d8eef794dce618a1aa529201fb1d5d6adce9fe96245854d401dd5185e15eaf6997273990bae25c639248277dd99df3636bc5fc4af3e88a90bcf4b1b627432d6d9abaf45fe82d323549ddffadb039363d26d75385b7ea9703655724cc18d58413121f35325de9c9a11ab531567e18aed7a45c3e317dbf00e89e02d4daec4c96ebdfa5b4e16e3c7408e0095b24d50a3210b9f91838d4c0d2a277abc2cb41c8eb669224d07243b45950b0d2b2236267ebddb3f8214e842f9b388e5468e9a38f33154411511723c55b3f5a54e65ccd1e69c9ac7c6b1f20a6d36423fb881746ed8fc689c206d51f24cf1d6e0ec937b544bdbb999375561ecb9571e778240638cde205ba47402e7a6cfafdbb5f10e83be90150cf51cf7224c9fd6e1b812e7f48eaea5fdae0f5d2096b61796aa80206b5074670aaa52a1eda75291087dfa762860a1b93ab1492e5c623379c14899bf960bf4a16631e6b42303bad6ab88a646c025dbe6b30d71cb41f28c140a3ee21934c6598455141d80e8cb40f4b53cfbd6f312660dea12bc3a206a6a62e9d76917c6a9277ae2807f2bfa1fea8c04b3f9fe5ca8c0e04d3534a924a64b734498e07c5d4c4c66e6760a5514406f04ccd8a4867a086f696261af675897471fe3f29fff6fd34d10ca375ca8b864c6beea6d2d6fde6d42a35a9524ea787b12e9996976812483ed277ca3dbedc0010415c654750927f2052b76b757a06cf32a16d1dc96be47905c2afd39dca396aa878de176925192f016313c5d3ebaa3955b354dbd3ea75722b84477a3cfae64acb1c3cdcf9a9a8a2aecef82ce9951033cc06499552afd947c061abe0c43eae0ecf7db4d1f135a1c7060522055ab2482949dd57bd4b8c5f895fc79a552f6e400d73fdc31ef57303f2fcce306c8ad192f1e917a1947a4d970d2489cca49d76b78a903663224f2db8c0970012691d66daecd333f29e4aed501f00c935dc27d9017de2681c8b6e5a1f9b59d7d98e9c92033b0da80b02fee0c77f4f5d9af2644c73348a5d0f011404eb42941fb1b2575639c7fa554cf701f7ac0819e4e32fc28a23675953a6445862aada33a4659b9aaf01915a61f22e186ab3fa6afe06b08dc3fe366b6b30c286b30f74ac1a07c025b4eeffc5e7d232fdc6f23899ca0f9031f30c510cbad74f63ea306301f20e098111190a19e98b4ba6305fec6069688ca13fb4dcc83eedc1b958e8a72ac61bf321f3b81a08cc3913e2d9708bc856d474d4cdd71127b7f9d8eccbd44a74bfa27a4b0278ab6eed676b20fb290a396c78d697a8ac081af99f803bddd4a228b835e037833cdac22d4aedbe488d780aae6330d55f97169a3eec7d03b7efaddd6cfa0df8dcf92a3e220b0bac02a684349e291a66ab", 0x1000}, {&(0x7f0000001d80)="59fbdabf6d11ede02dffc6b607521adbb8fb8692916e7eba4348b8a417f83770bba08b96e7c238171db8377954d5871f8d9d344b1e376ea1a20bc541ecf40881a62e7c777f0b39f00124", 0x4a}, {&(0x7f0000001e00)='Ms', 0x2}, {&(0x7f0000004ec0)="5ac27cb04345b8be7c8bb03a3a6ab38da509fbadc762ce7361dfd97abd7fa5506fb876326e3679bc4bc85d122a4c764ed29b39af7f3f18d4dd07a80fe77e365cb72d9ed1ee69d999b9bd5a5d6193e6e4a238fc0972eedc1ca85f7f062dc57b92ccc3613d00cfbb3ade75324c44c7abca6015c99dd7d83199626ca8dc790f648ff13015259403d399fa1ee5910c5776ff3c226010947d2db3bee31d89e0f3f1fc370963414f7477c22a7c38", 0xab}, {&(0x7f0000004f80)="0241007fb0f4a352640bb4ecf99d08ceeced7528577b3677acd29d3d6d91e3513edb4ab34a5105", 0x27}, {&(0x7f0000004fc0)="651e7f04cc6a635aeb78e606c2024cfadf107bd1b7f03c190c8e6bb990457b30a858442702b08ca92c5d3fff5a978bf4896c1a36d7d1b76abf5eadbf4563f76b16d3c477358fb7ab8f9db503c6ac46fd35ec0340d41125eaa9d2625166139b1457fbcaef6c8b3fa5673c4e331a7d45c862a005df7a52aef8e26a3d127d09709abe6eab5a23496518e1682b34a23cfe6d4e9b6cd012e79dcaf6b6f3c43ff3ddc5bbf08f3d662d53f7709074b5fd", 0xad}, {&(0x7f0000005080)="3ba12084a4b8fd25494919bc4f5a1ec6baedd70099d8908ae11593ebd9ea52a1888bba2fb098edc9e802deaeb50e17f20d2cf4e4585a8f6d62fba9ba2e10cb3aa25d9902b7026d6d2853fcf9a3eead8c0920794754109c2c9a9341c25cb4e2fd82c5b6969e0b56e05da26894e42ffc5af2bb0aa510dafb47c60e35f0ed2f6e96975477fb725bab67699a6e2ddf889752aa90be341190cc3dfc50cc2c7988acaf102eccfce8f1304242775fed1ae3647d778ac18b6062ae5a36c709d0f208", 0xbe}], 0xa, &(0x7f00000053c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3]}}], 0xc8, 0x24008000}, {&(0x7f00000054c0)=@abs={0x1, 0x0, 0x9d}, 0x6e, &(0x7f0000005c00)=[{&(0x7f0000005540)="6f58d333222ba1d2645a7319defbfeb3875cb0aea0195a3f70d40afd", 0x1c}, {&(0x7f0000005580)="a0613ae30664ad5ca415d366c295df709fbe1bf68a2f3c5afd65899132613a980339e8858ca3c3d01778c6b3413981e6aacc9fafcf1165c67bfdf385d5ccf2402e1b983a1f64b0cc79c5d89ab53243cf6a4f9e9f25c12c38cc763fe0b28323f123c2429699d864b14bfea43a496568cd4fc66c7cee827bd271b980ed4ad3c001b466c2055d97b76698e4df0b959603dd76d66b451a03bed7919d31abf96901fec70fe71ba248d30eb1fbf43582621c235a6b9473506bce9f6ae856d42f2dfbcaca78d2d8f44e3895e6", 0xc9}, {&(0x7f0000005680)="989ad7410370e99bcc54f5253ac5a190be6e547e627b0604218aa5a093808af842617931fac632e255466d2a5ae69d12f498d8a17da63416a9466142813ef442240a0a0b858e1635ce62321ad5a3c976a0918995a88c9514ce12eaa0ef7aa84f54188c70274fa6a046a2a8cb1d7ad01961a49eda3b0b4505ddf73bb80d400442c26327314bc87c39bdd1b9ed862f2e79b8385b0c6477e259e2ed6673ed34d73b44ea91d4ca4c8a2b96d5895919b5b61637542831e7764e4662cb0a29b8e9fe4fb04e42faa27d1e5acc676708c9408026951b2e52166afb0ea069f1f1e381240d2416ab7f5e50dd9f3401f2172e88df8125ece5ed9d19", 0xf6}, {&(0x7f0000005780)="53d04142e5c8f912b91acae9af99616d49186e4066eb07e10b7d244fb9dec55711c93d66a5358ef42fa7f9d1029c24f5514a50264af405ae43eb217131128a0e8a9520d941ce5e8487ca52ead051f21c5615c78b15dce288333e51edda36a384b68aa346f66fee167eb6bce1e50c13b0f72768fbafb71e6680cda9df7f22d9c371437b3077edeaf75da2526198bcf3a6f7517a29e14a02f9ee2dc79385ab829e6b2e5e025a96f10e98a9fbca7f6e6c89", 0xb0}, {&(0x7f0000005840)="d977c6099d7e83950eb2d216ce59a5a1d2e068f850b93ad2fe87251e58c8918527ab6ed41ba28e70153bb73ebf7d33e0cda2db3558d9eb98a2b50920d0cda2bd682361d6904808cf41a1e6777798b23e15d2c229e68db934b30a9544b62c2641fbc3d312", 0x64}, {&(0x7f00000058c0)="cf30acb5f6f824afb0521f72819de5e8f4fabbfef8c816e85adb98512ef8f62e6e08b91e3e6dc960fc4c1a7f7767ca66458d05a563f5dd2aff082f15fd8c805194cabca9454155ecfcf2d00c757c607442c2d67603f87adcc468e8872e5c6afc1937e7ea2e9d5598bae985a8fa80dfb2c86f1262781f309c9e61cd8ae282cffe20f895ae663a0739d3b91e236f0d04f9b256a9ba7ae4d0850302ccd03682982d518760943c7f73c037df82c71a2229efaae4b45318b97725c21ba3", 0xbb}, {&(0x7f0000005980)="ee9376dd438d031594819fc52bee313843d4d9389175750f786bba10fc1b936eb3e54f10850fec0e37418ff13f5fa6c1221dd21ccccc7c4c00f2ccf3cce8fa7d0ebfa0aa0251f810c156df2bfa1283600fcd5e4c4e07825d602d79f1d346079ccc38ff5ef6c99f62b907ccdb00a67645a3758dbfe658524060e08e842b9ba4634cb8045fe33955b7c61f6ce4d12928b7a64a3b44641e168f59c32c62", 0x9c}, {&(0x7f0000005a40)="80fa84c4fca09ccd14c1b8426a9d767c5e0463ce1bd40cdf7fe8a5be05de8b563d6c0123fa829d7002b45075e0302c0e6a4d22e8f14988cbbd50cfc5e89600aba24b55e78d8c4d3f316e73ccfa71bae6b539540e3693734434a6dcbbe797a12d9befd2cf2a068e1689fdf2553a098df0273f41f50e9a3733fb670faa80102ee81f650a675fe41413e03ed66e14a6ed2a2b18aeb0cf7ef1980c569b1a07b748fc2544b72b85eee29bd6f2a1c4ac5cc439b3b8e1bd27d020a9c1a2467d8a9acf2e25ef7fe399048dc6ff9140fa1ccc099ee08864dab567169a6c05766ff03dd737bf4d72b72ea65ed0ebf29ef660", 0xed}, {&(0x7f0000005b40)="321d816c0ef528f082dd081b2fb8e3f6fc73757be7fa5a163b3f0a154cd55f75d269ee7e7ffb9964e3fd1b93dbbccc6e728c726c883a137aa8dfe4f1d98455f221a4b28f299fe5934e2cb459a5f62eb88ebce2eca59a8fc920a94cc196f40b7c0b178e18bd038f45b90d33dcb481a01751b1528cf620c2119acd61c6419091210d4d", 0x82}], 0x9}, {&(0x7f0000005cc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000005d80)=[{&(0x7f0000005d40)}], 0x1, &(0x7f0000005dc0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000800}, {&(0x7f0000005e00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005f00)=[{&(0x7f0000005e80)="0ccc8e7a9cced26a2614ee9ce0d8069c12fcb5bd68a6266127462ebe01b4d4353e42410ca979cc0771f9c9b8750e799d3e6b4b50f7385f7852c5d77560c45425d1ad9568ae4fe3985adc1f8f83fa22abd1ddbe91c24941d291f1bd2c6e5fed38b1d8bc3315423b4406cad2c1caef7cb876", 0x71}], 0x1, &(0x7f0000005f80)=[@rights={{0x1c, 0x1, 0x1, [r1, r4, r5]}}], 0x20, 0x44813}, {&(0x7f0000005fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006680)=[{&(0x7f0000006040)="577f6c3dd6f83365d60c1e4fa619ed4f71d495b273ddd8afd5210d9f3b20ead8fc5a64538b495d12ffc39b92858fac3dd817213401ee6fd221fb9ed94a5f34e02f6ed4f0f3cd09cc8f19add77bb8409f8072996972d0f2808f41c3345c0b7b3df342dab7189ae9a75992717c1945351d69753194ff6ab49e5d237039d6ddce0fbfd1c057809ee2ae3c60acedc542f1b77cb22e717c55a0e283579e643d14f5ef8c2d45dc3f5ae32a9eb82016b5fd6b59dbf889ff8877569d2f1d057a27481306c6085c7b92b899403107a0e54c0ef65d3d1bcbd5410301d7187eb9e8c8b8be", 0xdf}, {&(0x7f0000006140)="0c422e6f17c79ea3cba1d029889b6738b9fed75fda", 0x15}, {&(0x7f0000006180)="fe06aca232074d98dc99861e9e752fef20b31ff0ce4390adeb6e886de513e0f26fce1d7e65e0c61b0be31172a7b945ab14ca64451bce316aa391decbf03a4a43056d96e3d5b0d84dfdc98a03acfffdcef36a4ea7b60ee33e5caf6739cf4cd4a542cc5a523c23d166c7dd229601ff7b875d3b58ca", 0x74}, {&(0x7f0000006200)="74296276d0cc4b071e30904bddf9871f12e3b187809f7dc0b051d83578b18188fd13d9e0f4665ce3c7472247541284daa23ec2893ed9b473fb34e801a9ce6b5f01a077f963ac7fdfd7dbed86bbc91bdd3f957f45448f0cab83079bc1bbaf08dfd9", 0x61}, {&(0x7f0000006280)="d122628349661b69aaf6cfea75b1f9ecfcb9a0ca39ea39de4bbd1c0cef99702a3595327db2cc2ba79ee1a5feec95c38bec86da9b2c154fd989a3397339751b3ae7fe5d7c0e38ec265e8e42dad0d0e8718b9ca2f14c628761e76e57e6f0394578085743e58859", 0x66}, {&(0x7f0000006300)="8a595bf4c6e389c2b8e52c6b8a6186c2350a6a417b3a3004dc7431a6a5027c79860d8e4f7c32a79a9ea658f3f5e8e648a1aef766193abafa46d721892799", 0x3e}, {&(0x7f0000006340)="1c77c6c7b5acd4e3cb0fa2b1b520f71bd19f4146e4a0f752c0795e899c386959e1ef5ced07a7e9c1f676909ec2da87f392f7740cb1927cbe68f5362f90f47de6c2ad39b9b911e30b05115153f433bbd832910fd394eafae3ec301bbcde7990ca6fd9a03113ba497f5fc230362b5e5b62738118e62e4f8dde3df8689e284dd43a494a52cbd9ca0d6033eb9dc9812813f7bd9e87eb1e3be28ab6f8a1a73c98ed906a42cf", 0xa3}, {&(0x7f0000006400)="d42730651cf384fb1cbccc5ea6a611ec7363b521aa352a3f1feba56cf23367b490d0f5e6b02a2a151fdaf29214f29e426462925a2b723604b9c983a247da0258cf790b64515ac5f34bbd17ba79bd04a08dae7f98c7c112674b2868c9034a2bad62b48c8335548bde7612d5861a57a6819c0f2e0f14104899f6a8f31f9c0ad1e84cf6508e6dc9d843ee773c204b0b55407635969cb85df91516aac5f9be522e47947b3af05371885b14994836d79c308add2f122341e19fd22c42f74574c05b158977a39d82f4f2562a12526ded79110821a563", 0xd3}, {&(0x7f0000006500)="7e8071e03d16c0db706c294151382c519fd11c3f994bebc9c53d778d400ac68b4f3cf22fd5fc33073162cbef3639003c69f747f56f43d6eb1bd9f536ab79cb385d2ff2eba64110a0920ea6132def0ce41376", 0x52}, {&(0x7f0000006580)="9406625d9d49c24ea8b3dcd2c8f7c4d8de28d87e8bc83efdbf6f7a4cc0a8f23cbc186215ea572df6199d3e8024828d97e88b622f903d2f9fcbfa4e22fad5a30e580248c23404a59914dc22eaca69d06ec94dfde06839813b9a9976970acf0012349bd73bd6c4c127f734704652cafb068b9c7eb3f0df1c8d8991a14341b7c5a22c13f90c298d6b9cc417ecccccff31110efd8c48046ea93eb5d5f70296edfde2398b596152684af102261e2c5bb00c01af5bf421fbca181cf4c4cd2c067303d7b222716dec2b92368868bc461db8deedd304a4daa8487c9e915ebbbe0a1524c0e4d0c8f22b45b71f52f6deb5fac2b7cf1075eaa5645954f9", 0xf8}], 0xa, 0x0, 0x0, 0x4}, {&(0x7f0000005200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005d40)=[{&(0x7f0000005280)="120d21399de04eeb3d8e9d4ea2f3f2514a01258e42e67a0f008b6afc5204f98c4a3e063809a45b6282bcec4045cacbdc670dd07a50d352a3590f9d2f0a4fcf257851fa63910fe2b68049a11f419e5eb5554aa4088f6a208ea5763ea66edd19eed218a3cb43dfd4b82b66a40ee4139cb853c51d90f83ee11d7f445d41ad48b8d95ecbfe621ad3ec2c4dbbb035983160b4d451", 0x92}, {&(0x7f0000006980)="b139fd960451b9026865828af9f1175bb60014c470342fb8d75ba0e073fd8dea4d0d6934a52bdd7ca2e955a246e835e00c1524bc8a87f2c70abc7b032f2e770899cf7c", 0x43}, {&(0x7f0000006a00)="aa19613f1c37e82d064d274a927214251da4f83e877477c071f71495b19667fba8de504db837dbd0a45b2fc0560bf78cf92c20bd005d4a6b512c888790fbdd21abf4b520e15d2e159b8b7fde0f1663e907461552a1402710cf2fcd7d398a5a3b780983c88b4be259912342100ebcbc2587863745e9c2b6d11ee61fa6ca41e378315c703e2ab0a46d9edd32797891ed3972aa14772ecbf402", 0x98}, {&(0x7f0000005340)="4d9e0529460c47664f3652c95c275ff95115b8", 0x13}], 0x4, &(0x7f0000006cc0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68, 0x4040004}], 0xb, 0x40480c1) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)=@urb_type_bulk={0x3, {0xa, 0x1}, 0x3ff, 0xa0, &(0x7f0000000040)="8b57b070f764d7195e83294245e8828d662a7d242f32784b16d913a5686096d5905288ae02073ef288dae3ef7b5a9bfc38ced70b38df59b20ea93e67079ebc7883ed7fedc4b8340dc9876bacc4c0848efa18d0130a51e295303243626e652e4df6ee9cc8421644ef67ce34e296bea35fce288ccbde73d4bbf16f90ab5e6902a02179d8d8e99b9f5357bff068ee9310ff4838a6b7ab89e99674", 0x99, 0x1ff, 0x1, 0x7fffffff, 0x6, 0x1ff, &(0x7f00000001c0)="6b37040b0902a6264146f4e7526c38e31361aac24739c35131ee20200ee680803e522ef46729ca258769ca8aea5891b5a8f5042808684b7fc0d22ccb97fc325c48a44c9951879bdf92a912e5c00f4ec32ac48259479035f79bdb4ab1d892778dd6a3f2b00efa8e021e7a48c612a96f1f4c55a81cdb365b1826b37289b175def9f3e4d2cab8e5e6fc4de25df7906cb0b65d21e020ec6fb03ebde81dc2950650d07aa3d6baf952d6f30849b1"}) r6 = socket$inet6(0xa, 0x2, 0x7) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) fadvise64(r8, 0x6, 0x80, 0x2) preadv(r7, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x54, 0x1, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x24000800) sendmmsg$inet6(r6, &(0x7f0000001e40), 0x0, 0x0) finit_module(r6, &(0x7f0000000000)='\x00', 0x1) 18:42:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x806800) 18:42:43 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 437.688528][T15722] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 437.696920][T15722] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 437.704881][T15722] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 437.712825][T15722] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 437.720767][T15722] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 18:42:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x806c00) 18:42:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x807400) 18:42:44 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r2, 0x0, r3}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000080)) 18:42:44 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:44 executing program 3 (fault-call:8 fault-nth:5): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x807a00) [ 437.871444][T15769] FAULT_INJECTION: forcing a failure. [ 437.871444][T15769] name failslab, interval 1, probability 0, space 0, times 0 [ 437.884360][T15769] CPU: 0 PID: 15769 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 437.894506][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.904605][T15769] Call Trace: [ 437.907916][T15769] dump_stack+0x14a/0x1ce [ 437.912218][T15769] ? devkmsg_release+0x11c/0x11c [ 437.917127][T15769] ? show_regs_print_info+0x12/0x12 [ 437.922295][T15769] ? arch_stack_walk+0xb8/0x120 [ 437.927124][T15769] should_fail+0x6fb/0x860 [ 437.931518][T15769] ? setup_fault_attr+0x3d0/0x3d0 [ 437.936561][T15769] ? unwind_next_frame+0x1c90/0x2330 [ 437.941818][T15769] ? kcalloc+0x2b/0x50 [ 437.945859][T15769] should_failslab+0x5/0x20 [ 437.950338][T15769] __kmalloc+0x5f/0x2d0 [ 437.954467][T15769] ? __rcu_read_lock+0x50/0x50 [ 437.959219][T15769] kcalloc+0x2b/0x50 [ 437.963082][T15769] ext4_find_extent+0x2bb/0xce0 [ 437.967901][T15769] ext4_ext_map_blocks+0x3b7/0x46a0 [ 437.973120][T15769] ? unwind_get_return_address+0x48/0x90 [ 437.978751][T15769] ? free_unref_page_commit+0x380/0x380 [ 437.984421][T15769] ? ext4_ext_release+0x10/0x10 [ 437.989243][T15769] ? find_get_pages_range_tag+0xa22/0xaf0 [ 437.994952][T15769] ? release_pages+0x9cf/0xa10 [ 437.999715][T15769] ? __kasan_kmalloc+0x189/0x1c0 [ 438.004638][T15769] ? ext4_es_lookup_extent+0x415/0x900 [ 438.010078][T15769] ext4_map_blocks+0x975/0x1e60 [ 438.014919][T15769] ? ext4_issue_zeroout+0x160/0x160 [ 438.020088][T15769] mpage_map_one_extent+0x2d4/0x960 [ 438.025266][T15769] ? __ext4_journal_start_sb+0x3ad/0x420 [ 438.030872][T15769] ext4_writepages+0x1fbf/0x3f30 [ 438.035790][T15769] ? memset+0x1f/0x40 [ 438.039762][T15769] ? unwind_next_frame+0x1c90/0x2330 [ 438.045018][T15769] ? ext4_readpage+0x2b0/0x2b0 [ 438.049755][T15769] ? unwind_get_return_address_ptr+0x130/0x130 [ 438.055886][T15769] ? stack_trace_save+0x1f0/0x1f0 [ 438.060880][T15769] ? memset+0x1f/0x40 [ 438.064830][T15769] ? unwind_next_frame+0x1c90/0x2330 [ 438.070088][T15769] ? arch_stack_walk+0xb8/0x120 [ 438.074907][T15769] ? memset+0x1f/0x40 [ 438.078876][T15769] ? ext4_readpage+0x2b0/0x2b0 [ 438.083628][T15769] do_writepages+0x13a/0x280 [ 438.088206][T15769] ? __writepage+0xc0/0xc0 [ 438.092602][T15769] ? unwind_get_return_address_ptr+0x130/0x130 [ 438.098732][T15769] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 438.104778][T15769] filemap_write_and_wait_range+0x3b2/0x460 [ 438.110650][T15769] ? filemap_write_and_wait+0x420/0x420 [ 438.116169][T15769] ? __rcu_read_lock+0x50/0x50 [ 438.120903][T15769] ? percpu_counter_add_batch+0x12d/0x150 [ 438.126598][T15769] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 438.132295][T15769] generic_file_direct_write+0x18b/0x6d0 [ 438.137918][T15769] ? pagecache_write_end+0xa0/0xa0 [ 438.143092][T15769] ? file_update_time+0x2fd/0x3f0 [ 438.148091][T15769] ? file_remove_privs+0x640/0x640 [ 438.153229][T15769] ? ext4_issue_zeroout+0x160/0x160 [ 438.158406][T15769] __generic_file_write_iter+0x25f/0x440 [ 438.164128][T15769] ext4_file_write_iter+0x8d9/0x1070 [ 438.169392][T15769] ? iter_file_splice_write+0x229/0xf60 [ 438.174920][T15769] ? ext4_file_read_iter+0x140/0x140 [ 438.180288][T15769] ? __x64_sys_sendfile64+0x1d4/0x230 [ 438.185633][T15769] do_iter_readv_writev+0x651/0x8e0 [ 438.190813][T15769] ? vfs_dedupe_file_range+0xa00/0xa00 [ 438.196252][T15769] ? security_file_permission+0x128/0x300 [ 438.201947][T15769] do_iter_write+0x16d/0x570 [ 438.206512][T15769] ? kmalloc_array+0x2d/0x50 [ 438.211079][T15769] ? __kmalloc+0xf7/0x2d0 [ 438.215382][T15769] ? vfs_iter_write+0x69/0xa0 [ 438.220036][T15769] iter_file_splice_write+0x7bf/0xf60 [ 438.225471][T15769] ? splice_from_pipe+0x210/0x210 [ 438.230476][T15769] ? direct_splice_actor+0x25/0x120 [ 438.235649][T15769] splice_direct_to_actor+0x496/0xb00 [ 438.241008][T15769] ? do_splice_direct+0x3e0/0x3e0 [ 438.246132][T15769] ? pipe_to_sendpage+0x300/0x300 [ 438.251134][T15769] ? security_file_permission+0x128/0x300 [ 438.256821][T15769] do_splice_direct+0x28b/0x3e0 [ 438.261661][T15769] ? splice_direct_to_actor+0xb00/0xb00 [ 438.267176][T15769] ? avc_policy_seqno+0x17/0x70 [ 438.272007][T15769] ? security_file_permission+0x128/0x300 [ 438.277706][T15769] do_sendfile+0x8d6/0x1100 [ 438.282178][T15769] ? compat_writev+0x3d0/0x3d0 [ 438.286928][T15769] ? vfs_write+0x427/0x4f0 [ 438.291330][T15769] __x64_sys_sendfile64+0x1d4/0x230 [ 438.296514][T15769] ? __ia32_sys_sendfile+0x250/0x250 [ 438.301772][T15769] do_syscall_64+0xcb/0x150 [ 438.306245][T15769] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 438.312106][T15769] RIP: 0033:0x45ca59 [ 438.315975][T15769] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 438.335569][T15769] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 438.343962][T15769] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 438.351924][T15769] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 438.359994][T15769] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 438.367946][T15769] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 438.375995][T15769] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 18:42:44 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:44 executing program 5: gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:42:44 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x2141, 0x8) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:42:44 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x80ff07) 18:42:44 executing program 3 (fault-call:8 fault-nth:6): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:44 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)={0x368, 0x14, 0x200, 0x50bd25, 0x21dfdbfb, {0x1, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x57, 0x1, "47c366d72336cc244e67d3d3f20b13ab95b923fca917a6eed0ef7ce520209b930125c6830fffbbd9c98d5dbab31c083b6155ba56695eeae0a614801bdd86d19881c952cc868d828d8ea49ebfacc4c697bc1d55"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "c677266eec71dfbf7b2fa0ad06f95362702d0beb263f5ba8089536717e17b45e2de48ec3919bcfe8f371729802386840e1df82ccb359a36246d39742f43a218458849f2ada72d7c6ac12245455f6e3d6232bbeb06bbdee957ed49c44449951854a98f7ee479c4d3d99ef18bc1ae0267f95a9fec09c44ce328a826120af4186d441cc"}, @INET_DIAG_REQ_BYTECODE={0xf8, 0x1, "7de7f35d506f777fd660be2fbe3ef5ae31e96129d31fc07a2e6ac16c93283b7332e952cc3d1be65d7b523f5090717a2ca92a8da15b3db16202db36d20b8f3e7b0a994407eba67a071e2cd25fa4647f4bb1f780d70a9764e184fc6ca08939a93402e6e087cd34c4477baefea8edeaa50f68d21b9b1f9d07d7d79e0687ba5c5789db91d6739125c44073727385d7ba286139f5d029b91ce821ccca30785ca1ec9a93cf4b8668e6b0cc15081ed2900fda61cc4410c207c1a43a32eafc127f5569005ffc83be1c71c07c045059827461dbee0efc314e1633335c64d4557016f7b140cf3ddfd6c1b05652cab11984d977c4814c06774a"}, @INET_DIAG_REQ_BYTECODE={0x52, 0x1, "04d8c6ca53c845a7bdc4a69034ef8c14961c9ca830527f677153a0baea5533f611d3226078f52de13bad29f3b4fbfac5e898d9d80cf473aad03ad34f2bcb0ed9d983407dad97eda9fce1d6d97009"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "e1df254a7b0600000000b66d44a8940f6849"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "c8613084fd2797db3743258c552adca6aff4a6b2ffa0c9e9974066b196ff1cb5ff4c32697540f6526844eb4caaaa90119a66f111acd83bee197ff6b3bd589293216abb4d28bd04d0e592e5757e867e4d8197024255ea39aa71488dc54d31e5a5a32991a3b398cb9e45945049d8f197c1d81611875697db28c54af386f32bbf45060000001eaea9384769"}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "af72a0b9d506af5dee760f83375874aa1fa95fb7f2bf9e79833b5425b82d1bb8316a2c9a9cdce9b2ffc7148c732c3f708e736edc64a4bbc74a83910d80f2a67d9011f5f7c9ca2680477b78fe94f1b430352615a6e48c66ea1af9cfc0750c9976c70eaf381a4ec9ac235dadb2d52ffc77acbe095fc6188ccb7ba44ecf"}]}, 0x368}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000001c0)=""/4096) 18:42:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x20800, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0x9, 0x6, '9P2000'}, 0x13) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bond_slave_0\x00', 0x2000}) r2 = dup(r0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a050a0340000000000109022400010000000309040000020309000009210000000122010009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) syz_usb_ep_write(r3, 0x0, 0xdd, &(0x7f0000000300)="713b724503fcec0fc28685fe073871db8775b72dd174fa1a1dcb78601b7f36871cbcb08536d7b314279994e694720aa43d4d03a291b14de8113476803d698b0e6c8a9f818ae1c0720be95e73f798d1001f94dd2e0aa03ae791f31d99c15d98e5b6f44a445cc56396b92c46505cd9d98542938f9c919347a37343a8bf2fe6e51b4a30314e98c20dd2d36145982b697706f317a86ac0c36e91a3a1955e731f1ef14bc8d94ed899df9972bcc684e4caac1353eb6b89790ad6ede04657c724d5bd461b8b74264402a56de9362de4d56d9f67747437562aef4d60801d6b012e") ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/243, 0xf3}], 0x1, 0xf724) [ 438.571632][T15740] overlayfs: statfs failed on './file0' [ 438.609107][T15784] FAULT_INJECTION: forcing a failure. [ 438.609107][T15784] name failslab, interval 1, probability 0, space 0, times 0 [ 438.639285][T15784] CPU: 1 PID: 15784 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 438.649454][T15784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.659516][T15784] Call Trace: [ 438.662804][T15784] dump_stack+0x14a/0x1ce [ 438.667140][T15784] ? devkmsg_release+0x11c/0x11c [ 438.672125][T15784] ? __kasan_kmalloc+0x189/0x1c0 [ 438.677077][T15784] ? show_regs_print_info+0x12/0x12 [ 438.682270][T15784] ? __kmalloc+0xf7/0x2d0 [ 438.686571][T15784] ? kcalloc+0x2b/0x50 [ 438.690630][T15784] ? ext4_find_extent+0x2bb/0xce0 [ 438.695627][T15784] ? ext4_map_blocks+0x975/0x1e60 [ 438.700637][T15784] ? mpage_map_one_extent+0x2d4/0x960 [ 438.705998][T15784] ? ext4_writepages+0x1fbf/0x3f30 [ 438.711085][T15784] ? do_writepages+0x13a/0x280 [ 438.715838][T15784] should_fail+0x6fb/0x860 [ 438.720222][T15784] ? setup_fault_attr+0x3d0/0x3d0 [ 438.725228][T15784] ? _raw_write_lock+0xa1/0x170 [ 438.734128][T15784] ? ext4_mb_new_blocks+0x423/0x28a0 [ 438.739393][T15784] should_failslab+0x5/0x20 [ 438.743866][T15784] kmem_cache_alloc+0x36/0x260 [ 438.748602][T15784] ext4_mb_new_blocks+0x423/0x28a0 [ 438.753681][T15784] ? __kmalloc+0xf7/0x2d0 [ 438.757979][T15784] ? kcalloc+0x2b/0x50 [ 438.762031][T15784] ? ext4_mb_pa_callback+0xc0/0xc0 [ 438.767111][T15784] ext4_ext_map_blocks+0x2e4e/0x46a0 [ 438.772384][T15784] ? ext4_ext_release+0x10/0x10 [ 438.777225][T15784] ? find_get_pages_range_tag+0xa22/0xaf0 [ 438.782933][T15784] ? release_pages+0x9cf/0xa10 [ 438.787666][T15784] ? __kasan_kmalloc+0x189/0x1c0 [ 438.792571][T15784] ? ext4_es_lookup_extent+0x415/0x900 [ 438.797998][T15784] ext4_map_blocks+0x975/0x1e60 [ 438.802842][T15784] ? ext4_issue_zeroout+0x160/0x160 [ 438.808028][T15784] mpage_map_one_extent+0x2d4/0x960 [ 438.813194][T15784] ? __ext4_journal_start_sb+0x3ad/0x420 [ 438.818794][T15784] ext4_writepages+0x1fbf/0x3f30 [ 438.823706][T15784] ? memset+0x1f/0x40 [ 438.827657][T15784] ? unwind_next_frame+0x1c90/0x2330 [ 438.832925][T15784] ? ext4_readpage+0x2b0/0x2b0 [ 438.837667][T15784] ? unwind_get_return_address_ptr+0x130/0x130 [ 438.843795][T15784] ? stack_trace_save+0x1f0/0x1f0 [ 438.848807][T15784] ? memset+0x1f/0x40 [ 438.852762][T15784] ? unwind_next_frame+0x1c90/0x2330 [ 438.858036][T15784] ? arch_stack_walk+0xb8/0x120 [ 438.862867][T15784] ? memset+0x1f/0x40 [ 438.866843][T15784] ? ext4_readpage+0x2b0/0x2b0 [ 438.871579][T15784] do_writepages+0x13a/0x280 [ 438.876157][T15784] ? __writepage+0xc0/0xc0 [ 438.880544][T15784] ? unwind_get_return_address_ptr+0x130/0x130 [ 438.886668][T15784] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 438.892703][T15784] filemap_write_and_wait_range+0x3b2/0x460 [ 438.898568][T15784] ? filemap_write_and_wait+0x420/0x420 [ 438.904092][T15784] ? __rcu_read_lock+0x50/0x50 [ 438.908833][T15784] ? percpu_counter_add_batch+0x12d/0x150 [ 438.914595][T15784] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 438.920320][T15784] generic_file_direct_write+0x18b/0x6d0 [ 438.925928][T15784] ? pagecache_write_end+0xa0/0xa0 [ 438.931011][T15784] ? file_update_time+0x2fd/0x3f0 [ 438.936122][T15784] ? file_remove_privs+0x640/0x640 [ 438.941210][T15784] ? ext4_issue_zeroout+0x160/0x160 [ 438.946589][T15784] __generic_file_write_iter+0x25f/0x440 [ 438.952197][T15784] ext4_file_write_iter+0x8d9/0x1070 [ 438.957475][T15784] ? iter_file_splice_write+0x229/0xf60 [ 438.963009][T15784] ? ext4_file_read_iter+0x140/0x140 [ 438.968266][T15784] ? __x64_sys_sendfile64+0x1d4/0x230 [ 438.973607][T15784] do_iter_readv_writev+0x651/0x8e0 [ 438.978795][T15784] ? vfs_dedupe_file_range+0xa00/0xa00 [ 438.984226][T15784] ? security_file_permission+0x128/0x300 [ 438.989945][T15784] do_iter_write+0x16d/0x570 [ 438.995047][T15784] ? kmalloc_array+0x2d/0x50 [ 438.999631][T15784] ? __kmalloc+0xf7/0x2d0 [ 439.003931][T15784] ? vfs_iter_write+0x69/0xa0 [ 439.008582][T15784] iter_file_splice_write+0x7bf/0xf60 [ 439.013927][T15784] ? splice_from_pipe+0x210/0x210 [ 439.018923][T15784] ? direct_splice_actor+0x25/0x120 [ 439.024110][T15784] splice_direct_to_actor+0x496/0xb00 [ 439.029455][T15784] ? do_splice_direct+0x3e0/0x3e0 [ 439.034449][T15784] ? pipe_to_sendpage+0x300/0x300 [ 439.039454][T15784] ? security_file_permission+0x128/0x300 [ 439.045145][T15784] do_splice_direct+0x28b/0x3e0 [ 439.049971][T15784] ? splice_direct_to_actor+0xb00/0xb00 [ 439.055503][T15784] ? avc_policy_seqno+0x17/0x70 [ 439.060324][T15784] ? security_file_permission+0x128/0x300 [ 439.066010][T15784] do_sendfile+0x8d6/0x1100 [ 439.070506][T15784] ? compat_writev+0x3d0/0x3d0 [ 439.075274][T15784] ? vfs_write+0x427/0x4f0 [ 439.079668][T15784] __x64_sys_sendfile64+0x1d4/0x230 [ 439.084862][T15784] ? __ia32_sys_sendfile+0x250/0x250 [ 439.090139][T15784] do_syscall_64+0xcb/0x150 [ 439.094617][T15784] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 439.100489][T15784] RIP: 0033:0x45ca59 [ 439.104354][T15784] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.123934][T15784] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 439.132318][T15784] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 18:42:45 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) 18:42:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) signalfd(r0, &(0x7f0000000000)={[0x2]}, 0x8) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:42:45 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)}], 0x2, 0x2000000000000000) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x20d}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0xa4}}, 0x4000) 18:42:45 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) [ 439.140261][T15784] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 439.148203][T15784] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 439.156158][T15784] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 439.164208][T15784] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 [ 439.326976][ T234] usb 3-1: new high-speed USB device number 31 using dummy_hcd 18:42:45 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 439.434230][T15793] overlayfs: statfs failed on './file0' [ 439.686967][ T234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.697877][ T234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.708207][ T234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.721385][ T234] usb 3-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.40 [ 439.730707][ T234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.739627][ T234] usb 3-1: config 0 descriptor?? [ 440.217708][ T234] wacom 0003:056A:030A.0007: unknown main item tag 0x0 [ 440.225380][ T234] wacom 0003:056A:030A.0007: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.2-1/input0 [ 440.253438][T15816] overlayfs: statfs failed on './file0' [ 440.418867][ T115] usb 3-1: USB disconnect, device number 31 [ 441.206699][ T234] usb 3-1: new high-speed USB device number 32 using dummy_hcd 18:42:47 executing program 5: gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:42:47 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1437, 0x11ba00) 18:42:47 executing program 3 (fault-call:8 fault-nth:7): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:47 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080fffffffe) 18:42:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 441.566709][ T234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.577639][ T234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.590374][ T234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 18:42:47 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x527c01) [ 441.613256][ T234] usb 3-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.40 [ 441.626928][ T234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.640430][T15838] FAULT_INJECTION: forcing a failure. [ 441.640430][T15838] name failslab, interval 1, probability 0, space 0, times 0 [ 441.653049][T15838] CPU: 0 PID: 15838 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 441.663189][T15838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.673256][T15838] Call Trace: [ 441.676537][T15838] dump_stack+0x14a/0x1ce [ 441.680856][T15838] ? devkmsg_release+0x11c/0x11c [ 441.685817][T15838] ? show_regs_print_info+0x12/0x12 [ 441.690993][T15838] ? __es_remove_extent+0x14ae/0x2280 [ 441.696350][T15838] should_fail+0x6fb/0x860 [ 441.700737][T15838] ? setup_fault_attr+0x3d0/0x3d0 [ 441.705738][T15838] ? __es_insert_extent+0x7a4/0x1770 [ 441.711007][T15838] should_failslab+0x5/0x20 [ 441.715483][T15838] kmem_cache_alloc+0x36/0x260 [ 441.720221][T15838] __es_insert_extent+0x7a4/0x1770 [ 441.725316][T15838] ext4_es_insert_extent+0x43b/0x3100 [ 441.730676][T15838] ? ext4_es_scan_clu+0x2c0/0x2c0 [ 441.735761][T15838] ? ext4_es_lookup_extent+0x415/0x900 [ 441.741190][T15838] ext4_map_blocks+0xe49/0x1e60 [ 441.746012][T15838] ? ext4_issue_zeroout+0x160/0x160 [ 441.751197][T15838] mpage_map_one_extent+0x2d4/0x960 [ 441.756364][T15838] ? __ext4_journal_start_sb+0x3ad/0x420 [ 441.761965][T15838] ext4_writepages+0x1fbf/0x3f30 [ 441.766881][T15838] ? memset+0x1f/0x40 [ 441.770856][T15838] ? unwind_next_frame+0x1c90/0x2330 [ 441.776125][T15838] ? ext4_readpage+0x2b0/0x2b0 [ 441.780871][T15838] ? unwind_get_return_address_ptr+0x130/0x130 [ 441.786992][T15838] ? stack_trace_save+0x1f0/0x1f0 [ 441.791997][T15838] ? memset+0x1f/0x40 [ 441.795947][T15838] ? unwind_next_frame+0x1c90/0x2330 [ 441.801203][T15838] ? arch_stack_walk+0xb8/0x120 [ 441.806030][T15838] ? memset+0x1f/0x40 [ 441.809981][T15838] ? ext4_readpage+0x2b0/0x2b0 [ 441.814713][T15838] do_writepages+0x13a/0x280 [ 441.819286][T15838] ? __writepage+0xc0/0xc0 [ 441.823687][T15838] ? unwind_get_return_address_ptr+0x130/0x130 [ 441.829811][T15838] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 441.835860][T15838] filemap_write_and_wait_range+0x3b2/0x460 [ 441.841722][T15838] ? filemap_write_and_wait+0x420/0x420 [ 441.847251][T15838] ? __rcu_read_lock+0x50/0x50 [ 441.852004][T15838] ? percpu_counter_add_batch+0x12d/0x150 [ 441.857692][T15838] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 441.863382][T15838] generic_file_direct_write+0x18b/0x6d0 [ 441.868984][T15838] ? pagecache_write_end+0xa0/0xa0 [ 441.874064][T15838] ? file_update_time+0x2fd/0x3f0 [ 441.879067][T15838] ? file_remove_privs+0x640/0x640 [ 441.884156][T15838] ? ext4_issue_zeroout+0x160/0x160 [ 441.889327][T15838] __generic_file_write_iter+0x25f/0x440 [ 441.894936][T15838] ext4_file_write_iter+0x8d9/0x1070 [ 441.900197][T15838] ? iter_file_splice_write+0x229/0xf60 [ 441.905717][T15838] ? ext4_file_read_iter+0x140/0x140 [ 441.910979][T15838] ? __x64_sys_sendfile64+0x1d4/0x230 [ 441.916326][T15838] do_iter_readv_writev+0x651/0x8e0 [ 441.921510][T15838] ? vfs_dedupe_file_range+0xa00/0xa00 [ 441.926942][T15838] ? security_file_permission+0x128/0x300 [ 441.932663][T15838] do_iter_write+0x16d/0x570 [ 441.937232][T15838] ? kmalloc_array+0x2d/0x50 [ 441.941796][T15838] ? __kmalloc+0xf7/0x2d0 [ 441.946097][T15838] ? vfs_iter_write+0x69/0xa0 [ 441.950746][T15838] iter_file_splice_write+0x7bf/0xf60 [ 441.956093][T15838] ? splice_from_pipe+0x210/0x210 [ 441.961107][T15838] ? direct_splice_actor+0x25/0x120 [ 441.966277][T15838] splice_direct_to_actor+0x496/0xb00 [ 441.971621][T15838] ? do_splice_direct+0x3e0/0x3e0 [ 441.976626][T15838] ? pipe_to_sendpage+0x300/0x300 [ 441.981622][T15838] ? security_file_permission+0x128/0x300 [ 441.987330][T15838] do_splice_direct+0x28b/0x3e0 [ 441.992152][T15838] ? splice_direct_to_actor+0xb00/0xb00 [ 441.997680][T15838] ? avc_policy_seqno+0x17/0x70 [ 442.002593][T15838] ? security_file_permission+0x128/0x300 [ 442.008279][T15838] do_sendfile+0x8d6/0x1100 [ 442.012753][T15838] ? compat_writev+0x3d0/0x3d0 [ 442.017486][T15838] ? vfs_write+0x427/0x4f0 [ 442.021889][T15838] __x64_sys_sendfile64+0x1d4/0x230 [ 442.027058][T15838] ? __ia32_sys_sendfile+0x250/0x250 [ 442.032313][T15838] do_syscall_64+0xcb/0x150 [ 442.036788][T15838] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 442.042649][T15838] RIP: 0033:0x45ca59 [ 442.046531][T15838] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:42:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/226}], 0x0, &(0x7f0000000180)=""/24}, 0x9}, {{&(0x7f00000001c0)=@phonet, 0x0, &(0x7f0000001780)=[{&(0x7f0000000300)=""/177}, {&(0x7f0000000240)=""/47}, {&(0x7f0000000280)=""/32}, {&(0x7f00000003c0)=""/25}, {&(0x7f0000000400)=""/189}, {&(0x7f00000004c0)=""/83}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/222}, {&(0x7f0000000680)=""/4096}, {&(0x7f0000001680)=""/218}], 0x0, &(0x7f0000001840)=""/104}, 0x8}, {{&(0x7f00000018c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001940)}, {&(0x7f0000001ec0)=""/4096}, {&(0x7f0000001980)=""/166}, {&(0x7f0000001a40)=""/88}, {&(0x7f0000001ac0)=""/249}, {&(0x7f0000001bc0)=""/230}], 0x0, &(0x7f0000001d40)=""/131}, 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) 18:42:48 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) [ 442.066124][T15838] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 442.074530][T15838] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 442.082480][T15838] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 442.090438][T15838] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 442.098389][T15838] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 442.106338][T15838] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 [ 442.148319][ T234] usb 3-1: config 0 descriptor?? [ 442.176655][ T234] usb 3-1: can't set config #0, error -71 [ 442.183027][ T234] usb 3-1: USB disconnect, device number 32 18:42:48 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:48 executing program 3 (fault-call:8 fault-nth:8): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 442.290996][T15857] FAULT_INJECTION: forcing a failure. [ 442.290996][T15857] name failslab, interval 1, probability 0, space 0, times 0 [ 442.304177][T15857] CPU: 0 PID: 15857 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 442.314321][T15857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.324365][T15857] Call Trace: [ 442.327648][T15857] dump_stack+0x14a/0x1ce [ 442.331970][T15857] ? devkmsg_release+0x11c/0x11c [ 442.336897][T15857] ? show_regs_print_info+0x12/0x12 [ 442.342084][T15857] should_fail+0x6fb/0x860 [ 442.346492][T15857] ? setup_fault_attr+0x3d0/0x3d0 [ 442.351507][T15857] ? __es_insert_extent+0x1157/0x1770 [ 442.356878][T15857] ? mempool_alloc_slab+0x16/0x30 [ 442.361898][T15857] ? mempool_free+0x380/0x380 [ 442.366569][T15857] should_failslab+0x5/0x20 [ 442.371067][T15857] kmem_cache_alloc+0x36/0x260 [ 442.375826][T15857] ? mempool_free+0x380/0x380 [ 442.380494][T15857] mempool_alloc_slab+0x16/0x30 [ 442.385340][T15857] mempool_alloc+0x116/0x690 [ 442.390545][T15857] ? __rcu_read_lock+0x50/0x50 [ 442.395301][T15857] ? mempool_resize+0x910/0x910 [ 442.400148][T15857] ? __test_set_page_writeback+0x848/0x9a0 [ 442.405949][T15857] bio_alloc_bioset+0x209/0x690 [ 442.410822][T15857] ? test_clear_page_writeback+0x790/0x790 [ 442.416622][T15857] ? page_mkclean+0x330/0x330 [ 442.421293][T15857] ? bio_chain_endio+0xf0/0xf0 [ 442.426048][T15857] ? percpu_counter_add_batch+0x12d/0x150 [ 442.431759][T15857] ext4_bio_write_page+0xf96/0x1730 [ 442.436952][T15857] mpage_submit_page+0x1ae/0x230 [ 442.441888][T15857] ext4_writepages+0x2484/0x3f30 [ 442.446824][T15857] ? ext4_readpage+0x2b0/0x2b0 [ 442.451592][T15857] ? unwind_next_frame+0x1c90/0x2330 [ 442.456875][T15857] ? arch_stack_walk+0xb8/0x120 [ 442.461714][T15857] ? memset+0x1f/0x40 [ 442.465712][T15857] ? ext4_readpage+0x2b0/0x2b0 [ 442.470468][T15857] do_writepages+0x13a/0x280 [ 442.475058][T15857] ? __writepage+0xc0/0xc0 [ 442.479486][T15857] ? unwind_get_return_address_ptr+0x130/0x130 [ 442.485632][T15857] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 442.491690][T15857] filemap_write_and_wait_range+0x3b2/0x460 [ 442.497575][T15857] ? filemap_write_and_wait+0x420/0x420 [ 442.503119][T15857] ? __rcu_read_lock+0x50/0x50 [ 442.507900][T15857] ? percpu_counter_add_batch+0x12d/0x150 [ 442.513609][T15857] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 442.519319][T15857] generic_file_direct_write+0x18b/0x6d0 [ 442.524947][T15857] ? pagecache_write_end+0xa0/0xa0 [ 442.530057][T15857] ? file_update_time+0x2fd/0x3f0 [ 442.535095][T15857] ? file_remove_privs+0x640/0x640 [ 442.540197][T15857] ? ext4_issue_zeroout+0x160/0x160 [ 442.545385][T15857] __generic_file_write_iter+0x25f/0x440 [ 442.551011][T15857] ext4_file_write_iter+0x8d9/0x1070 [ 442.556286][T15857] ? iter_file_splice_write+0x229/0xf60 [ 442.561822][T15857] ? ext4_file_read_iter+0x140/0x140 [ 442.567103][T15857] ? __x64_sys_sendfile64+0x1d4/0x230 [ 442.572464][T15857] do_iter_readv_writev+0x651/0x8e0 [ 442.577655][T15857] ? vfs_dedupe_file_range+0xa00/0xa00 [ 442.583109][T15857] ? security_file_permission+0x128/0x300 [ 442.588850][T15857] do_iter_write+0x16d/0x570 [ 442.593433][T15857] ? kmalloc_array+0x2d/0x50 [ 442.598015][T15857] ? __kmalloc+0xf7/0x2d0 [ 442.602340][T15857] ? vfs_iter_write+0x69/0xa0 [ 442.607009][T15857] iter_file_splice_write+0x7bf/0xf60 [ 442.612376][T15857] ? splice_from_pipe+0x210/0x210 [ 442.617394][T15857] ? direct_splice_actor+0x25/0x120 [ 442.622582][T15857] splice_direct_to_actor+0x496/0xb00 [ 442.627952][T15857] ? do_splice_direct+0x3e0/0x3e0 [ 442.632965][T15857] ? pipe_to_sendpage+0x300/0x300 [ 442.637980][T15857] ? security_file_permission+0x128/0x300 [ 442.643691][T15857] do_splice_direct+0x28b/0x3e0 [ 442.648531][T15857] ? splice_direct_to_actor+0xb00/0xb00 [ 442.654067][T15857] ? avc_policy_seqno+0x17/0x70 [ 442.658915][T15857] ? security_file_permission+0x128/0x300 [ 442.664620][T15857] do_sendfile+0x8d6/0x1100 [ 442.669117][T15857] ? compat_writev+0x3d0/0x3d0 [ 442.673871][T15857] ? vfs_write+0x427/0x4f0 [ 442.678280][T15857] __x64_sys_sendfile64+0x1d4/0x230 [ 442.683572][T15857] ? __ia32_sys_sendfile+0x250/0x250 [ 442.688848][T15857] do_syscall_64+0xcb/0x150 [ 442.693337][T15857] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 442.699213][T15857] RIP: 0033:0x45ca59 [ 442.703095][T15857] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 442.722685][T15857] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 442.731087][T15857] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 442.739048][T15857] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 442.747010][T15857] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 442.754969][T15857] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 442.762928][T15857] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 [ 442.771434][T15839] overlayfs: statfs failed on './file0' 18:42:49 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:49 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 443.641760][T15863] overlayfs: statfs failed on './file0' [ 443.678646][T15866] overlayfs: statfs failed on './file0' 18:42:50 executing program 5: gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:42:50 executing program 3 (fault-call:8 fault-nth:9): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:50 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x7ff}, {{&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/137, 0x89}, {&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000180)=""/100, 0x64}, {&(0x7f0000000300)=""/237, 0xed}], 0x4, &(0x7f0000000240)=""/91, 0x5b}, 0x1f}, {{&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)=""/87, 0x57}], 0x1, &(0x7f0000000540)=""/250, 0xfa}, 0x6}], 0x3, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:42:50 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) 18:42:50 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:50 executing program 0 (fault-call:8 fault-nth:0): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 444.629319][T15883] FAULT_INJECTION: forcing a failure. [ 444.629319][T15883] name failslab, interval 1, probability 0, space 0, times 0 [ 444.634386][T15888] FAULT_INJECTION: forcing a failure. [ 444.634386][T15888] name failslab, interval 1, probability 0, space 0, times 0 [ 444.652720][T15883] CPU: 1 PID: 15883 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 444.664669][T15883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.674714][T15883] Call Trace: 18:42:50 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x1, 0xfff}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000040)) [ 444.677996][T15883] dump_stack+0x14a/0x1ce [ 444.682306][T15883] ? devkmsg_release+0x11c/0x11c [ 444.687220][T15883] ? show_regs_print_info+0x12/0x12 [ 444.692397][T15883] ? is_bpf_text_address+0x290/0x2b0 [ 444.697675][T15883] should_fail+0x6fb/0x860 [ 444.702094][T15883] ? setup_fault_attr+0x3d0/0x3d0 [ 444.707195][T15883] ? arch_stack_walk+0xd8/0x120 [ 444.712033][T15883] ? alloc_pipe_info+0xa1/0x3a0 [ 444.716937][T15883] should_failslab+0x5/0x20 [ 444.721504][T15883] kmem_cache_alloc_trace+0x39/0x280 [ 444.726762][T15883] alloc_pipe_info+0xa1/0x3a0 [ 444.731415][T15883] splice_direct_to_actor+0x94e/0xb00 [ 444.736763][T15883] ? kstrtol_from_user+0x320/0x320 [ 444.741846][T15883] ? __kasan_slab_free+0x1f2/0x230 [ 444.746929][T15883] ? __rcu_read_lock+0x50/0x50 [ 444.751667][T15883] ? avc_policy_seqno+0x17/0x70 [ 444.756489][T15883] ? do_splice_direct+0x3e0/0x3e0 [ 444.761489][T15883] ? pipe_to_sendpage+0x300/0x300 [ 444.766511][T15883] ? security_file_permission+0x128/0x300 [ 444.772225][T15883] do_splice_direct+0x28b/0x3e0 18:42:50 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x4) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) [ 444.777090][T15883] ? splice_direct_to_actor+0xb00/0xb00 [ 444.782621][T15883] ? avc_policy_seqno+0x17/0x70 [ 444.787494][T15883] ? security_file_permission+0x128/0x300 [ 444.793219][T15883] do_sendfile+0x8d6/0x1100 [ 444.797705][T15883] ? compat_writev+0x3d0/0x3d0 [ 444.802469][T15883] ? vfs_write+0x427/0x4f0 [ 444.806884][T15883] __x64_sys_sendfile64+0x1d4/0x230 [ 444.812062][T15883] ? __ia32_sys_sendfile+0x250/0x250 [ 444.817330][T15883] do_syscall_64+0xcb/0x150 [ 444.821810][T15883] entry_SYSCALL_64_after_hwframe+0x44/0xa9 18:42:51 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 444.827679][T15883] RIP: 0033:0x45ca59 [ 444.831547][T15883] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 444.851256][T15883] RSP: 002b:00007f09f5f47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 444.859659][T15883] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 444.867748][T15883] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 444.875702][T15883] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 444.883656][T15883] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 444.891633][T15883] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007f09f5f486d4 [ 444.899587][T15888] CPU: 0 PID: 15888 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 444.909727][T15888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.919999][T15888] Call Trace: [ 444.923282][T15888] dump_stack+0x14a/0x1ce 18:42:51 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100, 0x2}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:42:51 executing program 1: lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '*\x00'}, &(0x7f0000000100)=""/115, 0x73) syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x75, 0x22180) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 18:42:51 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000000)=0xc1) [ 444.927603][T15888] ? devkmsg_release+0x11c/0x11c [ 444.932619][T15888] ? show_regs_print_info+0x12/0x12 [ 444.937809][T15888] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 444.943868][T15888] should_fail+0x6fb/0x860 [ 444.948277][T15888] ? setup_fault_attr+0x3d0/0x3d0 [ 444.953294][T15888] ? mempool_alloc_slab+0x16/0x30 [ 444.958308][T15888] ? mempool_free+0x380/0x380 [ 444.963005][T15888] should_failslab+0x5/0x20 [ 444.967489][T15888] kmem_cache_alloc+0x36/0x260 [ 444.972233][T15888] ? mempool_free+0x380/0x380 [ 444.976880][T15888] mempool_alloc_slab+0x16/0x30 [ 444.981698][T15888] mempool_alloc+0x116/0x690 [ 444.986282][T15888] ? mempool_alloc+0x123/0x690 [ 444.991022][T15888] ? mempool_resize+0x910/0x910 [ 444.995841][T15888] ? mempool_resize+0x910/0x910 [ 445.000684][T15888] bvec_alloc+0x149/0x190 [ 445.004986][T15888] bio_alloc_bioset+0x3dc/0x690 [ 445.009835][T15888] ? test_clear_page_writeback+0x790/0x790 [ 445.015609][T15888] ? bio_chain_endio+0xf0/0xf0 [ 445.020342][T15888] ? percpu_counter_add_batch+0x12d/0x150 [ 445.026032][T15888] ext4_bio_write_page+0xf96/0x1730 [ 445.031376][T15888] mpage_submit_page+0x1ae/0x230 [ 445.036282][T15888] ext4_writepages+0x2484/0x3f30 [ 445.041232][T15888] ? ext4_readpage+0x2b0/0x2b0 [ 445.046060][T15888] ? unwind_next_frame+0x1c90/0x2330 [ 445.051587][T15888] ? arch_stack_walk+0xb8/0x120 [ 445.056412][T15888] ? memset+0x1f/0x40 [ 445.060365][T15888] ? ext4_readpage+0x2b0/0x2b0 [ 445.065287][T15888] do_writepages+0x13a/0x280 [ 445.069848][T15888] ? __writepage+0xc0/0xc0 [ 445.074242][T15888] ? unwind_get_return_address_ptr+0x130/0x130 [ 445.080379][T15888] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 445.086420][T15888] filemap_write_and_wait_range+0x3b2/0x460 [ 445.092293][T15888] ? filemap_write_and_wait+0x420/0x420 [ 445.097813][T15888] ? __rcu_read_lock+0x50/0x50 [ 445.102550][T15888] ? percpu_counter_add_batch+0x12d/0x150 [ 445.108252][T15888] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 445.113942][T15888] generic_file_direct_write+0x18b/0x6d0 [ 445.119549][T15888] ? pagecache_write_end+0xa0/0xa0 [ 445.124629][T15888] ? file_update_time+0x2fd/0x3f0 [ 445.129623][T15888] ? file_remove_privs+0x640/0x640 [ 445.134704][T15888] ? ext4_issue_zeroout+0x160/0x160 [ 445.139971][T15888] __generic_file_write_iter+0x25f/0x440 [ 445.145572][T15888] ext4_file_write_iter+0x8d9/0x1070 [ 445.150827][T15888] ? iter_file_splice_write+0x229/0xf60 [ 445.156339][T15888] ? ext4_file_read_iter+0x140/0x140 [ 445.161595][T15888] ? __x64_sys_sendfile64+0x1d4/0x230 [ 445.166934][T15888] do_iter_readv_writev+0x651/0x8e0 [ 445.172097][T15888] ? vfs_dedupe_file_range+0xa00/0xa00 [ 445.177524][T15888] ? security_file_permission+0x128/0x300 [ 445.183210][T15888] do_iter_write+0x16d/0x570 [ 445.187765][T15888] ? kmalloc_array+0x2d/0x50 [ 445.192339][T15888] ? __kmalloc+0xf7/0x2d0 [ 445.196662][T15888] ? vfs_iter_write+0x69/0xa0 [ 445.201305][T15888] iter_file_splice_write+0x7bf/0xf60 [ 445.206645][T15888] ? splice_from_pipe+0x210/0x210 [ 445.211643][T15888] ? direct_splice_actor+0x25/0x120 [ 445.216829][T15888] splice_direct_to_actor+0x496/0xb00 [ 445.222173][T15888] ? do_splice_direct+0x3e0/0x3e0 [ 445.227183][T15888] ? pipe_to_sendpage+0x300/0x300 [ 445.232192][T15888] ? security_file_permission+0x128/0x300 [ 445.237898][T15888] do_splice_direct+0x28b/0x3e0 [ 445.242718][T15888] ? splice_direct_to_actor+0xb00/0xb00 [ 445.248232][T15888] ? avc_policy_seqno+0x17/0x70 [ 445.253049][T15888] ? security_file_permission+0x128/0x300 [ 445.258745][T15888] do_sendfile+0x8d6/0x1100 [ 445.263217][T15888] ? compat_writev+0x3d0/0x3d0 [ 445.267948][T15888] ? vfs_write+0x427/0x4f0 [ 445.272333][T15888] __x64_sys_sendfile64+0x1d4/0x230 [ 445.277499][T15888] ? __ia32_sys_sendfile+0x250/0x250 [ 445.282751][T15888] do_syscall_64+0xcb/0x150 [ 445.287236][T15888] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 445.293096][T15888] RIP: 0033:0x45ca59 [ 445.296957][T15888] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.316546][T15888] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 445.324938][T15888] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 445.332880][T15888] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 445.340821][T15888] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 445.348782][T15888] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 445.356730][T15888] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 [ 445.426546][T15887] overlayfs: statfs failed on './file0' 18:42:53 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:53 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x1, 0x8041) 18:42:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1}) fcntl$lock(r2, 0x6, &(0x7f0000000080)={0x2, 0x0, 0x4, 0x6}) r4 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) 18:42:53 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:53 executing program 0 (fault-call:8 fault-nth:1): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:53 executing program 3 (fault-call:8 fault-nth:10): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 447.642631][T15926] FAULT_INJECTION: forcing a failure. [ 447.642631][T15926] name failslab, interval 1, probability 0, space 0, times 0 [ 447.643593][T15924] FAULT_INJECTION: forcing a failure. [ 447.643593][T15924] name failslab, interval 1, probability 0, space 0, times 0 [ 447.667900][T15926] CPU: 0 PID: 15926 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 447.678038][T15926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.688071][T15926] Call Trace: [ 447.691348][T15926] dump_stack+0x14a/0x1ce [ 447.695674][T15926] ? devkmsg_release+0x11c/0x11c [ 447.700674][T15926] ? show_regs_print_info+0x12/0x12 [ 447.705864][T15926] should_fail+0x6fb/0x860 [ 447.710264][T15926] ? setup_fault_attr+0x3d0/0x3d0 [ 447.715274][T15926] ? retint_kernel+0x1b/0x1b [ 447.719835][T15926] ? kcalloc+0x32/0x60 [ 447.723875][T15926] should_failslab+0x5/0x20 [ 447.728377][T15926] __kmalloc+0x5f/0x2d0 [ 447.732511][T15926] kcalloc+0x32/0x60 [ 447.736379][T15926] alloc_pipe_info+0x1b9/0x3a0 [ 447.741120][T15926] splice_direct_to_actor+0x94e/0xb00 [ 447.746463][T15926] ? kstrtol_from_user+0x320/0x320 [ 447.751546][T15926] ? __kasan_slab_free+0x1f2/0x230 [ 447.756629][T15926] ? __rcu_read_lock+0x50/0x50 [ 447.761367][T15926] ? avc_policy_seqno+0x17/0x70 [ 447.766276][T15926] ? do_splice_direct+0x3e0/0x3e0 [ 447.771273][T15926] ? pipe_to_sendpage+0x300/0x300 [ 447.776273][T15926] ? security_file_permission+0x128/0x300 [ 447.781970][T15926] do_splice_direct+0x28b/0x3e0 [ 447.786795][T15926] ? splice_direct_to_actor+0xb00/0xb00 [ 447.792311][T15926] ? avc_policy_seqno+0x17/0x70 [ 447.797137][T15926] ? security_file_permission+0x128/0x300 [ 447.802848][T15926] do_sendfile+0x8d6/0x1100 [ 447.807326][T15926] ? compat_writev+0x3d0/0x3d0 [ 447.812060][T15926] ? vfs_write+0x427/0x4f0 [ 447.816451][T15926] __x64_sys_sendfile64+0x1d4/0x230 [ 447.821731][T15926] ? __ia32_sys_sendfile+0x250/0x250 [ 447.826988][T15926] do_syscall_64+0xcb/0x150 [ 447.831464][T15926] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 447.837415][T15926] RIP: 0033:0x45ca59 [ 447.841282][T15926] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 447.860945][T15926] RSP: 002b:00007f09f5f47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 447.871150][T15926] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 447.879359][T15926] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 447.887421][T15926] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 447.895386][T15926] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 447.903337][T15926] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007f09f5f486d4 [ 447.911298][T15924] CPU: 1 PID: 15924 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 447.921441][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.932916][T15924] Call Trace: [ 447.936206][T15924] dump_stack+0x14a/0x1ce 18:42:54 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x102000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x80800) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000080)={{0x1d, @multicast2, 0x4e21, 0x3, 'rr\x00', 0x10, 0x8001, 0xf}, {@remote, 0x4e22, 0x2, 0x5, 0x1, 0x1ff}}, 0x44) 18:42:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f0000000300)=""/24, 0x18}], 0x3, &(0x7f0000000380)=""/59, 0x3b}, 0x6b23}, {{&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000440)=""/21, 0x15}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/196, 0xc4}, {&(0x7f00000006c0)=""/187, 0xbb}, {&(0x7f0000000780)=""/103, 0x67}, {&(0x7f0000000800)=""/240, 0xf0}, {&(0x7f0000000900)=""/201, 0xc9}], 0x9}, 0xb049}], 0x2, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x2) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x101, 0x101) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000080)={0x3, 0x1000, 0x25, 0x5, 0x0, 0x4}) fcntl$setflags(r5, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'veth1_vlan\x00', {}, 0xfffd}) preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x20000043) 18:42:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) io_uring_enter(r3, 0xffffffff, 0x7fffffff, 0x3, &(0x7f0000000140)={[0x3]}, 0x8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000080)=[{}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r6}, 0x80, 0x0}}], 0x1, 0x2404c040) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x1, 0x14, 0x40, 0x1257134a}, {0x3, 0xb2, 0x0, 0x7}, {0x1, 0x6, 0x9, 0xfffffff7}, {0x5, 0x7, 0x4, 0x1}, {0x9, 0x28, 0x4, 0x9c}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000001a00)=@newchain={0x220c, 0x64, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0xfff1}, {0x4}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x28, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x7}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xdd}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x13, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x8aa}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8, 0xb, 0x2d2c8303}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20b8, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xbc34}]}, @TCA_CGROUP_EMATCHES={0x74, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x8000, 0x2, 0x541}, {0x7fffffff, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xdfe, 0x8, 0x4f}, {0x2, 0x5}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x401, 0x8, 0x4}, {0xffffffffffffffff, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}]}, @TCA_CGROUP_EMATCHES={0x70, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1}, {0x80000000, 0x5, 0x10001, 0x9}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x40, 0x3, 0x2}, {0x7, 0x3, 0x72c, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x101}, {0x0, 0x4, 0x0, "f4c6f050"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}]}, @TCA_CGROUP_ACT={0x1fc0, 0x1, [@m_connmark={0x16c, 0xa, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x5, 0x5, 0x1, 0x8001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xef2, 0x7fffffff, 0x10000002, 0x3f, 0x5}, 0x50}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xf1c7, 0x2, 0xfffffff9, 0x2}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x41, 0x8, 0x2, 0x7ff}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x200, 0x5, 0x8, 0x3}, 0xf91b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x2, 0x4, 0xa1, 0x2c6}, 0x7ff}}]}, {0x93, 0x6, "aa1c79f558d0fb9c3fba7dffc87e2bb3b1b2cbe891bf495aa134678ce1decd1a3a282022089f03b9b2ad2000e676a7c28c66c4eff40b3cf912ca701ae28585cf3126f2fad30b5bb9d3930f53712cb112a32109ab364028251ab5ff364da0df45a8eee61a7ca9146273ba5d034113ddbb1522a2bd683702a4eb31033febb925547e3ba6f9cb2b59a3c30ac867cc9702"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x58, 0x8, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x24, 0x6, "e92800dd641860c646e09c512744da25d31bdab935827b1735536ce6223d1dfe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x944, 0x11, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x8b0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x10001, 0x1, 0x5, 0xffffffff, 0x81, 0x6, 0x6a9, 0x6, 0xfbe, 0x6, 0xfffff000, 0x7, 0x6, 0x5, 0xea0, 0x0, 0xa6c6, 0x7, 0x401, 0x9, 0x2, 0x9, 0x9, 0x3, 0xf891f948, 0x3, 0x7, 0x80000000, 0x6, 0x100, 0x8001, 0x6, 0x5, 0x10001, 0xdfb, 0x2, 0x0, 0x6, 0x0, 0x0, 0x2, 0x4d9, 0x7, 0x6, 0x8c08, 0xfff, 0x2, 0x5, 0x0, 0xbd, 0x0, 0x777, 0x0, 0x80000000, 0x100, 0x9, 0x2, 0x0, 0x4000000, 0x5, 0xfffffff9, 0xce25, 0x5, 0x1038, 0x1, 0x1, 0x9, 0x9, 0x6, 0x1, 0x10001, 0x3, 0x3ff, 0x2af, 0x1, 0x3, 0xaf57, 0x2, 0x5d, 0x6, 0x7fffffff, 0x7ff, 0x10000, 0x7, 0x2, 0x6, 0x1, 0xffffffff, 0x8, 0x8, 0x6, 0x0, 0x0, 0xff, 0x7, 0x7, 0x0, 0x207c, 0x1, 0x7, 0x8, 0x9, 0x101, 0xfff0000, 0x4, 0x400, 0xfffffff8, 0x5, 0x2, 0x9, 0x7d, 0x101, 0xa2a, 0x6, 0x2, 0x10001, 0x3, 0x1f, 0x3, 0x7, 0x40000, 0x3ff, 0x0, 0x4, 0x3, 0x400, 0x3aa9, 0x40, 0x5, 0x2bf, 0x3, 0xffff, 0xdd, 0x4, 0x961, 0x7, 0x8d, 0xffffaeaf, 0xfffffff8, 0x8, 0xebe, 0x1, 0xf0b7, 0x0, 0x3ff, 0x0, 0x6, 0x9, 0xd96, 0x6, 0x0, 0x1000, 0x81, 0x5, 0x177, 0x859, 0x81, 0x8001, 0x8, 0x8, 0x3f, 0x81, 0x4, 0x4, 0xfffffffa, 0x13d, 0x3, 0x9, 0x42b7, 0x8, 0xfffffbff, 0x5, 0x8, 0x1f, 0x101, 0x5dd, 0x5, 0x3ff, 0x6, 0x6, 0x20, 0x3, 0x2, 0x81, 0x4, 0x200, 0xa8, 0x5, 0x9, 0x4, 0x3, 0x2, 0x10001, 0x3, 0x7, 0x0, 0x4, 0x0, 0x5, 0x3, 0x6, 0x6, 0x1, 0xfffffff9, 0x7, 0x1, 0x3592, 0x8, 0x8, 0x3, 0xff, 0x400, 0x8, 0xdec4, 0x9, 0x100, 0x1, 0x3, 0x800, 0x20, 0x1c8f, 0xeb, 0x0, 0x6, 0xffffffff, 0x1, 0x5, 0xff, 0x81, 0x4, 0x6, 0x81, 0x2, 0x0, 0x0, 0x101, 0x1000, 0x3, 0x1, 0x0, 0x7fffffff, 0x200, 0x6, 0x8, 0x8, 0x4, 0x9, 0x6, 0x4, 0x1, 0x0, 0x0, 0x1, 0x23488a3d, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0x9, 0x7fffffff, 0x401, {0x3, 0x0, 0x1, 0x7, 0x9aa1, 0x10001}, {0x7, 0x1, 0x200, 0x2, 0x0, 0x5}, 0x81, 0x401, 0x101}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1d8, 0x4, 0xf441, 0x2, 0x8, {0x80, 0x2, 0x1, 0xf2, 0x800}, {0x1, 0x2, 0xe79, 0x5, 0xfffd, 0x42ce}, 0x19fa, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x9514, 0x8001, 0x1, 0x7ff, 0x1, 0x0, 0xfffffff8, 0x7fff, 0xfff, 0x1, 0xbe3a, 0x3, 0x80000000, 0x3ff, 0x3, 0x3, 0x7ff, 0x1, 0x4, 0x8, 0x18b, 0x5, 0x4, 0x1, 0x9, 0x5, 0x2, 0x8, 0x2, 0xf9, 0x1, 0x81, 0x3, 0x144d, 0x7ff, 0xfffffffa, 0x6, 0x0, 0x9, 0x175e, 0x3, 0x8, 0x0, 0x4, 0x400, 0x9, 0x5c91, 0x7, 0x8, 0x5, 0xfffffff8, 0x5, 0x9, 0x0, 0x2, 0x8, 0x5, 0x4, 0xffffffff, 0x8, 0x5, 0x1, 0x0, 0x6, 0x3ff0, 0x81, 0x8, 0x3, 0x6, 0x101, 0x7f, 0xffff, 0xfffffffc, 0x1, 0x3, 0x547e, 0xe5, 0x3, 0x80000000, 0x6d15, 0x8001, 0x46, 0x3, 0xfffffc01, 0x8, 0x9, 0x10000, 0xa4, 0x2, 0x8, 0xed, 0x2, 0x1, 0x9, 0x80000000, 0x1, 0x5, 0x5, 0x100, 0x8, 0x6, 0x58, 0xfdbb, 0x0, 0x6, 0x0, 0x8, 0x5, 0x9, 0x81, 0x8001, 0x8, 0x100, 0x4, 0x3ff, 0x20000, 0x80, 0x1, 0x200, 0x52, 0x8, 0x401, 0x400, 0x2, 0xffffffff, 0x8, 0x401, 0xfffffff7, 0x0, 0x6, 0x8, 0xfffff23d, 0x3ff, 0x7, 0x1f, 0x4, 0x5, 0x9, 0xad, 0x8001, 0x0, 0xfff, 0xb77e, 0x6, 0x9, 0x0, 0xffffffff, 0x0, 0x9, 0x7, 0x0, 0x7, 0x80000001, 0x7, 0x0, 0x9, 0x0, 0x4c8, 0xced, 0x821, 0x7, 0x7, 0x5116, 0x4, 0x1f, 0x6, 0x9, 0x3ff, 0x6, 0x8, 0x4, 0x9, 0x81, 0x3, 0x2, 0xaa, 0x5b664e1d, 0x800, 0x7, 0x800, 0x6, 0x20, 0x6, 0x3f, 0x5, 0x6, 0x0, 0x7, 0x20, 0x7fff, 0x0, 0x0, 0x22fb, 0x3ff, 0xb5, 0x0, 0xffffffff, 0xffffffff, 0x7, 0x0, 0x20, 0x1, 0xfff, 0x9, 0x40, 0x1, 0x3, 0x6, 0x8, 0x49e9, 0x101, 0x4, 0x7fff, 0x1ff, 0xfffffff9, 0x1f, 0x80000001, 0x9, 0x4, 0x5, 0x7, 0x8, 0x0, 0x3, 0x0, 0x4, 0x3, 0x6, 0x7ff, 0x9, 0x5, 0x401, 0x0, 0x7fff, 0x9, 0x2f55, 0x6, 0x7fffffff, 0x5, 0xffffffc1, 0x8, 0x6, 0x3, 0x1f, 0x9, 0x1000, 0x7, 0x5, 0x10000, 0x1, 0x800, 0x2, 0x392, 0x101, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}]]}, {0x6a, 0x6, "434d419a4e4da2a8bb4f927b63e6d24e7d098eeceeb7f403f18548e6be9a9e678fc2cb418a7d2cf3149a2d1976fcb541e430bc4a14ef765bcd43435f897d8b98570ca7f90039619c9a0629659855998beeea9b7978a3ab04b8f0c70df8506590b2309c0f3517"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x16c, 0x15, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x7fffffff, 0xffffffffffffffff, 0x5, 0xe3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x101, 0x2, 0x5, 0x4}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xffff}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0xff, 0x5, 0x81, 0x7f}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffff9, 0x2, 0x4, 0x6, 0xffffff6e}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xad, 0x6, "f58b37cbb8422aebf99758869dd5c8a8fd6fa761f7897c8307facf745037c031be9c6419e330fafc4ef4ddf9b068b3af1aff907add14a68155d746f55349c0c5c19952206b607f56918aa727234a642ca5cc7b3ca1de43a305f5486581e5254bc2de1ce22c261c79a24859a13acb197524af42e88f48436b8e96d4e828a10d69ad85ed837a17b93fee6cbc6a2cb30c55f78e399ab980c56679affe42d976e6bbf1c3e0f129e067e86e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x107c, 0x3, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1ff}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xffff}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x200}]}, {0x1004, 0x6, "417087f980185a0fd15e994d5f2f5a6ead27f0638e0b12266569f0ff2f4cc4f1031cdd231a8954dcc74c5d18a6fa1a6c99e0f32b91d08dbb9ffeb794b616b51982efa8bde6107379368bdb740fb8f2613e5ec7d1aa619a0972ca3aae8b090eb2e7a7ee08e79e860a74523424d2368c070db4af425a9d118faabd174f1cc6e50ef7a801c0c6689e0b5b02097edb2346220a0c965ab8b5616221dded046840f899e974fea858168eb2fe3ee7254ec6ddcf4049a4bb7de2fe01e4e0632e1b1e02a2af6f4d93e2edbbcfc0dff39f4189fa21a95710b11cd86612e89fdc94f8c87fefd24d547a6449294b9c7e576c5475e3839107cbab0a59825c46613ce391b5bba4e4f8e1f80510d1e73919d422ee70a9ff66a8e94aecdc2eca47589dca4ff29c7d69d7775eedcee8f99dc2bef7c7167b10191cda5cb8b910be86bdd794e35f3d455793784bb22ea655649d6e5ff5aea0319d89ea7732374833abf4283f8df2e8ec5e8c52a5ca5aca4eb98ccaca29681eb5333c7f34fe3ae747cf36eb87453d960b5e9f3f566a7de776bc5089928bbda428b1fc9e4a26474dc3561de02560074a629bac54f0fcf2807bd7458d30ecf7893c05780bd39081b89c1cabc4d4a8c8de970f2fb66125a9960a57dc6f9cc8d49ec809291e4bd5bc63a18bb2a2d4916b69620a170007dae8385febb6e791cb97c48c903c0fadc628695f297d94212e2090a3eefae236f9290c664f596b21931e2c201460f8443a7aa8b26736a057f075c622fbcb5502da0de5585931f7ce5df10a2d2d8bfe08e974aed6babcaf9e79910987d6ce0518a60c191a4196f6b00d4966cd12eb485f35b42e63f05c18e6954394e2a125836a908c4619924442876fe76096144ef0e0b0dd812fb7a98cf916ee5a21d1115f9abd5317af932d4e928160aa30ec51cbd127f839877474e440a941d7271759ba855b9ac1834e3191f0de526888c0637dff5197fcf34611f4183afba970e3f380f271178b2def50d0960b35d0eb4bbe7110fe373940c76e2c8c63aee395700ae9e5b373c8bfa395307ef8d78d746ea172b9bc3c4a593dd9ba4fd2c430ae008ee468c455db679e11a2e3e80cefd0ec93b65f18f82bf046b287864096c1dc8f61f4db31f54a68915bd6e2e0eb97707a0c7d72da4120cef736c5ef97dce0dc7a8106635113bf4a55112804135d159a8fa2790f7229685f7b7e7a8866c8ee4ac5f4e44d70069b687cc47e07573e42fa8a8b6f6f47be578e72300f917a0b65ca6d8badddaf99d61ef275a1531091fe743dab6d1754ce119d6c6bc132f1bfa502c3659c7dffce4d9d24e3d3daee4a7275b001d1ecbca3cd6d7876711fe3c73fc7151208485a1be5b57f11db1e8158b0ddac63277f2d595e5a63dbd716d4a2412e8a8b15dc8de5adf6915101b84a07d694920f55102d01371edc84ba908542392921c3916eab3db8219eca09a7475b0035260c6175e97df1f71362e64bacc6a3ffffa2f4db09ae0282cdb64f505bde5fca05aeadc9979596d61a342f674d4a4da1887b13575a12a10b84dfc791865c6971198a2fcc8bbb72e9c7e9335624a301039571d873387e8fb7b8e7a00ea692e802abbe381ec818b8039f1d1b6f7c1e613dc6e08d497c2c17b0bf69ff6c83843992566c9496515d7091daa1131be51a19d54243c414246de85234621ccf7c578db7ee0bc5d2312e313ef93dca691d832c149a336c617903bd60b2bafee107445d531605f3b925db4b9d5e0c0bf10cdc7982ee0cfee5d24408f288b26d59767fd22e80565c3cd4c66d226a7591abf9222feeee4d94b0aaef8585506e7498e3eecbf98d9fc3e306a730ff3393e344a3f0cce429a7fed38c74aae047e3f9f1807cb2efbd71b2f21243efcaf1f942b3fe3e74cfd5ef94613d6054396b4ab2283edbbebb43fa34d094a46bdee53f2f9a55b70a6a00fef2f421662311fb6acd1b621474ed964bd1f16b636ed66a3f6de0a5676e78639f9a6a1413814a5e75fffc5a138fdb4a4352688b9cfb0fe7855896496461b3145ccfe6a911a8c5a202a52778fab4a877bc52363d8dcc64d1afeb82976aa253abd35935d9cc97ae02784421a75f7db79f09a3b320d0912f90c14c78ed6c0ecbdfc3e3a253fbfa3d13005f1c830b50b72e5c2452b3e4e1755e49e55f191b8296931cd35c0b226491053e4f80f56b97dff0c03a5053785cfdfcc28d575f22b6e00c95e71dffeb5cb0100fb1649c54ce794750262b2cebcf0dbb1fface93c2ab3d7ad34e3fd8c039801bf3b18cbbd4d307de2bffc162747f30be26db386b7705df7fd469e00e4cc60aa9efe776f555ed30766274db71135e3773e1b579e2061373908b26dba06ee63c8cba8fc8bf04327327116932ffaaea9c7e8edc4d46a7b517565e9bad7a2ca880eeaf17def2b2d57b3e43285aa21cfb70afd559caca79fd491a502f8bb4cd45854b71bd9115806d4d12e4f2224e91d036cc1ee7c040089d44972c5320e0388151998f2ecffd27fe643873593400c38dd4de271b44369ce092faf27148c09c3716d87a1861b6a6d370a258ef048b3c605dcecfa76c03228031135c22b35310d80eb8faa4949cbd75cce6ff4f0df94a89bbbc1b01bd4116d6bd854636f96f34de57c02979704d66f02b93d70f220646e2a4f6ad9eaaaeeac3c25473dba9b1e8facf9e33bfbe273671927f42b86f873f4bf99e8c338a67c23a16d7753500501cf3a51b6dd336f694f5d1e5427e391e9039d835cf6d8e0633d40862bb72a69253e456e731b61b280563f8118b2f2f51e60a8ebf1d496c95fc1dd57930374ac1c62df6db7cf1bcde3f679494ec419aef23a4afc4b95162f984f9d1edac4e0636cfdc2faccc1a42d4cfe3e788ea94debcdb4769d7f12677335edb12c0075a0345a9882fd7844e943eea45584e4d28aed68d0108c5c3fdb0cc59f97f43fc8ec8d123eb62d613f14fcc81d91f3bb6104384e54069d004739201aa89548fc9a2a209f3889dbb1c3784c891cd0419aa98e9dd51a93ca1a588928ccffc844866341b446ad8e7e3462d941646c9b3838ec32f220de5f7922c8a1fe0dd167d276660b75be4f05c094ff0d0de353b8267fda061ec1f2aafc5153b67f9a1d270a4338257f9581054cbe75c2963d93ab333627dd41b1184a27cc26921922de4e3cd7b6b3d7b18f1b37ea7943fc2822d9337ee0ca95d1ffda1d890f5d4c2f1b3f71fbbc8e209d55f306a548110672bf720e256de4db0216b5bbe891960ea89e73a4623970f0a655b3518eed0192a08d91956e962fc20411a3705314e190e3c3460a87ed8dc7c1b124d7a8254133139a70b63351edc59a25ab780bed331576ac5714c8fd6f07b0636d9f9fed370b9000ec1c8e9fda26596c867c4d7606e21a924c8f78bf35986146882b7ba063f3860409fdc376bc057a4c8a6b68ab330b69678dd10a5421740fb1c9df236c127dc56a9fd7d77735902e4a0ad780a0d32e6b5f3c0c89df61096ca76ead83e8689cde9cd6548b456899ddcfd070269920b13269c8f260f0c2ebd16e023d53b81905804c0632585eaf37dc7128f3fb232fb01fd9904096dee5cc551c5180facc7eb69b8c3983a9ef5e77242ad9500d8e388443b335adc54fd70a19577528c75a442654d81f9c57553e9f615f41b53615b661647de53498e3324c24e38f5b3f7ed2d5875d0c84dea19c7ff20cbd706cbe54d972b0a94b7b23c55ab36d106839b00a7013b514e5be06d93cbc26f0dcb207606ce9413cfc922ed434bedc5a0eb136b9f58670173151f39c9e6881d2d45b56ad39832df849b6bff3ce343079ebaa7d97fb28fb6b39320e9c7fd8064eca166c9c2d166aa39c61f197c4d8a815cc9b08fd6c3b4ba0d6b6186d3624007178f61d01359ca6e15cb7dcf9af375c3e04d2ffea851dcda1f1eea3e2e3ca20e734f605a616d6f81e8ca853d45d86d231bde308210313c7f0001a9cedb7bef018b2d4b13c08d3b2867ccbcf5ee3f8397797c5c0146627fee67bd5a2918812638f415f69637704a304e7431b3cf01e7c872c2e7a11de943db154155379144bff01186a9cbb01f0b6df08415cc229d5f51352c88dc4c798f4cecea9600ec7617918f8f9cfbea31e8769772f3f078f927f887fb9b39a00fa8ad69b82b1e0d856525cbd23a2d79dc8dc7aaf1eefcb6e4f8d597b09ac89c0c3f3d43b9ba4759de3dfa875c8dd931e9780102426a1165cd33595eea75d682c3e0277222c4c17e1216f146332a1eb07fe77db1985eba0de8cac2bfd296a0097399694a4d373d273fbb1c796a0060b43fcabaeac461027e29584000aa108837b7176cff5f3edf3f2a781a9c25ec6269c624fd479df8ba65a6f2d9d9c9b4d4e1aa5aa0711c224592ca3c8a99e30e68156cfe0e1576c989e62f62490e2f9687ef3b30ae56d45e24309613760824f4e3a21a8247e48230b2fce209d700bd4d953468e2a4a78f79fc3f654bf4510e0f112188adea2841e806a282ed6a1e0434df6138b3e13b0dc5dce68ded424ce957024fe8edfcf7f7ec50e15cbd5bd9c2c06785efad5514950ab5fcd6afcfdc6296e75fc716d4f5f6f50ff390b0447e225c35da6c3bc65ce3b0fddd283d41257e607ca516d6aff0940f070d6cd8b7dd5a9fca7717815b92d1d227a09505f707743c69383b531d04b64d73216a465ad62144801244f57d4d0bae28ffff8e45e26673d3599d6250321e78bb2dcaacd5e44cb4c2261d803168a824cc1ca5ad0a693a9ac72dab18706ceeebbd39088e1cd8c9e1b7b9f2461d2dffb4f8c5893dd6986f8af7f55ebd1879dc11a4fc9eba2e5539a70514df9983498e510b2dece395054bd10d226f914a706484683cc2fcc470ae105574a07714a7836a0088c8bae17f159b6b4fac6901556dc094decd566005338a74eb92c4033e4d2f7d94a04dcee1828e7086915c9ed92a622d525b27e5fb653fe361ef1303bf8bf6e2850b213fd41b1e4767c2e2d3384fd329f70420c53dc0b7018b4ec340671cb31d8c7392a389178719a604df2b4c80cd880c996b9ca8a13cd975787996d7befda6525f65ceb664fa75698a45f7c0b81c13f63259ed2f573df59639c5d572f6e0f7ce44bcf3090e6a65410e9a32c9c76231b4e6686ddcffdaa43ac71563bea32c12fcf4240887d82995f684ac31e28e0133221ec93e80a9f7c2af0ccabc77b7bb50ce75b95754419c10cb38dce1204148b6b21fc5bd5fb91fb2b87d0f026693a91633784d96a77e1625c172af8c8a700c5030ea11c811159c8aa67f5bbfd5b491f12bf1445f85fa162d8f6edaa9866eff2b5f9e784d8c2e17c2d96836042d5326a1929d4f79f30a76616b0ed93c44a79298647375404308fa807f1aa41ee0fe2cb9b6e4476caf94c307ea784abb38536c947a4ace6b66497f0d09535af3c05736c95ebb6948ff3e899ca08c4d6e8dcdcef13602a4e3f1139ad4e2a551a2db71b6fa3c33747e6b90d3e20c6de8b66982feed64a6fb994da9d8e17cc2692d039bef03c7bade70e1196913df8de41a190b174e7c434efa29cc593cd9ec01fa3d91b60032b063aca5f37c5060125cfddbf072e81b7b4b9da30903c22d4c6a4589440e655c602a2ef8f9814d5ed0ee7cf05150e21ec195255f8835d0170890dc8b3f68d1d96ec0aa379c0d91e86498d49be6588e8fe6209a982c002a0c29f12338d77a2c1743337e985d3c3a326ab2a768b1bb63648f62c0280460ea01e32280bfaea81a611f55f456df73492de91cf98ba1920a870d454da03909af9aae7c880867d00035c719b0eef4ba059f66f1341e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x14c, 0x1d, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0xa0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x9, 0x20000000, 0x1000, 0x7a18}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x3, 0x1, 0x9, 0x7}, {0x200, 0x7f, 0x5, 0x401}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x4, 0x27, 0x2, 0xff}, {0xb1, 0x4, 0x6, 0x3ff}, {0xd39, 0x7f, 0x7, 0x7}]}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x7, 0x2, 0x1f, 0x4}, {0x1, 0x7, 0x7f, 0x8}, {0xfff7, 0x7, 0x1, 0x800}, {0x3, 0x8, 0xff, 0x3}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1000, 0x9, 0x8, 0x0, 0xa6a}}]}, {0x87, 0x6, "b7067b56c59bba936cd9c7b289a708e86c52c50319f9f9246818c1bf336854e1e1a70a0923d7c5f58072db5152f2a94ce72871bbfd84efeb073af581d0fcf03e7d2a34ae1f97e67d49fa8d4eb7366be08f263ef3e957c6f71856be7704218ea53b534f5235d07fbfcffbb0fc00ff4052a24fe6e07edff66918ce2e945774e6ea8d760c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0xe8, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x100, 0x0, 0x9}, {0x5, 0x9d, 0x0, 0x8}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}]}, {0x92, 0x6, "16fd1970d1aacfc131d9e653351ee409e5b6cba4b7e8406c2911a491eeec24c73197023b81cd3732af5a7d3acc2a741be0fa52dd7aced8cc2a798fd50fafa264056462f9895fe48d7cf307714d63d42305a072ea9c102db06be29142393214465dce21fe11689f8087746464651110f92c6b3ab7e4983183d9ce927567c3f26d53e0c9d67c8334adf01b8470e2cf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x98, 0x12, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x56, 0x6, "4fc276da354bbca54f16cccd3b2ad1d61fa79808829e4b57310f72501268ed210d533aa6e37c54728cd51497a4ff89ed77af94ec2a77e287a5e24c9d20400d6d510c6b88a44596115083a6d8bc4dd9268bb0"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf0, 0x1}}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xb8, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x6}}, @TCA_FW_MASK={0x8, 0x5, 0xfffffffd}, @TCA_FW_ACT={0xa4, 0x4, [@m_ipt={0xa0, 0x1d, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x3c, 0x6, "b17d4122cf982204bdabded313306ece8919b0c2a396db98481bc6d36eb23d5abe541d6b3385ac5cd8e59c91e955f5f6cf83dfddc99a40ff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x220c}, 0x1, 0x0, 0x0, 0x4002000}, 0x8000) preadv(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000829bd7000fcdc02d1b72505c1b3332f0000001400030020010000000000000000001400000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x24020051) preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 447.940877][T15924] ? devkmsg_release+0x11c/0x11c [ 447.945808][T15924] ? show_regs_print_info+0x12/0x12 [ 447.950993][T15924] ? do_writepages+0x13a/0x280 [ 447.955751][T15924] ? generic_file_direct_write+0x18b/0x6d0 [ 447.961549][T15924] ? __generic_file_write_iter+0x25f/0x440 [ 447.967349][T15924] ? ext4_file_write_iter+0x8d9/0x1070 [ 447.972799][T15924] ? do_iter_write+0x16d/0x570 [ 447.977551][T15924] ? iter_file_splice_write+0x7bf/0xf60 [ 447.983086][T15924] ? splice_direct_to_actor+0x496/0xb00 [ 447.988619][T15924] should_fail+0x6fb/0x860 18:42:54 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x14, 0x4, 0x8, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r2, &(0x7f0000000280), 0x0}, 0x20) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$TCXONC(r1, 0x540a, 0x2) 18:42:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) dup2(r2, r1) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) [ 447.993024][T15924] ? setup_fault_attr+0x3d0/0x3d0 [ 447.998036][T15924] ? blk_partition_remap+0x4a9/0x8c0 [ 448.003308][T15924] ? create_task_io_context+0x28/0x3a0 [ 448.008870][T15924] should_failslab+0x5/0x20 [ 448.013365][T15924] kmem_cache_alloc+0x36/0x260 [ 448.018214][T15924] create_task_io_context+0x28/0x3a0 [ 448.023489][T15924] generic_make_request_checks+0xc2e/0xf50 [ 448.029284][T15924] ? mark_buffer_dirty+0x334/0x380 [ 448.034390][T15924] ? generic_make_request+0xdb0/0xdb0 18:42:54 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0)) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000080)=0x8) [ 448.039753][T15924] ? __ext4_journal_get_create_access+0x2e0/0x2e0 [ 448.046156][T15924] ? __ext4_get_inode_loc+0x4b0/0x1080 [ 448.051627][T15924] generic_make_request+0xbe/0xdb0 [ 448.056861][T15924] ? blk_attempt_plug_merge+0x310/0x310 [ 448.062393][T15924] ? ext4_chunk_trans_blocks+0x280/0x280 [ 448.068014][T15924] ? memset+0x1f/0x40 [ 448.071991][T15924] ? mpage_release_unused_pages+0x1f9/0x690 [ 448.077886][T15924] submit_bio+0x14b/0x570 [ 448.082209][T15924] ? direct_make_request+0x3e0/0x3e0 [ 448.087488][T15924] ext4_io_submit+0x151/0x200 [ 448.092154][T15924] ext4_writepages+0x281b/0x3f30 [ 448.097085][T15924] ? ext4_readpage+0x2b0/0x2b0 [ 448.101840][T15924] ? unwind_next_frame+0x1c90/0x2330 [ 448.107109][T15924] ? arch_stack_walk+0xb8/0x120 [ 448.111929][T15924] ? memset+0x1f/0x40 [ 448.115884][T15924] ? ext4_readpage+0x2b0/0x2b0 [ 448.120633][T15924] do_writepages+0x13a/0x280 [ 448.125220][T15924] ? __writepage+0xc0/0xc0 [ 448.129625][T15924] ? unwind_get_return_address_ptr+0x130/0x130 [ 448.135752][T15924] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 448.141790][T15924] filemap_write_and_wait_range+0x3b2/0x460 [ 448.147662][T15924] ? filemap_write_and_wait+0x420/0x420 [ 448.153267][T15924] ? __rcu_read_lock+0x50/0x50 [ 448.158015][T15924] ? percpu_counter_add_batch+0x12d/0x150 [ 448.163718][T15924] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 448.169405][T15924] generic_file_direct_write+0x18b/0x6d0 [ 448.175024][T15924] ? pagecache_write_end+0xa0/0xa0 [ 448.180124][T15924] ? file_update_time+0x2fd/0x3f0 [ 448.185135][T15924] ? file_remove_privs+0x640/0x640 [ 448.190215][T15924] ? ext4_issue_zeroout+0x160/0x160 [ 448.195379][T15924] __generic_file_write_iter+0x25f/0x440 [ 448.200979][T15924] ext4_file_write_iter+0x8d9/0x1070 [ 448.206232][T15924] ? iter_file_splice_write+0x229/0xf60 [ 448.212355][T15924] ? ext4_file_read_iter+0x140/0x140 [ 448.217616][T15924] ? __x64_sys_sendfile64+0x1d4/0x230 [ 448.222957][T15924] do_iter_readv_writev+0x651/0x8e0 [ 448.228126][T15924] ? vfs_dedupe_file_range+0xa00/0xa00 [ 448.233577][T15924] ? security_file_permission+0x128/0x300 [ 448.239265][T15924] do_iter_write+0x16d/0x570 [ 448.243825][T15924] ? kmalloc_array+0x2d/0x50 [ 448.248517][T15924] ? __kmalloc+0xf7/0x2d0 [ 448.252817][T15924] ? vfs_iter_write+0x69/0xa0 [ 448.257463][T15924] iter_file_splice_write+0x7bf/0xf60 [ 448.262819][T15924] ? splice_from_pipe+0x210/0x210 [ 448.267812][T15924] ? direct_splice_actor+0x25/0x120 [ 448.272980][T15924] splice_direct_to_actor+0x496/0xb00 [ 448.278324][T15924] ? do_splice_direct+0x3e0/0x3e0 [ 448.283323][T15924] ? pipe_to_sendpage+0x300/0x300 [ 448.288324][T15924] ? security_file_permission+0x128/0x300 [ 448.294026][T15924] do_splice_direct+0x28b/0x3e0 [ 448.298864][T15924] ? splice_direct_to_actor+0xb00/0xb00 [ 448.304394][T15924] ? avc_policy_seqno+0x17/0x70 [ 448.309217][T15924] ? security_file_permission+0x128/0x300 [ 448.314905][T15924] do_sendfile+0x8d6/0x1100 [ 448.319382][T15924] ? compat_writev+0x3d0/0x3d0 [ 448.324134][T15924] ? vfs_write+0x427/0x4f0 [ 448.328531][T15924] __x64_sys_sendfile64+0x1d4/0x230 [ 448.333714][T15924] ? __ia32_sys_sendfile+0x250/0x250 [ 448.338970][T15924] do_syscall_64+0xcb/0x150 [ 448.343445][T15924] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 448.349305][T15924] RIP: 0033:0x45ca59 [ 448.353185][T15924] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 448.372773][T15924] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 448.381608][T15924] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 448.389606][T15924] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 448.397550][T15924] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 448.405497][T15924] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 448.413443][T15924] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 [ 448.436858][T15929] overlayfs: statfs failed on './file0' 18:42:56 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:56 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000000)) 18:42:56 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x6}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2000, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x2, 0x7, 0x705, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:42:56 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:56 executing program 0 (fault-call:8 fault-nth:2): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:56 executing program 3 (fault-call:8 fault-nth:11): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:56 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}}, 0xc0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) [ 450.661288][T15977] FAULT_INJECTION: forcing a failure. [ 450.661288][T15977] name failslab, interval 1, probability 0, space 0, times 0 [ 450.667778][T15971] FAULT_INJECTION: forcing a failure. [ 450.667778][T15971] name failslab, interval 1, probability 0, space 0, times 0 [ 450.686565][T15971] CPU: 1 PID: 15971 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 450.696697][T15971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.706738][T15971] Call Trace: 18:42:56 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 450.710037][T15971] dump_stack+0x14a/0x1ce [ 450.714368][T15971] ? devkmsg_release+0x11c/0x11c [ 450.719293][T15971] ? show_regs_print_info+0x12/0x12 [ 450.724479][T15971] ? unwind_get_return_address_ptr+0x130/0x130 [ 450.730614][T15971] ? unwind_next_frame+0x1c90/0x2330 [ 450.735875][T15971] should_fail+0x6fb/0x860 [ 450.740266][T15971] ? setup_fault_attr+0x3d0/0x3d0 [ 450.745267][T15971] ? mempool_alloc_slab+0x16/0x30 [ 450.750272][T15971] ? mempool_free+0x380/0x380 [ 450.754924][T15971] should_failslab+0x5/0x20 [ 450.759403][T15971] kmem_cache_alloc+0x36/0x260 [ 450.764146][T15971] ? mempool_free+0x380/0x380 [ 450.768814][T15971] mempool_alloc_slab+0x16/0x30 [ 450.773750][T15971] mempool_alloc+0x116/0x690 [ 450.778325][T15971] ? mempool_resize+0x910/0x910 [ 450.783156][T15971] ? _raw_spin_lock_irqsave+0xfc/0x1e0 [ 450.788586][T15971] ? _raw_spin_lock+0xa1/0x170 [ 450.793323][T15971] __sg_alloc_table+0xda/0x3b0 [ 450.798064][T15971] sg_alloc_table_chained+0xe5/0x1d0 [ 450.803319][T15971] ? sg_alloc_table_chained+0x1d0/0x1d0 [ 450.808841][T15971] scsi_init_io+0xff/0x340 [ 450.813231][T15971] sd_init_command+0xb5d/0x2af0 [ 450.818055][T15971] scsi_queue_rq+0x1657/0x24a0 [ 450.822803][T15971] blk_mq_dispatch_rq_list+0x8cf/0x1730 [ 450.828323][T15971] ? blk_mq_get_driver_tag+0x620/0x620 [ 450.833758][T15971] ? scsi_mq_get_budget+0xf7/0x260 [ 450.838868][T15971] blk_mq_do_dispatch_sched+0x34e/0x420 [ 450.844387][T15971] ? blk_mq_sched_dispatch_requests+0x600/0x600 [ 450.850709][T15971] ? blk_queue_enter+0x730/0x730 [ 450.855618][T15971] ? disk_map_sector_rcu+0xef/0x2c0 [ 450.860788][T15971] blk_mq_sched_dispatch_requests+0x50b/0x600 [ 450.866829][T15971] ? blk_mq_sched_restart+0x90/0x90 [ 450.872005][T15971] ? _raw_spin_lock+0xa1/0x170 [ 450.876742][T15971] ? elv_rqhash_find+0x36f/0x3a0 [ 450.881654][T15971] __blk_mq_run_hw_queue+0x147/0x260 [ 450.886999][T15971] __blk_mq_delay_run_hw_queue+0x221/0x570 [ 450.892775][T15971] ? dd_insert_requests+0x7cf/0x7f0 [ 450.897951][T15971] ? sbitmap_any_bit_set+0x11c/0x150 [ 450.903208][T15971] blk_mq_run_hw_queue+0x284/0x3a0 [ 450.908292][T15971] ? dd_finish_request+0x140/0x140 [ 450.913374][T15971] blk_mq_sched_insert_requests+0x213/0x360 [ 450.919240][T15971] blk_mq_flush_plug_list+0x9e7/0xaa0 [ 450.924596][T15971] ? blk_mq_insert_requests+0x460/0x460 [ 450.930115][T15971] ? memset+0x1f/0x40 [ 450.934097][T15971] ? mpage_release_unused_pages+0x1f9/0x690 [ 450.939969][T15971] ? submit_bio+0x14b/0x570 [ 450.944448][T15971] blk_flush_plug_list+0x4d0/0x520 [ 450.949536][T15971] ? blk_check_plugged+0x270/0x270 [ 450.954638][T15971] ? ext4_put_io_end+0x45/0x2e0 [ 450.959464][T15971] blk_finish_plug+0x5a/0x80 [ 450.964030][T15971] ext4_writepages+0x16ea/0x3f30 [ 450.969049][T15971] ? ext4_readpage+0x2b0/0x2b0 [ 450.973821][T15971] ? unwind_next_frame+0x1c90/0x2330 [ 450.979083][T15971] ? arch_stack_walk+0xb8/0x120 [ 450.983908][T15971] ? memset+0x1f/0x40 [ 450.987868][T15971] ? ext4_readpage+0x2b0/0x2b0 [ 450.992602][T15971] do_writepages+0x13a/0x280 [ 450.997165][T15971] ? __writepage+0xc0/0xc0 [ 451.001575][T15971] ? unwind_get_return_address_ptr+0x130/0x130 [ 451.007701][T15971] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 451.013741][T15971] filemap_write_and_wait_range+0x3b2/0x460 [ 451.019607][T15971] ? filemap_write_and_wait+0x420/0x420 [ 451.025124][T15971] ? __rcu_read_lock+0x50/0x50 [ 451.029860][T15971] ? percpu_counter_add_batch+0x12d/0x150 [ 451.035548][T15971] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 451.041251][T15971] generic_file_direct_write+0x18b/0x6d0 [ 451.046861][T15971] ? pagecache_write_end+0xa0/0xa0 [ 451.051949][T15971] ? file_update_time+0x2fd/0x3f0 [ 451.056951][T15971] ? file_remove_privs+0x640/0x640 [ 451.062038][T15971] ? ext4_issue_zeroout+0x160/0x160 [ 451.067212][T15971] __generic_file_write_iter+0x25f/0x440 [ 451.072826][T15971] ext4_file_write_iter+0x8d9/0x1070 [ 451.078089][T15971] ? iter_file_splice_write+0x229/0xf60 [ 451.083605][T15971] ? ext4_file_read_iter+0x140/0x140 [ 451.088865][T15971] ? __x64_sys_sendfile64+0x1d4/0x230 [ 451.094211][T15971] do_iter_readv_writev+0x651/0x8e0 [ 451.099393][T15971] ? vfs_dedupe_file_range+0xa00/0xa00 [ 451.104831][T15971] ? security_file_permission+0x128/0x300 [ 451.110525][T15971] do_iter_write+0x16d/0x570 [ 451.115090][T15971] ? kmalloc_array+0x2d/0x50 [ 451.119657][T15971] ? __kmalloc+0xf7/0x2d0 [ 451.123993][T15971] ? vfs_iter_write+0x69/0xa0 [ 451.128645][T15971] iter_file_splice_write+0x7bf/0xf60 [ 451.133993][T15971] ? splice_from_pipe+0x210/0x210 [ 451.138991][T15971] ? direct_splice_actor+0x25/0x120 [ 451.144162][T15971] splice_direct_to_actor+0x496/0xb00 [ 451.149507][T15971] ? do_splice_direct+0x3e0/0x3e0 [ 451.154503][T15971] ? pipe_to_sendpage+0x300/0x300 [ 451.159501][T15971] ? security_file_permission+0x128/0x300 [ 451.165190][T15971] do_splice_direct+0x28b/0x3e0 [ 451.170011][T15971] ? splice_direct_to_actor+0xb00/0xb00 [ 451.175527][T15971] ? avc_policy_seqno+0x17/0x70 [ 451.180351][T15971] ? security_file_permission+0x128/0x300 [ 451.186043][T15971] do_sendfile+0x8d6/0x1100 [ 451.190521][T15971] ? compat_writev+0x3d0/0x3d0 [ 451.195258][T15971] ? vfs_write+0x427/0x4f0 [ 451.199648][T15971] __x64_sys_sendfile64+0x1d4/0x230 [ 451.204819][T15971] ? __ia32_sys_sendfile+0x250/0x250 [ 451.210076][T15971] do_syscall_64+0xcb/0x150 [ 451.214553][T15971] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 451.220417][T15971] RIP: 0033:0x45ca59 [ 451.224287][T15971] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 451.243878][T15971] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 451.252524][T15971] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 451.260470][T15971] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 451.268415][T15971] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 451.276360][T15971] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 451.284307][T15971] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 [ 451.292283][T15977] CPU: 0 PID: 15977 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 451.302429][T15977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.312472][T15977] Call Trace: [ 451.315751][T15977] dump_stack+0x14a/0x1ce [ 451.320096][T15977] ? devkmsg_release+0x11c/0x11c [ 451.325022][T15977] ? show_regs_print_info+0x12/0x12 [ 451.330201][T15977] ? touch_atime+0x151/0x290 [ 451.334762][T15977] ? current_time+0x2f0/0x2f0 [ 451.339407][T15977] should_fail+0x6fb/0x860 [ 451.343792][T15977] ? setup_fault_attr+0x3d0/0x3d0 [ 451.348803][T15977] ? current_time+0x1be/0x2f0 [ 451.353449][T15977] ? atime_needs_update+0x570/0x570 [ 451.358787][T15977] ? kmalloc_array+0x2d/0x50 [ 451.363346][T15977] should_failslab+0x5/0x20 [ 451.367818][T15977] __kmalloc+0x5f/0x2d0 [ 451.371943][T15977] kmalloc_array+0x2d/0x50 [ 451.376344][T15977] iter_file_splice_write+0x229/0xf60 [ 451.381682][T15977] ? current_time+0x2f0/0x2f0 [ 451.386327][T15977] ? generic_file_splice_read+0x524/0x780 [ 451.392014][T15977] ? splice_from_pipe+0x210/0x210 [ 451.397006][T15977] ? direct_splice_actor+0x25/0x120 [ 451.402173][T15977] splice_direct_to_actor+0x496/0xb00 [ 451.407518][T15977] ? do_splice_direct+0x3e0/0x3e0 [ 451.412525][T15977] ? pipe_to_sendpage+0x300/0x300 [ 451.417524][T15977] ? security_file_permission+0x128/0x300 [ 451.423209][T15977] do_splice_direct+0x28b/0x3e0 [ 451.428026][T15977] ? splice_direct_to_actor+0xb00/0xb00 [ 451.433540][T15977] ? avc_policy_seqno+0x17/0x70 [ 451.438381][T15977] ? security_file_permission+0x128/0x300 [ 451.444073][T15977] do_sendfile+0x8d6/0x1100 [ 451.444578][T15970] overlayfs: statfs failed on './file0' [ 451.448560][T15977] ? compat_writev+0x3d0/0x3d0 [ 451.448568][T15977] ? vfs_write+0x427/0x4f0 [ 451.448577][T15977] __x64_sys_sendfile64+0x1d4/0x230 [ 451.448585][T15977] ? __ia32_sys_sendfile+0x250/0x250 [ 451.448598][T15977] do_syscall_64+0xcb/0x150 [ 451.478167][T15977] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 451.484035][T15977] RIP: 0033:0x45ca59 [ 451.487997][T15977] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:42:57 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000000)="1910bea954b83c315a54ce74f7492ead6b5e4ab1921c273ff023bdf40fd71437855a782f66e7959e47d6a53589d2aafee7bba7f2dd5a6560", 0x38) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) 18:42:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) recvmmsg(r0, &(0x7f0000002a80)=[{{&(0x7f0000000000)=@caif=@dbg, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/245, 0xf5}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000300)=""/104, 0x68}], 0x3}, 0xfff}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/161, 0xa1}], 0x1, &(0x7f0000000480)=""/154, 0x9a}, 0x8}, {{&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/72, 0x48}, {&(0x7f0000000640)=""/16, 0x10}, {&(0x7f0000000680)=""/105, 0x69}, {&(0x7f0000000700)=""/152, 0x98}, {&(0x7f00000007c0)=""/36, 0x24}, {&(0x7f0000000800)=""/34, 0x22}, {&(0x7f0000000840)=""/237, 0xed}, {&(0x7f0000000940)=""/40, 0x28}, {&(0x7f0000000980)=""/140, 0x8c}, {&(0x7f0000000a40)=""/125, 0x7d}], 0xa, &(0x7f0000000b80)=""/126, 0x7e}, 0x9}, {{&(0x7f0000000c00)=@ethernet, 0x80, &(0x7f0000000c80)}, 0x9}, {{&(0x7f0000000cc0)=@caif=@dbg, 0x80, &(0x7f0000001580)=[{&(0x7f0000000d40)=""/178, 0xb2}, {&(0x7f0000000e00)=""/198, 0xc6}, {&(0x7f0000000f00)=""/163, 0xa3}, {&(0x7f0000000fc0)=""/155, 0x9b}, {&(0x7f0000001080)=""/226, 0xe2}, {&(0x7f0000001180)=""/194, 0xc2}, {&(0x7f0000001280)=""/196, 0xc4}, {&(0x7f0000001380)=""/149, 0x95}, {&(0x7f0000001440)=""/129, 0x81}, {&(0x7f0000001500)=""/112, 0x70}], 0xa, &(0x7f0000001640)=""/100, 0x64}, 0x87e}, {{&(0x7f00000016c0)=@x25, 0x80, &(0x7f0000002a00)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000001740)=""/167, 0xa7}, {&(0x7f0000001800)=""/85, 0x55}, {&(0x7f0000001880)=""/152, 0x98}, {&(0x7f0000001940)=""/84, 0x54}], 0x5}, 0x80}], 0x6, 0x12160, 0x0) [ 451.507588][T15977] RSP: 002b:00007f09f5f47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 451.515982][T15977] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 451.523928][T15977] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 451.531918][T15977] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 451.539861][T15977] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 451.547802][T15977] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007f09f5f486d4 18:42:57 executing program 3 (fault-call:8 fault-nth:12): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 451.612787][T16003] FAULT_INJECTION: forcing a failure. [ 451.612787][T16003] name failslab, interval 1, probability 0, space 0, times 0 [ 451.625816][T16003] CPU: 1 PID: 16003 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 451.635959][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.645997][T16003] Call Trace: [ 451.649342][T16003] dump_stack+0x14a/0x1ce [ 451.653695][T16003] ? devkmsg_release+0x11c/0x11c [ 451.658605][T16003] ? show_regs_print_info+0x12/0x12 [ 451.664423][T16003] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 451.670485][T16003] should_fail+0x6fb/0x860 [ 451.674960][T16003] ? setup_fault_attr+0x3d0/0x3d0 [ 451.679971][T16003] ? is_bpf_text_address+0x290/0x2b0 [ 451.686283][T16003] ? stack_trace_save+0x1f0/0x1f0 [ 451.691285][T16003] ? __blockdev_direct_IO+0x39b/0x4910 [ 451.696718][T16003] should_failslab+0x5/0x20 [ 451.701193][T16003] kmem_cache_alloc+0x36/0x260 [ 451.705947][T16003] __blockdev_direct_IO+0x39b/0x4910 [ 451.711290][T16003] ? stack_trace_save+0x123/0x1f0 [ 451.716284][T16003] ? stack_trace_snprint+0x150/0x150 [ 451.721555][T16003] ? sched_clock+0x5/0x10 [ 451.725880][T16003] ? ext4_dio_get_block_unwritten_async+0x280/0x280 [ 451.732444][T16003] ? __kasan_slab_free+0x1f2/0x230 [ 451.737523][T16003] ? __kasan_slab_free+0x181/0x230 [ 451.742700][T16003] ? slab_free_freelist_hook+0xd0/0x150 [ 451.748212][T16003] ? kmem_cache_free+0xac/0x600 [ 451.753039][T16003] ? free_buffer_head+0x4f/0x230 [ 451.757960][T16003] ? try_to_free_buffers+0x315/0x3a0 [ 451.763240][T16003] ? invalidate_inode_pages2_range+0x7a6/0xd50 [ 451.769362][T16003] ? ext4_dio_get_block_overwrite+0x110/0x110 [ 451.775398][T16003] ? __generic_file_write_iter+0x25f/0x440 [ 451.781186][T16003] ? ext4_file_write_iter+0x8d9/0x1070 [ 451.786630][T16003] ? do_iter_readv_writev+0x651/0x8e0 [ 451.791981][T16003] ? do_iter_write+0x16d/0x570 [ 451.796728][T16003] ? iter_file_splice_write+0x7bf/0xf60 [ 451.802243][T16003] ? splice_direct_to_actor+0x496/0xb00 [ 451.807773][T16003] ? do_splice_direct+0x28b/0x3e0 [ 451.812766][T16003] ? do_sendfile+0x8d6/0x1100 [ 451.817499][T16003] ? __x64_sys_sendfile64+0x1d4/0x230 [ 451.822839][T16003] ? do_syscall_64+0xcb/0x150 [ 451.827486][T16003] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 451.833525][T16003] ? sb_init_dio_done_wq+0x80/0x80 [ 451.838606][T16003] ? xas_init_marks+0x4a5/0x4c0 [ 451.843445][T16003] ? release_pages+0x9cf/0xa10 [ 451.848179][T16003] ? fscrypt_dio_supported+0xea/0x370 [ 451.853520][T16003] ? ext4_dio_get_block_overwrite+0x110/0x110 [ 451.859657][T16003] ext4_direct_IO+0x1332/0x2010 [ 451.864484][T16003] ? ext4_releasepage+0x280/0x280 [ 451.869494][T16003] ? invalidate_inode_pages2_range+0xc88/0xd50 [ 451.875726][T16003] ? invalidate_mapping_pages+0x710/0x710 [ 451.881430][T16003] ? filemap_check_errors+0xcf/0x110 [ 451.886700][T16003] ? __rcu_read_lock+0x50/0x50 [ 451.891435][T16003] ? percpu_counter_add_batch+0x12d/0x150 [ 451.897138][T16003] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 451.902941][T16003] generic_file_direct_write+0x46b/0x6d0 [ 451.908553][T16003] ? pagecache_write_end+0xa0/0xa0 [ 451.913639][T16003] ? file_update_time+0x2fd/0x3f0 [ 451.918702][T16003] ? file_remove_privs+0x640/0x640 [ 451.923791][T16003] ? ext4_issue_zeroout+0x160/0x160 [ 451.929221][T16003] __generic_file_write_iter+0x25f/0x440 [ 451.934826][T16003] ext4_file_write_iter+0x8d9/0x1070 [ 451.940081][T16003] ? iter_file_splice_write+0x229/0xf60 [ 451.945612][T16003] ? ext4_file_read_iter+0x140/0x140 [ 451.950863][T16003] ? __x64_sys_sendfile64+0x1d4/0x230 [ 451.956222][T16003] do_iter_readv_writev+0x651/0x8e0 [ 451.961409][T16003] ? vfs_dedupe_file_range+0xa00/0xa00 [ 451.966836][T16003] ? security_file_permission+0x128/0x300 [ 451.972523][T16003] do_iter_write+0x16d/0x570 [ 451.977096][T16003] ? kmalloc_array+0x2d/0x50 [ 451.981673][T16003] ? __kmalloc+0xf7/0x2d0 [ 451.985970][T16003] ? vfs_iter_write+0x69/0xa0 [ 451.990616][T16003] iter_file_splice_write+0x7bf/0xf60 [ 451.995958][T16003] ? splice_from_pipe+0x210/0x210 [ 452.000959][T16003] ? direct_splice_actor+0x25/0x120 [ 452.006126][T16003] splice_direct_to_actor+0x496/0xb00 [ 452.011484][T16003] ? do_splice_direct+0x3e0/0x3e0 [ 452.016477][T16003] ? pipe_to_sendpage+0x300/0x300 [ 452.021469][T16003] ? security_file_permission+0x128/0x300 [ 452.027176][T16003] do_splice_direct+0x28b/0x3e0 [ 452.032007][T16003] ? splice_direct_to_actor+0xb00/0xb00 [ 452.037518][T16003] ? avc_policy_seqno+0x17/0x70 [ 452.042357][T16003] ? security_file_permission+0x128/0x300 [ 452.048060][T16003] do_sendfile+0x8d6/0x1100 [ 452.052551][T16003] ? compat_writev+0x3d0/0x3d0 [ 452.057294][T16003] ? vfs_write+0x427/0x4f0 [ 452.061715][T16003] __x64_sys_sendfile64+0x1d4/0x230 [ 452.066890][T16003] ? __ia32_sys_sendfile+0x250/0x250 [ 452.072152][T16003] do_syscall_64+0xcb/0x150 [ 452.076629][T16003] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 452.082492][T16003] RIP: 0033:0x45ca59 [ 452.086359][T16003] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.105932][T16003] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 452.114311][T16003] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 452.122252][T16003] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 452.130194][T16003] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 452.138150][T16003] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 452.146110][T16003] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 [ 452.376946][T15998] overlayfs: statfs failed on './file0' 18:42:59 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:42:59 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) 18:42:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x0, 0x800001) 18:42:59 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:59 executing program 3 (fault-call:8 fault-nth:13): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:42:59 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:42:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x62, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:42:59 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 453.686691][T16023] FAULT_INJECTION: forcing a failure. [ 453.686691][T16023] name failslab, interval 1, probability 0, space 0, times 0 [ 453.704582][T16023] CPU: 0 PID: 16023 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 453.714754][T16023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.724795][T16023] Call Trace: [ 453.728070][T16023] dump_stack+0x14a/0x1ce [ 453.732471][T16023] ? devkmsg_release+0x11c/0x11c [ 453.737391][T16023] ? show_regs_print_info+0x12/0x12 [ 453.742562][T16023] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 453.748612][T16023] should_fail+0x6fb/0x860 [ 453.752998][T16023] ? setup_fault_attr+0x3d0/0x3d0 [ 453.758007][T16023] ? is_bpf_text_address+0x290/0x2b0 [ 453.763260][T16023] ? stack_trace_save+0x1f0/0x1f0 [ 453.768254][T16023] ? __blockdev_direct_IO+0x39b/0x4910 [ 453.773680][T16023] should_failslab+0x5/0x20 [ 453.778242][T16023] kmem_cache_alloc+0x36/0x260 [ 453.782975][T16023] __blockdev_direct_IO+0x39b/0x4910 [ 453.788228][T16023] ? stack_trace_save+0x123/0x1f0 [ 453.793219][T16023] ? blk_mq_insert_requests+0x460/0x460 [ 453.798834][T16023] ? stack_trace_snprint+0x150/0x150 [ 453.804087][T16023] ? mpage_release_unused_pages+0x1f9/0x690 [ 453.810035][T16023] ? ext4_dio_get_block_unwritten_async+0x280/0x280 [ 453.816613][T16023] ? __kasan_slab_free+0x1f2/0x230 [ 453.821691][T16023] ? __kasan_slab_free+0x181/0x230 [ 453.826771][T16023] ? slab_free_freelist_hook+0xd0/0x150 [ 453.832298][T16023] ? kmem_cache_free+0xac/0x600 [ 453.837117][T16023] ? free_buffer_head+0x4f/0x230 [ 453.842024][T16023] ? try_to_free_buffers+0x315/0x3a0 [ 453.847280][T16023] ? invalidate_inode_pages2_range+0x7a6/0xd50 [ 453.853415][T16023] ? ext4_dio_get_block_overwrite+0x110/0x110 [ 453.859450][T16023] ? __generic_file_write_iter+0x25f/0x440 [ 453.865241][T16023] ? ext4_file_write_iter+0x8d9/0x1070 [ 453.870682][T16023] ? do_iter_readv_writev+0x651/0x8e0 [ 453.876022][T16023] ? do_iter_write+0x16d/0x570 [ 453.880772][T16023] ? iter_file_splice_write+0x7bf/0xf60 [ 453.886286][T16023] ? splice_direct_to_actor+0x496/0xb00 [ 453.891797][T16023] ? do_splice_direct+0x28b/0x3e0 [ 453.896806][T16023] ? do_sendfile+0x8d6/0x1100 [ 453.901453][T16023] ? __x64_sys_sendfile64+0x1d4/0x230 [ 453.906805][T16023] ? do_syscall_64+0xcb/0x150 [ 453.911458][T16023] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 453.917642][T16023] ? sb_init_dio_done_wq+0x80/0x80 [ 453.922730][T16023] ? xas_init_marks+0x4a5/0x4c0 [ 453.927574][T16023] ? release_pages+0x9cf/0xa10 [ 453.932337][T16023] ? fscrypt_dio_supported+0xea/0x370 [ 453.937683][T16023] ? ext4_dio_get_block_overwrite+0x110/0x110 [ 453.943721][T16023] ext4_direct_IO+0x1332/0x2010 [ 453.948564][T16023] ? ext4_releasepage+0x280/0x280 [ 453.953647][T16023] ? invalidate_inode_pages2_range+0xc88/0xd50 [ 453.959784][T16023] ? invalidate_mapping_pages+0x710/0x710 [ 453.965475][T16023] ? filemap_check_errors+0xcf/0x110 [ 453.970746][T16023] ? __rcu_read_lock+0x50/0x50 [ 453.975482][T16023] ? percpu_counter_add_batch+0x12d/0x150 [ 453.981180][T16023] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 453.986868][T16023] generic_file_direct_write+0x46b/0x6d0 [ 453.992473][T16023] ? pagecache_write_end+0xa0/0xa0 [ 453.997561][T16023] ? file_update_time+0x398/0x3f0 [ 454.002561][T16023] ? file_remove_privs+0x640/0x640 [ 454.007659][T16023] ? ext4_issue_zeroout+0x160/0x160 [ 454.012828][T16023] __generic_file_write_iter+0x25f/0x440 [ 454.018448][T16023] ext4_file_write_iter+0x8d9/0x1070 [ 454.023720][T16023] ? iter_file_splice_write+0x229/0xf60 [ 454.029233][T16023] ? ext4_file_read_iter+0x140/0x140 [ 454.034504][T16023] ? __x64_sys_sendfile64+0x1d4/0x230 [ 454.039848][T16023] do_iter_readv_writev+0x651/0x8e0 [ 454.045016][T16023] ? vfs_dedupe_file_range+0xa00/0xa00 [ 454.050462][T16023] ? security_file_permission+0x128/0x300 [ 454.056166][T16023] do_iter_write+0x16d/0x570 [ 454.060741][T16023] ? kmalloc_array+0x2d/0x50 [ 454.065317][T16023] ? __kmalloc+0xf7/0x2d0 [ 454.069632][T16023] ? vfs_iter_write+0x69/0xa0 [ 454.074277][T16023] iter_file_splice_write+0x7bf/0xf60 [ 454.079618][T16023] ? splice_from_pipe+0x210/0x210 [ 454.084643][T16023] ? direct_splice_actor+0x25/0x120 [ 454.089931][T16023] splice_direct_to_actor+0x496/0xb00 [ 454.095305][T16023] ? do_splice_direct+0x3e0/0x3e0 [ 454.100303][T16023] ? pipe_to_sendpage+0x300/0x300 [ 454.105301][T16023] ? security_file_permission+0x128/0x300 [ 454.111011][T16023] do_splice_direct+0x28b/0x3e0 [ 454.115838][T16023] ? splice_direct_to_actor+0xb00/0xb00 [ 454.121374][T16023] ? avc_policy_seqno+0x17/0x70 [ 454.126214][T16023] ? security_file_permission+0x128/0x300 [ 454.131916][T16023] do_sendfile+0x8d6/0x1100 [ 454.136398][T16023] ? compat_writev+0x3d0/0x3d0 [ 454.141132][T16023] ? vfs_write+0x427/0x4f0 [ 454.145526][T16023] __x64_sys_sendfile64+0x1d4/0x230 [ 454.150708][T16023] ? __ia32_sys_sendfile+0x250/0x250 [ 454.155984][T16023] do_syscall_64+0xcb/0x150 [ 454.160459][T16023] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 454.166336][T16023] RIP: 0033:0x45ca59 18:43:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x98c5, 0x58}) 18:43:00 executing program 1: link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x84a41) [ 454.170218][T16023] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 454.189793][T16023] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 454.198187][T16023] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 454.206130][T16023] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 454.214087][T16023] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 454.222051][T16023] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 454.230011][T16023] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 18:43:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x4) 18:43:00 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x1, 0x16, 0x9, 0x2, 0x9e, 0x7, &(0x7f0000000000)="8b4ccda7987a9cc947a5aa3adf1e121f6be74c15e6712a23c50fc8c33edaf6b953884b9dfaa6a2c63b204ea1435e09cffd44322b474c1708ffd9da5b9eccad52f4d82d00035e63612f8eddd58de8057e84ce4a97005b36711b1dd25f189c14527308122142648733abf204c8f85f73211d69d119d47c841ab3d792872279ea695f02b48b000f8ca5b58b578cb2f717ee58f333e3241b9ad23a8c31e90fcf"}) [ 454.455103][T16019] overlayfs: statfs failed on './file0' 18:43:02 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1d, r4, 0xffffffffffffffff, r3, 0x0) keyctl$set_timeout(0xf, r3, 0x1) 18:43:02 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000e666, 0x280041) 18:43:02 executing program 3 (fault-call:8 fault-nth:14): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:02 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x7ffff000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:02 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:02 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x800, 0x200041) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, 0x2, {{0x4, 0x2, 0x8, 0x9, 0x80000000, 0x0, 0x9, 0xfffffffc}}}, 0x60) 18:43:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) recvfrom(r2, &(0x7f0000000000)=""/111, 0x6f, 0x40, &(0x7f0000000080)=@l2tp={0x2, 0x0, @empty}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000180)={0x5, {{0xa, 0x4e23, 0x3ff, @private0, 0x7}}}, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) 18:43:02 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 456.706885][T16063] FAULT_INJECTION: forcing a failure. [ 456.706885][T16063] name failslab, interval 1, probability 0, space 0, times 0 [ 456.728844][T16063] CPU: 1 PID: 16063 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 456.739011][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.749057][T16063] Call Trace: [ 456.752327][T16063] dump_stack+0x14a/0x1ce [ 456.756630][T16063] ? devkmsg_release+0x11c/0x11c [ 456.761540][T16063] ? show_regs_print_info+0x12/0x12 [ 456.766708][T16063] ? mempool_alloc_slab+0x16/0x30 [ 456.771713][T16063] ? kmem_cache_alloc+0x1d5/0x260 [ 456.776708][T16063] should_fail+0x6fb/0x860 [ 456.781189][T16063] ? setup_fault_attr+0x3d0/0x3d0 [ 456.786183][T16063] ? mempool_resize+0x910/0x910 [ 456.791000][T16063] ? bvec_alloc+0xc8/0x190 [ 456.795385][T16063] should_failslab+0x5/0x20 [ 456.799865][T16063] kmem_cache_alloc+0x36/0x260 [ 456.804607][T16063] bvec_alloc+0xc8/0x190 [ 456.808820][T16063] bio_alloc_bioset+0x3dc/0x690 [ 456.813659][T16063] ? bio_chain_endio+0xf0/0xf0 [ 456.818402][T16063] ? _ext4_get_block+0x485/0x6c0 [ 456.823308][T16063] ? __x64_sys_sendfile64+0x1d4/0x230 [ 456.828650][T16063] dio_new_bio+0x517/0xa10 [ 456.833122][T16063] ? __ext4_journal_start_sb+0x3ad/0x420 [ 456.838740][T16063] dio_send_cur_page+0x47a/0xea0 [ 456.843676][T16063] ? iov_iter_get_pages+0x60c/0xd80 [ 456.848873][T16063] submit_page_section+0x100/0x970 [ 456.853961][T16063] __blockdev_direct_IO+0x1f1a/0x4910 [ 456.859317][T16063] ? sb_init_dio_done_wq+0x80/0x80 [ 456.864409][T16063] ? ext4_dio_get_block_overwrite+0x110/0x110 [ 456.870451][T16063] ? xas_init_marks+0x4a5/0x4c0 [ 456.875274][T16063] ? release_pages+0x9cf/0xa10 [ 456.880007][T16063] ? fscrypt_dio_supported+0xea/0x370 [ 456.885345][T16063] ? ext4_dio_get_block_overwrite+0x110/0x110 [ 456.891379][T16063] ext4_direct_IO+0x1332/0x2010 [ 456.896199][T16063] ? ext4_releasepage+0x280/0x280 [ 456.901205][T16063] ? invalidate_inode_pages2_range+0xc88/0xd50 [ 456.907494][T16063] ? invalidate_mapping_pages+0x710/0x710 [ 456.913206][T16063] ? filemap_check_errors+0xcf/0x110 [ 456.918469][T16063] ? __rcu_read_lock+0x50/0x50 [ 456.923224][T16063] ? percpu_counter_add_batch+0x12d/0x150 [ 456.928919][T16063] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 456.934620][T16063] generic_file_direct_write+0x46b/0x6d0 [ 456.940237][T16063] ? pagecache_write_end+0xa0/0xa0 [ 456.945315][T16063] ? file_update_time+0x2fd/0x3f0 [ 456.951263][T16063] ? file_remove_privs+0x640/0x640 [ 456.956344][T16063] ? ext4_issue_zeroout+0x160/0x160 [ 456.961511][T16063] __generic_file_write_iter+0x25f/0x440 [ 456.967113][T16063] ext4_file_write_iter+0x8d9/0x1070 [ 456.972368][T16063] ? iter_file_splice_write+0x229/0xf60 [ 456.977882][T16063] ? ext4_file_read_iter+0x140/0x140 [ 456.983165][T16063] ? __x64_sys_sendfile64+0x1d4/0x230 [ 456.988508][T16063] do_iter_readv_writev+0x651/0x8e0 [ 456.993683][T16063] ? vfs_dedupe_file_range+0xa00/0xa00 [ 456.999120][T16063] ? security_file_permission+0x128/0x300 [ 457.004805][T16063] do_iter_write+0x16d/0x570 [ 457.009368][T16063] ? kmalloc_array+0x2d/0x50 [ 457.013926][T16063] ? __kmalloc+0xf7/0x2d0 [ 457.018223][T16063] ? vfs_iter_write+0x69/0xa0 [ 457.022876][T16063] iter_file_splice_write+0x7bf/0xf60 [ 457.028226][T16063] ? splice_from_pipe+0x210/0x210 [ 457.033227][T16063] ? direct_splice_actor+0x25/0x120 [ 457.038401][T16063] splice_direct_to_actor+0x496/0xb00 [ 457.044362][T16063] ? do_splice_direct+0x3e0/0x3e0 [ 457.049351][T16063] ? pipe_to_sendpage+0x300/0x300 [ 457.054355][T16063] ? security_file_permission+0x128/0x300 [ 457.060051][T16063] do_splice_direct+0x28b/0x3e0 [ 457.064875][T16063] ? splice_direct_to_actor+0xb00/0xb00 [ 457.070404][T16063] ? avc_policy_seqno+0x17/0x70 [ 457.075242][T16063] ? security_file_permission+0x128/0x300 [ 457.080954][T16063] do_sendfile+0x8d6/0x1100 [ 457.085447][T16063] ? compat_writev+0x3d0/0x3d0 [ 457.090192][T16063] ? vfs_write+0x427/0x4f0 [ 457.094839][T16063] __x64_sys_sendfile64+0x1d4/0x230 [ 457.100046][T16063] ? __ia32_sys_sendfile+0x250/0x250 [ 457.105332][T16063] do_syscall_64+0xcb/0x150 [ 457.109809][T16063] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 457.115671][T16063] RIP: 0033:0x45ca59 [ 457.119540][T16063] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 457.139300][T16063] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 457.147677][T16063] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 18:43:03 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x40, 0x0, 0x5, 0x81, 0x56, 0xd4, &(0x7f00000000c0)="b4836de628f2b820c1496f1f5f5ab42276477cfb5e6aa8c29c36b942c37155ec6f0919f7d1fb761ff02a4f6e5d9fd9e662bdeffe716c3911154c693b80bc11fcead58369388eb75a561f4b9ec7ac014434bfdebe1fcb"}) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0xe20, 0x0, @remote, 0x1e}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48080) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x28) 18:43:03 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:03 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x2880, 0x0) [ 457.155632][T16063] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 457.163589][T16063] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 457.171547][T16063] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 457.179490][T16063] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 18:43:05 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:05 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000140)) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x10001, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) 18:43:05 executing program 3 (fault-call:8 fault-nth:15): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:05 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:05 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x840000000010) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:05 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r3, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r5}, 0x80, 0x0}}], 0x1, 0x2404c040) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r7, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r9}, 0x80, 0x0}}], 0x1, 0x2404c040) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000002f40)=ANY=[@ANYBLOB="3c150000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="f8020380570005000f9ffbd1b287b224b900993a2a1d474f96792439551c07ba91bb07cabaf8c6434518616c52b8e81a387317893053dfa0415e749296921cf4c0ae1f0f2ba906686e95e56339d2d00680f7ceaaa9f58eb8d2c14300040001002b000400ea6f3a0fa5aebd67878a719842852bcf63712001f46829b5746a6a802b7956b406939c1c5bb85d0065000500e92e0f947a2256d90887c10666bcaae2b49fdfdcdfe3bf04210521fd9fa11cd7f462765aaacde0f6ef6a3b88369ac5033d9f7762a5e360ad287269215ddea9f5c2e7943511ff47af3f03d2bdc3ff91d4fec15b28dec88b3c47cadf313a2757cba000000004000100b80003801400018008000100ff07000007000200287d0000180001800400030008000100ff7f00000800010007000000440001800700020021210000080001000400000008000100bc0500000800010003000000040003000400030008000200f424240004000300070002002387000004000300280001800400030008000100040000000400030004000300080001000500000005000200d200000008000180040003000c000180060002002800000008000180040003004401038040000180040003000800010065af000008000100010000000400030007000200287d00000800010009000000060002005b00000007000200287d00000400030030000180060002005e0000000800010045080000080001000800000008000100090000000400030005000200d20000000c000180080002012c252a002400018007000200287d0000040003000900020024283a2a0000000008000100ffffff7f0400018034000180040003000400030007000200212a000008000100f80c000004000300080001000100000008000100ff0100000400030028000180060002005b0000000b000200262d7d7b212e0000040003000c0002006e65742f617270003c000180080002002a3a2c000500020000000000080001000900000005000200000000000800010001000000080001000500000008000100010000000400018004000100"], 0x153c}}, 0x84) 18:43:05 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:05 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000001c0)={&(0x7f0000000140)=""/108, 0x6c}) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x4000000000df10}}, 0x18) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000000)) [ 459.705506][T16102] FAULT_INJECTION: forcing a failure. [ 459.705506][T16102] name failslab, interval 1, probability 0, space 0, times 0 [ 459.718303][T16102] CPU: 1 PID: 16102 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 459.728441][T16102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.738481][T16102] Call Trace: [ 459.741761][T16102] dump_stack+0x14a/0x1ce [ 459.746078][T16102] ? devkmsg_release+0x11c/0x11c 18:43:05 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x3, 0x4) 18:43:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'wg1\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) [ 459.751011][T16102] ? show_regs_print_info+0x12/0x12 [ 459.756199][T16102] ? stack_trace_save+0x123/0x1f0 [ 459.761204][T16102] should_fail+0x6fb/0x860 [ 459.765603][T16102] ? setup_fault_attr+0x3d0/0x3d0 [ 459.770627][T16102] ? mempool_alloc_slab+0x16/0x30 [ 459.775639][T16102] ? mempool_free+0x380/0x380 [ 459.780304][T16102] should_failslab+0x5/0x20 [ 459.784794][T16102] kmem_cache_alloc+0x36/0x260 [ 459.789556][T16102] ? unwind_next_frame+0x1c90/0x2330 [ 459.794836][T16102] ? mempool_alloc_slab+0x16/0x30 [ 459.799848][T16102] ? mempool_free+0x380/0x380 18:43:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r2, r3) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000080)=[r3, r5]) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000100)='syz', &(0x7f0000000140)='-.}\x00', &(0x7f00000001c0)='syz', &(0x7f0000000200)='\x00', &(0x7f0000000240)='syz', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='%/,*^$\x00', &(0x7f0000000300)='\xf0{-%,/\x00'], &(0x7f0000000480)=[&(0x7f0000000380)='\'$\'\x00', &(0x7f00000003c0)='syz', &(0x7f0000000400)='&\x00', &(0x7f0000000440)='keyring\x00']) 18:43:06 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0xa7) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x602041) [ 459.804515][T16102] mempool_alloc_slab+0x16/0x30 [ 459.809364][T16102] mempool_alloc+0x116/0x690 [ 459.813942][T16102] ? arch_stack_walk+0xb8/0x120 [ 459.818785][T16102] ? mempool_resize+0x910/0x910 [ 459.823633][T16102] __sg_alloc_table+0xda/0x3b0 [ 459.828386][T16102] sg_alloc_table_chained+0xe5/0x1d0 [ 459.833660][T16102] ? sg_alloc_table_chained+0x1d0/0x1d0 [ 459.839187][T16102] scsi_init_io+0xff/0x340 [ 459.843571][T16102] sd_init_command+0xb5d/0x2af0 [ 459.848397][T16102] scsi_queue_rq+0x1657/0x24a0 [ 459.853171][T16102] blk_mq_dispatch_rq_list+0x8cf/0x1730 [ 459.858685][T16102] ? blk_mq_get_driver_tag+0x620/0x620 [ 459.864108][T16102] ? scsi_mq_get_budget+0xf7/0x260 [ 459.869222][T16102] blk_mq_do_dispatch_sched+0x34e/0x420 [ 459.874733][T16102] ? blk_mq_sched_dispatch_requests+0x600/0x600 [ 459.880940][T16102] ? percpu_ref_tryget_live+0xd7/0x280 [ 459.886478][T16102] blk_mq_sched_dispatch_requests+0x50b/0x600 [ 459.892524][T16102] ? blk_account_io_start+0x3ee/0x4a0 [ 459.897864][T16102] ? blk_mq_sched_restart+0x90/0x90 [ 459.903034][T16102] ? _raw_spin_lock+0xa1/0x170 [ 459.907768][T16102] ? elv_rqhash_find+0x36f/0x3a0 [ 459.912675][T16102] __blk_mq_run_hw_queue+0x147/0x260 [ 459.917978][T16102] __blk_mq_delay_run_hw_queue+0x221/0x570 [ 459.923764][T16102] ? dd_insert_requests+0x7cf/0x7f0 [ 459.928941][T16102] ? sbitmap_any_bit_set+0x11c/0x150 [ 459.934193][T16102] blk_mq_run_hw_queue+0x284/0x3a0 [ 459.939273][T16102] ? dd_finish_request+0x140/0x140 [ 459.944351][T16102] blk_mq_sched_insert_requests+0x213/0x360 [ 459.950213][T16102] blk_mq_flush_plug_list+0x9e7/0xaa0 [ 459.955583][T16102] ? blk_mq_insert_requests+0x460/0x460 [ 459.961095][T16102] ? fscrypt_mergeable_bio+0x1fa/0x7f0 [ 459.966526][T16102] blk_flush_plug_list+0x4d0/0x520 [ 459.971605][T16102] ? direct_make_request+0x3e0/0x3e0 [ 459.976872][T16102] ? blk_check_plugged+0x270/0x270 [ 459.981966][T16102] blk_finish_plug+0x5a/0x80 [ 459.986531][T16102] __blockdev_direct_IO+0x36cc/0x4910 [ 459.991886][T16102] ? sb_init_dio_done_wq+0x80/0x80 [ 459.996969][T16102] ? ext4_dio_get_block_overwrite+0x110/0x110 [ 460.003008][T16102] ? xas_init_marks+0x4a5/0x4c0 [ 460.007832][T16102] ? release_pages+0x9cf/0xa10 [ 460.012584][T16102] ? fscrypt_dio_supported+0xea/0x370 [ 460.017939][T16102] ? ext4_dio_get_block_overwrite+0x110/0x110 [ 460.023986][T16102] ext4_direct_IO+0x1332/0x2010 [ 460.028824][T16102] ? ext4_releasepage+0x280/0x280 [ 460.033819][T16102] ? invalidate_inode_pages2_range+0xc88/0xd50 [ 460.039960][T16102] ? invalidate_mapping_pages+0x710/0x710 [ 460.045655][T16102] ? filemap_check_errors+0xcf/0x110 [ 460.050951][T16102] ? __rcu_read_lock+0x50/0x50 [ 460.055693][T16102] ? percpu_counter_add_batch+0x12d/0x150 [ 460.061391][T16102] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 460.067080][T16102] generic_file_direct_write+0x46b/0x6d0 [ 460.072681][T16102] ? pagecache_write_end+0xa0/0xa0 [ 460.077780][T16102] ? file_update_time+0x2fd/0x3f0 [ 460.082781][T16102] ? file_remove_privs+0x640/0x640 [ 460.087864][T16102] ? ext4_issue_zeroout+0x160/0x160 [ 460.093035][T16102] __generic_file_write_iter+0x25f/0x440 [ 460.098640][T16102] ext4_file_write_iter+0x8d9/0x1070 [ 460.103895][T16102] ? iter_file_splice_write+0x229/0xf60 [ 460.109407][T16102] ? ext4_file_read_iter+0x140/0x140 [ 460.114666][T16102] ? __x64_sys_sendfile64+0x1d4/0x230 [ 460.120011][T16102] do_iter_readv_writev+0x651/0x8e0 [ 460.125191][T16102] ? vfs_dedupe_file_range+0xa00/0xa00 [ 460.130623][T16102] ? security_file_permission+0x128/0x300 [ 460.136316][T16102] do_iter_write+0x16d/0x570 [ 460.140911][T16102] ? kmalloc_array+0x2d/0x50 [ 460.145517][T16102] ? __kmalloc+0xf7/0x2d0 [ 460.149860][T16102] ? vfs_iter_write+0x69/0xa0 [ 460.154504][T16102] iter_file_splice_write+0x7bf/0xf60 [ 460.159846][T16102] ? splice_from_pipe+0x210/0x210 [ 460.164854][T16102] ? direct_splice_actor+0x25/0x120 [ 460.170053][T16102] splice_direct_to_actor+0x496/0xb00 [ 460.175402][T16102] ? do_splice_direct+0x3e0/0x3e0 [ 460.180395][T16102] ? pipe_to_sendpage+0x300/0x300 [ 460.185388][T16102] ? security_file_permission+0x128/0x300 [ 460.191073][T16102] do_splice_direct+0x28b/0x3e0 [ 460.195892][T16102] ? splice_direct_to_actor+0xb00/0xb00 [ 460.201418][T16102] ? avc_policy_seqno+0x17/0x70 [ 460.206235][T16102] ? security_file_permission+0x128/0x300 [ 460.211923][T16102] do_sendfile+0x8d6/0x1100 [ 460.216394][T16102] ? compat_writev+0x3d0/0x3d0 [ 460.221127][T16102] ? vfs_write+0x427/0x4f0 [ 460.225518][T16102] __x64_sys_sendfile64+0x1d4/0x230 [ 460.230692][T16102] ? __ia32_sys_sendfile+0x250/0x250 [ 460.235945][T16102] do_syscall_64+0xcb/0x150 [ 460.240415][T16102] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 460.246273][T16102] RIP: 0033:0x45ca59 [ 460.250132][T16102] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 460.269719][T16102] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 460.278108][T16102] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 460.286048][T16102] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 460.293988][T16102] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 460.301933][T16102] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 460.309876][T16102] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 18:43:08 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:08 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) getpeername$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:43:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:08 executing program 3 (fault-call:8 fault-nth:16): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:08 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400ffff0010) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000000)={{0x1, 0x0, @descriptor="7aaba02ce1aa3f6c"}}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 18:43:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:43:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) [ 462.730950][T16146] FAULT_INJECTION: forcing a failure. [ 462.730950][T16146] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 462.746368][T16146] CPU: 0 PID: 16146 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 462.756524][T16146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.766572][T16146] Call Trace: [ 462.769979][T16146] dump_stack+0x14a/0x1ce [ 462.774307][T16146] ? devkmsg_release+0x11c/0x11c 18:43:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) [ 462.779243][T16146] ? show_regs_print_info+0x12/0x12 [ 462.782907][T16160] overlayfs: missing 'lowerdir' [ 462.784435][T16146] should_fail+0x6fb/0x860 [ 462.784449][T16146] ? setup_fault_attr+0x3d0/0x3d0 [ 462.784464][T16146] ? find_get_entry+0x5ea/0x680 [ 462.803543][T16146] __alloc_pages_nodemask+0x1ee/0x7c0 [ 462.809025][T16146] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 462.814551][T16146] ? pagecache_get_page+0x7c0/0x880 [ 462.819728][T16146] generic_file_read_iter+0x1212/0x20b0 [ 462.825252][T16146] ? find_get_pages_range_tag+0xaf0/0xaf0 [ 462.830945][T16146] ? iter_file_splice_write+0xdef/0xf60 [ 462.836468][T16146] generic_file_splice_read+0x47b/0x780 [ 462.841990][T16146] ? splice_shrink_spd+0xb0/0xb0 [ 462.846918][T16146] ? security_file_permission+0x1e9/0x300 [ 462.852631][T16146] ? splice_shrink_spd+0xb0/0xb0 [ 462.857569][T16146] splice_direct_to_actor+0x3cf/0xb00 [ 462.862961][T16146] ? do_splice_direct+0x3e0/0x3e0 [ 462.868005][T16146] ? pipe_to_sendpage+0x300/0x300 [ 462.873010][T16146] ? security_file_permission+0x128/0x300 [ 462.878834][T16146] do_splice_direct+0x28b/0x3e0 [ 462.883671][T16146] ? splice_direct_to_actor+0xb00/0xb00 [ 462.889403][T16146] ? avc_policy_seqno+0x17/0x70 [ 462.894242][T16146] ? security_file_permission+0x128/0x300 [ 462.899949][T16146] do_sendfile+0x8d6/0x1100 [ 462.904443][T16146] ? compat_writev+0x3d0/0x3d0 [ 462.909202][T16146] ? vfs_write+0x427/0x4f0 [ 462.913779][T16146] __x64_sys_sendfile64+0x1d4/0x230 [ 462.918967][T16146] ? __ia32_sys_sendfile+0x250/0x250 [ 462.924526][T16146] do_syscall_64+0xcb/0x150 [ 462.929188][T16146] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 462.935063][T16146] RIP: 0033:0x45ca59 [ 462.939001][T16146] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 462.958592][T16146] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 462.966985][T16146] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 18:43:09 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x103040) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000300)="ac2c054cb166215002e5af67a87126e58a46c06203140d08c43c60a2c6923c5d1dc44aa4feb19d90774a9fb70bb89161c7d3c62c032655ae70a8405c56b8b99b8cd59b15809ca72327b8d6259db41f2fb9f93e8382ea10f03c1efa97b228cd6b85ffb27c3943ec1558f771e9697989e263b36c3049cd0148cc5cd883c8fb3e50e6f9983518cc907483db7c18443fb12ab207fc33e5d155f0ac914d7cd5834c0b122b3d6f8384f0842cce514e6f25c1c2b97ca5070c457cff435a42af83a0bbdd415708c98fa9a6e8db9a4932943df21330edcd3746802cb538aec35a2734420f23e89f3d792cb2a9fb", 0xe9}, {&(0x7f0000000400)="d11494105343b41fc4e9ec1f6b84a1ab3a0dffc5ba5e4d3b4d4245e095e0b674a6e0697f1971399885a95c39872df65e3d5612cf3b82487f88d848bdcbf21e6888bb578128d081576dfca65a87b43a7689d867f6a3fea76f599b73640aaa0dbb2a3d8335fbf71312a15710c93cfba73077e5e71ff39ed8f37eeca15d4aab56e5e10b1eeb0d7860bfb9fd10763e18d2716b506a0ab264d705679d8c315b899bb605754afd64d7c53d69e35dd09adb6b6ee9aac76a3f65eb1e1fe1a1226314d56ab101f6180172adbf0e3fc183988ed573987cdabcc99e744f346616cc67056af39531fa1f6dda70e721", 0xe9}], 0x2, 0x5) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x84, 0x464, 0x400, 0x70bd28, 0x25dfdbfb, "670d199bc4951fd401963446fa0105bad4ce632d294670bff72814c8cef5f3cfef8a37b26203cc73e79e2b857f6a7745ab8880bd9cb884f10185401db5f1efe35475d1f8830c5174bdf2cacbf27aabe664a06f7255c3ac99872381c7671e390facad035026553570d4c791638be48c009628", ["", "", "", "", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x20000800}, 0x8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$TIOCEXCL(r4, 0x540c) [ 462.974941][T16146] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 462.982892][T16146] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 462.990845][T16146] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 462.998799][T16146] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 18:43:09 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_tables_matches\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x70, 0x81, 0x19, 0xff, 0x0, 0x0, 0x100000001, 0x62067, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x600000, 0x4, @perf_config_ext={0x1ff, 0x9}, 0x4, 0x1f, 0x8, 0x0, 0x2, 0x1, 0x9}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x20074, 0xa300) 18:43:09 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400ffffff10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 463.044590][T16169] overlayfs: missing 'lowerdir' 18:43:11 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:11 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) 18:43:11 executing program 3 (fault-call:8 fault-nth:17): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:11 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffff0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:11 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80000000) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x76cc}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80001) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5b8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x400, 0xf1) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x202000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa4, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x1, 0x10001, 0x2, 0x6, 0x0, 0x6a, 0x32]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2c00}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 18:43:11 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x1a0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r3 = accept$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) recvmmsg(r3, &(0x7f0000000380)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @broadcast}, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/194}, {&(0x7f00000001c0)=""/188}], 0x23, &(0x7f0000000340)=""/61}, 0x3a7}], 0x1, 0x10040, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) 18:43:11 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 18:43:11 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) [ 465.744126][T16191] overlayfs: missing 'lowerdir' [ 465.760112][T16194] FAULT_INJECTION: forcing a failure. [ 465.760112][T16194] name failslab, interval 1, probability 0, space 0, times 0 [ 465.772818][T16194] CPU: 1 PID: 16194 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 465.783182][T16194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.793235][T16194] Call Trace: [ 465.796526][T16194] dump_stack+0x14a/0x1ce [ 465.800856][T16194] ? devkmsg_release+0x11c/0x11c [ 465.805793][T16194] ? show_regs_print_info+0x12/0x12 [ 465.811113][T16194] ? memset+0x1f/0x40 [ 465.815119][T16194] ? unwind_next_frame+0x1c90/0x2330 [ 465.820421][T16194] should_fail+0x6fb/0x860 [ 465.824878][T16194] ? setup_fault_attr+0x3d0/0x3d0 [ 465.829891][T16194] ? __rcu_read_lock+0x50/0x50 [ 465.834676][T16194] ? unwind_get_return_address_ptr+0x130/0x130 [ 465.840984][T16194] ? xas_create+0xe07/0x1360 [ 465.845558][T16194] should_failslab+0x5/0x20 [ 465.850044][T16194] kmem_cache_alloc+0x36/0x260 [ 465.854788][T16194] xas_create+0xe07/0x1360 [ 465.859196][T16194] ? get_mem_cgroup_from_mm+0x27b/0x2c0 [ 465.864719][T16194] xas_store+0x93/0x13b0 [ 465.869085][T16194] ? _raw_spin_lock_irq+0xa2/0x180 [ 465.874192][T16194] ? _raw_spin_lock_irqsave+0x1e0/0x1e0 [ 465.879724][T16194] ? xas_load+0x46f/0x4c0 [ 465.884041][T16194] __add_to_page_cache_locked+0x3e0/0x8e0 [ 465.889835][T16194] ? add_to_page_cache_locked+0x30/0x30 [ 465.895369][T16194] ? workingset_activation+0x150/0x150 [ 465.900933][T16194] ? __alloc_pages_nodemask+0x374/0x7c0 [ 465.906501][T16194] add_to_page_cache_lru+0x11d/0x280 [ 465.911803][T16194] ? __add_to_page_cache_locked+0x8e0/0x8e0 [ 465.917876][T16194] generic_file_read_iter+0x1244/0x20b0 [ 465.923635][T16194] ? find_get_pages_range_tag+0xaf0/0xaf0 [ 465.929342][T16194] ? iter_file_splice_write+0xdef/0xf60 [ 465.934921][T16194] generic_file_splice_read+0x47b/0x780 [ 465.940453][T16194] ? splice_shrink_spd+0xb0/0xb0 [ 465.945382][T16194] ? security_file_permission+0x1e9/0x300 [ 465.951080][T16194] ? splice_shrink_spd+0xb0/0xb0 [ 465.956085][T16194] splice_direct_to_actor+0x3cf/0xb00 [ 465.961439][T16194] ? do_splice_direct+0x3e0/0x3e0 [ 465.966493][T16194] ? pipe_to_sendpage+0x300/0x300 [ 465.971501][T16194] ? security_file_permission+0x128/0x300 [ 465.977235][T16194] do_splice_direct+0x28b/0x3e0 [ 465.982156][T16194] ? splice_direct_to_actor+0xb00/0xb00 [ 465.987683][T16194] ? avc_policy_seqno+0x17/0x70 [ 465.992515][T16194] ? security_file_permission+0x128/0x300 [ 465.998216][T16194] do_sendfile+0x8d6/0x1100 [ 466.002790][T16194] ? compat_writev+0x3d0/0x3d0 [ 466.007589][T16194] ? vfs_write+0x427/0x4f0 [ 466.012028][T16194] __x64_sys_sendfile64+0x1d4/0x230 [ 466.017213][T16194] ? __ia32_sys_sendfile+0x250/0x250 [ 466.022475][T16194] do_syscall_64+0xcb/0x150 [ 466.027144][T16194] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 466.033017][T16194] RIP: 0033:0x45ca59 [ 466.036896][T16194] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 466.056774][T16194] RSP: 002b:00007fe8c7326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 466.065166][T16194] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 466.073161][T16194] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 466.085781][T16194] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 18:43:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) clock_getres(0x6, &(0x7f0000000000)) fchmod(r0, 0x1) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) [ 466.093744][T16194] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000007 [ 466.101786][T16194] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fe8c73276d4 18:43:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 18:43:12 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r2, r3) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='fuseblk\x00', 0x201080, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x3ff}}, {@max_read={'max_read', 0x3d, 0x3}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@dont_hash='dont_hash'}, {@smackfstransmute={'smackfstransmute'}}, {@obj_role={'obj_role', 0x3d, '&\'{/*++'}}, {@subj_type={'subj_type', 0x3d, '\x84[{\xf9\xba\'@\xd7\'/-!@:'}}, {@subj_type={'subj_type', 0x3d, ':\xe4'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ']!'}}]}}) fcntl$setstatus(r0, 0x4, 0x46000) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r7 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r8, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:12 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x78, 0x135443) [ 466.143261][T16214] overlayfs: missing 'lowerdir' [ 466.207506][T16219] overlayfs: missing 'lowerdir' 18:43:14 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 18:43:14 executing program 3 (fault-call:8 fault-nth:18): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:14 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) sched_setparam(r0, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:43:14 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x108) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:14 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'veth0_to_bond\x00', 0x200}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201a960", @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf2503000000050005000100000005000300800000002c0001801400020067656e6576653100000000000000000014000200726f736530000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xf8}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x18, 0x4, "4a7f44d6d21c6c1b8ba0f764322a8c299ab9b404"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/proc/crypto\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'net/arp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x2a, 0x4, "da183b6ba13e89a2336fdce218030b21c037dd01f50d3799adbab4c4820dd57729d1ea900870"}, @ETHTOOL_A_BITSET_MASK={0x24, 0x5, "84216aee2a47805543819f37be31a0759fa332c341d6cc898f19725e304f7be8"}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40040}, 0x40) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000000)) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r5}, 0x80, 0x0}}], 0x1, 0x2404c040) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040880) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="00fb6c06818578471a955e46e81897698cda3937533bb01543a653b844ff466d793af92a31f99eab6c553cc33c0929a9271660659344455cfe153538738db8a83658eaab5132583c1797edd447db9e9aacff79011d4a9accaec6969b82e4f5b3fb2db92da294420943fda77a09472172c30b004563"], 0x6c, 0x1) 18:43:14 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={'veth1_to_bond\x00', @ifru_flags=0x100}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:43:14 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 468.764884][T16234] overlayfs: missing 'lowerdir' 18:43:15 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}, 0x7ff}, {{&(0x7f0000000000)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000300)=""/4080, 0xff0}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000000080)=""/103, 0x67}, {&(0x7f0000000100)=""/129, 0x81}, {&(0x7f00000001c0)=""/178, 0xb2}, {&(0x7f0000000280)=""/54, 0x36}], 0x6, &(0x7f0000001380)=""/132, 0x84}}, {{&(0x7f0000001440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @private}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/18, 0x12}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000001580)=""/233, 0xe9}, {&(0x7f0000001680)=""/41, 0x29}], 0x4, &(0x7f0000001700)=""/66, 0x42}, 0xfffffffe}, {{&(0x7f0000001780)=@ipx, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001800)=""/141, 0x8d}], 0x1, &(0x7f0000001900)=""/108, 0x6c}, 0x7}], 0x4, 0x62, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:43:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:15 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x82) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:15 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 468.824316][T16255] overlayfs: missing 'workdir' 18:43:15 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x78, 0xc1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) io_setup(0x5ff, &(0x7f0000000040)=0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/vmstat\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x2000}]) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000180), 0x0, 0x101, 0x0, 0x1, r0}, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/221, 0xdd}, {&(0x7f00000002c0)=""/254, 0xfe}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000440)=0x0) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000480)) pause() 18:43:15 executing program 2: sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x7, @remote}}, {{0xa, 0x0, 0x0, @private0, 0x4700}}}, 0x108) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000040)) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000300)=""/226) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$RTC_UIE_OFF(r2, 0x7004) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/l2cap\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000400)=""/236) preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 18:43:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 468.899792][T16269] overlayfs: missing 'workdir' 18:43:15 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xcb2, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f00000001c0)=@v1={0x2, "d67c7231f0e420d6203334de94dd64a1"}, 0x11, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 468.967694][T16276] EXT4-fs (loop2): Unrecognized mount option "/p²" or missing value [ 468.976157][T16276] EXT4-fs (loop2): failed to parse options in superblock: /p² [ 468.980731][T16282] overlayfs: missing 'workdir' [ 468.988341][T16276] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 469.026238][T16276] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 469.040170][T16287] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 469.041060][T16276] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 469.053006][T16287] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 469.063372][T16276] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 469.104121][T16276] EXT4-fs error (device loop2): ext4_fill_super:4548: inode #2: comm syz-executor.2: iget: bogus i_mode (0) [ 469.116507][T16276] EXT4-fs (loop2): get root inode failed [ 469.122961][T16276] EXT4-fs (loop2): mount failed 18:43:17 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:17 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x7ffff000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:17 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:17 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x670f03, 0x40) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = accept(r1, &(0x7f0000000100)=@xdp, &(0x7f00000001c0)=0x80) getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000300)=0x4) 18:43:17 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0xa2000, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r3, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r5}, 0x80, 0x0}}], 0x1, 0x2404c040) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) dup(r0) pipe2(&(0x7f0000000000), 0x800) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x4000400200) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 18:43:17 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0xb2b681) 18:43:18 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x74, 0x0) 18:43:18 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 471.788903][T16305] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 471.801616][T16305] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 18:43:18 executing program 4 (fault-call:8 fault-nth:0): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:18 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) fchdir(0xffffffffffffffff) sendfile(r5, r3, &(0x7f0000000000)=0x9f5, 0x1) 18:43:18 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x840000000010) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 471.850045][T16321] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 471.860819][T16321] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 471.941043][T16330] FAULT_INJECTION: forcing a failure. [ 471.941043][T16330] name failslab, interval 1, probability 0, space 0, times 0 [ 471.957217][T16330] CPU: 1 PID: 16330 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 471.967381][T16330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.977439][T16330] Call Trace: [ 471.980897][T16330] dump_stack+0x14a/0x1ce [ 471.985234][T16330] ? devkmsg_release+0x11c/0x11c [ 471.990173][T16330] ? show_regs_print_info+0x12/0x12 [ 471.995405][T16330] should_fail+0x6fb/0x860 [ 471.999827][T16330] ? setup_fault_attr+0x3d0/0x3d0 [ 472.004862][T16330] ? security_file_permission+0x128/0x300 [ 472.010736][T16330] ? __sb_end_write+0xa4/0xf0 [ 472.015608][T16330] ? vfs_write+0x427/0x4f0 [ 472.020031][T16330] ? ksys_mount+0x30/0xf0 [ 472.024370][T16330] should_failslab+0x5/0x20 [ 472.029013][T16330] __kmalloc_track_caller+0x5d/0x2c0 [ 472.034668][T16330] ? ksys_write+0x25d/0x2c0 [ 472.039175][T16330] ? strnlen_user+0x185/0x210 [ 472.043855][T16330] strndup_user+0x73/0x150 [ 472.048422][T16330] ksys_mount+0x30/0xf0 [ 472.052587][T16330] __x64_sys_mount+0xb1/0xc0 [ 472.057320][T16330] do_syscall_64+0xcb/0x150 [ 472.061975][T16330] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 472.068130][T16330] RIP: 0033:0x45ca59 [ 472.072114][T16330] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 472.091837][T16330] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 472.100251][T16330] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 472.108228][T16330] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 472.116198][T16330] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 472.124170][T16330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 472.132282][T16330] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:18 executing program 4 (fault-call:8 fault-nth:1): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 472.239369][T16342] FAULT_INJECTION: forcing a failure. [ 472.239369][T16342] name failslab, interval 1, probability 0, space 0, times 0 [ 472.268605][T16342] CPU: 1 PID: 16342 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 472.279148][T16342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.289333][T16342] Call Trace: [ 472.292625][T16342] dump_stack+0x14a/0x1ce [ 472.296962][T16342] ? devkmsg_release+0x11c/0x11c [ 472.301898][T16342] ? show_regs_print_info+0x12/0x12 [ 472.307094][T16342] should_fail+0x6fb/0x860 [ 472.311505][T16342] ? setup_fault_attr+0x3d0/0x3d0 [ 472.316534][T16342] ? copy_mount_options+0x59/0x320 [ 472.321643][T16342] should_failslab+0x5/0x20 [ 472.326157][T16342] kmem_cache_alloc_trace+0x39/0x280 [ 472.331441][T16342] copy_mount_options+0x59/0x320 [ 472.336378][T16342] ? ksys_mount+0x86/0xf0 [ 472.340824][T16342] ksys_mount+0x97/0xf0 [ 472.344981][T16342] __x64_sys_mount+0xb1/0xc0 [ 472.349567][T16342] do_syscall_64+0xcb/0x150 [ 472.354068][T16342] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 472.360041][T16342] RIP: 0033:0x45ca59 [ 472.363931][T16342] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 472.383532][T16342] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 472.391942][T16342] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 472.399921][T16342] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 472.407889][T16342] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 472.416131][T16342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 472.424102][T16342] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:20 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400ffff0010) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:20 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:20 executing program 4 (fault-call:8 fault-nth:2): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:20 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x40004140, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) 18:43:20 executing program 1: socketpair(0x18, 0xa, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) 18:43:20 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r3 = creat(&(0x7f0000000080)='./file0\x00', 0x81) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @local, 0x6}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) splice(r0, &(0x7f0000000000)=0x3ff, r4, &(0x7f0000000040)=0xc68a, 0x40, 0x2) preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:43:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) [ 474.811705][T16360] FAULT_INJECTION: forcing a failure. [ 474.811705][T16360] name failslab, interval 1, probability 0, space 0, times 0 [ 474.826749][T16360] CPU: 1 PID: 16360 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 474.836906][T16360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.847558][T16360] Call Trace: [ 474.850846][T16360] dump_stack+0x14a/0x1ce [ 474.855170][T16360] ? devkmsg_release+0x11c/0x11c [ 474.860097][T16360] ? show_regs_print_info+0x12/0x12 [ 474.865378][T16360] should_fail+0x6fb/0x860 [ 474.869789][T16360] ? setup_fault_attr+0x3d0/0x3d0 [ 474.874809][T16360] ? kmem_cache_alloc_trace+0xc3/0x280 [ 474.880269][T16360] ? copy_mount_options+0x59/0x320 [ 474.885381][T16360] ? ksys_mount+0x97/0xf0 [ 474.889706][T16360] ? __x64_sys_mount+0xb1/0xc0 [ 474.894462][T16360] ? do_syscall_64+0xcb/0x150 [ 474.899138][T16360] ? getname_flags+0xb8/0x610 [ 474.903805][T16360] should_failslab+0x5/0x20 18:43:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000080) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x900100}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="37b687e7323a097f5fa204000000b2aeb07ec8fbe229e94d2f577bd430a77deb85b69022231d85637c2001f584287f23c990b29812d7f6a7fcb94f94a05aee1a2532594281f8209a2db1f4976e1a5818aebb162720a99686ede02854725a0ed3e8c43e3cb5ec9647a0264300"/123, @ANYRES16=r3, @ANYBLOB="0a0027bd7000fbdbdf25020000000900030073797a30000000000900010073797a30000000000900010073797a310000000014000200636169663000000000000000000000001400020074756e6c3000000000000000000000000900010073797a32000000001400020069703665727370616e300000000000000900030073797a3100000000"], 0x8c}, 0x1, 0x0, 0x0, 0x6000}, 0x4) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4002004) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:43:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400204) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 474.908305][T16360] kmem_cache_alloc+0x36/0x260 [ 474.913069][T16360] getname_flags+0xb8/0x610 [ 474.917567][T16360] user_path_at_empty+0x28/0x50 [ 474.922456][T16360] do_mount+0x15a/0x28c0 [ 474.926701][T16360] ? copy_mount_string+0x30/0x30 [ 474.931632][T16360] ? copy_mount_options+0x59/0x320 [ 474.936739][T16360] ? copy_mount_options+0x293/0x320 [ 474.941934][T16360] ksys_mount+0xc2/0xf0 [ 474.946086][T16360] __x64_sys_mount+0xb1/0xc0 [ 474.950671][T16360] do_syscall_64+0xcb/0x150 [ 474.955175][T16360] entry_SYSCALL_64_after_hwframe+0x44/0xa9 18:43:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x0, 0x800020) [ 474.961056][T16360] RIP: 0033:0x45ca59 [ 474.964955][T16360] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.984556][T16360] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 474.992958][T16360] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 475.000927][T16360] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 18:43:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x8, 0x0, 0x1, 0x43f1, 0x90ab}, 0xc) [ 475.008890][T16360] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 475.016851][T16360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 475.024815][T16360] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:21 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400ffffff10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:21 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xe125, 0x8203) 18:43:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x80007ff}, {{&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000001a00)=""/4096, 0x1000}, 0x10001}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000018c0)=""/250, 0xfa}, {&(0x7f00000015c0)=""/112, 0x70}], 0x2, &(0x7f0000000080)=""/109, 0x6d}, 0x2009}], 0x3, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socket$unix(0x1, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x3) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) pwrite64(r3, &(0x7f00000014c0)="b79447f0b6e507776f392ed41950b21e271acf0bdf05845c45489922215967d9deef9fbdf5ed4a6ef3cfa6cacc1c44b263becf331ae23bf71610aacc2af4be2bf0", 0x41, 0x101) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 18:43:21 executing program 4 (fault-call:8 fault-nth:3): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:21 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r5 = openat(r3, &(0x7f0000000140)='./bus\x00', 0x200, 0x32) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000001c0)) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000680)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="980000fcff00000228bd7000ffdbdf25000000006cd4fb24b599fa2cf64880edc48eef01080c00000000d9faa62dc4fa5489d252a8bd9b63ed29beeb704afa70982f1a29f308be75d2c4e5c75b89d259755a763772baec8c66f0b411024bf19e5bf049b966804e5f634fd4de7e826de77131384dc125d8492915a7ee4d1419ed3a554bb28c0432199a1058ab6c5d2559f047cdd4f728e75a91a949b9c2a9f18e365b4393011771901b098c72", @ANYRES32=r6, @ANYBLOB="06000d0009120a000900f2ff0900010068667363000000004400020010000300c4000000ff0f00000400000010d5c224f6505eb929000200080000009a550000030000001000030087ec0000020000000500000010000300ff7f00000300000006000000060005000480e1ff05000532050000000b00010064736d61726b00004c000200050004003f0000005cee5c3e585b98e0b96363ee1595e287be192664ec4dacc0e6c45774cd58bc"], 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x48801) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)={{0x10b, 0xad, 0x75, 0x2f9, 0x371, 0xffffffff, 0x316, 0x97}, "2d4fe8d42b0173c03dd2dae8295b70bcadf744f413cd0a0f6aebc3ad4dead99f5fa608ea5b75fed7dfa5a316f64312a496ef12c3a84f2b5b0d5e2070e9e174594276d18ca486aa56ae8551f2fe6baace236552c049cf3e8d0f2d81352eb1503b13d26ee3a4ed2597d3", [[], [], [], [], []]}, 0x589) [ 475.134333][T16406] FAULT_INJECTION: forcing a failure. [ 475.134333][T16406] name failslab, interval 1, probability 0, space 0, times 0 [ 475.149166][T16406] CPU: 0 PID: 16406 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 475.159320][T16406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.169365][T16406] Call Trace: [ 475.172651][T16406] dump_stack+0x14a/0x1ce [ 475.177088][T16406] ? devkmsg_release+0x11c/0x11c [ 475.182024][T16406] ? show_regs_print_info+0x12/0x12 [ 475.187210][T16406] should_fail+0x6fb/0x860 [ 475.191607][T16406] ? setup_fault_attr+0x3d0/0x3d0 [ 475.196601][T16406] ? alloc_fs_context+0x61/0x650 [ 475.201508][T16406] should_failslab+0x5/0x20 [ 475.205980][T16406] kmem_cache_alloc_trace+0x39/0x280 [ 475.211233][T16406] alloc_fs_context+0x61/0x650 [ 475.215965][T16406] ? _raw_read_unlock+0xe/0x30 [ 475.220698][T16406] ? get_fs_type+0x410/0x490 [ 475.225257][T16406] do_mount+0x12f5/0x28c0 [ 475.229555][T16406] ? copy_mount_string+0x30/0x30 [ 475.234472][T16406] ? copy_mount_options+0x59/0x320 [ 475.239565][T16406] ? copy_mount_options+0x293/0x320 [ 475.244741][T16406] ksys_mount+0xc2/0xf0 [ 475.250093][T16406] __x64_sys_mount+0xb1/0xc0 [ 475.254651][T16406] do_syscall_64+0xcb/0x150 [ 475.259133][T16406] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 475.264992][T16406] RIP: 0033:0x45ca59 [ 475.268859][T16406] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 475.288432][T16406] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 475.296811][T16406] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 475.304843][T16406] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 475.312789][T16406] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 475.320736][T16406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 475.328705][T16406] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:23 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x2121, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000000)=""/115) preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:43:23 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='$/[#\x00', &(0x7f0000000040)='./file0\x00', r1) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:43:23 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:23 executing program 4 (fault-call:8 fault-nth:4): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:23 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffff0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:23 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000280)=""/174, 0xae}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000100)=""/62, 0x3e}], 0x6, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) r1 = dup(r0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x1, r3, 0x0, r2}, 0x10) r4 = geteuid() setreuid(r4, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@dev={0xfe, 0x80, [], 0x3e}, @in6=@mcast2, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x60, 0x67, r3, r4}, {0xd33f, 0x3c4, 0x8, 0x7, 0x3f, 0x9, 0x8, 0x9}, {0x100, 0xffff, 0x1000, 0x2fb}, 0x7, 0x6e6bbc, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d5, 0x33}, 0x8, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3501, 0x0, 0x0, 0x2, 0xfc84, 0x800, 0x2}}, 0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, r4, r5}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x100000400200) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) 18:43:24 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x74, 0x200041) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x80082102, &(0x7f0000000180)=r2) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) sendmmsg$inet6(r3, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r4}, 0x80, 0x0}}], 0x1, 0x2404c040) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r6, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r8}, 0x80, 0x0}}], 0x1, 0x2404c040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)=@deltfilter={0x12e8, 0x2d, 0x0, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x9, 0xd}, {0xfff1, 0x9}, {0xffe0, 0x2}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x1294, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0xffff}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x101, 0x3, 0x401}, {0x0, 0x9d4b, 0x5}, 0x5e, 0x6, 0x1f}}, @TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_ACT={0x1250, 0x6, [@m_ct={0xf0, 0x18, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x78, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "32023cf1ab692cd58a416063c64a01b9"}, @TCA_CT_ZONE={0x6, 0x4, 0x2e6}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x32945c95, 0xffffffffffffffff, 0x101, 0x7f}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_ACTION={0x6}]}, {0x53, 0x6, "e20b5a79735aa1828a4570cfc20a27ba46e9b4f65637b3bb613d4323ef892cc6bf3fbb2c295415060f5dfac0cde8711f5c140d8c294d07a2ce6809a4bbe2329e8159aedc2da64a3d405a45af2ab1e9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x1080, 0x1a, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x6, 0x10000000, 0x80000000, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffa, 0x26ef3a4b, 0x5, 0x7, 0x3}}, @TCA_DEF_DATA={0x12, 0x3, '[#){m}.@}:\'{\'\x00'}, @TCA_DEF_DATA={0x9, 0x3, '\\:]:\x00'}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}, @m_mirred={0xdc, 0x1c, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6, 0x8, 0x8, 0x3ff}, 0x0, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x2, 0x1, 0xfffffff2, 0x4}, 0x1, r8}}]}, {0x6f, 0x6, "7826d6d2d876b85bd204f240c21ad26d42e7c4c7a5f9ccfedb273745e4b3d2d4d6f5d4a4d14e06dc775cdd834c4e2b50772918742cf383258bcd6420959022d952a975c7d222eec36143be0832bc54b04e5d64dc8ba6193e7beb268308fc2dcda9a168a5e2fe582052881e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xeb8142de26b1ad67, 0x2}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}]}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xba}, @TCA_U32_HASH={0x8, 0x2, 0x10000}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6b}}]}, 0x12e8}}, 0x40004) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@private2}, &(0x7f0000000080)=0x14) socket$key(0xf, 0x3, 0x2) [ 477.813549][T16426] FAULT_INJECTION: forcing a failure. [ 477.813549][T16426] name failslab, interval 1, probability 0, space 0, times 0 [ 477.847223][T16426] CPU: 1 PID: 16426 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 477.857387][T16426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.867521][T16426] Call Trace: [ 477.870796][T16426] dump_stack+0x14a/0x1ce [ 477.875094][T16426] ? devkmsg_release+0x11c/0x11c [ 477.879996][T16426] ? show_regs_print_info+0x12/0x12 [ 477.885191][T16426] should_fail+0x6fb/0x860 [ 477.889596][T16426] ? setup_fault_attr+0x3d0/0x3d0 [ 477.894603][T16426] ? legacy_init_fs_context+0x4d/0xc0 [ 477.899942][T16426] should_failslab+0x5/0x20 [ 477.904412][T16426] kmem_cache_alloc_trace+0x39/0x280 [ 477.909672][T16426] legacy_init_fs_context+0x4d/0xc0 [ 477.914850][T16426] alloc_fs_context+0x50c/0x650 [ 477.919679][T16426] do_mount+0x12f5/0x28c0 [ 477.923983][T16426] ? copy_mount_string+0x30/0x30 [ 477.928936][T16426] ? copy_mount_options+0x59/0x320 [ 477.934176][T16426] ? copy_mount_options+0x293/0x320 [ 477.939426][T16426] ksys_mount+0xc2/0xf0 [ 477.943552][T16426] __x64_sys_mount+0xb1/0xc0 [ 477.948114][T16426] do_syscall_64+0xcb/0x150 [ 477.952595][T16426] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.958489][T16426] RIP: 0033:0x45ca59 [ 477.962381][T16426] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.981960][T16426] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 477.990337][T16426] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 477.998276][T16426] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 478.006217][T16426] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 18:43:24 executing program 4 (fault-call:8 fault-nth:5): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 478.014157][T16426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 478.022118][T16426] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 478.054262][T16450] FAULT_INJECTION: forcing a failure. 18:43:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 478.054262][T16450] name failslab, interval 1, probability 0, space 0, times 0 [ 478.067421][T16450] CPU: 1 PID: 16450 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 478.077600][T16450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.087636][T16450] Call Trace: [ 478.090942][T16450] dump_stack+0x14a/0x1ce [ 478.095263][T16450] ? devkmsg_release+0x11c/0x11c [ 478.100191][T16450] ? do_syscall_64+0xcb/0x150 [ 478.104862][T16450] ? show_regs_print_info+0x12/0x12 [ 478.110050][T16450] ? avc_has_perm_noaudit+0x30c/0x400 [ 478.115420][T16450] should_fail+0x6fb/0x860 [ 478.119862][T16450] ? setup_fault_attr+0x3d0/0x3d0 [ 478.124856][T16450] ? alloc_super+0x56/0x760 [ 478.129330][T16450] should_failslab+0x5/0x20 [ 478.133836][T16450] kmem_cache_alloc_trace+0x39/0x280 [ 478.139206][T16450] ? _raw_spin_trylock_bh+0x190/0x190 [ 478.144563][T16450] alloc_super+0x56/0x760 [ 478.148870][T16450] sget+0x20e/0x4e0 [ 478.152695][T16450] ? free_anon_bdev+0x20/0x20 [ 478.157345][T16450] ? ovl_mount+0x30/0x30 [ 478.161657][T16450] mount_nodev+0x2c/0xe0 [ 478.165914][T16450] legacy_get_tree+0xde/0x170 [ 478.170565][T16450] ? fuse_emit+0x7d0/0x7d0 [ 478.174949][T16450] vfs_get_tree+0x85/0x260 [ 478.179335][T16450] do_mount+0x1a15/0x28c0 [ 478.183633][T16450] ? copy_mount_string+0x30/0x30 [ 478.188537][T16450] ? copy_mount_options+0x59/0x320 [ 478.193631][T16450] ? copy_mount_options+0x293/0x320 [ 478.198798][T16450] ksys_mount+0xc2/0xf0 [ 478.202941][T16450] __x64_sys_mount+0xb1/0xc0 [ 478.207498][T16450] do_syscall_64+0xcb/0x150 [ 478.211980][T16450] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 478.218459][T16450] RIP: 0033:0x45ca59 [ 478.222322][T16450] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 478.241895][T16450] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 478.250271][T16450] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 18:43:24 executing program 4 (fault-call:8 fault-nth:6): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 478.258210][T16450] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 478.266150][T16450] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 478.274089][T16450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 478.282028][T16450] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/user\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) 18:43:24 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r6 = openat$cgroup(r5, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000380)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000100)={0x3, 0x7, 0x9, 0x1000, 0x0, "ad259843493c01272f3d428ec9813587964bcf"}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000300)) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400ffffffbb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6000000f0000000001000007440010806f0003408000000108000140000000c0082002400000000108000140ffffffe1080003400000001d0800024000000009080002400000997b080001400000000208000840000000090000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x12) [ 478.311373][T16460] FAULT_INJECTION: forcing a failure. [ 478.311373][T16460] name failslab, interval 1, probability 0, space 0, times 0 [ 478.336262][T16460] CPU: 1 PID: 16460 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 478.346421][T16460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.356490][T16460] Call Trace: [ 478.359772][T16460] dump_stack+0x14a/0x1ce [ 478.364090][T16460] ? devkmsg_release+0x11c/0x11c [ 478.369006][T16460] ? show_regs_print_info+0x12/0x12 [ 478.374183][T16460] should_fail+0x6fb/0x860 [ 478.378566][T16460] ? setup_fault_attr+0x3d0/0x3d0 [ 478.383561][T16460] ? selinux_sb_alloc_security+0x4f/0x200 [ 478.389346][T16460] should_failslab+0x5/0x20 [ 478.393821][T16460] kmem_cache_alloc_trace+0x39/0x280 [ 478.399090][T16460] ? down_write+0xd8/0x150 [ 478.403477][T16460] selinux_sb_alloc_security+0x4f/0x200 [ 478.408992][T16460] security_sb_alloc+0x50/0xb0 [ 478.413731][T16460] alloc_super+0x140/0x760 [ 478.418131][T16460] sget+0x20e/0x4e0 [ 478.421910][T16460] ? free_anon_bdev+0x20/0x20 [ 478.426553][T16460] ? ovl_mount+0x30/0x30 [ 478.430762][T16460] mount_nodev+0x2c/0xe0 [ 478.434971][T16460] legacy_get_tree+0xde/0x170 [ 478.439620][T16460] ? fuse_emit+0x7d0/0x7d0 [ 478.444017][T16460] vfs_get_tree+0x85/0x260 [ 478.448400][T16460] do_mount+0x1a15/0x28c0 [ 478.452856][T16460] ? copy_mount_string+0x30/0x30 [ 478.457773][T16460] ? copy_mount_options+0x59/0x320 [ 478.462872][T16460] ? copy_mount_options+0x293/0x320 [ 478.468044][T16460] ksys_mount+0xc2/0xf0 [ 478.472178][T16460] __x64_sys_mount+0xb1/0xc0 [ 478.476736][T16460] do_syscall_64+0xcb/0x150 [ 478.481209][T16460] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 478.487084][T16460] RIP: 0033:0x45ca59 [ 478.490963][T16460] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 478.510546][T16460] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 478.518945][T16460] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 478.526887][T16460] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 478.534930][T16460] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 478.543306][T16460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 478.551268][T16460] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:27 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:27 executing program 4 (fault-call:8 fault-nth:7): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:27 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000) 18:43:27 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f00000005c0)={0x7, 0x5, {0x55, 0x3, 0xffff, {0xfffe, 0x7}, {0x0, 0x3800}, @cond=[{0x0, 0xf40, 0xffff, 0xe5d5, 0x1, 0x800}, {0x100, 0x9, 0x7, 0x8001, 0x1, 0xfe01}]}, {0x55, 0x1a, 0x81, {0x1, 0x8}, {0x200, 0xfffb}, @period={0x5d, 0x0, 0x7ff, 0x2, 0x1f, {0x1, 0x8000, 0xff, 0x8}, 0x0, &(0x7f00000001c0)}}}) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0xa0000000008, 0xea}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0xfffc, r1, &(0x7f00000003c0)="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", 0x15c, 0x0, 0x0, 0x2}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./bus\x00', 0x1, 0x2, &(0x7f0000000140)=[{&(0x7f0000000280)="71cc99749a72b45623b563a06e46a9fadec2612d3354fee9039387393ae6c601ae71d0ec7f79f8a422245b52b60a064a61e3a43eb1fe999c7fe122a04a2400000000bd2553dfb4a89065801475", 0x4d, 0x5}, {&(0x7f0000000300)="fd5148ffb89f50fa8ad5a6d91bcfd0317b0553a8dca934c9d5815404459bb0455b49133c2f0ef9572ba5f350aa9c81a7269f619eee23098a8fa5dbd70d35d6c5c63d49b9082ae6662f6c801c70824d6035e676164d3cc1490299ed63b21b34136739d69bf509fb2f05ac7c0a0d42f0b22daeaf1b41a0a712dc2efc054ac279f0a4ef4be0f1fd684582b69adeea67282d8635f88c7f7c73a03d0bd46d3148a41c9117ce4cb3ccc021c768f1028ceb58daf0", 0xb1, 0x2d0}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="646973636172642c6673796e635f6d6f64653d7374726963723d30303030443030303030303030303030303031332c00fd9b4bef141324514aa66100fef2b396e9ac57ce4ab01b9a139c244e57200ca35f20ee98e48433c8ccf40fc335ee9305b9ea7e529ce888e8e1dc6f68b7ada44de75b721e11909867a8439c49fc5ec162c8fcb0bf6d4e5594d99768c687e2f5fb48e65c2b9b0205fe48a61fca2c2f02f9e73cba453e4144a4e99769a7b356e9b1567d60e7437572a8b63233813bbff4e30ca786c05f65a021d9031e7327ce453ded97"]) sendfile(r0, r5, 0x0, 0x8400fffffffb) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000640)={@dev, 0x0}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', r7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x20, 0x70bd2a, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f6, 0x200, 0x70bd27, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}}, 0x40010) 18:43:27 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/rpc\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) [ 480.840729][T16486] FAULT_INJECTION: forcing a failure. [ 480.840729][T16486] name failslab, interval 1, probability 0, space 0, times 0 [ 480.843855][T16485] F2FS-fs (loop3): Unable to read 1th superblock [ 480.861031][T16486] CPU: 0 PID: 16486 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 480.871173][T16486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.875324][T16485] F2FS-fs (loop3): Unable to read 2th superblock [ 480.881213][T16486] Call Trace: 18:43:27 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x10042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)='net/arp\x00', r5}, 0x30) r7 = syz_open_procfs(r6, &(0x7f00000002c0)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8100, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86) 18:43:27 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x100000001) [ 480.881229][T16486] dump_stack+0x14a/0x1ce [ 480.881238][T16486] ? devkmsg_release+0x11c/0x11c [ 480.881246][T16486] ? show_regs_print_info+0x12/0x12 [ 480.881255][T16486] ? pcpu_alloc_area+0x7a2/0x8f0 [ 480.881267][T16486] should_fail+0x6fb/0x860 [ 480.914565][T16486] ? setup_fault_attr+0x3d0/0x3d0 [ 480.919581][T16486] ? cpumask_next+0xc/0x20 [ 480.923988][T16486] ? pcpu_alloc+0xd17/0x11f0 [ 480.928566][T16486] ? prealloc_shrinker+0x50/0x210 [ 480.933573][T16486] should_failslab+0x5/0x20 [ 480.938045][T16486] kmem_cache_alloc_trace+0x39/0x280 [ 480.943302][T16486] prealloc_shrinker+0x50/0x210 [ 480.948120][T16486] alloc_super+0x5f2/0x760 [ 480.952504][T16486] sget+0x20e/0x4e0 [ 480.956321][T16486] ? free_anon_bdev+0x20/0x20 [ 480.960968][T16486] ? ovl_mount+0x30/0x30 [ 480.965177][T16486] mount_nodev+0x2c/0xe0 [ 480.969446][T16486] legacy_get_tree+0xde/0x170 [ 480.974139][T16486] ? fuse_emit+0x7d0/0x7d0 [ 480.978521][T16486] vfs_get_tree+0x85/0x260 [ 480.983055][T16486] do_mount+0x1a15/0x28c0 [ 480.987361][T16486] ? copy_mount_string+0x30/0x30 [ 480.992270][T16486] ? copy_mount_options+0x59/0x320 [ 480.997349][T16486] ? copy_mount_options+0x293/0x320 [ 481.002568][T16486] ksys_mount+0xc2/0xf0 [ 481.006695][T16486] __x64_sys_mount+0xb1/0xc0 [ 481.011277][T16486] do_syscall_64+0xcb/0x150 [ 481.015754][T16486] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 481.021626][T16486] RIP: 0033:0x45ca59 [ 481.025525][T16486] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 481.045097][T16486] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 481.053498][T16486] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 481.061437][T16486] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 481.069388][T16486] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 481.077327][T16486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 18:43:27 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000100)=0xc) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) getrusage(0xffffffffffffffff, &(0x7f0000000000)) 18:43:27 executing program 4 (fault-call:8 fault-nth:8): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 481.085266][T16486] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="bca1ff7d2219cbf02962986103ca78ed4341c3268c6f0d7c81594d1748646c64f7e35fc53d44185013a2b689d26740889a9cb0fa4d3d4a84406fccae715111ea571c8e3e", @ANYRES16=r1, @ANYBLOB="000125bd702dfb60df25130000002000028025000200040008000100097629d77b023391e526028225f9a1e14807a3ba3425ba7ea6457605e3f561cacf48faa60bd4ca37a3a8623fa28277defc00c71d3ec2ddab308d52ae42b9c6a41cbd59a83771a55d8a190a027febc20217d5e1e0218a5f2d85b41fad73"], 0x34}, 0x1, 0x0, 0x0, 0x4044052}, 0x40059) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x218, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2573}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5dfd}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x8000}, 0x20000) [ 481.119097][T16485] F2FS-fs (loop3): Unable to read 1th superblock [ 481.125951][T16485] F2FS-fs (loop3): Unable to read 2th superblock [ 481.149652][T16510] FAULT_INJECTION: forcing a failure. [ 481.149652][T16510] name failslab, interval 1, probability 0, space 0, times 0 [ 481.164433][T16510] CPU: 1 PID: 16510 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 481.174597][T16510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.184635][T16510] Call Trace: [ 481.187899][T16510] dump_stack+0x14a/0x1ce [ 481.192197][T16510] ? devkmsg_release+0x11c/0x11c [ 481.197108][T16510] ? show_regs_print_info+0x12/0x12 [ 481.202283][T16510] ? idr_get_free+0x6de/0x880 [ 481.206972][T16510] should_fail+0x6fb/0x860 [ 481.211358][T16510] ? setup_fault_attr+0x3d0/0x3d0 [ 481.216391][T16510] ? __down_read+0xfc/0x240 [ 481.220915][T16510] ? up_write+0xa1/0x190 [ 481.225146][T16510] ? __list_lru_init+0xa7/0x570 [ 481.229964][T16510] should_failslab+0x5/0x20 [ 481.234449][T16510] kmem_cache_alloc_trace+0x39/0x280 [ 481.239702][T16510] __list_lru_init+0xa7/0x570 [ 481.244381][T16510] ? prealloc_shrinker+0x1cc/0x210 [ 481.249461][T16510] alloc_super+0x61e/0x760 [ 481.253842][T16510] sget+0x20e/0x4e0 [ 481.257616][T16510] ? free_anon_bdev+0x20/0x20 [ 481.262261][T16510] ? ovl_mount+0x30/0x30 [ 481.266468][T16510] mount_nodev+0x2c/0xe0 [ 481.270685][T16510] legacy_get_tree+0xde/0x170 [ 481.275444][T16510] ? fuse_emit+0x7d0/0x7d0 [ 481.279874][T16510] vfs_get_tree+0x85/0x260 [ 481.284261][T16510] do_mount+0x1a15/0x28c0 [ 481.288688][T16510] ? copy_mount_string+0x30/0x30 [ 481.293592][T16510] ? copy_mount_options+0x59/0x320 [ 481.298670][T16510] ? copy_mount_options+0x293/0x320 [ 481.303869][T16510] ksys_mount+0xc2/0xf0 [ 481.308022][T16510] __x64_sys_mount+0xb1/0xc0 [ 481.312582][T16510] do_syscall_64+0xcb/0x150 [ 481.317052][T16510] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 481.322912][T16510] RIP: 0033:0x45ca59 [ 481.326773][T16510] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 481.346345][T16510] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 481.354723][T16510] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 481.362668][T16510] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 481.370633][T16510] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 481.378589][T16510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 481.386543][T16510] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:30 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:30 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\\%/*\''}, {}, {0x20, '%}'}, {0x20, '!$'}, {0x20, 'net/arp\x00'}, {0x20, 'net/arp\x00'}, {0x20, 'net/arp\x00'}, {0x20, 'net/arp\x00'}, {0x20, '#'}], 0xa, "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"}, 0x103e) 18:43:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x14840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 18:43:30 executing program 4 (fault-call:8 fault-nth:9): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:30 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000001e40), 0x0, 0x8844) pwrite64(r4, &(0x7f0000000100)="05b2d3cbc526055355c5e8bc792a50f088326dc2a2493705198100af8df207687560fb0d2f4a1533350ddfbae36be646c68261dffcd3051a1ac34f49ce70f22f0ddc3c4caa0e2039f8f22357f7707f413cfae4c3fd475870d0f0d73f1d96f4114d045ef2f2", 0x65, 0x5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000001c0)=0x5, 0x4) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x102) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000100)) fcntl$setstatus(r1, 0x4, 0x46000) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000280)="5e8fdb09a27dd14a8c1a503d6cf3592924d38654d13ddc208262d4ecc6e17939829bcffbd0197c3a38d1e86a2f1d9224fd951cd3e673fa8762e6401b0e3a32a6a34de8b1e514a7cc360d954aeba2af5f39690a2513799130f8eeca24d4a80ae0019a5beee8b09a7116a1ade6b6bfd7e4712cab79a93e9234e17b6b97370b10947035d771a6b760894e729777550218a254c756cb6ac1273d26a13a5bd5fb6d865aa2cc817fbf60f7698816e4fa9fa75d36094842a4118b3ad6385ac1f48dfa34f7ef8b", &(0x7f0000000380)=""/154, 0x4}, 0x20) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002e00)={0x0, 0x1, 0x80000000008, 0xc3}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) sendfile(r7, r5, 0x0, 0x9) 18:43:30 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 483.848094][T16522] FAULT_INJECTION: forcing a failure. [ 483.848094][T16522] name failslab, interval 1, probability 0, space 0, times 0 [ 483.864223][T16522] CPU: 0 PID: 16522 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 483.874380][T16522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.884423][T16522] Call Trace: [ 483.887703][T16522] dump_stack+0x14a/0x1ce [ 483.892023][T16522] ? devkmsg_release+0x11c/0x11c [ 483.896942][T16522] ? show_regs_print_info+0x12/0x12 [ 483.902117][T16522] should_fail+0x6fb/0x860 [ 483.906508][T16522] ? setup_fault_attr+0x3d0/0x3d0 [ 483.911514][T16522] ? kvmalloc_node+0xc2/0x120 [ 483.916168][T16522] should_failslab+0x5/0x20 [ 483.920646][T16522] __kmalloc+0x5f/0x2d0 [ 483.924775][T16522] kvmalloc_node+0xc2/0x120 [ 483.929269][T16522] __list_lru_init+0x1d2/0x570 [ 483.934006][T16522] ? prealloc_shrinker+0x1cc/0x210 [ 483.939100][T16522] alloc_super+0x61e/0x760 [ 483.943506][T16522] sget+0x20e/0x4e0 [ 483.947287][T16522] ? free_anon_bdev+0x20/0x20 [ 483.951946][T16522] ? ovl_mount+0x30/0x30 [ 483.956242][T16522] mount_nodev+0x2c/0xe0 [ 483.960464][T16522] legacy_get_tree+0xde/0x170 [ 483.965118][T16522] ? fuse_emit+0x7d0/0x7d0 [ 483.969500][T16522] vfs_get_tree+0x85/0x260 [ 483.973886][T16522] do_mount+0x1a15/0x28c0 [ 483.978272][T16522] ? copy_mount_string+0x30/0x30 [ 483.983178][T16522] ? copy_mount_options+0x59/0x320 [ 483.988263][T16522] ? copy_mount_options+0x293/0x320 [ 483.993429][T16522] ksys_mount+0xc2/0xf0 [ 483.997556][T16522] __x64_sys_mount+0xb1/0xc0 [ 484.002128][T16522] do_syscall_64+0xcb/0x150 [ 484.006615][T16522] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 484.012482][T16522] RIP: 0033:0x45ca59 [ 484.016376][T16522] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 484.035958][T16522] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:43:30 executing program 1: syz_usb_connect$cdc_ecm(0x3, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x8, 0xe0, 0x2, [{{0x9, 0x4, 0x0, 0x65, 0x2, 0x2, 0x6, 0x0, 0x4, {{0xa, 0x24, 0x6, 0x0, 0x0, "d52e291b4b"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x80, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0x86, 0x80, 0x8, 0x5}, @dmm={0x7, 0x24, 0x14, 0x0, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x40, 0x3f, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x1, 0x81}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x1f, 0xe0, 0x9, 0xff, 0x40}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x10, 0x80, 0x62, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0x1f, 0x20}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}]}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:43:30 executing program 4 (fault-call:8 fault-nth:10): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:30 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) 18:43:30 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockname$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) [ 484.044357][T16522] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 484.052299][T16522] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 484.060254][T16522] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 484.068200][T16522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 484.076147][T16522] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:30 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r3, 0x0, &(0x7f0000000000)) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 484.148477][T16551] FAULT_INJECTION: forcing a failure. [ 484.148477][T16551] name failslab, interval 1, probability 0, space 0, times 0 [ 484.163381][T16551] CPU: 0 PID: 16551 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 484.173530][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.183569][T16551] Call Trace: [ 484.186851][T16551] dump_stack+0x14a/0x1ce [ 484.191171][T16551] ? devkmsg_release+0x11c/0x11c [ 484.196094][T16551] ? show_regs_print_info+0x12/0x12 [ 484.201267][T16551] should_fail+0x6fb/0x860 [ 484.205652][T16551] ? setup_fault_attr+0x3d0/0x3d0 [ 484.210645][T16551] ? __down_read+0xfc/0x240 [ 484.215114][T16551] ? mutex_lock+0xa6/0x110 [ 484.219496][T16551] ? __list_lru_init+0xa7/0x570 [ 484.224313][T16551] should_failslab+0x5/0x20 [ 484.228833][T16551] kmem_cache_alloc_trace+0x39/0x280 [ 484.234086][T16551] __list_lru_init+0xa7/0x570 [ 484.238744][T16551] ? prealloc_shrinker+0x1cc/0x210 [ 484.243839][T16551] alloc_super+0x64d/0x760 [ 484.248247][T16551] sget+0x20e/0x4e0 [ 484.252062][T16551] ? free_anon_bdev+0x20/0x20 [ 484.256731][T16551] ? ovl_mount+0x30/0x30 [ 484.261028][T16551] mount_nodev+0x2c/0xe0 [ 484.265269][T16551] legacy_get_tree+0xde/0x170 [ 484.269941][T16551] ? fuse_emit+0x7d0/0x7d0 [ 484.274324][T16551] vfs_get_tree+0x85/0x260 [ 484.278706][T16551] do_mount+0x1a15/0x28c0 [ 484.283020][T16551] ? copy_mount_string+0x30/0x30 [ 484.287925][T16551] ? copy_mount_options+0x59/0x320 [ 484.293027][T16551] ? copy_mount_options+0x293/0x320 [ 484.298199][T16551] ksys_mount+0xc2/0xf0 [ 484.302324][T16551] __x64_sys_mount+0xb1/0xc0 [ 484.306882][T16551] do_syscall_64+0xcb/0x150 [ 484.311362][T16551] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 484.317222][T16551] RIP: 0033:0x45ca59 [ 484.321083][T16551] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 484.340653][T16551] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 484.349032][T16551] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 484.356972][T16551] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 484.364911][T16551] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 484.372849][T16551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 484.380789][T16551] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 484.539349][ T115] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 484.979286][ T115] usb 2-1: config 1 interface 0 altsetting 101 bulk endpoint 0x3 has invalid maxpacket 64 [ 484.989260][ T115] usb 2-1: config 1 interface 0 has no altsetting 0 [ 485.149258][ T115] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.158302][ T115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.166939][ T115] usb 2-1: Product: щ [ 485.171314][ T115] usb 2-1: Manufacturer: ã° [ 485.175886][ T115] usb 2-1: SerialNumber: syz [ 485.199248][T16545] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 485.539216][ T115] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 485.546660][ T115] usb 2-1: USB disconnect, device number 13 [ 486.188976][ T115] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 486.628965][ T115] usb 2-1: config 1 interface 0 altsetting 101 bulk endpoint 0x3 has invalid maxpacket 64 [ 486.638899][ T115] usb 2-1: config 1 interface 0 has no altsetting 0 18:43:33 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x81, 0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) 18:43:33 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:33 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) prctl$PR_GET_KEEPCAPS(0x7) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0xbb4}, 0x16, 0x2) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:33 executing program 4 (fault-call:8 fault-nth:11): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:33 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x4, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 486.799030][ T115] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.808100][ T115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.816622][ T115] usb 2-1: Product: щ [ 486.820965][ T115] usb 2-1: Manufacturer: ã° [ 486.825629][ T115] usb 2-1: SerialNumber: syz 18:43:33 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'veth1\x00', {0xb0f}, 0x400}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x1}, 0x10) r3 = geteuid() setreuid(r3, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@dev={0xfe, 0x80, [], 0x3e}, @in6=@mcast2, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x60, 0x67, 0x0, r3}, {0xd33f, 0x3c4, 0x8, 0x7, 0x3f, 0x9, 0x8, 0x9}, {0x100, 0xffff, 0x1000, 0x2fb}, 0x7, 0x6e6bbc, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d5, 0x33}, 0x8, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3501, 0x0, 0x0, 0x2, 0xfc84, 0x800, 0x2}}, 0xe8) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x1, r5, 0x0, r4}, 0x10) r6 = geteuid() setreuid(r6, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@dev={0xfe, 0x80, [], 0x3e}, @in6=@mcast2, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x60, 0x67, r5, r6}, {0xd33f, 0x3c4, 0x8, 0x7, 0x3f, 0x9, 0x8, 0x9}, {0x100, 0xffff, 0x1000, 0x2fb}, 0x7, 0x6e6bbc, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d5, 0x33}, 0x8, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3501, 0x0, 0x0, 0x2, 0xfc84, 0x800, 0x2}}, 0xe8) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x10000, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x80000001}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0xfffffffffffffff7}}, {@mode={'mode', 0x3d, 0x39}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r3}}, {@appraise='appraise'}, {@fsname={'fsname', 0x3d, '&:}-.'}}, {@subj_role={'subj_role', 0x3d, ':'}}, {@euid_lt={'euid<', r6}}]}) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) [ 486.848927][T16545] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 486.868596][T16578] FAULT_INJECTION: forcing a failure. [ 486.868596][T16578] name failslab, interval 1, probability 0, space 0, times 0 [ 486.881803][T16578] CPU: 0 PID: 16578 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 486.891952][T16578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.901997][T16578] Call Trace: [ 486.905291][T16578] dump_stack+0x14a/0x1ce [ 486.909616][T16578] ? devkmsg_release+0x11c/0x11c [ 486.914554][T16578] ? show_regs_print_info+0x12/0x12 [ 486.919748][T16578] should_fail+0x6fb/0x860 [ 486.924189][T16578] ? setup_fault_attr+0x3d0/0x3d0 [ 486.929183][T16578] ? __down_read+0xfc/0x240 [ 486.933670][T16578] ? mutex_lock+0xa6/0x110 [ 486.938057][T16578] ? __list_lru_init+0xa7/0x570 [ 486.942877][T16578] should_failslab+0x5/0x20 [ 486.947387][T16578] kmem_cache_alloc_trace+0x39/0x280 [ 486.952645][T16578] __list_lru_init+0xa7/0x570 [ 486.957321][T16578] ? prealloc_shrinker+0x1cc/0x210 [ 486.962401][T16578] alloc_super+0x64d/0x760 [ 486.966783][T16578] sget+0x20e/0x4e0 [ 486.970571][T16578] ? free_anon_bdev+0x20/0x20 [ 486.975216][T16578] ? ovl_mount+0x30/0x30 [ 486.979425][T16578] mount_nodev+0x2c/0xe0 [ 486.983636][T16578] legacy_get_tree+0xde/0x170 [ 486.988278][T16578] ? fuse_emit+0x7d0/0x7d0 [ 486.992678][T16578] vfs_get_tree+0x85/0x260 [ 486.997064][T16578] do_mount+0x1a15/0x28c0 [ 487.001375][T16578] ? copy_mount_string+0x30/0x30 [ 487.006281][T16578] ? copy_mount_options+0x59/0x320 [ 487.011372][T16578] ? copy_mount_options+0x293/0x320 [ 487.016548][T16578] ksys_mount+0xc2/0xf0 [ 487.020673][T16578] __x64_sys_mount+0xb1/0xc0 [ 487.025232][T16578] do_syscall_64+0xcb/0x150 [ 487.029779][T16578] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 487.035693][T16578] RIP: 0033:0x45ca59 [ 487.039565][T16578] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 487.059173][T16578] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 487.067588][T16578] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 487.075563][T16578] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 487.083520][T16578] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 487.091492][T16578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 18:43:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$RTC_UIE_ON(r0, 0x7003) 18:43:33 executing program 4 (fault-call:8 fault-nth:12): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 487.099448][T16578] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x72743) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011528bd2ab0128edf250a0000be7a2efe3ca4180000000003000a8c46b3"], 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket(0x11, 0x800000003, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x1, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x40) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r4}, 0x80, 0x0}}], 0x1, 0x2404c040) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r7}, 0x80, 0x0}}], 0x1, 0x2404c040) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20060000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100026bd7000ffdbdf250e000000080034006700000008003200a900000005002a000000000008000b000008000008000600", @ANYRES32=r4, @ANYBLOB="08002c000900000008000609e7734d9f040b9f6256dcb48077724500", @ANYRES32=r7, @ANYBLOB="0500350007000000"], 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x80) [ 487.151590][T16599] FAULT_INJECTION: forcing a failure. [ 487.151590][T16599] name failslab, interval 1, probability 0, space 0, times 0 [ 487.164596][T16599] CPU: 1 PID: 16599 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 487.174741][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.184786][T16599] Call Trace: [ 487.188184][T16599] dump_stack+0x14a/0x1ce [ 487.192501][T16599] ? devkmsg_release+0x11c/0x11c [ 487.197435][T16599] ? show_regs_print_info+0x12/0x12 [ 487.202647][T16599] should_fail+0x6fb/0x860 [ 487.207458][T16599] ? setup_fault_attr+0x3d0/0x3d0 [ 487.212451][T16599] ? kvmalloc_node+0xc2/0x120 [ 487.217094][T16599] should_failslab+0x5/0x20 [ 487.221593][T16599] __kmalloc+0x5f/0x2d0 [ 487.225719][T16599] kvmalloc_node+0xc2/0x120 [ 487.230191][T16599] __list_lru_init+0x1d2/0x570 [ 487.234924][T16599] ? prealloc_shrinker+0x1cc/0x210 [ 487.240006][T16599] alloc_super+0x64d/0x760 [ 487.244389][T16599] sget+0x20e/0x4e0 [ 487.248170][T16599] ? free_anon_bdev+0x20/0x20 [ 487.252817][T16599] ? ovl_mount+0x30/0x30 [ 487.257037][T16599] mount_nodev+0x2c/0xe0 [ 487.261255][T16599] legacy_get_tree+0xde/0x170 [ 487.265921][T16599] ? fuse_emit+0x7d0/0x7d0 [ 487.270320][T16599] vfs_get_tree+0x85/0x260 [ 487.274709][T16599] do_mount+0x1a15/0x28c0 [ 487.279037][T16599] ? copy_mount_string+0x30/0x30 [ 487.283950][T16599] ? copy_mount_options+0x1f8/0x320 [ 487.289142][T16599] ? __sanitizer_cov_trace_const_cmp4+0x14/0x90 [ 487.295354][T16599] ? copy_mount_options+0x293/0x320 [ 487.300541][T16599] ksys_mount+0xc2/0xf0 [ 487.304667][T16599] __x64_sys_mount+0xb1/0xc0 [ 487.309226][T16599] do_syscall_64+0xcb/0x150 [ 487.313697][T16599] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 487.319573][T16599] RIP: 0033:0x45ca59 [ 487.323436][T16599] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 487.343109][T16599] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:43:33 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) io_setup(0x2, &(0x7f0000000240)=0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r3, 0x20000000000003b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, r2}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 487.351491][T16599] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 487.359436][T16599] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 487.367379][T16599] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 487.375320][T16599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 487.383262][T16599] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 487.392010][ T115] cdc_ether: probe of 2-1:1.0 failed with error -71 18:43:33 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x84) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:33 executing program 4 (fault-call:8 fault-nth:13): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x16, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e22, 0x2, 'none\x00', 0x20, 0x9, 0x18}, {@empty, 0x4e24, 0x4, 0x9, 0x1, 0xfffff8c0}}, 0x44) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000) [ 487.417806][ T115] usb 2-1: USB disconnect, device number 14 [ 487.464274][T16620] FAULT_INJECTION: forcing a failure. [ 487.464274][T16620] name failslab, interval 1, probability 0, space 0, times 0 [ 487.477621][T16620] CPU: 0 PID: 16620 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 487.487801][T16620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.497945][T16620] Call Trace: [ 487.501227][T16620] dump_stack+0x14a/0x1ce [ 487.505537][T16620] ? devkmsg_release+0x11c/0x11c [ 487.510448][T16620] ? show_regs_print_info+0x12/0x12 [ 487.515622][T16620] should_fail+0x6fb/0x860 [ 487.520030][T16620] ? setup_fault_attr+0x3d0/0x3d0 [ 487.525028][T16620] ? prepare_creds+0x20/0x380 [ 487.529676][T16620] should_failslab+0x5/0x20 [ 487.534166][T16620] kmem_cache_alloc+0x36/0x260 [ 487.538900][T16620] ? ovl_fill_super+0x10a/0x4df0 [ 487.543821][T16620] prepare_creds+0x20/0x380 [ 487.548293][T16620] ovl_fill_super+0x128/0x4df0 [ 487.553026][T16620] ? xas_store+0x9a2/0x13b0 [ 487.557496][T16620] ? xas_find_marked+0x8c8/0xa10 [ 487.562425][T16620] ? ovl_mount+0x30/0x30 [ 487.566636][T16620] ? ida_alloc_range+0xa59/0xac0 [ 487.571544][T16620] ? delete_node+0x761/0x7b0 [ 487.576122][T16620] ? __radix_tree_replace+0x24d/0x2f0 [ 487.581480][T16620] ? idr_replace+0x1ca/0x240 [ 487.586099][T16620] ? up_write+0xa1/0x190 [ 487.590319][T16620] ? _raw_spin_lock+0xa1/0x170 [ 487.595110][T16620] ? up_read+0x10/0x10 [ 487.599254][T16620] ? sget+0x4cb/0x4e0 [ 487.603205][T16620] ? free_anon_bdev+0x20/0x20 [ 487.607849][T16620] ? ovl_mount+0x30/0x30 [ 487.612064][T16620] mount_nodev+0x52/0xe0 [ 487.616279][T16620] legacy_get_tree+0xde/0x170 [ 487.620934][T16620] ? fuse_emit+0x7d0/0x7d0 [ 487.625337][T16620] vfs_get_tree+0x85/0x260 [ 487.629744][T16620] do_mount+0x1a15/0x28c0 [ 487.634047][T16620] ? copy_mount_string+0x30/0x30 [ 487.638982][T16620] ? copy_mount_options+0x59/0x320 [ 487.644073][T16620] ? copy_mount_options+0x293/0x320 [ 487.649262][T16620] ksys_mount+0xc2/0xf0 [ 487.653407][T16620] __x64_sys_mount+0xb1/0xc0 [ 487.657970][T16620] do_syscall_64+0xcb/0x150 [ 487.662448][T16620] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 487.668327][T16620] RIP: 0033:0x45ca59 [ 487.672368][T16620] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 487.691959][T16620] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 487.700579][T16620] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 487.708527][T16620] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 487.716612][T16620] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 487.724611][T16620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 487.732728][T16620] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:36 executing program 4 (fault-call:8 fault-nth:14): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:36 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:43:36 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:43:36 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x0) 18:43:36 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@allocspi={0xf8, 0x15, 0x337, 0x0, 0x0, {{{@in6=@local, @in6=@ipv4}, {@in=@remote}, @in6=@private0}}}, 0xf8}}, 0x0) sendmmsg$inet6(r5, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) fremovexattr(r5, &(0x7f00000001c0)=@random={'os2.', '}*\\[\xaa\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) recvmmsg(r7, &(0x7f0000002b00)=[{{&(0x7f0000000100)=@x25, 0x80, &(0x7f0000001580)=[{&(0x7f0000000280)=""/140, 0x8c}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000340)=""/66, 0x42}, {&(0x7f00000003c0)=""/125, 0x7d}, {&(0x7f0000000440)=""/165, 0xa5}], 0x5, &(0x7f0000001600)=""/4096, 0x1000}, 0x20}, {{&(0x7f0000002600)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002680)=""/251, 0xfb}, {&(0x7f0000002780)=""/243, 0xf3}, {&(0x7f0000002880)=""/183, 0xb7}, {&(0x7f0000002940)=""/145, 0x91}, {&(0x7f0000002a00)=""/118, 0x76}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x7}, 0x9168}], 0x2, 0x2000, 0x0) 18:43:36 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x72, 0x20c1) 18:43:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, r4, 0xa05, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x18}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x855) preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 489.875440][T16630] FAULT_INJECTION: forcing a failure. [ 489.875440][T16630] name failslab, interval 1, probability 0, space 0, times 0 [ 489.895752][T16630] CPU: 1 PID: 16630 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 489.905914][T16630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.915955][T16630] Call Trace: [ 489.919240][T16630] dump_stack+0x14a/0x1ce [ 489.923560][T16630] ? devkmsg_release+0x11c/0x11c [ 489.928486][T16630] ? show_regs_print_info+0x12/0x12 [ 489.933672][T16630] ? stack_trace_save+0x123/0x1f0 [ 489.938684][T16630] should_fail+0x6fb/0x860 [ 489.943088][T16630] ? setup_fault_attr+0x3d0/0x3d0 [ 489.948100][T16630] ? ovl_fill_super+0x10a/0x4df0 [ 489.953022][T16630] should_failslab+0x5/0x20 [ 489.957514][T16630] kmem_cache_alloc_trace+0x39/0x280 [ 489.962785][T16630] ? xas_create+0x1269/0x1360 [ 489.967452][T16630] ovl_fill_super+0x10a/0x4df0 18:43:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x7ff}], 0x1, 0x2002, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000001380)={0x15c, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x8}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28577e87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21947aeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eb8aea2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5624ac0b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x78, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a18bed5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3269}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2acaf9e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4afd57f1}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2443f590}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x788fdbb5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30913f35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2414e405}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd84a1f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dd9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81fd}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4010000", @ANYRES16, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x40c1}, 0x4041) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xc4, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xb0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a13beb3}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29ce9adf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb165}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x336c7bc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd1f1b80}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb14a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8652}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63b1a52b}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f5025d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xedbffeb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17a7f537}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x863f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x295}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6fc4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc8c0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e0e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66aa7b61}]}]}]}, 0xc4}}, 0x8008) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d9e9603}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b4c069d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34b7c46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x337b4d71}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61277a22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15127324}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40840}, 0x4000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x110, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x987c323b856dfac1}, @NLBL_CIPSOV4_A_MLSCATLST={0xec, 0xc, 0x0, 0x1, [{0x4}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b2137b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a18003d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x159f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cfcf44f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e890a99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60834f5e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cd4}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43c6b0df}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ca5ec33}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16176924}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe053864}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59d3958d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x677afc46}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x384f43eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3123c748}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x447e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfe0ba9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10e8c05b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f339af9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee1d}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x87d5313}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x20040091) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) write$hidraw(r2, &(0x7f0000000040)="c9fe2040579fffcd7a1d7778d8e980753025a2f319b694ad84f77226550af64777c147a1ef3277df024f5bb93805e19f1ef3634f90f96c1ee56d68b4614616a624a197cd53a8bafe89d7906fcedf9b0ea8148eee6592bf358ced11fb059a4c0e8462e4345b1215a6c8d5b810362e15d43c1b7947e710b89f633d63e2aafc2d98da77293ef40e1c3ecf50eb568d93eecba85e00", 0x93) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') write$FUSE_GETXATTR(r3, &(0x7f0000000000)={0x18, 0x0, 0x5, {0x7}}, 0x18) preadv(r3, &(0x7f0000000140), 0x0, 0x800000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) preadv(r4, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000100)={0xc021, 0x1}) 18:43:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) write$UHID_DESTROY(r3, &(0x7f0000000040), 0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000000)) [ 489.972234][T16630] ? xas_store+0x9a2/0x13b0 [ 489.976723][T16630] ? xas_find_marked+0x8c8/0xa10 [ 489.981647][T16630] ? ovl_mount+0x30/0x30 [ 489.985874][T16630] ? ida_alloc_range+0xa59/0xac0 [ 489.990799][T16630] ? delete_node+0x761/0x7b0 [ 489.995379][T16630] ? __radix_tree_replace+0x24d/0x2f0 [ 490.000745][T16630] ? idr_replace+0x1ca/0x240 [ 490.005316][T16630] ? up_write+0xa1/0x190 [ 490.009557][T16630] ? _raw_spin_lock+0xa1/0x170 [ 490.014309][T16630] ? up_read+0x10/0x10 [ 490.018365][T16630] ? sget+0x4cb/0x4e0 18:43:36 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x104) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x34200000, 0x4, 0x5, 0x10000, 0x1, "898142102bac817dd956271a819c5fd1ebd86e", 0x1, 0x2}) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) 18:43:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x1, r5, 0x0, r4}, 0x10) r6 = geteuid() setreuid(r6, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@dev={0xfe, 0x80, [], 0x3e}, @in6=@mcast2, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x60, 0x67, r5, r6}, {0xd33f, 0x3c4, 0x8, 0x7, 0x3f, 0x9, 0x8, 0x9}, {0x100, 0xffff, 0x1000, 0x2fb}, 0x7, 0x6e6bbc, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d5, 0x33}, 0x8, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3501, 0x0, 0x0, 0x2, 0xfc84, 0x800, 0x2}}, 0xe8) sendmsg$netlink(r2, &(0x7f0000000bc0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc, &(0x7f0000000b40)=[{&(0x7f0000000300)={0x410, 0x39, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x14, 0x7, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, [], 0x1}}, @generic="8ce12d82478fbfc3d70891a065fe70730202d94ffa73a2279ef0d0f1288bf49134d41fcff2865190c06c443ad00f3e8337b5e9a74b5d55c77aaa876c542cbce20fe2fac669c3629e659d98c5cd43894eb51f261468cb6f9880053b9cccb16b2488b023c83e65aba805f0f5bc2b8d775db9edf4cc8872095e4f2ec0f2c62afbe0c298d800da533cc9423a7731a261ef", @typed={0x8, 0xd, 0x0, 0x0, @fd=r1}, @generic="d66b42a1db4830b441e6eb8bce563d724094c77a696e5799fb4a8150d909903616411d749fefab78b11615b7449517dda5bd94992a6d8507cb63ac53f092c5d978df8a7f2e9f17a5516b67ec968a5119fe2056528dd7a78009bfc3465f189ccb22e3b0a2f0fa9a75abcbf8bd634cd820bb74fb8bd14c4cc05019c5cca1d62e8e76e5b7f353cb676975f1d6b186a3cd1e3729", @nested={0xe7, 0x90, 0x0, 0x1, [@generic="56195a015ea2867886d43269fc2a83e936d3b77b605864275a3a3d772a1fc637843a7154906b94a4793225a8ec83af1a4eab3955fbd9c74e2998881166b0d359e582374fb74ed5dc0eb94ffd9b3433a5e7c59106b59815254f482d37abe90d1c22f5c355f9f4fdf489b989f7266a81ff9dc6789e6b0cca2fcfeb74343f1f1a3181f82e587340bd66be2bb57925d1f087c3b7d7d0c9ac5acbadbae6880d3b27905927ccfad991820d7b7eb426e4c1247d45d613a806a0c8a2b02520d67dccd83137f601ea3d425d78f71a7b7005f4d1a4ed68157969e197f569a2df34734e517b1c42c8"]}, @nested={0x1d8, 0x5, 0x0, 0x1, [@generic="bc3aca6d19300bd1f82ccd5628442927453de3b3034de4cc6de5796f1efd2dda00a1a6dcfc509295f5b8a11ac65f99a8e3a0f3e71d114508cb85c4a8f73d732edf660847a1d01579ddab3b0fdfe00d74cacb4e9fba59f456a181e39768b9ed395e993331d633f98407895f61c9d473007b01d987eeaecbcf70b651a570abe27c0e5cc863213a8f32c236326ac14e29c1344b2fda77f06529fb4aa8a9dfb11c4c40c82f701d7be33a18971b82a47970a9ca86ae0777fd20003ede897f69e046a40413ff2083df3a898501fd9ed8ad7eeaa87b10d2656607c2099b2f6faa3796b1b7abcbcf9115c6f155cddb34237e5796de81", @generic="54f6492a92e792fae8858cbce501b4c001b062e4e695b13b5e780b71ebd9e2126a9c73bd8eb71e7027647f7ad2158a340c0ca812cdfd153a40e1de7df09c4051a81c8a5358047a3a82d49433b4ed3fa86e2b0ad46c5bf2366d222a22333270b017c2ec2b644f082e160930939a10eca092a85f1784d7fdf169188fbfd720086340302408f1c033194535cc64a35b13c465d9eb96a83a8b17c53b4e11b2d6fb88ca2612e2dd84dea3174902898375c863895716fd54302be02e696b221cd7e9bf1a16186dbd7fe014aa2f08bfefd6f635afa80a0d5b007e43bfda3aa2f89cb8aa7b05"]}]}, 0x410}, {&(0x7f00000000c0)={0x68, 0x2f, 0x800, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x49, 0x3a, 0x0, 0x1, [@generic="70bbec0f5ff4c1170fc9608069e7e67187612c6bc4e36518d3139cfe03e9e8684befc6ae205a64a6ddf3ca2f06a411007a", @typed={0x8, 0x4, 0x0, 0x0, @u32=0x40cd}, @typed={0xc, 0x46, 0x0, 0x0, @str='net/arp\x00'}]}, @typed={0xc, 0x6e, 0x0, 0x0, @str='net/arp\x00'}]}, 0x68}, {&(0x7f0000001a00)={0x22bc, 0x3c, 0x20, 0x70bd28, 0x25dfdbfe, "", [@nested={0x10d, 0xf, 0x0, 0x1, [@generic="0a6da4705b5032c88bf31bb419f978cb9e4304be1ded63beb18c14ced7222f2158e0f997e1", @generic="ce68c705554dad1db99f1ea1cc1f49b587aaaa0a9877c4a5007f19c15e01702a263be8966b5bbef339aec8db3eee60123f374dd6e4b3c2edacc3a17285e4fbd8ba4eeb9f9e8e87726845532efd5f350c7c9d128a9fb2a53ea76ba00ff93b56efa599c52a0eeae460a4706b7285ff041843ce0d93e3e601650aabf1037a5e70e5b60c1c52a8c25c45cc9667ce55ebdde5824b8843fc133b9316cf46fdc3606f2fc9bf61732b162f253cc1e208a3710aa003c2d1cb3ecfb2b63c2fa649cf162b9fb1d7b8218301821f462e71e243a62f35dbfcc208cda705c57580287ee1244609674621cd"]}, @nested={0x219b, 0x28, 0x0, 0x1, [@generic, @generic, @typed={0x8, 0x6, 0x0, 0x0, @u32=0x3}, @generic="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", @typed={0xc, 0x57, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="c9bc8dbbd1d00b420b109a853e0b0ef579170613b839136a311938f2ca5b65c87929995c0f22754455fc2bd06c0f8307ac681a11f128fdc636503451ccafda66f481119703702fb406f3dec89e1fdde38c4cbb7c11a0a5a17e5f81a245fb611b2b5a86c39cdc6ac1a89bca4f09f286f3e66751729a08", @generic="a6d35be8481a59d54940d3f8164b9cdaf2791eb23b0270c562543ebc85544b8e60903e6d688bdcb9454d8946e0c369792035426fd07516fa637108c1dcd1e999b9b9a6389fd883b45b47ae59b7f9ad5a37cca6c5703be882c73eb472db83a53c6b692566ca021753d6c767c0835bb1e3417d4e69a94ebe5a45edab4bf83cc73a61f2c9bf4c332c6b98f1a4abbb08db0d4be07c04d91bebef4356cc9fa87bc0391e4ece4d521e3fe23436228a9a4f147d36f77084d01db9f9366856ff18437d08a251393b42b87a1dc3bcf22329938549cb09a2cd6337d1540a0fc030a17a9d64fd40b3002cdd026bfb5e2202a4f4e8f964", @typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@remote}, @generic="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"]}]}, 0x22bc}, {&(0x7f0000000c00)={0x280, 0x23, 0x200, 0x70bd2b, 0x25dfdbff, "", [@typed={0x12, 0x3c, 0x0, 0x0, @str='[&\')/&[$#%#.}\x00'}, @generic="b7847a897a4a96b1c1e8f8cb29be8a2aac8bdb9288bce219fabc229be9cf606a3898537518ab2e20049379f74239b5a8cec0d57746ede5ffefa030f620d0cb42b2069c81fafbfb8f88fb09bce3e77802c58b4c8c01bfcc6a783ff477dda6f3f0ce741b6cdf7516ea85473560931e61d187c26bacf2edadec80e50c3cd5eeee554b347ca69d38fa294eab54f0fc8b869bd4aec6228013536b7504976d12d364c75257cb8db8ba6ee7f8738f33ab38c6809a95692f198039929c508b74eb6612dc7a178880de4c4512", @generic="ffbd01f603d34615081c63285fe046711c805e5216d235841ea1268058a50302f4da774b53dc31052f608b434c0f9d442dc975e2b5867a01c31a74", @nested={0x14f, 0x25, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}, @generic="0148c81ef192ecf671d379f7d3501e11699188f2895244972d524b8b3214184fa9cadc0f7ed9d34c3bef890272012f4248560c8a61ae201fcbd51099a0489e72624b6935f0874fad971d8c34e24b70b238f95cd63118cdadf18c4a3190fdb21d14ca2a58ab786be318ce0e2afa079a5a34b3170dd58cd0d88ed5daa13d1852b77176906916ddbea95f5a5b8b45ad71c71352b1b2f3fc084e8a17cde169c60686aeadfac482b3f1ae32c3495ef8d120d70d20396c", @generic="da8a7e5902c8fcb8196abbe50825c742a25ff1e5d828abc0dba38772056aae9d5170a87051ce8f01cc322f7fd862cc4f9ffa4730b1b57000", @generic="8f7fe248fa43d2dfac29d42ef6e9e2b360922f4b5c83eb0c35a3264aadb06a9d8886", @typed={0x8, 0x25, 0x0, 0x0, @pid}, @generic="528ee36c7fdc62d8e5fdfb479058c7c569d49923c2183b137fcb158b5aabfb5e5dcd7bba435b95fd3538955bc0"]}, @typed={0x8, 0x2c, 0x0, 0x0, @u32=0x3ff}]}, 0x280}, {&(0x7f0000000140)={0x110, 0x3a, 0x104, 0x70bd29, 0x25dfdbfd, "", [@nested={0xfd, 0x47, 0x0, 0x1, [@generic="cf13c483cbba3609ba8e5647eb92ea82e8b2d8ff262ad96182582220cc2cfd1dc4f2344be6a1adfe6c553372bcb0d8ceb96cec19996eecaa9f4610a3336ad733abcceb4832bb9fc1f08a612b5157a61be5ea3e4767287b257cf6c74daef449e09176e51b4059dbfc0f52340e3d5aff34bfe4461d92080aad5c247eefb0b35e78ffd2d85bdabb4dde9a3717f3d76310ca429e8db8e28a1b48c7eb00381d0fa2249dc30e640226a2f38992759361aa3cc8c2d00b4f7d0b472f75f91f6f44a35e1c26ca825131bb7a050a888214b995b422c5e7d07114e1cdf5064d2fdf971d291a69d3f73a66", @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@local}]}]}, 0x110}, {&(0x7f00000009c0)={0x100, 0x23, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@nested={0xe1, 0x1c, 0x0, 0x1, [@typed={0x8, 0x28, 0x0, 0x0, @u32=0x7fe}, @generic="7b4e3b85a8eae3334042e4962a9679f4ca78ef4db8d7b7851c8926a7d53ad24989802bb791e8d9ff516a9d99dcec792a72d91e4e179f5bcf2db67907afc0a6beb2dec40c0b4d79f93f07598627e87d83ede3d607e45993382564e3ad702acb822b9fad2938e42506e2e82c0fee2cb32abaccfd37ebb8813f9f2106e5bd5237e1d3ccc8b8895e75140bcef80d2d8e3b8a41eb55bfa7cfdae12ce5a1a573386fafca6ed1eec1a0f7b9626ffaf74f58c942335cd873cd0b416f022715b0", @generic=',', @typed={0xc, 0x38, 0x0, 0x0, @u64=0x80000001}, @typed={0xc, 0x3f, 0x0, 0x0, @u64=0x9}]}, @typed={0xc, 0x74, 0x0, 0x0, @str='net/arp\x00'}]}, 0x100}, {&(0x7f0000005e80)=ANY=[@ANYBLOB="c42000001500200027bd7000fedbdf2504000900b02058802aa0f40953440f81ff7d7bc4823a1c76980317528cf432406ee3cc59ecf2a8ad52956153bd1e33f87ec8fd52c8f87445a0c0576a2d8d2ae6aa18c46a6bd031cef6a2e56b441c290f55893bcc21c8d36a5655542e5036c3c58599adcb1f3098ec00fdab13dee31ffcc6c6b97448cab33e2bc09746379d10d3af578239592cb87a004df4bc8e64a6e8e198040783a50d87b032e2e58afa47d8abea1be394a0ea24156676a4205470abf22f1844b52e0c9bd3865d39aa03fd4ea2690b0e0e3a1736f1b04f30569112e73525adc2beb4d5a663e350c2d3328caf093db1eb810a8b5f55f2f1444ffa4f7eb0f37650c10ff037c1bf5067a90cf8c9fd0b18a9ebcb354a9f87aeac474cb72d01eb232c7582d47e5c9ff8fa72edfc50f55b333808b09b3a31b0f85155e77e25bcc3631064df436cba2c52dda1f9a3dce262fb3e94ac8f9fdc19b521e21cdae2bd619de1f391780608c9ec6feb6fd3bbf72f898c36bf61af57cf80c7086e84da64e068db81993847aca6bc5df1a3ef2a4940c0f97ca251da27a94384290ea4f42d428fa89d3cda28a5ccd0205b3b8edecc079ee6f0b0b4fbb4635d9cb2883232912d2aba059a85a8774c484a71e80dfa0a68432412ad3c3a2a0f109f2500c3a41e7c4b38f3b0df8a6f6060199f277fd3882cdf1032b8ac25ff2d26841eaba559bb4bacb41296baf0af561fbc2285591decb8e0e28c5193f988b33bde6bd93f1d31aefd2bf69f6bb4dd55d83536ac6d24450f87121a4c73a3ee517e2438f217a2e4b7c2d4f070cb26ca6d63b7957dcb99af9d097a52f5a9e58bec21e6f35edcba17772e82b53398d2fd365fe4bdfd3b5a53918d08cd907ca3a6fdd23fb3fbf1d23872f30bc75335fab36f210cbb3aaff3be313a55cd2a478bdd0ef9797c259b6ef2469388f2f1e8f19b7f13701254f44f0cf1adfb79cf0bd0cb8a37143c854ae46808d3c0aec31a0a500891add3754db8cc3ef84aeb9e8786a62260262d90e4d3c1c3dd8ceec6ec68fac156473c35d473fca1b6a465ab2ae0d8641dee7e4510616c8c3463b53f3f5c58e112b17f66835044d62f4054fdbbcf5725fa3f1193304c4c05fc951199ed677fe6ede6e16828e1873dbc0c650dd55c652d852ec64893a24af2d245c6eff2d7873f145156c4a121df96a243de7cd02019bbb1b2b1e4fb7c8d26edca8a432c6aa5db54cbf2ec27dac62f21194eeb7d3859ace3a631742a3c4676bd038ba20fd9429ff7442cb04be72d6caafcbb628d67aaacc076f33a606cb722419e35109601b72fec9b7220027dd0ee8427358190c40b51a0f68ded36b2b1aad3a18cf1d51399b7fa238410414113f195097f0f7372dad0cf991c5850b298351a79e324e5342d638051ca1dbb2d1481bd5a2f3fa114113e467f56e12a01b68c4954e13fd4cfada884792a0d23dd680b732413693bf4bfb57ec439b199147d6e9134dbdaa6321ca0706b271e8d3bb490290f434dd417778f8612e6a50d465ed276b0bc459844bdc6472456461c1ccf2a0204fe7315f104adc333fdfc1e5d6c8c4ab5da996c7f773878d4370b02e8346e097a1c1d3cb51ee0babfa431095988c35a17b9baa05b8d31e219539e996f4ccd88d74ffe45fe2ac1c32f364452309fef409b6c878958d40e6356f4bed40f09c19d9494dff622edd915e0fa4fdb19f5ff713a5bcd548efb6a355df3c8488a433eb2a03209947c106cf7ad1f76e279b407fd5c5db40a26e1fbdd8bd3cc4c0fe3d28be7a42ab0c34227ddfd77658bae73a70aaf4b17313d9324ae59d44a3137f36387c323ec109f5ae4bdc1ff74f18be53bcb21e72e748cfc5063523a8669655376b87dd362614d557cc79dfc0bf24eff921d18d530b6cfd9cdd7c248ba1809e81476db5ce62570a8dab4c56a66a788a8038db8443ecf6ed3175f4399814d62339bcd9fb39668c4a57277896768574fed31041b130985bb9c0bc79b27cc13919645cfc0258e1705881360a962e740e3621e134fc741d6cd3d3e131af4d86532c641331f173ca8a21385c0153bf03b6236f78b27d7c0499bfe41a408cc2229a1481619c025d806ad3bde1167d21d058e0101413e4241e2d71b07b1245d6a5e10e55e03b9bfea1bb5d3a272d0c6333803312471c0f83b2c68f22fc3501d79e25c9cf8cf3f31dcdc3c8e341a3c460afde2e1c60514b5f8ffaa56540841d140b6047d7b454a315ba14e5dccea80ab8b38029a6df09ca2b8968eb0d6ce91bbb73906cfbcec4c587744c70d1f4d2da472bcce953269581b30b6d2182d53dfd38d430f941b27a1227f328f2452db98f43296cbd0c5d0a87a5ac9856415de9ea8f4a30ce016404769e820fc4b221dad41341372630df58b05bdd3d4cbcf37b6ef7f030f0d652312c2dd33da7b017210161235d1be11f70db884bb1fda8c5af8203dd870d04071a7451476687cb8014939d67bb264a32dd27ac63393df1df864056c8d525c8ad9913c883f0d98df37e868b09bfd0026fa6f404842efc336f8678f9a4342c4cfb8059fee5d1941080fbd9ff892d75b0d322a0d856bd7a7c3920e048e9540219467371d4a7410174e0227b8b4b96a0b7ad7a2ff3b81834a3a58be4cf79a1cd5265594c6527bd9b58dd445f64765adaed96c376489b4d7ebbc782178d5aaaf321df58c442bd011b7d5ee5253c419294b5f3d0fd0970c2fe087a5161e5e98e9418943a30bdba71e012bb3daaa9a42a29efe2e16781fb7f9ca22e566685a3efc87dae852722b2d7caf8095a21d9608ab139b1d6751924b07f1da440b916374696d8cb1aba3214861915215c160778dc6a1d45b85b1cad01273435429154d6712f73463536192cbbca740c65b4b464fef7170d9a0d313567d4cacfa2bc1cde2623f334511ace9ea5675844c3458cafd7a3950f690c6e9895b5be611dce0c999daed75cd58021333a6b6b82b642b0a1d964263d2a97800229018c872609216c59fc90f34968d1af05526bd0a1ef284facc4047e64dcff2ba6e0979ddf1bed9a302a57d199d1440c5420b06f8bf2c75b88c763731ab8444d62666c017c0920ac997a491aa6e6a71e569fcca0850a1576133573125e55ca26a57f5cfbc6e92e4a1115e8a4b868dbce6c519175089d92428d32ef032038329fe46a9025f682f60a69cc73a3d3fe783216f59cd72393e282e452f3d342c056ca6ad766ff0bdb504846edce21cc46dd1c71b3591f0955d29bfca1fedc069103466978bdff6b6da4e565d5494839c7e06edd17ebebc103ef69fa1743641fd966808c5e2cf7c6c72303bcdbaaaf83ca43d5105135c2f4ab25c7bfe7d1b48481e36a712c3af1d30d0b95c7a201bf40f32b80ebb6f50b1da102e14c5c6c47f75ded00ab48c1f2499b935c7bf9bf94d853c2d0cfb7718367cea50b0ff10d8a726227f186c069d14fd4dc1b6da21dd6e4ff5f954ed7469e7cf744c75d5127c33aaaaecf530a4548854473c733759adc6ec38d77b20e4c915b3b5f8914febcac1af104194d2819138c85f83d45bf1247c772f533bb61c9855b32d498af2fc04490dd6f3b301f7fee49198d61270cf72e14007ac8ba8d9294a9b58f7a6226c0bf894e324cb913e1af758ef9c2546a5083f33953eb115182081134ce2fa69f872fbd42fc90ddfacc3c94e74b3600c2d26e1e41fdec99a17f890dde4fff6dca2162fa9067450c548678544981a6e7232e16ea9daeaf24e528a0a687720a8cdeafabcc72388355a676a7b72a8f29053f90bd52b5ec9278038d8537d64b7b000109289136fc68868e288f51745842b9e74dd31aa3a5625ce25310240076b58f83df487e750178a6cb6e7c97ae63aec3fe44613c1c59b411beeae737ad94209b47e3ffb96dff2468499c1bbd38c59fa37cc0468d5f0d683a0d87950653e18104a9322cf01bb067aa1763359e8bef7e02f83a773b47fbc5dafcc004e85e9f90969a2f4583de2710381789697dd7ff90905acb7928550c9e9e4a88ea4d07d18705436d70cc25d93855b187889b174f37ec2a435b1e257503967ad1efc0776a3f88f4a6252e651c58c400a08b646e1686dd3bfbeda9c7bcd8f855639fde36e57e48e5ff34b7fde41827e2d4940e4b7cd7dfd616d963ace1059b418237bba68479404893b096b94668e094fb445c5ae9f856aaa08ce2e51c1cb9cc511d3a8f3c082a8babd264fe1e169e97d4261d3f964e578133204b9a05ed2f9bc67c1d9a8faffb20363bbf291cf4fcd3a13482db0a002a5adcbc537c3ebeebd9dd03ea6243d580a0f742b8b5409438a3eed779e26f4f231280172c5fb0ff3ef0a5e03ce3533ccf2abb7511ea074ed0104545496c25d30621768e091155e91e74a8d494dd51049f5d06e66a2c7e59b6b76e157045452746178b34e3c15984aa1f36e2cb7faffe57ac6ee4388d60b52316691b094de8914c7022ca25992dc6d656954a30f3d878bdadeb753bec1465fce9f4d92ed80949d8a969f26e0be8f579a9faf5d8dc6b237766f5d42c604dcf00677e272ef6dc953c12b6b20284a5d01a602e0922ac5a47c2781dab1d5a2a18614044b566bc2e133b58a2966013ad430bc7388abd9f4a232d072d0fa2741d6b8396438d96acc384df9bed98f19bbb84f88a58d90ade460a1123737df35fd4c53d04692e7832a4fdbcde8401f65e17ad868bb402e7e0a7eed3025afe9c2dc857ca9d6d4d8e9082173b139bf7816bae18fdbb078cf2ed8cb11afa212ffc0835ce22ba90660d5a6d04816fa384357784a8574e4c746961c649d078448b40a428f3ac0d54d56eaaedb2e68223aa2c24533ba1e31b5179a8ee8f3b6bc5b6984cb965ee5fb01322309478d3791713ca487ab2b075d441e1005f0e8d461a362837443ea6f132960d1804574dbac204099163e449d2573eae99366599e237d5271edd79d0baeb926739233783be65b772ca33227dc4e012fc4c3a77093a8d5a84442bc525e05b36c63a6719f943e090ac8389b8ad15ddff342b1603dd734c74423804ac29f3dea523e4d69cb4c1a066531f6c9e919e21a3a5a44acf8968a0f9001474a6356ab1d1428e3f0f701622a698a20af7f391198ad81e308d47615f5b10ae509aec9eff9a580cfda70bf7b6849c3ab721a80fbe7ac8513ffdb578a25c39860bbd4c3625b666d8b0f95c509f70daf19357f441fd81b8c1e7bceda1f735942363235bf73864bd9f7bf4b0a1e9dec7fe25d7ea872454f0734523c5da5f81304892316a1e9b448736279516087b0df771bbee4dede40e05ad165c03bc9efa917a5696faa2fd508c972a72d5bcac5d7e54e5b3c076052c864fb1d0d57f3391a39730200c62ae0eeaf5860310732cfb566d39957f20d62403315dee80ef180cf0ea528a202b4d0ce600b0521684354f08f8181f0c57fcf1417e3ca914c26cbdc07d27cdeed643885fc3b786282bff010cad57706d6de56f608ca15c06ad15d51ab60d9e9e372ea027aba3102924fa50f6dc3359154577fa68ae070eda8f65a9d470fff436112e26bd6d4efccc398aa8aa4133824900491da70ec783fbb75f3b9ea3596df5518f7c223ae912c079998891324c60ee53743b424a4096eed1c1e5d70dcc58828afd31bf5d87c683695e9508c4e0e98fb692f4b65d7ff81d6a83bba2107557fba2b352a8e35ffcee2756cb2ee4a5f87a15f467096b1655deab7344aa27bac4038089276d1ab88559ec830dda1e49e0a5e0b49f1f49f413593aa945229a9bd096b1b6d34c17889b9942f321ae64ce9c6c7769fb962c764a345e695c6de661f8d9f7ea643a74b5c0577a89ef87f3af9592c08000b000a010101060068002500000008004500a5754aa271d88f8810ed710b3b6a7007ce43af6daf31e2779ab0c98dc12a4351255f5277f9d709d6ef218f957374511a507f255e4386ead1612dd4e32570ede6a508bb11666cb37fdc4a2790a67122ba4cc9d04d7cc8f0d8bb1b869e1252d8090f2a9f3de0e682a9f0842b29326e8d0b4a8a8736e87c2e47734f8fc7d54e5095627e7b77ba3fd9457ebed479a0a2c6ab3c66d7c5b08902484f1cdf1fd079a0493d880805d759ab479a140c6f8fd1279b76ffa89eede249e110f9f1cf3db610e5f5750504555fcbccdcad3624d9568d975401e217ba9ad66e024e2f8c27aa8d5f", @ANYRES32=0x0, @ANYBLOB="8900350057d229abd1ef768fcfad18b9bd60e37aa2e5de7dda99b4d0f0edc678a62c820842fc4aa36f1dd38ffedfddc383ff15c9e95666e109e3f64584105c582ef4b3d4f35b5882b04823d1fb57cf9cd6746dc48acdb6ebd457869a9e9246c1490903d9ee55cfafe821801ffb27ab206855fc6f7c87a3b32d00fa55b37e579aaa23e8e5fa97dc346600000008007800", @ANYRES32=r6, @ANYBLOB="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"], 0x20c4}], 0x7, 0x0, 0x0, 0x2804c810}, 0x2404c040) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={[], 0x40, 0xe12, 0x7, 0x100000000, 0x3, r3}) preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 490.022344][T16630] ? free_anon_bdev+0x20/0x20 [ 490.027007][T16630] ? ovl_mount+0x30/0x30 [ 490.031248][T16630] mount_nodev+0x52/0xe0 [ 490.035486][T16630] legacy_get_tree+0xde/0x170 [ 490.040153][T16630] ? fuse_emit+0x7d0/0x7d0 [ 490.044560][T16630] vfs_get_tree+0x85/0x260 [ 490.048969][T16630] do_mount+0x1a15/0x28c0 [ 490.053295][T16630] ? copy_mount_string+0x30/0x30 [ 490.058223][T16630] ? copy_mount_options+0x59/0x320 [ 490.063326][T16630] ? copy_mount_options+0x293/0x320 [ 490.068511][T16630] ksys_mount+0xc2/0xf0 [ 490.072660][T16630] __x64_sys_mount+0xb1/0xc0 [ 490.077351][T16630] do_syscall_64+0xcb/0x150 [ 490.081850][T16630] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 490.087734][T16630] RIP: 0033:0x45ca59 [ 490.091617][T16630] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 490.111204][T16630] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:43:36 executing program 4 (fault-call:8 fault-nth:15): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 490.119582][T16630] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 490.127523][T16630] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 490.135466][T16630] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 490.143427][T16630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 490.151368][T16630] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 490.195550][T16669] FAULT_INJECTION: forcing a failure. [ 490.195550][T16669] name failslab, interval 1, probability 0, space 0, times 0 [ 490.208251][T16669] CPU: 1 PID: 16669 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 490.218379][T16669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.228407][T16669] Call Trace: [ 490.231692][T16669] dump_stack+0x14a/0x1ce [ 490.236004][T16669] ? devkmsg_release+0x11c/0x11c [ 490.240934][T16669] ? show_regs_print_info+0x12/0x12 [ 490.246097][T16669] should_fail+0x6fb/0x860 [ 490.250480][T16669] ? setup_fault_attr+0x3d0/0x3d0 [ 490.255475][T16669] ? selinux_cred_prepare+0x72/0x80 [ 490.260646][T16669] ? ovl_fill_super+0x249/0x4df0 [ 490.265552][T16669] should_failslab+0x5/0x20 [ 490.270021][T16669] __kmalloc_track_caller+0x5d/0x2c0 [ 490.275272][T16669] kstrdup+0x31/0x70 [ 490.279148][T16669] ovl_fill_super+0x249/0x4df0 [ 490.283904][T16669] ? xas_store+0x9a2/0x13b0 [ 490.288380][T16669] ? xas_find_marked+0x8c8/0xa10 [ 490.293285][T16669] ? ovl_mount+0x30/0x30 [ 490.297496][T16669] ? ida_alloc_range+0xa59/0xac0 [ 490.302399][T16669] ? delete_node+0x761/0x7b0 [ 490.306977][T16669] ? __radix_tree_replace+0x24d/0x2f0 [ 490.312315][T16669] ? idr_replace+0x1ca/0x240 [ 490.316872][T16669] ? up_write+0xa1/0x190 [ 490.321099][T16669] ? _raw_spin_lock+0xa1/0x170 [ 490.325827][T16669] ? up_read+0x10/0x10 [ 490.329862][T16669] ? sget+0x4cb/0x4e0 [ 490.333810][T16669] ? free_anon_bdev+0x20/0x20 [ 490.338470][T16669] ? ovl_mount+0x30/0x30 [ 490.342678][T16669] mount_nodev+0x52/0xe0 [ 490.346889][T16669] legacy_get_tree+0xde/0x170 [ 490.351531][T16669] ? fuse_emit+0x7d0/0x7d0 [ 490.355912][T16669] vfs_get_tree+0x85/0x260 [ 490.360311][T16669] do_mount+0x1a15/0x28c0 [ 490.364609][T16669] ? copy_mount_string+0x30/0x30 [ 490.369513][T16669] ? copy_mount_options+0x59/0x320 [ 490.374591][T16669] ? copy_mount_options+0x293/0x320 [ 490.379776][T16669] ksys_mount+0xc2/0xf0 [ 490.383899][T16669] __x64_sys_mount+0xb1/0xc0 [ 490.388459][T16669] do_syscall_64+0xcb/0x150 [ 490.392930][T16669] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 490.398788][T16669] RIP: 0033:0x45ca59 [ 490.402665][T16669] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 490.422238][T16669] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 490.430614][T16669] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 490.438569][T16669] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 490.446513][T16669] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 490.454450][T16669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 490.462388][T16669] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:39 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) 18:43:39 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) clone3(&(0x7f0000000280)={0x200, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x26}, &(0x7f00000000c0)=""/97, 0x61, &(0x7f00000001c0)=""/150, &(0x7f0000000140)=[0x0, 0x0, 0x0, r0, 0xffffffffffffffff, r1, r2, 0x0, 0xffffffffffffffff], 0x9}, 0x58) syz_open_procfs(r3, &(0x7f0000000300)='net/wireless\x00') 18:43:39 executing program 4 (fault-call:8 fault-nth:16): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:39 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1, r4}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x2) sendfile(r0, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:39 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) readlinkat(r0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)=""/126, 0x7e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:43:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x16, 0x117, 0x7}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) [ 492.907092][T16684] FAULT_INJECTION: forcing a failure. [ 492.907092][T16684] name failslab, interval 1, probability 0, space 0, times 0 [ 492.920537][T16684] CPU: 1 PID: 16684 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 492.930678][T16684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.940807][T16684] Call Trace: [ 492.944088][T16684] dump_stack+0x14a/0x1ce [ 492.948411][T16684] ? devkmsg_release+0x11c/0x11c [ 492.953345][T16684] ? show_regs_print_info+0x12/0x12 [ 492.958532][T16684] should_fail+0x6fb/0x860 [ 492.963199][T16684] ? setup_fault_attr+0x3d0/0x3d0 [ 492.968214][T16684] ? match_token+0x6a2/0x710 [ 492.972796][T16684] ? ovl_fill_super+0x705/0x4df0 [ 492.977721][T16684] should_failslab+0x5/0x20 [ 492.982216][T16684] __kmalloc_track_caller+0x5d/0x2c0 [ 492.987491][T16684] ? kstrdup+0x4c/0x70 [ 492.991581][T16684] kmemdup_nul+0x27/0xa0 [ 492.995812][T16684] ovl_fill_super+0x705/0x4df0 [ 493.000567][T16684] ? ovl_mount+0x30/0x30 18:43:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000002c0)='net/arp\x00') ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000380)={{0x1, 0x2, 0x3}, 0x7e994eee, 0x80000000}) preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) r4 = creat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc010}, 0x28050) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x5c}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) openat$cgroup_procs(r6, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) [ 493.004800][T16684] ? ida_alloc_range+0xa59/0xac0 [ 493.009729][T16684] ? delete_node+0x761/0x7b0 [ 493.014310][T16684] ? __radix_tree_replace+0x24d/0x2f0 [ 493.020456][T16684] ? idr_replace+0x1ca/0x240 [ 493.025039][T16684] ? up_write+0xa1/0x190 [ 493.029272][T16684] ? _raw_spin_lock+0xa1/0x170 [ 493.034030][T16684] ? up_read+0x10/0x10 [ 493.038092][T16684] ? sget+0x4cb/0x4e0 [ 493.042064][T16684] ? free_anon_bdev+0x20/0x20 [ 493.046726][T16684] ? ovl_mount+0x30/0x30 [ 493.050961][T16684] mount_nodev+0x52/0xe0 18:43:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1d, r5, 0xffffffffffffffff, r4, 0x0) keyctl$reject(0x13, r3, 0x8, 0xfffffffffffffc01, r5) [ 493.055195][T16684] legacy_get_tree+0xde/0x170 [ 493.059948][T16684] ? fuse_emit+0x7d0/0x7d0 [ 493.064359][T16684] vfs_get_tree+0x85/0x260 [ 493.068767][T16684] do_mount+0x1a15/0x28c0 [ 493.073090][T16684] ? copy_mount_string+0x30/0x30 [ 493.078021][T16684] ? copy_mount_options+0x59/0x320 [ 493.083130][T16684] ? copy_mount_options+0x293/0x320 [ 493.088312][T16684] ksys_mount+0xc2/0xf0 [ 493.092439][T16684] __x64_sys_mount+0xb1/0xc0 [ 493.097018][T16684] do_syscall_64+0xcb/0x150 [ 493.101492][T16684] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 493.107353][T16684] RIP: 0033:0x45ca59 [ 493.111218][T16684] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 493.131010][T16684] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 493.139400][T16684] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 493.147342][T16684] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 18:43:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x50) write(r0, &(0x7f0000000000)="c1856ea8cf3c109d7fe396e63916ad10e8451d9c31bd53dd3615ec8f36c2b2720d09e060631cb27996b564d59db9817cee76333b4084ef0f96262e32210dccf3588d1272489daa59b0752bac03fb1cd9fbd6ff038868e21b36bd8695462489b93cc6e811edcc2af65d896b20619bea5f8c576f", 0x73) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:43:39 executing program 4 (fault-call:8 fault-nth:17): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 493.155284][T16684] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 493.163248][T16684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 493.171189][T16684] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 493.225547][T16716] FAULT_INJECTION: forcing a failure. [ 493.225547][T16716] name failslab, interval 1, probability 0, space 0, times 0 [ 493.244347][T16716] CPU: 1 PID: 16716 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 493.254508][T16716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.264554][T16716] Call Trace: [ 493.267838][T16716] dump_stack+0x14a/0x1ce [ 493.272155][T16716] ? devkmsg_release+0x11c/0x11c [ 493.277075][T16716] ? show_regs_print_info+0x12/0x12 [ 493.282252][T16716] should_fail+0x6fb/0x860 [ 493.286649][T16716] ? setup_fault_attr+0x3d0/0x3d0 [ 493.291640][T16716] ? match_token+0x6a2/0x710 [ 493.296196][T16716] ? ovl_fill_super+0x630/0x4df0 [ 493.301101][T16716] should_failslab+0x5/0x20 [ 493.305579][T16716] __kmalloc_track_caller+0x5d/0x2c0 [ 493.310846][T16716] ? kmemdup_nul+0x42/0xa0 [ 493.315235][T16716] kmemdup_nul+0x27/0xa0 [ 493.319475][T16716] ovl_fill_super+0x630/0x4df0 [ 493.324221][T16716] ? ovl_mount+0x30/0x30 [ 493.328436][T16716] ? ida_alloc_range+0xa59/0xac0 [ 493.333351][T16716] ? delete_node+0x761/0x7b0 [ 493.337917][T16716] ? __radix_tree_replace+0x24d/0x2f0 [ 493.343318][T16716] ? idr_replace+0x1ca/0x240 [ 493.347914][T16716] ? up_write+0xa1/0x190 [ 493.352125][T16716] ? _raw_spin_lock+0xa1/0x170 [ 493.356868][T16716] ? up_read+0x10/0x10 [ 493.360905][T16716] ? sget+0x4cb/0x4e0 [ 493.364884][T16716] ? free_anon_bdev+0x20/0x20 [ 493.369528][T16716] ? ovl_mount+0x30/0x30 [ 493.373736][T16716] mount_nodev+0x52/0xe0 [ 493.377947][T16716] legacy_get_tree+0xde/0x170 [ 493.382595][T16716] ? fuse_emit+0x7d0/0x7d0 [ 493.386977][T16716] vfs_get_tree+0x85/0x260 [ 493.391448][T16716] do_mount+0x1a15/0x28c0 [ 493.395770][T16716] ? copy_mount_string+0x30/0x30 [ 493.400675][T16716] ? copy_mount_options+0x59/0x320 [ 493.405752][T16716] ? copy_mount_options+0x293/0x320 [ 493.410920][T16716] ksys_mount+0xc2/0xf0 [ 493.415045][T16716] __x64_sys_mount+0xb1/0xc0 [ 493.419600][T16716] do_syscall_64+0xcb/0x150 [ 493.424077][T16716] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 493.429957][T16716] RIP: 0033:0x45ca59 [ 493.433819][T16716] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 493.453407][T16716] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 493.461796][T16716] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 493.469737][T16716] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 493.477692][T16716] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 493.485718][T16716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 493.493671][T16716] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:42 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:42 executing program 2: rt_sigreturn() recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) r3 = gettid() r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000000c0)="077cc56b4c326d3529861d1e9e094fc150ffb4c483f89719b429") ptrace$cont(0x7, r4, 0x0, 0x10000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x200000000000006, 0x4) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) syz_open_procfs(r3, &(0x7f0000000000)='task\x00') 18:43:42 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000)=[r6, r7], 0x2) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:42 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r2 = dup(r1) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000140)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setrlimit(0x2, &(0x7f0000000040)) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xfffb) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000)="b0e9a20af2e53359ab70a70159ef50a44ad759b6a767e50228f20879521236c046c1e85bbceb1094ad97d97a4c1c2e21c2f9276592cd13329b4beb98e2d64facd2f1c302a4702de17d22600dc0dbee09e3a067657f314d29fff18d228a916b673f9c23d9e6b22ed50901abf7497a7b", &(0x7f0000000080)=@udp=r3, 0x4}, 0x20) 18:43:42 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfff, 0xc0) inotify_add_watch(r0, &(0x7f0000000100)='./bus\x00', 0x50000008) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000140)={0x5, 0x401, 0x9, 0x8, 0x7c, 0x7}) fcntl$setstatus(r1, 0x4, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7) r5 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:42 executing program 4 (fault-call:8 fault-nth:18): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIOCLEX(r1, 0x5451) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 495.895697][T16725] mmap: syz-executor.1 (16725): VmData 18558976 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 495.933617][T16727] FAULT_INJECTION: forcing a failure. 18:43:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000001540)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x1c) fcntl$addseals(r0, 0x409, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000000)=@caif=@dbg, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f0000000180)=""/96, 0x60}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/102400, 0x19000}, {&(0x7f0000000240)}, {&(0x7f0000001300)=""/169, 0xa9}], 0x8, &(0x7f0000001440)=""/88, 0x58}, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f000001aa00)=""/4096, 0x1000}, {&(0x7f000001ba00)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/94, 0x5e}], 0x5, 0x9) 18:43:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x5, {0x73, 0x6, 0x10004, 0x22, 0x800, 0x3}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r5, 0x23, 0x0, 0x0, {{}, {}, {0x8, 0x13, @l2={'eth', 0x3a, 'vlan0\x00'}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0x19, 0x0, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x8000) [ 495.933617][T16727] name failslab, interval 1, probability 0, space 0, times 0 [ 495.955815][T16727] CPU: 1 PID: 16727 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 495.965976][T16727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.976020][T16727] Call Trace: [ 495.979297][T16727] dump_stack+0x14a/0x1ce [ 495.983615][T16727] ? devkmsg_release+0x11c/0x11c [ 495.988546][T16727] ? show_regs_print_info+0x12/0x12 18:43:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000000)={0x0, 0x8000, 0x2}) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000000100)=""/156, 0x9c}, {&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000000380)=""/73, 0x49}], 0x6, 0x800000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/131, 0x83}, {&(0x7f0000000580)=""/158, 0x9e}, {&(0x7f0000000640)=""/180, 0xb4}, {&(0x7f0000000700)=""/154, 0x9a}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f00000007c0)=""/101, 0x65}], 0x6) [ 495.993736][T16727] should_fail+0x6fb/0x860 [ 495.998146][T16727] ? setup_fault_attr+0x3d0/0x3d0 [ 496.003157][T16727] ? match_token+0x6a2/0x710 [ 496.007742][T16727] ? ovl_fill_super+0x630/0x4df0 [ 496.012668][T16727] should_failslab+0x5/0x20 [ 496.017162][T16727] __kmalloc_track_caller+0x5d/0x2c0 [ 496.022445][T16727] ? kmemdup_nul+0x42/0xa0 [ 496.026850][T16727] kmemdup_nul+0x27/0xa0 [ 496.031083][T16727] ovl_fill_super+0x630/0x4df0 [ 496.035842][T16727] ? ovl_mount+0x30/0x30 [ 496.040066][T16727] ? ida_alloc_range+0xa59/0xac0 [ 496.044971][T16727] ? delete_node+0x761/0x7b0 [ 496.049551][T16727] ? __radix_tree_replace+0x24d/0x2f0 [ 496.054892][T16727] ? idr_replace+0x1ca/0x240 [ 496.059450][T16727] ? up_write+0xa1/0x190 [ 496.063659][T16727] ? _raw_spin_lock+0xa1/0x170 [ 496.068399][T16727] ? up_read+0x10/0x10 [ 496.072442][T16727] ? sget+0x4cb/0x4e0 [ 496.076393][T16727] ? free_anon_bdev+0x20/0x20 [ 496.081046][T16727] ? ovl_mount+0x30/0x30 [ 496.085264][T16727] mount_nodev+0x52/0xe0 [ 496.089479][T16727] legacy_get_tree+0xde/0x170 [ 496.094146][T16727] ? fuse_emit+0x7d0/0x7d0 [ 496.098547][T16727] vfs_get_tree+0x85/0x260 [ 496.102937][T16727] do_mount+0x1a15/0x28c0 [ 496.107257][T16727] ? copy_mount_string+0x30/0x30 [ 496.112161][T16727] ? copy_mount_options+0x59/0x320 [ 496.117244][T16727] ? copy_mount_options+0x293/0x320 [ 496.122410][T16727] ksys_mount+0xc2/0xf0 [ 496.126639][T16727] __x64_sys_mount+0xb1/0xc0 [ 496.131196][T16727] do_syscall_64+0xcb/0x150 [ 496.135720][T16727] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.141595][T16727] RIP: 0033:0x45ca59 [ 496.145458][T16727] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 496.165088][T16727] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 496.173464][T16727] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 496.181402][T16727] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 18:43:42 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x24942) 18:43:42 executing program 4 (fault-call:8 fault-nth:19): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 496.189340][T16727] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 496.197277][T16727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 496.205219][T16727] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 496.259805][T16759] FAULT_INJECTION: forcing a failure. [ 496.259805][T16759] name failslab, interval 1, probability 0, space 0, times 0 [ 496.277582][T16759] CPU: 0 PID: 16759 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 496.287828][T16759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.297872][T16759] Call Trace: [ 496.301158][T16759] dump_stack+0x14a/0x1ce [ 496.305476][T16759] ? devkmsg_release+0x11c/0x11c [ 496.310404][T16759] ? show_regs_print_info+0x12/0x12 [ 496.316105][T16759] should_fail+0x6fb/0x860 [ 496.320512][T16759] ? setup_fault_attr+0x3d0/0x3d0 [ 496.325501][T16759] ? match_token+0x6a2/0x710 [ 496.330058][T16759] ? ovl_fill_super+0x4a3/0x4df0 [ 496.334963][T16759] should_failslab+0x5/0x20 [ 496.339433][T16759] __kmalloc_track_caller+0x5d/0x2c0 [ 496.344684][T16759] ? kmemdup_nul+0x42/0xa0 [ 496.349068][T16759] kmemdup_nul+0x27/0xa0 [ 496.353277][T16759] ovl_fill_super+0x4a3/0x4df0 [ 496.358018][T16759] ? ovl_mount+0x30/0x30 [ 496.362228][T16759] ? ida_alloc_range+0xa59/0xac0 [ 496.367133][T16759] ? delete_node+0x761/0x7b0 [ 496.371690][T16759] ? __radix_tree_replace+0x24d/0x2f0 [ 496.377026][T16759] ? idr_replace+0x1ca/0x240 [ 496.381584][T16759] ? up_write+0xa1/0x190 [ 496.385793][T16759] ? _raw_spin_lock+0xa1/0x170 [ 496.390521][T16759] ? up_read+0x10/0x10 [ 496.394555][T16759] ? sget+0x4cb/0x4e0 [ 496.398515][T16759] ? free_anon_bdev+0x20/0x20 [ 496.403157][T16759] ? ovl_mount+0x30/0x30 [ 496.407377][T16759] mount_nodev+0x52/0xe0 [ 496.411588][T16759] legacy_get_tree+0xde/0x170 [ 496.416243][T16759] ? fuse_emit+0x7d0/0x7d0 [ 496.420627][T16759] vfs_get_tree+0x85/0x260 [ 496.425009][T16759] do_mount+0x1a15/0x28c0 [ 496.429305][T16759] ? copy_mount_string+0x30/0x30 [ 496.434239][T16759] ? copy_mount_options+0x59/0x320 [ 496.439327][T16759] ? copy_mount_options+0x293/0x320 [ 496.444498][T16759] ksys_mount+0xc2/0xf0 [ 496.448619][T16759] __x64_sys_mount+0xb1/0xc0 [ 496.453176][T16759] do_syscall_64+0xcb/0x150 [ 496.457676][T16759] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.463543][T16759] RIP: 0033:0x45ca59 [ 496.467413][T16759] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 496.486988][T16759] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 496.495363][T16759] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 496.503312][T16759] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 496.511256][T16759] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 496.519202][T16759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 496.527144][T16759] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:45 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$BLKRRPART(r5, 0x125f, 0x0) 18:43:45 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000380)="8f4d3d549c87df0ec1bc9e79b9ac8dd740612a", 0x13, 0x2008c883, 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) write$evdev(r1, &(0x7f00000000c0)=[{{}, 0x0, 0x5, 0x5}, {{0x0, 0x2710}, 0x1, 0x1, 0x7ff}, {{}, 0x2, 0x3, 0x7}, {{0x77359400}, 0x15, 0x8, 0xffff8000}], 0x60) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f00000001c0)="828a65b6be29583c19ace69c83b54c54066d8763ee90b903c02bb44e60d393f7426888123dbd759b0b6dc579a9d9f80d1e23519b67ef6c9fd90f74c87c2e0ddeacf83d5cf1376b740c95c5cbdee8b1655cd57c226eadf1d701f478a58eddc2598a13a4495e7c05831209557f256ad0ad8378620809e3ebe1eef62547", &(0x7f0000000240)=""/47, &(0x7f0000000280)="f02daa012303485619d6f1fde6651baa4f564c8b907ae6012516e4c228ee194295412034e194e0bc86bceba429828c7d5fe22e47ab3394e5", &(0x7f0000000300)="8b821928ad58508166d8936847ed69584357dfdd3f3bd9fd400320f76f675ec7139a9d80665857f11bba1bee73a8c911f9c575aa1e9dc5", 0x9705, r0}, 0x38) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r3], 0x1) 18:43:45 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0xc4) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf251c0000000c009900038700000000000008000100ffffffff08000100030000000c009900080000000200000008000100974f7c169c8746906972aa994d000000000c009910070000000400000008000100010000000800010004000000956b12e0cad654632cad1319e588fe5e512749d4067e0b9e3abd18f86db8f3d047d318f4f6b8dec7f6ff65e518bb6110e878d0fcfb299397a6b47111948faa6036b26674f5ab7c17effe79047a9f53b276aedc398dc773bcb10826df0a27a586de0958e7ed3cc5f0"], 0x60}, 0x1, 0x0, 0x0, 0x440}, 0x4080) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) ioctl$sock_netdev_private(r4, 0x89fb, &(0x7f0000000280)="7a0df29bb19508f5a1924aea722866621425439496013603029885ab7b924b7dfb000db4b1c0049519a612c557ca0a0a496a1e7d558fce05b94138d9c5eb345f033e0438ddd7287607013bd4506bea86f4ea2e130e568fad3eb4f6352b579e6e9606591357534cf13de963359dd70a9173af47d3f835be784f1d37c5402ff6fc62d2245cfcce2d359e964cb5922ed8c829a488ac24258e7338ab4008f15dd55b3cb1145aac2379cdca10973ec90371cccbf1cd5b8a58900ac407f7c1dd8ba85df8809f75e5e0b1d810a18318828fcf") ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000480)={0x1, 0x2, 0x1000, 0x1b, &(0x7f0000000380)="c60640f6d0f2051ef599d350efd4199d40e6efdb210b711b300c83", 0x8e, 0x0, &(0x7f00000003c0)="46a1b7aec683af4ced20f2f94a92418dadd9a9c6fe6092100d4f12a2a3026fdcbe842338e778a261bd75a91a661508bc2da359bf29b163cd1fb566b6aba20f7a67afa9d43c4c941a5fce5f9137bc8e7213250950e3a62f7c5cc0b088b9f4f639618ca9b99c58aa23bcea62351f6d079aa77c4bd64d62abf0da42c5301ce867583e5c4982815ef92a3b2e4a7aeffa"}) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffb) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f00000001c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @initdev}, &(0x7f0000000140)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:45 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) socket$xdp(0x2c, 0x3, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)="9f1747e727fab5fd4aac9a03ad5e584678cc0acf5a83a15527cee3131351533067deb1bb6024b693b0ded26cfaae47c818229f1d48d7a7ee795b17946155c7b52f733d58d722e61ebc74fba44c4c02b7f505059b2cdc8cd7356a221622448708ff695a01d0", 0x65}]) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) ioctl(r4, 0xffffffff, &(0x7f0000000000)="15a6dc495cdb408465a2e9be756ef08a87") r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000340)="fdb01905d4fdea9c60a047e9f185a3963dae6278b257f5f2e570afb42f33482efd46d5d2e2f32d36c69458a51eed5ee9240a643eb2ef8b6500696ede8d7afac90126999cc4209ec211e2013bf01e05e8d8cd5a1ef9f580a4d60d735e7fe7ea0c966a495a9ab807c5c00940254bf397a5292fdffca96fa6d889a1a74300000000000000000072aad01385a2d621b8bc34584c7d8b73a1e7f313dceb1cafe6454ec017eed6ee9e807b21d13470b21bd2b5eb4fdccfaf5dc273560f752d2b6b76113cfa6a6484bb328d8e94b77b51b77f46d3ef00232d43e4896aefbc9c7f491fcfa8a21f5e711037d77af35b357f9022bdb720", 0xf2) 18:43:45 executing program 4 (fault-call:8 fault-nth:20): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 498.950627][T16774] FAULT_INJECTION: forcing a failure. [ 498.950627][T16774] name failslab, interval 1, probability 0, space 0, times 0 [ 498.972263][T16774] CPU: 0 PID: 16774 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 498.982426][T16774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.992476][T16774] Call Trace: [ 498.995763][T16774] dump_stack+0x14a/0x1ce [ 499.000084][T16774] ? devkmsg_release+0x11c/0x11c [ 499.005012][T16774] ? show_regs_print_info+0x12/0x12 [ 499.010207][T16774] should_fail+0x6fb/0x860 [ 499.014616][T16774] ? setup_fault_attr+0x3d0/0x3d0 [ 499.019644][T16774] ? getname_kernel+0x55/0x2f0 [ 499.024398][T16774] should_failslab+0x5/0x20 [ 499.028904][T16774] kmem_cache_alloc+0x36/0x260 [ 499.033667][T16774] getname_kernel+0x55/0x2f0 [ 499.038242][T16774] kern_path+0x19/0x40 [ 499.042312][T16774] ovl_mount_dir_noesc+0x55/0x1a0 [ 499.047328][T16774] ovl_mount_dir+0x18b/0x270 [ 499.051903][T16774] ovl_fill_super+0xf62/0x4df0 [ 499.056657][T16774] ? ovl_mount+0x30/0x30 [ 499.060887][T16774] ? ida_alloc_range+0xa59/0xac0 [ 499.065810][T16774] ? delete_node+0x761/0x7b0 [ 499.070388][T16774] ? __radix_tree_replace+0x24d/0x2f0 [ 499.075751][T16774] ? idr_replace+0x1ca/0x240 [ 499.080333][T16774] ? up_write+0xa1/0x190 [ 499.084668][T16774] ? _raw_spin_lock+0xa1/0x170 [ 499.089418][T16774] ? up_read+0x10/0x10 [ 499.093473][T16774] ? sget+0x4cb/0x4e0 [ 499.097446][T16774] ? free_anon_bdev+0x20/0x20 [ 499.102107][T16774] ? ovl_mount+0x30/0x30 [ 499.106334][T16774] mount_nodev+0x52/0xe0 [ 499.110563][T16774] legacy_get_tree+0xde/0x170 [ 499.115257][T16774] ? fuse_emit+0x7d0/0x7d0 [ 499.119657][T16774] vfs_get_tree+0x85/0x260 [ 499.124068][T16774] do_mount+0x1a15/0x28c0 [ 499.128383][T16774] ? copy_mount_string+0x30/0x30 [ 499.133305][T16774] ? copy_mount_options+0x59/0x320 [ 499.138404][T16774] ? copy_mount_options+0x293/0x320 [ 499.143586][T16774] ksys_mount+0xc2/0xf0 [ 499.147730][T16774] __x64_sys_mount+0xb1/0xc0 [ 499.152304][T16774] do_syscall_64+0xcb/0x150 [ 499.156793][T16774] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 499.162669][T16774] RIP: 0033:0x45ca59 [ 499.166548][T16774] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 499.189172][T16774] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:43:45 executing program 1: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x74, 0x30180) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, r3, 0xa05, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x18}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f397214b", @ANYRES16=r3, @ANYBLOB="10002abd7000fbdbdf25130000000c009900ffffff7f02000000080001000000000008000100ffffffff06003600001000008500be001e2e59b9bc69b8d124333de9234b972588c5375faaed5b8fe71efc970381310a09e47d6744d39c17ab7224a1d547a9a0d7efd43432f8e23202b3bf8de1021282e1014a2065c5e4a77a839c3cac55200ccb546ff1d5268d8dfed7179ee7e7a1dff61bba5179a6d6e4c67b05bf3e3be89551e0fce5b438f32d5608a68aba7bb2b40a000000050019000100000017001300d57567b318f8061dfdd889508c0ede11358f52000600100060060000"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000008) [ 499.197571][T16774] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 499.205534][T16774] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 499.213499][T16774] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 499.221454][T16774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 499.229415][T16774] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1d, r1, 0xffffffffffffffff, r0, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1d, r3, 0xffffffffffffffff, r2, 0x0) r4 = add_key$keyring(&(0x7f0000001440)='keyring\x00', &(0x7f0000001480)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$instantiate_iov(0x14, r0, &(0x7f00000013c0)=[{&(0x7f0000000000)="8db94c50ed7138d3349929709b3d9b29678900ba833d5db431bb8c71afa1ebdf9a64df9cb28bc9dfdd70ee933b22ff8e42885b71475155854e3bedd39f98cdae98314f67b987d56f5c4fef", 0x4b}, {&(0x7f0000000080)="69c32074fd19d00eeef4c8277629d174e2957c65d98bfdb5e750581678a70c0d7fbaf10533a26c7686019f5016fff998f5ef11c70be628c01289aa54f0742accc215a11f173515e278e523102121647ae3db576f17e28e2dc380812d5213ca1d541ba9d1f7206a5f260736254ba33f83583af660e68e565469d463d9c437cee4010f207d22b0b6149e3bebddc42cc5350f582c543321d550ff42c0a69476d40948e3de3650b88426d29796be89a091965a4e70872a7382a377088beb5a055317b08eb7e56e76d86b75f53ac501abea526f9fd0162a5374140e0c16", 0xdb}, {&(0x7f0000000180)="0268cb304cf816a2a8b62a90351b93fae531f60142f78e85095a2c14fca3292aa7cadc789778fb53f9d06326600f3880211b28d270d8b2a855635a8467bcd1b6491e8065569c573c82a61e02880a1fe05b58b825b3e3e01daf3150d5b56f5e9bbb0604b8f4cced0f6c7eee62833f3fc5477aa9208d3dfa721d31899ddb114bedd50c8f9f47c243424459a3098553f44bc0d82517166f570a41a72bce2048cab7f1e9f21bc727f56896021e919feb799563b0428b4565b56dd94b26988b2c973ef65ea7c244523f695a61a53793972cce53b9fad60fbf1689057e79a83259ff5811d5699621e980ef3851b44d", 0xec}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="816099613fb81acb66d7f9713eb1257615dbcd17f38bda903159ec9676a4ac693610e66622968dd76f5f2893eabdc2ab9252ba81a22e4992084b0edb49b039f8b0a48a6e08bb5ea304f6a72ac49c7d8f1327dbebe3582a3b8986ca9df20345a3c187f4d1e34c570617ff87264fd2c9302273ed79e81488a2406f4f24e6fc3aaef9f94b8c324a66a0b9affe5bb7366547a7720d8577f0ddf1b5200dd1c07e41dfe3848b7b", 0xa4}, {&(0x7f0000000280)="7218a35b4f741c97cd902a4dff594c850fec9696799c88194a1ee49de2d758036a21f1afcd67605fadea94a87a9236936b35cb2eed400734d64bc6849d35", 0x3e}], 0x6, r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) 18:43:45 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x80, 0x1}}, 0x14) 18:43:45 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) pause() r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x82a45, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000001}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) lseek(r5, 0x20, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x1, 0x3f, 0x3, 0x200, 0x1000, 0x2, 0x100000000}, &(0x7f0000000040)={0xe94a, 0xfffffffffffffffd, 0x400, 0xb2, 0x1, 0x5, 0x8, 0x40}, &(0x7f0000000080)={0x8, 0x1cfb, 0x1000, 0x401, 0x2, 0x100000000, 0x6, 0x7}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x80]}, 0x8}) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$TIOCSIG(r0, 0x40045436, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) read$usbfs(r3, &(0x7f0000000180)=""/91, 0x5b) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 18:43:45 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xa, 0x280041) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r1 = accept4(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x80, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, r3, 0xa05, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x18}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r4, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r6}, 0x80, 0x0}}], 0x1, 0x2404c040) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24004090) [ 499.485712][T16774] overlayfs: failed to resolve './bus': -12 18:43:48 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:48 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0xa0805, 0x8) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x1, r4}, 0x10) r5 = geteuid() setreuid(r5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@dev={0xfe, 0x80, [], 0x3e}, @in6=@mcast2, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x60, 0x67, r4, r5}, {0xd33f, 0x3c4, 0x8, 0x7, 0x3f, 0x9, 0x8, 0x9}, {0x100, 0xffff, 0x1000, 0x2fb}, 0x7, 0x6e6bbc, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d5, 0x33}, 0x8, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3501, 0x0, 0x0, 0x2, 0xfc84, 0x800, 0x2}}, 0xe8) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x6, &(0x7f0000000580)=[{&(0x7f00000008c0)="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", 0x1000, 0x1000}, {&(0x7f00000018c0)="39b846695cf51181a6bef2ee62ec0735e912337c9e5196ec9dc30bc7784e9dba3f42217a31077dcd8ba3ee76f74bc0c2b6c7b76efbab1cf9663646c0e6051ce5d1d5c2de9bc0da261c3ba681b88d83c3aa74aee6b3118d0bb2ab440c23239e5419652979c1eae21864c161ff2489d5082b752a0d2188eedef3d31474b1c4a0cde7f0ffb90bea4a3259b3251881fe0cb7ecf2a1202b38c1d29ed6e875717fbbccb160508b4d1ed27737193827ea1a107837e7e52c65781e748d1db17ac46f9482666b0bc0d09a744d2128514cd1b3705051427696840cb1ff7966737997f4031473735792593523f10da78e2f43c402ab1c19c48de0b4e842fe2a822f6d386429d5b79d42a985d44e77eb766bd91ea089cf796af5e1e1c5eaa6672403bf217c550960e75f9d7a29a72f68a62b60c882ade2cdf39dfa815f42cc0826aeb387f7645e43e625e31eee95c009c07e87627948c4a391890c62859cbbf7e614c349e9179ee2eeca7738b953bcf10da9f679b0c8658d251064887938008640e81d65552a02f9cca5c6c92ecc7deaea51e6e5c38d3eae7221200de64c27ab2f257b73fe3e556d940e3795b8a873cd96fc9ffa3930eb8e1f95c179eec03b956631396de2a21e7a47266885700827e8e9972feba03e15b4b2aa6a333b43a4fbba38a612eeb707e53d56b84031cd7ca3d50d6d3d4f8714f4543f6f16939209af388db79db3106711da53ae2cfef6957b84a19e49e818b5e8a778516c02ed5b33d0fb54b366f93ca2a79143b04dfa47c85efe16d81bcf2338a1de271a6f619eca2aecd79a2ab93c3554af3cc0b40339f0beb592ca9be37b9ac5731e873e62c70edc411a42e2b2000b0dee7f1de32b5bade54900ca7fd329d15e8d1c0e255617c7b886f89433ef0a86075617e15504dceffc3834de270bf2b968c751e3c39503c3abd15603cb9562018d0ee1fb330287ce2ce7b3fe37a9b30354481fc4a06b54b7d9ba1f3d4f52961508e080a49152829c958abb0e760d18488868ae566363dc3b5c9a5cd0b9872e156dbe94b56695f7c9133c37b2c9daaaa805698e7a12cfa46418468d290a00e76480a25d428dcaab42d622a7c715ebf74d3d3fcccca18c1447f5491133cc4f84c1a97712c6b92415ac7fa2afc404b83cb2382b9df4afc660bb42f5f219ec8f437acbfb134a0c7d092cf96db0da4546d301c335642502b32dbb1f2bedf6f4719b19dd6ef8f2d6b54e3e79b560bbcbb22c6b00eed04408899380b1a56a7c2088331130fb0745b555bfbdf2194e7a4116bcfe2402d87724210c029db0c02b42864fd8df4be54079839ec3423233cf4b8f39f48b9a706697eef96ee2f0319d16d58ba1cdcc81d8185c5c6160cf33cf06b4e0bb256d68f9dc92d8c384b3ef10397807e4ee4e32dd22e04ec68c43801f5ef836a1368ecb7a018e4026ef8eb036f11e473fb73cfe4722859c3a61b840c659f58f07fa411b4b02c96011740f8f896a33653e73a6c43dd5c974fdde2534b171e203366c13ab4d095d1fd0e525b59d7c0c9d7908f16bcec22b6a36c9af3342a1008498b93a11a6dc162c41b9b00b64eaad58ad557161621c982eb15dbd75d60faa5a42912edafbdf32e81e39cd69c7b50755d3fc439f1d3e5052f17ec77d854c43c1d5ef581677a7541feaa9cab379347e4c10ad60c38c7a5e11cab72f7a5c0ebd20144bfdd324a240917b045d7416824c9b47e20ab85392f39cdfb7e2bbb0703fa6e92eeadaa62f2f2314e8596467bf103be7123c4fbefdb881d5fbb891171c2c326fab3f32f57226a4f997e3464bb5c0f9c4af1889ff7d895c6d0ea28de8dfa4229c87d7019eb2773c76f580f68f19f00b98e77be6ad9e8465f59c301e0697827ceda721fc27a1b104d1973bf6ee39a0f771f500c912e20127330d1cd87e7726b5a3e2976b7d9e6690837c56d83e428865043a167c9f71885803636178204fe2fa95ed213e03ee30e023fa6ef14225936b03baa4f49420f5de68c1e9926d7ff1ba8eff9a384ee49f0c94e771e16a158fbd8cd003a322f4b08019585aa4f9c0077f0f451185c53fa71930f6a5266fcdaad7fd8344f0aad9f07e0b3065183fc9aeb89c35b34fc0dd25734d84215fdb38a351d7e4362f90fbefed162d37d3a57d7b0f5feaeab374df0aba1f86bce3d39e6b0411bb917fab7811e9e62bcbb392dbeeb4845e1f7f21ed77f73f5e3f40a3bd6a46f06808b019fa0ed99d462850fc44f9ab30055075c23f7748eaa88b40587e9e666a3cd9ff1f08ef789114175a54e670412effc07bcaa0232817c1bd52c99dbf656ce0e0de8e033ba1f13bbd1d3233d290604555627f68d19acd13f3eae254b5206e3cb15f13cc622dbe492f20622429cad81766f2fef240c6c48e76870e7a1d6ac27f6a69fa7a4ed5d5431bb3826b992776c7e1aa803821f23aca63bf8fa718b5d480a774a15e6e5877ee6c7b361a27ed692c5e40cfdcc20fb8d99a2ccd471e82b4dfd4d08e112f16f21502a7ab1efa79412ffaaed7e41bd997e0e1b00723ca8bbcc0ad772dd2f0d5724e0118f291be80500f8eb522ec0a8cee44a0e135de7635978f167211148a56ae2219efb0e3645475da42aedf491e23c1f6aa900f0d7fe0be6d540e727bc04d44a239a35d84b10d11aa6ece7145ace80f745b631014e034f04789bff953fd9136ba4ea6316ebf5cec43e27f90053fb29672314c36223e6a78db2c020004cdc636fd32f98264d0a3c79038d900c4d033c5fa3f1e5a031c9abfd8e078d5ff1a73d3e066f5fe352fc04d5aebe807610bd2522c1c59f60bd09d618d44801b089125559b42840f71a2ada2f6bfaa62d13e9253e6dfaea1c9862ba70d20f260c5bb2bd0a26b07abbf01ac814f1823b42d1ec3fe63f66cbc3bdb874944d31da388643532f185db700fa3d9d0ce4573b7d5ec21cb177570e59d68bc0395ff398f126a15bd535cdfabe497126b4aded7503688d8dbd082f52854343c39ab0ad3aace363451f8c9500d8b1cdecba821c8ee7d36dfd300860d41c889c2c8a32a1a47832f9313db28ed3efec9659310c6aaad704b3cef76faf2639cb4b0c4f5f3fc7a9fdfdcf8bfc32e902fce6f70c850ee42784cb76fc23e8a7820cb3bdfa08f57e1ef3c6248dd549305cb444b9a8054ab18f828313491333093be9a9ca12e3879eb4303fd0e0f494e8cc99b31e3b7f0c3e9eca35e38498625d8c49110ea5355d276c5fffddb830642d3ca935e420eff1fe5a08b80b946297a82c829c42cebb8129e0303f407191779d75662524e2bef5355c47a9eff95b1148388c4775a7842e7d1262e63103793ab8a0d8ad1e961d5cf15522123ee57802a27c9664cf2401a6de97f4d7aeedd772d1323cd756c345ae1b7c6a8cd1533a9d173d816d99e78204e9bdf52a82ed418799e0048dad157594c0651101dd7b4bd5dccb43460f5aa82d7bf38c7f95f0965abd5c8f1298a07a4d34598c3a0d3a34fd33b10108cdcc5d7c36a02c5905aa9669b0f292edde54e6f019d8ed74cd7a34065a8e600359223404dff15895eeb8337659e531a87df84adc97f2af5996f3f5c8070cb34130c0fbaf1c8b6b3da5c6a43088aa96859a0222d559647f9c4f71ba16145ef6553372386d41fff145f60203c28afb189761e17d4c074a9d5562023720e84a8f4c4e093ac0b5ce6ead039421ac0852536666d1922a5b910b88149f0e63475103932de09543694d17df2c65a5f2ce92976e79b0b64cf9b07434bdee44a3468efaa17ba3f51fd691bfbdabf9a0e19e016b1e7a7e4ebd72487011ec0a444fe1606bd4c6fd190e85e7167cd713494684263c7a0abd382d30d4711a2c9e1fe8eff09042ad594da4ea27ccd14999cf35d5e58eedb35fd8ec640a0e29890e1b6a76398ecf7800f68b684cc21eb27ff907e63714b934559ceeebd4a5279d4e6759b025203df7cd38027695e07ee59336eecb03e3aa4dc5dfefc69146e229d9af5bb2955e448fa2f7a0e45d3a941a14cafa72c8a3affd38bcf9ecd473148f19451cfe74a4d2ba45791bf0377a6e3656a71ffd720d9d87cd05795f8ff452219c068f385173620bac3eb986ab90e94055032b9ff096e7c40de2939d720513739efd4e1f413eda2d3531d02d29efb4a65f55e228bcb42f942aa92a7c1e3bafb7071af91a2a48e0c5feaccbdfd52ea11555350cf0ca0d8a6ae45a0a63b80945625f15fbb32a8afbae0c5406b525ac1ff80410f11b1cd7f705e2f7591154b4ae347426d673575318d54554c29a59249116ca95a54a7ac73be4ed95b6f0895e9f99fe45d5d3298d2413ec8308d268443b1823a914a63f37c8de620a7c6c02cffda91a907a9fdc1cb176ab32069ff2ea5c9cc033504e55832ca976931179d1c1f81e5e1b1578d2cbfcd2314d8ceb457a61ccc28f9ef2201d22daf522010eaf8111623c1ebe2cb0c33e6e736c11f4cabdaa18d5cc8f29ced71d643e71982df637d06afa6b177a8655ca59fc6b34839eb7fb258751884927e8a0bb9a71492aba8f41c6ed704e2cb7f90228ceeb5ee8dabb3f43d8a3134b7d80bfb25818f86ceb6d434013c88c5df45d3b6af027c3478b8725bb0841e49e4a8904bc54595db7396a69fe4cb7578015be43aafaf2cdead10260a7d555c4e7de75cd9723f2d70b0a6b10ab5b1a8715b65f9e38fdfc2bae06f625b2e334c9fc0fa387d14c09b3ed537270d9380c99154671d5121c16f4a428d40987785076501ec9d0014f8796109e2c736ab82ab999dd24fb3d90020b6e3bf084780765f15c9d9c00426f102961807d07b0342c4fb4225e14f012f798a6ff2e66a4991ae9b2106b00f43e6332a33bbce773c8218f24881366b06bdf65e5589a51f535f4ede01e36430316e65808f6a347046a945ffcfe0aa2f624a671709528c5a87e0d7dc02a5570cf2e383adeed3cecdb4a57eb74cedf9c6bf111af93fdd4ad98433f588ce4ec11395d93c5455c9f0ab4a8565125cd24a639ee347677a6fe10b9542ed0043435526e44156eec2680b967b2ce7fef30bf3bcc33ffd2bc39bb7065d0580b512330ba7292f86fd3a75c5874d8def7f4870b51943552cee999736a84ea2927a5ed4d77b81975384958d7087dbe5ec3ddb3379f15660221ff453f333e005d7534610909e8d356f294bccb8a82bded392ae9c1afecd577f291b5cb952b6948c27eebeb3c76fa9f63ab66ecd7814513bab5dec1d1bc3644f3259d9849a7b7287fe4a7a4bcdd537d4937a750b8a0005b6db0ac1b187440a3c19d73687019940996701a10e5981835b51101a68b01b72c2a3e8368b3f43b302cf59c8745c2a7d981aa5bdc33cadd893fa5dbde3fa8036ab9eed2bf461d94821753fd47c49206309f891e7dd040bb375f3106f8b4fe39a25b980d465e1149930e49a765c4921ad619ed7fe07193e53c5cbe197d0b943e6cb60fae5eabba9a564feb6add0760c6bd6d327d8bb7a5ed8319f8440371b74c41a93d6420e872bae760195bb97eedd37336925380cec3184d1d3c5a55da9e4887732b83ff31f7e4fef4f99ae28e7db787d948de61a2fbe68955460436a4cd27f25e18f0c10d489dff338c7f60744fd1cb63d97faed32133dc55914200f2f1c270b24d0992e25cdf6eeb75283bc8c01601a80b4cac6d87947a05521a7b18a435d3cdb8de2f00f89fb0dca44f785b242ca0ee3a99946cf2676de368b2740b0df436fe09cdb29caf9a436e98402dc3659ce15ad82525c25d03ec9b1df7445c3f26562d9d83b16404e72ca7e469cc91230bb76285ed7e058c598471eb7694311ee9f64ae8bd0c4", 0x1000, 0x6}, {&(0x7f0000000140)="7155ed386f99afbcf87f94e6f9b9c7a7581bfb717e33a6713b5a5ea640ac0e664bcc5d62c55ed72b69f2c982", 0x2c, 0x8}, {&(0x7f00000001c0)="c535267518f4d02b2faf946f7dacbbaf653d8965c3e71c4f044d2a", 0x1b, 0x8}, {&(0x7f0000000300)="c50442005d85ea572feb97ecb9ef65f984b56788926bdc6388c6387ee229e959927111ec4392365cbaad0853ef35f37a52346138bb5a3c1f39840b2be86ad4f3c91dcec9932ff870bcb2dafa671fd0852b9a40a960b87f35c439116f9a037d766bd0c7b4093375a9370f0fc2bc236641ba5ae8a8fe02ce37b15f8f8ddd3b10aa1f6f33daa1300d58a0e86775de038ccd637be69598c4a9c4db99ae4de585f25e5e5ee917240bc868a0e62cc56e8f86ba0a6b4f0d729fbe53aac28c27f18c99d75cc5a31ed2c8b65b398e43f0797e056a0f1b8375460dd499511c9ab52f67821b45323d0d7e8cf96737aec6e974bf7d630c257d323323f1", 0xf7, 0x100000001}, {&(0x7f0000000400)="386f4f7e90c2b40203d794d542e04b9e1e9dc0bd5f36b68adb6f22b2607e09f9d0c6c3eeb340e2ddf8445d275c195d537fca7dfe1ec76409225f0ab13878ad2632922881b60a4a8bb8e7acf20661e76880b037fd87fcc54dd1ff1c27cde745b11437ab15323facb8fdbb40556db6babb0d66bdf9c847f9cfbe571f3fdfe32e8a1253890d76f5f0858a341b1b8e3d56915eea350c53e8d062794899f1b93c40675a456bf61f94d27408d21e618fb094d608f7a4b93d9be9fff3c827dda4b1fe6657e5941a07", 0xc5, 0x8000}], 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='dots,euid>', @ANYRESDEC=0x0, @ANYBLOB="36657569643e3146d8e56b1c7a3f4f13f016f62f61565872aeac49d1a95f22ec73291e3bc3780f6e696ca0c24b172409c3d69a2c9109294e9a6aff277202f0b6ff10c845b72f45719c61fe7a3a9887fdfc46", @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYRESDEC=r5, @ANYBLOB=',dont_appraise,seclabel,\x00']) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x7) 18:43:48 executing program 4 (fault-call:8 fault-nth:21): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:48 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000000)=""/193) fspick(r1, &(0x7f0000000100)='./file0\x00', 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000300)={0x4, "fca737b7f244435e27b3a04f9d5e044fbf09efcb2e425398efb2639c528ca69c1f7188b910959bcd205110f7b27dbef1f5e8d63301502dceeefe5205717af613"}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) fcntl$addseals(r4, 0x409, 0x16) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f00000001c0)={'NETMAP\x00'}, &(0x7f0000000200)=0x1e) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) 18:43:48 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) fcntl$addseals(r4, 0x409, 0x4) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000180)=0x8) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r3, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x12, r6}, 0x80, 0x0}}], 0x1, 0x2404c040) connect(r2, &(0x7f0000000080)=@can={0x1d, r6}, 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) 18:43:48 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x20, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x202002) r10 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000000100)) keyctl$chown(0x4, r9, r7, r8) fchown(0xffffffffffffffff, r5, r8) 18:43:48 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x1) [ 501.942632][T16825] FAT-fs (loop3): Unrecognized mount option "euid>000000000000000000006euid>1FØåkz?Oðö/aVXr®¬IÑ©_"ìs);Ãxnil ÂK$ ÃÖš" or missing value [ 501.949573][T16824] FAULT_INJECTION: forcing a failure. [ 501.949573][T16824] name failslab, interval 1, probability 0, space 0, times 0 [ 501.970349][T16824] CPU: 1 PID: 16824 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 501.980497][T16824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.990544][T16824] Call Trace: [ 501.993820][T16824] dump_stack+0x14a/0x1ce [ 501.998130][T16824] ? devkmsg_release+0x11c/0x11c [ 502.003043][T16824] ? show_regs_print_info+0x12/0x12 [ 502.008289][T16824] ? find_inode+0x40d/0x4c0 [ 502.012789][T16824] ? _raw_spin_lock+0x170/0x170 [ 502.017609][T16824] should_fail+0x6fb/0x860 [ 502.022003][T16824] ? setup_fault_attr+0x3d0/0x3d0 [ 502.027003][T16824] ? _raw_spin_lock+0xa1/0x170 [ 502.031746][T16824] ? _raw_spin_trylock_bh+0x190/0x190 [ 502.037193][T16824] ? __percpu_counter_sum+0x19b/0x1e0 [ 502.042551][T16824] ? ovl_lookup_inode+0x120/0x120 [ 502.047594][T16824] ? ovl_alloc_inode+0x1b/0x90 [ 502.052332][T16824] should_failslab+0x5/0x20 [ 502.056821][T16824] kmem_cache_alloc+0x36/0x260 [ 502.061585][T16824] ? ovl_free_fs+0x640/0x640 [ 502.066144][T16824] ? ovl_lookup_inode+0x120/0x120 [ 502.071138][T16824] ovl_alloc_inode+0x1b/0x90 [ 502.075791][T16824] ? ovl_free_fs+0x640/0x640 [ 502.080358][T16824] iget5_locked+0xa2/0x3e0 [ 502.084804][T16824] ? ovl_get_trap_inode+0x190/0x190 [ 502.089973][T16824] ovl_get_trap_inode+0x88/0x190 [ 502.095157][T16824] ovl_fill_super+0x1397/0x4df0 [ 502.100014][T16824] ? ovl_mount+0x30/0x30 [ 502.104251][T16824] ? ida_alloc_range+0xa59/0xac0 [ 502.109173][T16824] ? delete_node+0x761/0x7b0 [ 502.113741][T16824] ? __radix_tree_replace+0x24d/0x2f0 [ 502.119098][T16824] ? idr_replace+0x1ca/0x240 [ 502.123671][T16824] ? up_read+0x10/0x10 [ 502.127718][T16824] ? sget+0x4cb/0x4e0 [ 502.131849][T16824] ? free_anon_bdev+0x20/0x20 [ 502.136528][T16824] ? ovl_mount+0x30/0x30 [ 502.140741][T16824] mount_nodev+0x52/0xe0 [ 502.144958][T16824] legacy_get_tree+0xde/0x170 [ 502.149623][T16824] ? fuse_emit+0x7d0/0x7d0 [ 502.154007][T16824] vfs_get_tree+0x85/0x260 [ 502.158485][T16824] do_mount+0x1a15/0x28c0 [ 502.162793][T16824] ? copy_mount_string+0x30/0x30 [ 502.167706][T16824] ? copy_mount_options+0x59/0x320 [ 502.172788][T16824] ? copy_mount_options+0x293/0x320 [ 502.177968][T16824] ksys_mount+0xc2/0xf0 [ 502.182116][T16824] __x64_sys_mount+0xb1/0xc0 [ 502.186677][T16824] do_syscall_64+0xcb/0x150 [ 502.191159][T16824] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 502.197028][T16824] RIP: 0033:0x45ca59 [ 502.200951][T16824] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 502.220534][T16824] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 502.228926][T16824] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 18:43:48 executing program 4 (fault-call:8 fault-nth:22): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 502.237056][T16824] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 502.244998][T16824] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 502.252940][T16824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 502.260878][T16824] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:48 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x5f5042) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x10, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000085) recvmsg(r0, &(0x7f00000014c0)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000100)=""/152, 0x98}, {&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/34, 0x22}], 0x7, &(0x7f00000013c0)=""/203, 0xcb}, 0x40002040) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001600)={&(0x7f0000001700)=ANY=[@ANYBLOB="ac000000000b0500000000000000000007000009190001002f6465762f6275732f7573622f3030232f30302300000000190001002f6465762f6275732f7573622f3030232f3030230000000008000340000000010500010000000000190001002f6465762f6275732f7573622f3030232f3030230000000008000240000000030800024000000004190001002f6465762f6275732f7573622f3030232f3030230000000008000340000000019e4f7266b19194a8db10b759f7ffff3ae49f4b73e50f45385c86af631b106ab6e178dfd6a26c1f0aafc5ddc9ca5704515c36d53546ca63df3b3615354a4b24dbea7b04f71e693c2ecbfcad02835dfabb896d7a8c6d349d310680133e75672ff1ce8c700c63d89c939b31ddc9e1160227a8d4d9287f5a19979a484be7b69fb25a04eadbfe35b950e4d2f80c43d4201de620ab0db24a4cd47b1f455894913ea44278986130af0894ccbdbbd0e2521f78e3cfdc8920da389c5d0d008cc1aae1070235b00ccd252c8c79d0dd3855f0dd7dd9feec66308150a99c6ebcbf6cbd1ed0fdf7fb52"], 0xac}, 0x1, 0x0, 0x0, 0x4048010}, 0x20000040) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000001540)=[@mss={0x2, 0x1}, @mss={0x2, 0x4}], 0x2) 18:43:48 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/8) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x111301) 18:43:48 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x400000000000, 0x41) [ 502.302443][T16842] FAT-fs (loop3): Unrecognized mount option "euid>000000000000000000006euid>1FØåkz?Oðö/aVXr®¬IÑ©_"ìs);Ãxnil ÂK$ ÃÖš" or missing value [ 502.344863][T16849] FAULT_INJECTION: forcing a failure. [ 502.344863][T16849] name failslab, interval 1, probability 0, space 0, times 0 [ 502.357644][T16849] CPU: 1 PID: 16849 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 502.367760][T16849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.377832][T16849] Call Trace: [ 502.381092][T16849] dump_stack+0x14a/0x1ce [ 502.385390][T16849] ? devkmsg_release+0x11c/0x11c [ 502.390311][T16849] ? show_regs_print_info+0x12/0x12 [ 502.395493][T16849] should_fail+0x6fb/0x860 [ 502.399881][T16849] ? setup_fault_attr+0x3d0/0x3d0 [ 502.404872][T16849] ? security_inode_alloc+0x32/0x1f0 [ 502.410172][T16849] should_failslab+0x5/0x20 [ 502.414644][T16849] kmem_cache_alloc+0x36/0x260 [ 502.419383][T16849] ? from_kuid_munged+0x3b0/0x3b0 [ 502.424428][T16849] security_inode_alloc+0x32/0x1f0 [ 502.429512][T16849] inode_init_always+0x37c/0x800 [ 502.434418][T16849] ? ovl_lookup_inode+0x120/0x120 [ 502.439428][T16849] iget5_locked+0xb9/0x3e0 [ 502.443813][T16849] ? ovl_get_trap_inode+0x190/0x190 [ 502.448977][T16849] ovl_get_trap_inode+0x88/0x190 [ 502.453882][T16849] ovl_fill_super+0x1397/0x4df0 [ 502.458700][T16849] ? ovl_mount+0x30/0x30 [ 502.462909][T16849] ? ida_alloc_range+0xa59/0xac0 [ 502.467815][T16849] ? delete_node+0x761/0x7b0 [ 502.472374][T16849] ? __radix_tree_replace+0x24d/0x2f0 [ 502.477713][T16849] ? idr_replace+0x1ca/0x240 [ 502.482376][T16849] ? up_read+0x10/0x10 [ 502.486412][T16849] ? sget+0x4cb/0x4e0 [ 502.490363][T16849] ? free_anon_bdev+0x20/0x20 [ 502.495015][T16849] ? ovl_mount+0x30/0x30 [ 502.499231][T16849] mount_nodev+0x52/0xe0 [ 502.503452][T16849] legacy_get_tree+0xde/0x170 [ 502.508132][T16849] ? fuse_emit+0x7d0/0x7d0 [ 502.512548][T16849] vfs_get_tree+0x85/0x260 [ 502.516968][T16849] do_mount+0x1a15/0x28c0 [ 502.521272][T16849] ? copy_mount_string+0x30/0x30 [ 502.526213][T16849] ? copy_mount_options+0x59/0x320 [ 502.531308][T16849] ? copy_mount_options+0x293/0x320 [ 502.536490][T16849] ksys_mount+0xc2/0xf0 [ 502.540632][T16849] __x64_sys_mount+0xb1/0xc0 [ 502.545209][T16849] do_syscall_64+0xcb/0x150 [ 502.549694][T16849] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 502.555557][T16849] RIP: 0033:0x45ca59 [ 502.559421][T16849] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 502.579117][T16849] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 502.587500][T16849] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 18:43:48 executing program 4 (fault-call:8 fault-nth:23): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 502.595455][T16849] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 502.603430][T16849] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 502.611403][T16849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 502.619360][T16849] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:48 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) write$P9_RVERSION(r5, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x4b, 0x8, '9P2000.L'}, 0x15) [ 502.711842][T16861] FAULT_INJECTION: forcing a failure. [ 502.711842][T16861] name failslab, interval 1, probability 0, space 0, times 0 [ 502.727874][T16861] CPU: 1 PID: 16861 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 502.738118][T16861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.748161][T16861] Call Trace: [ 502.751444][T16861] dump_stack+0x14a/0x1ce [ 502.755765][T16861] ? devkmsg_release+0x11c/0x11c [ 502.760692][T16861] ? show_regs_print_info+0x12/0x12 [ 502.765878][T16861] ? find_inode+0x40d/0x4c0 [ 502.770382][T16861] should_fail+0x6fb/0x860 [ 502.774791][T16861] ? setup_fault_attr+0x3d0/0x3d0 [ 502.779814][T16861] ? alloc_vfsmnt+0x24/0x470 [ 502.784393][T16861] should_failslab+0x5/0x20 [ 502.788890][T16861] kmem_cache_alloc+0x36/0x260 [ 502.793639][T16861] ? kmem_cache_alloc+0x1d5/0x260 [ 502.798652][T16861] alloc_vfsmnt+0x24/0x470 [ 502.803060][T16861] clone_mnt+0x68/0xca0 [ 502.807208][T16861] clone_private_mount+0x8d/0xe0 [ 502.812140][T16861] ovl_fill_super+0x1442/0x4df0 [ 502.816984][T16861] ? ovl_mount+0x30/0x30 [ 502.821217][T16861] ? ida_alloc_range+0xa59/0xac0 [ 502.826146][T16861] ? delete_node+0x761/0x7b0 [ 502.830722][T16861] ? __radix_tree_replace+0x24d/0x2f0 [ 502.836082][T16861] ? idr_replace+0x1ca/0x240 [ 502.840662][T16861] ? up_read+0x10/0x10 [ 502.844725][T16861] ? sget+0x4cb/0x4e0 [ 502.848696][T16861] ? free_anon_bdev+0x20/0x20 [ 502.853360][T16861] ? ovl_mount+0x30/0x30 [ 502.857595][T16861] mount_nodev+0x52/0xe0 [ 502.861825][T16861] legacy_get_tree+0xde/0x170 [ 502.866486][T16861] ? fuse_emit+0x7d0/0x7d0 [ 502.870890][T16861] vfs_get_tree+0x85/0x260 [ 502.875296][T16861] do_mount+0x1a15/0x28c0 [ 502.879621][T16861] ? copy_mount_string+0x30/0x30 [ 502.884557][T16861] ? copy_mount_options+0x59/0x320 [ 502.889657][T16861] ? copy_mount_options+0x293/0x320 [ 502.894852][T16861] ksys_mount+0xc2/0xf0 [ 502.898998][T16861] __x64_sys_mount+0xb1/0xc0 [ 502.903687][T16861] do_syscall_64+0xcb/0x150 [ 502.908183][T16861] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 502.914062][T16861] RIP: 0033:0x45ca59 [ 502.917949][T16861] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 502.937565][T16861] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 502.945965][T16861] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 502.953923][T16861] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 502.961885][T16861] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 502.969842][T16861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 502.977802][T16861] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 502.995608][T16861] overlayfs: failed to clone upperpath 18:43:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x1b, 0x0}, 0x3e}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x0, &(0x7f0000002600)=[{&(0x7f0000000080)=""/65}, {&(0x7f0000002680)=""/215}, {&(0x7f0000002780)=""/4096}, {&(0x7f0000000200)=""/112}, {&(0x7f0000001300)=""/171}, {&(0x7f0000001580)=""/4096}, {&(0x7f0000002580)=""/78}], 0x0, &(0x7f0000001440)=""/183}, 0x622}], 0x400000000000048, 0x40000141, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) 18:43:51 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) io_submit(0x0, 0x5, &(0x7f00000015c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000280)="582006045b000a41b54881980347b9954da15c8971b3487817ccdcdd2e997fe7303aa390644edfbd259f1f785aa8d7df7b78ce81890c9d53e6d39b15a08143c75a745ec8573b1ae40314a98ef4769f802cd7ea680104bb40431b7c7b39d16c29c7804afb41e09ac56dd658af17652bba05bc9df510aae1adf29c68fe965c9b32b2c9e99be8a91ef61b6364d2217e07ceac7cdc519f2d8f7a98ea2a5fb96f4e8422de", 0xa2, 0x0, 0x0, 0x1, r4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0xfb, r5, &(0x7f0000000580)="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", 0x1000, 0x7, 0x0, 0x3, r0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x6, r3, &(0x7f00000001c0)="888bb72ed78a287a5a", 0x9, 0x2, 0x0, 0x2, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x8, r6, &(0x7f0000000380)="87fb7dafe98a87101b51fe419baa6c1389a226d2c994ee6680ff4600444d6126ec26830285e2713cb7091017f7d236b4fdfe139919fd175979739b660af0f44e534619d647d038d2c97a349a28c7d377ecfb4fe24b8fc65c16a7e9deb1022a808ab80c77be67f6bfff2b02715b95b5d95bb40bddd91c52f0c089d051b3bac1bacdf13215589b915a82f4c019a45caea217303d0dfddb7402dd65eefda18c427820dc409c0796f26c41c0324b65fcfc2fd46f5b55", 0xb4, 0x7f, 0x0, 0x3, r7}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x8, 0x7fff, r8, &(0x7f0000000480)="f66ca972246a654dec99cdca49288b505b96d2a1c4ef51ab8d8819ed418a89667940a19458c3f064a642cf372fcd5fb4358b99b71e2e6cfb786e1cab73b9833fcc0fbaa5dc71eaef1e10d8f54b3d2a4c1061213217b2f7b679c254197a67fc3e688b939ea08482ca44846d59373e44292c72368224f2c8d1fe908dfbfeee28df3797f6a7c1b3c7f9b3c7de754216ece9553053398ad800a0a8", 0x99, 0x7ff}]) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r9, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:51 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) ptrace$cont(0x7, 0x0, 0x0, 0x0) r6 = pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f00000001c0)={0xc0000010}) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r4, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r7}, 0x80, 0x0}}], 0x1, 0x2404c040) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@ipv4={[], [], @remote}, @remote, @dev={0xfe, 0x80, [], 0x18}, 0x4, 0x8, 0x9, 0x500, 0x1, 0xa, r7}) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r8, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:51 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:51 executing program 4 (fault-call:8 fault-nth:24): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:51 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r1}, 0x80, 0x0}}], 0x1, 0x2404c040) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r4}, 0x80, 0x0}}], 0x1, 0x2404c040) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f00000006c0)=0xe8) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r6, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r8}, 0x80, 0x0}}], 0x1, 0x2404c040) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wg0\x00', r8}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x120, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 18:43:51 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed2}, 0x7ff}], 0x1, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) [ 504.983030][T16877] FAULT_INJECTION: forcing a failure. [ 504.983030][T16877] name failslab, interval 1, probability 0, space 0, times 0 [ 505.000041][T16877] CPU: 0 PID: 16877 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 505.010232][T16877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.020258][T16877] Call Trace: [ 505.023518][T16877] dump_stack+0x14a/0x1ce [ 505.027823][T16877] ? devkmsg_release+0x11c/0x11c [ 505.032732][T16877] ? show_regs_print_info+0x12/0x12 [ 505.037896][T16877] ? ida_alloc_range+0xa59/0xac0 [ 505.042801][T16877] should_fail+0x6fb/0x860 [ 505.047185][T16877] ? setup_fault_attr+0x3d0/0x3d0 [ 505.052200][T16877] ? idr_replace+0x240/0x240 [ 505.056762][T16877] ? alloc_vfsmnt+0xa3/0x470 [ 505.061319][T16877] should_failslab+0x5/0x20 [ 505.065798][T16877] __kmalloc_track_caller+0x5d/0x2c0 [ 505.071071][T16877] ? alloc_vfsmnt+0x24/0x470 [ 505.075629][T16877] kstrdup_const+0x51/0x90 [ 505.080022][T16877] alloc_vfsmnt+0xa3/0x470 [ 505.084414][T16877] clone_mnt+0x68/0xca0 [ 505.088544][T16877] clone_private_mount+0x8d/0xe0 [ 505.093449][T16877] ovl_fill_super+0x1442/0x4df0 [ 505.098274][T16877] ? ovl_mount+0x30/0x30 [ 505.102578][T16877] ? ida_alloc_range+0xa59/0xac0 [ 505.107487][T16877] ? delete_node+0x761/0x7b0 [ 505.112048][T16877] ? __radix_tree_replace+0x24d/0x2f0 [ 505.117387][T16877] ? idr_replace+0x1ca/0x240 [ 505.121948][T16877] ? up_read+0x10/0x10 [ 505.125984][T16877] ? sget+0x4cb/0x4e0 [ 505.129935][T16877] ? free_anon_bdev+0x20/0x20 [ 505.134586][T16877] ? ovl_mount+0x30/0x30 [ 505.138811][T16877] mount_nodev+0x52/0xe0 [ 505.143021][T16877] legacy_get_tree+0xde/0x170 [ 505.147666][T16877] ? fuse_emit+0x7d0/0x7d0 [ 505.152048][T16877] vfs_get_tree+0x85/0x260 [ 505.156451][T16877] do_mount+0x1a15/0x28c0 [ 505.160759][T16877] ? copy_mount_string+0x30/0x30 [ 505.165683][T16877] ? copy_mount_options+0x59/0x320 [ 505.170759][T16877] ? copy_mount_options+0x293/0x320 [ 505.175926][T16877] ksys_mount+0xc2/0xf0 [ 505.180211][T16877] __x64_sys_mount+0xb1/0xc0 [ 505.184773][T16877] do_syscall_64+0xcb/0x150 [ 505.189246][T16877] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 505.195105][T16877] RIP: 0033:0x45ca59 [ 505.198978][T16877] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 505.218597][T16877] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:43:51 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:43:51 executing program 4 (fault-call:8 fault-nth:25): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) getpgrp(r1) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 505.227035][T16877] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 505.234996][T16877] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 505.242935][T16877] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 505.250887][T16877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 505.258828][T16877] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 505.270662][T16877] overlayfs: failed to clone upperpath [ 505.316274][T16896] FAULT_INJECTION: forcing a failure. [ 505.316274][T16896] name failslab, interval 1, probability 0, space 0, times 0 [ 505.333727][T16896] CPU: 0 PID: 16896 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 505.343870][T16896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.353893][T16896] Call Trace: [ 505.357153][T16896] dump_stack+0x14a/0x1ce [ 505.361449][T16896] ? devkmsg_release+0x11c/0x11c [ 505.366370][T16896] ? show_regs_print_info+0x12/0x12 [ 505.371539][T16896] ? ida_alloc_range+0xa59/0xac0 [ 505.376449][T16896] should_fail+0x6fb/0x860 [ 505.380831][T16896] ? setup_fault_attr+0x3d0/0x3d0 [ 505.385827][T16896] ? idr_replace+0x240/0x240 [ 505.390386][T16896] ? alloc_vfsmnt+0xa3/0x470 [ 505.394942][T16896] should_failslab+0x5/0x20 [ 505.399412][T16896] __kmalloc_track_caller+0x5d/0x2c0 [ 505.404678][T16896] ? alloc_vfsmnt+0x24/0x470 [ 505.409234][T16896] kstrdup_const+0x51/0x90 [ 505.413621][T16896] alloc_vfsmnt+0xa3/0x470 [ 505.418002][T16896] clone_mnt+0x68/0xca0 [ 505.422126][T16896] clone_private_mount+0x8d/0xe0 [ 505.427030][T16896] ovl_fill_super+0x1442/0x4df0 [ 505.431848][T16896] ? ovl_mount+0x30/0x30 [ 505.436092][T16896] ? ida_alloc_range+0xa59/0xac0 [ 505.441012][T16896] ? delete_node+0x761/0x7b0 [ 505.445570][T16896] ? __radix_tree_replace+0x24d/0x2f0 [ 505.450908][T16896] ? idr_replace+0x1ca/0x240 [ 505.455465][T16896] ? up_read+0x10/0x10 [ 505.459504][T16896] ? sget+0x4cb/0x4e0 [ 505.463453][T16896] ? free_anon_bdev+0x20/0x20 [ 505.468097][T16896] ? ovl_mount+0x30/0x30 [ 505.472309][T16896] mount_nodev+0x52/0xe0 [ 505.476523][T16896] legacy_get_tree+0xde/0x170 [ 505.481167][T16896] ? fuse_emit+0x7d0/0x7d0 [ 505.485554][T16896] vfs_get_tree+0x85/0x260 [ 505.489941][T16896] do_mount+0x1a15/0x28c0 [ 505.494241][T16896] ? copy_mount_string+0x30/0x30 [ 505.499145][T16896] ? copy_mount_options+0x59/0x320 [ 505.504222][T16896] ? copy_mount_options+0x293/0x320 [ 505.509387][T16896] ksys_mount+0xc2/0xf0 [ 505.513508][T16896] __x64_sys_mount+0xb1/0xc0 [ 505.518065][T16896] do_syscall_64+0xcb/0x150 [ 505.522540][T16896] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 505.528398][T16896] RIP: 0033:0x45ca59 [ 505.532262][T16896] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 505.551833][T16896] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:43:51 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000000)=""/101, 0x65}, {&(0x7f0000000080)=""/145, 0x91}, {&(0x7f0000000140)=""/228, 0xe4}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000640)=""/147, 0x93}], 0x7, 0x321d) 18:43:51 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0xe, 0xd, 0xbe, &(0x7f0000000580)="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"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:51 executing program 4 (fault-call:8 fault-nth:26): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 505.560212][T16896] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 505.568157][T16896] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 505.576097][T16896] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 505.584097][T16896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 505.592039][T16896] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 505.611928][T16896] overlayfs: failed to clone upperpath [ 505.658646][T16912] FAULT_INJECTION: forcing a failure. [ 505.658646][T16912] name failslab, interval 1, probability 0, space 0, times 0 [ 505.671374][T16912] CPU: 1 PID: 16912 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 505.681492][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.691539][T16912] Call Trace: [ 505.694800][T16912] dump_stack+0x14a/0x1ce [ 505.699102][T16912] ? devkmsg_release+0x11c/0x11c [ 505.704006][T16912] ? show_regs_print_info+0x12/0x12 [ 505.709176][T16912] ? find_next_bit+0xd8/0x120 [ 505.713822][T16912] ? cpumask_next+0xc/0x20 [ 505.718213][T16912] should_fail+0x6fb/0x860 [ 505.722599][T16912] ? setup_fault_attr+0x3d0/0x3d0 [ 505.727590][T16912] ? _raw_spin_lock+0xa1/0x170 [ 505.732325][T16912] ? _raw_spin_trylock_bh+0x190/0x190 [ 505.737675][T16912] ? ovl_mount_dir+0x23/0x270 [ 505.742478][T16912] should_failslab+0x5/0x20 [ 505.746972][T16912] __kmalloc_track_caller+0x5d/0x2c0 [ 505.752249][T16912] ? _raw_spin_unlock+0x5/0x20 [ 505.757007][T16912] ? clone_mnt+0xa21/0xca0 [ 505.761391][T16912] kstrdup+0x31/0x70 [ 505.765286][T16912] ovl_mount_dir+0x23/0x270 [ 505.769756][T16912] ovl_fill_super+0x1599/0x4df0 [ 505.774579][T16912] ? ovl_mount+0x30/0x30 [ 505.778834][T16912] ? ida_alloc_range+0xa59/0xac0 [ 505.783736][T16912] ? delete_node+0x761/0x7b0 [ 505.788291][T16912] ? __radix_tree_replace+0x24d/0x2f0 [ 505.793632][T16912] ? up_read+0x10/0x10 [ 505.797668][T16912] ? sget+0x4cb/0x4e0 [ 505.801615][T16912] ? free_anon_bdev+0x20/0x20 [ 505.806287][T16912] ? ovl_mount+0x30/0x30 [ 505.810498][T16912] mount_nodev+0x52/0xe0 [ 505.814727][T16912] legacy_get_tree+0xde/0x170 [ 505.819378][T16912] ? fuse_emit+0x7d0/0x7d0 [ 505.823759][T16912] vfs_get_tree+0x85/0x260 [ 505.828144][T16912] do_mount+0x1a15/0x28c0 [ 505.832458][T16912] ? copy_mount_string+0x30/0x30 [ 505.837377][T16912] ? copy_mount_options+0x59/0x320 [ 505.842456][T16912] ? copy_mount_options+0x293/0x320 [ 505.847621][T16912] ksys_mount+0xc2/0xf0 [ 505.851749][T16912] __x64_sys_mount+0xb1/0xc0 [ 505.856312][T16912] do_syscall_64+0xcb/0x150 [ 505.860782][T16912] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 505.866650][T16912] RIP: 0033:0x45ca59 [ 505.870513][T16912] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 505.890086][T16912] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 505.898471][T16912] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 505.906415][T16912] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 505.914356][T16912] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 505.922306][T16912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 505.930284][T16912] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:54 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 18:43:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x8, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x2d2702, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000100)=0x208206, 0x4) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f00000000c0)={0x8029, 0x3}) preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) 18:43:54 executing program 4 (fault-call:8 fault-nth:27): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:54 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x400000, 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_setup(0x5ff, &(0x7f0000000040)=0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,usep_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="c42812e7a7c5ff3d2b223af056253b6faa1b8b000ca031a7e07139b6f0c0c08fc827ce6cd2294ec79bd07d5af9776bd82c319b8d3ffc471623228664758d"]) io_submit(r3, 0x1, &(0x7f0000000640)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x2000}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x3}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$TCFLSH(r6, 0x540b, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x8000) 18:43:54 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000001c0)={0x3}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfff) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x1052c0, 0x0) getsockname$unix(r7, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e) sendmmsg$inet6(r6, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) signalfd(r6, &(0x7f0000000000), 0x8) 18:43:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) dup(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:43:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0xb2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x6, 0x2}, 0x0, 0x0, &(0x7f0000000080)={0x1, 0xe, 0x7, 0x8}, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x6}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) 18:43:54 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x6d2043) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) fadvise64(r2, 0xda2, 0x0, 0x2) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000000)={0x6, 0x1}) [ 507.987025][T16927] FAULT_INJECTION: forcing a failure. [ 507.987025][T16927] name failslab, interval 1, probability 0, space 0, times 0 [ 508.000972][T16927] CPU: 1 PID: 16927 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 508.011131][T16927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.021172][T16927] Call Trace: [ 508.024463][T16927] dump_stack+0x14a/0x1ce [ 508.028780][T16927] ? devkmsg_release+0x11c/0x11c [ 508.033708][T16927] ? show_regs_print_info+0x12/0x12 [ 508.038894][T16927] ? find_inode+0x40d/0x4c0 [ 508.043419][T16927] should_fail+0x6fb/0x860 [ 508.047825][T16927] ? setup_fault_attr+0x3d0/0x3d0 [ 508.052837][T16927] ? _raw_spin_lock+0xa1/0x170 [ 508.057594][T16927] ? _raw_spin_trylock_bh+0x190/0x190 [ 508.062962][T16927] ? ovl_lookup_inode+0x120/0x120 [ 508.067973][T16927] ? ovl_alloc_inode+0x1b/0x90 [ 508.072900][T16927] should_failslab+0x5/0x20 [ 508.077396][T16927] kmem_cache_alloc+0x36/0x260 [ 508.082147][T16927] ? ovl_free_fs+0x640/0x640 18:43:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) sendmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll, 0x80, 0x0}}], 0x1, 0x2404c040) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r3, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r5}, 0x80, 0x0}}], 0x1, 0x2404c040) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r6, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r8}, 0x80, 0x0}}], 0x1, 0x2404c040) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8001, 0x1}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800}}]}, 0x74}}, 0x40000) 18:43:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0), 0x63, 0xffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880), 0x18, 0xffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000080)={0x3}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x4) 18:43:54 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x74, 0x200c00) 18:43:54 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) [ 508.086741][T16927] ? ovl_lookup_inode+0x120/0x120 [ 508.091756][T16927] ovl_alloc_inode+0x1b/0x90 [ 508.096333][T16927] ? ovl_free_fs+0x640/0x640 [ 508.101000][T16927] iget5_locked+0xa2/0x3e0 [ 508.105408][T16927] ? ovl_get_trap_inode+0x190/0x190 [ 508.110604][T16927] ovl_get_trap_inode+0x88/0x190 [ 508.115537][T16927] ovl_fill_super+0x30ec/0x4df0 [ 508.120386][T16927] ? ovl_mount+0x30/0x30 [ 508.124623][T16927] ? ida_alloc_range+0xa59/0xac0 [ 508.129550][T16927] ? delete_node+0x761/0x7b0 18:43:54 executing program 1: r0 = getpid() ptrace$peek(0x3, r0, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:43:54 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self\x00', 0x181240, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000680)='/dev/usb/hiddev#\x00', 0x5, 0x280000) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000006c0)="3561acdb97750b68fea56036d5278d3a063afff432a5e65ea4eccdcc1ebe078a10575861affe54c44b16e6c17de1958a53203de01805f2b90a134cb8b51544a9ac21cfc28967234f026152efb5708aef6f2f06bcda9edb8cbc700c0c3c11533d6867d70862f9a8348040551fa0b59029c4a77d52a8d9a9511ac4f85c361a729d9b82b153f17b5caea7ef836932cb54cd8816e4c1407647619cc2f8c0a847ef543c29661eea503c647b43997b00560fcbf5ecf8a72e0e1c732c8bff69cf50dc82f1955fc9bd66bbc9aff753d472ac22f81bd612ef472224aa95a0eb0ec7d190b408f5479308f5867dd0b9e6125f54823b469addb366ce85949298452f1bdc194a") ioctl$BLKPG(r3, 0x1269, &(0x7f0000000000)={0x7, 0x3f, 0xe9, &(0x7f00000008c0)="ce989a7849cf0db27b14cc7489bac32ccbed6d21587cade380528b766734bb28dcc6c41f8cc8f6fbf60248f1cf4c25c52c8b1f9d7c211a2c246a7a9baef76caa9d261fd96991bc5b411182cdf07855565d7bab8f3d539fd2f38576c8a6fce676e60c9df014503434cde3b73f5961e2d039d6f3660a0b24aaa07413af975a518f78560ef24e0ca5b4dede0cf8e4b42778f8903e31070f9cc1b3c9723ea865efd873d58929e0c029ec8e00ec5e5038851d51f6a195bd9917c7b45e94ab6eafe53f6910346088f6924a77d76c4176124f941ae4f340df8a4c62e1596e581e24b305a90da99a463d93657f"}) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x400001, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r9 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r9, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) io_submit(0x0, 0x5, &(0x7f0000000640)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x401, r0, &(0x7f0000000080)="2f83188e8d28b4eb08e34e2b526f95fd9330ef73f870236fac2d6eb1e326bba19ac5d2504058a8cfc1fc5966243589df45dd8702e75beb686daffc117082ffde1565aa55e4bd9f9658822896a307d252e539997dee874928125fb1f782a026b288e117fcd56644590cdab8b3a0b2b4e294e3de4e5c68192737345f2b64df86212ba9b6a48f12f9173014a29510dcb0ef7a58307493c1694019519211e4273f54c9ad38007528aa7a76f5512d57ffaa109fc9cf73e71a5442de4c3d987ceac5b2476e55e99ea6aac12ce3c6f82c5b453af86d", 0xd2, 0x3, 0x0, 0x2, r1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0xfff8, r2, &(0x7f0000000240)="a127395a7500ff8d8440409a3b340029550c4bd3de76fdd20f0daf06efe3b4300e64f766c5a20e0fa2d145831e9e1c60a4900b155e794fef82addd5febdb4034a952", 0x42, 0x8000, 0x0, 0x0, r3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f0000000300)="3b975c1143d851e3f218fda6f83d26298fec430adaf822ae9e5f29f75f4e534ac474de3abd449bf75b0225daa1b1e2d5dc7ddfd9f0e602c759d5c11553cb8552313d5a07bdaece2620d006d9f99ab741bb2752a8c165702ce779594bd123f8d0a633c885fa1bd4e68fab89cd2c20785d099bc36512844a3386884645d6178ec32c86724f9af48a0352d4b6a638bdf4811f0097baf0efc1af16904de688901b4373650f2ed1d5eff92a78405c700783b36ec8518e36d8a0135dc826b0b80ce8be04767b", 0xc3, 0x3, 0x0, 0x5, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x8, r7, &(0x7f0000000480)="fa89794d8d4ca44afc6d98158a2e2fb098cdec44a7af77041c482a9ff6b2546a939974b2c24443a22dd3be3e2b91f04d6135e2897b6f2da946", 0x39, 0x8000, 0x0, 0x2, r8}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x1, r9, &(0x7f0000000500)="51569c69aaf49bf2b41aa4e340e55c55c5e978636bca1cef195c0d65c7210271f6ec13137e47c3c0d16581b4a94240ed0348232a5503a323fb4e79bfc83d6ef9f0ac3fc766eec388434dac20b04f04ff2e8f88107d4dfa82025bbc134ab353d0e59fe15468233e33f49ffa8c3bd797c844a2bede307d485a97b8631ca0406da8bfe10f436dce38e0c791b149adf336961ca4a88ac0590e4001048bcb0345b2726372b279f73044c76cb6b4342982beaf10db5fa226549490e6cb0da1c4f341b171b253d8d34f22ee0fb6f256a73bb006dc8d6e1d080111ee6dc20ed166508105eb1dd889d651433f2405b4a44e36643bb635ed5e", 0xf4, 0x401, 0x0, 0x1}]) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x71, 0x200101) [ 508.134135][T16927] ? __radix_tree_replace+0x24d/0x2f0 [ 508.139496][T16927] ? up_read+0x10/0x10 [ 508.143553][T16927] ? sget+0x4cb/0x4e0 [ 508.147527][T16927] ? free_anon_bdev+0x20/0x20 [ 508.152191][T16927] ? ovl_mount+0x30/0x30 [ 508.156419][T16927] mount_nodev+0x52/0xe0 [ 508.160649][T16927] legacy_get_tree+0xde/0x170 [ 508.165314][T16927] ? fuse_emit+0x7d0/0x7d0 [ 508.169716][T16927] vfs_get_tree+0x85/0x260 [ 508.174118][T16927] do_mount+0x1a15/0x28c0 [ 508.178439][T16927] ? copy_mount_string+0x30/0x30 [ 508.183362][T16927] ? copy_mount_options+0x59/0x320 [ 508.188458][T16927] ? copy_mount_options+0x293/0x320 [ 508.193643][T16927] ksys_mount+0xc2/0xf0 [ 508.197787][T16927] __x64_sys_mount+0xb1/0xc0 [ 508.202389][T16927] do_syscall_64+0xcb/0x150 [ 508.206935][T16927] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 508.212836][T16927] RIP: 0033:0x45ca59 [ 508.216701][T16927] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:43:54 executing program 4 (fault-call:8 fault-nth:28): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 508.236419][T16927] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 508.244891][T16927] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 508.252853][T16927] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 508.260882][T16927] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 508.268830][T16927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 508.276783][T16927] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:43:54 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x4000) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x2082, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 508.318807][T16974] FAULT_INJECTION: forcing a failure. [ 508.318807][T16974] name failslab, interval 1, probability 0, space 0, times 0 [ 508.331565][T16974] CPU: 0 PID: 16974 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 508.341690][T16974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.351729][T16974] Call Trace: [ 508.355000][T16974] dump_stack+0x14a/0x1ce [ 508.359313][T16974] ? devkmsg_release+0x11c/0x11c [ 508.364227][T16974] ? show_regs_print_info+0x12/0x12 [ 508.369398][T16974] should_fail+0x6fb/0x860 [ 508.373780][T16974] ? setup_fault_attr+0x3d0/0x3d0 [ 508.378774][T16974] ? security_inode_alloc+0x32/0x1f0 [ 508.384027][T16974] should_failslab+0x5/0x20 [ 508.388497][T16974] kmem_cache_alloc+0x36/0x260 [ 508.393233][T16974] ? from_kuid_munged+0x3b0/0x3b0 [ 508.398234][T16974] security_inode_alloc+0x32/0x1f0 [ 508.403311][T16974] inode_init_always+0x37c/0x800 [ 508.408222][T16974] ? ovl_lookup_inode+0x120/0x120 [ 508.413238][T16974] iget5_locked+0xb9/0x3e0 [ 508.417622][T16974] ? ovl_get_trap_inode+0x190/0x190 [ 508.422787][T16974] ovl_get_trap_inode+0x88/0x190 [ 508.427708][T16974] ovl_fill_super+0x30ec/0x4df0 [ 508.432544][T16974] ? ovl_mount+0x30/0x30 [ 508.436767][T16974] ? ida_alloc_range+0xa59/0xac0 [ 508.441683][T16974] ? delete_node+0x761/0x7b0 [ 508.446248][T16974] ? __radix_tree_replace+0x24d/0x2f0 [ 508.451640][T16974] ? up_read+0x10/0x10 [ 508.455684][T16974] ? sget+0x4cb/0x4e0 [ 508.459638][T16974] ? free_anon_bdev+0x20/0x20 [ 508.464280][T16974] ? ovl_mount+0x30/0x30 [ 508.468835][T16974] mount_nodev+0x52/0xe0 [ 508.473053][T16974] legacy_get_tree+0xde/0x170 [ 508.477698][T16974] ? fuse_emit+0x7d0/0x7d0 [ 508.482079][T16974] vfs_get_tree+0x85/0x260 [ 508.486477][T16974] do_mount+0x1a15/0x28c0 [ 508.490795][T16974] ? copy_mount_string+0x30/0x30 [ 508.495704][T16974] ? copy_mount_options+0x59/0x320 [ 508.500792][T16974] ? copy_mount_options+0x293/0x320 [ 508.505963][T16974] ksys_mount+0xc2/0xf0 [ 508.510087][T16974] __x64_sys_mount+0xb1/0xc0 [ 508.514647][T16974] do_syscall_64+0xcb/0x150 [ 508.519123][T16974] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 508.524996][T16974] RIP: 0033:0x45ca59 [ 508.528858][T16974] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 508.548431][T16974] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 508.556827][T16974] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 18:43:54 executing program 3: ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x1000000, &(0x7f0000000280)={[{@nfs_export_on='nfs_export=on'}, {@default_permissions='default_permissions'}], [{@appraise_type='appraise_type=imasig'}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f00000001c0)=0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:54 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) r2 = syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x424, 0x9e00, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x234}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001180)={0x84, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000004c40)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0x7, 0x42, {0x42, 0x3, "95a340b16e9af54911edcb39f760b91264ad86624c90ef758ff16af37d4a500550962699a367a312b43d9cf46925500c8eb08835c30a1a0633b81395ce2023c0"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x0, 0x16, 0x6c, "6d6358d3b78b1f9c5903211932cc5323b357471b7032ce062bf56bbae0f9aa98d21b6f159050e172127afcd3245e157268918bad5c6a1160a0d294b1adeb451d136ab6184294c60853df79642fe9c022d0627e1fb6077dddebd4cb28ed4a4b35b78dfc6f72d64169dc717b09"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5a}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3f}}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x400, 0x7, 0x7}) 18:43:54 executing program 4 (fault-call:8 fault-nth:29): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 508.564782][T16974] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 508.573170][T16974] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 508.581111][T16974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 508.589140][T16974] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 508.639894][T16985] overlayfs: unrecognized mount option "appraise_type=imasig" or missing value [ 508.651293][T16986] FAULT_INJECTION: forcing a failure. [ 508.651293][T16986] name failslab, interval 1, probability 0, space 0, times 0 [ 508.662057][T16985] overlayfs: unrecognized mount option "appraise_type=imasig" or missing value [ 508.664042][T16986] CPU: 0 PID: 16986 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 508.682953][T16986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.692978][T16986] Call Trace: [ 508.696241][T16986] dump_stack+0x14a/0x1ce [ 508.700539][T16986] ? devkmsg_release+0x11c/0x11c [ 508.705456][T16986] ? show_regs_print_info+0x12/0x12 [ 508.710634][T16986] ? memset+0x1f/0x40 [ 508.714584][T16986] should_fail+0x6fb/0x860 [ 508.718966][T16986] ? setup_fault_attr+0x3d0/0x3d0 [ 508.723959][T16986] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 508.729994][T16986] ? __rcu_read_lock+0x50/0x50 [ 508.735336][T16986] ? unwind_get_return_address_ptr+0x130/0x130 [ 508.741545][T16986] ? __d_alloc+0x2a/0x6b0 [ 508.745843][T16986] should_failslab+0x5/0x20 [ 508.750316][T16986] kmem_cache_alloc+0x36/0x260 [ 508.755062][T16986] __d_alloc+0x2a/0x6b0 [ 508.759199][T16986] d_alloc_parallel+0xf3/0x1440 [ 508.764029][T16986] ? avc_has_perm_noaudit+0x37d/0x400 [ 508.769375][T16986] ? avc_has_perm_noaudit+0x30c/0x400 [ 508.774725][T16986] ? avc_denied+0x1c0/0x1c0 [ 508.779217][T16986] ? d_hash_and_lookup+0x1e0/0x1e0 [ 508.784306][T16986] ? stack_trace_snprint+0x150/0x150 [ 508.789558][T16986] ? selinux_inode_permission+0x389/0x6c0 [ 508.795254][T16986] ? selinux_inode_permission+0x464/0x6c0 [ 508.800941][T16986] ? __rcu_read_lock+0x50/0x50 [ 508.805844][T16986] __lookup_slow+0x169/0x490 [ 508.810402][T16986] ? lookup_one_len2+0x2d0/0x2d0 [ 508.815320][T16986] lookup_one_len2+0x18b/0x2d0 [ 508.820057][T16986] ? lookup_one_len_common+0x460/0x460 [ 508.825484][T16986] ovl_workdir_create+0x144/0x590 [ 508.830477][T16986] ? wake_up_bit+0x9a/0x1c0 [ 508.834948][T16986] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 508.840209][T16986] ? __wake_up_bit+0x180/0x180 [ 508.844939][T16986] ? _raw_spin_lock+0xa1/0x170 [ 508.849678][T16986] ? ovl_get_trap_inode+0x190/0x190 [ 508.854852][T16986] ? __sb_start_write+0xa5/0x150 [ 508.859853][T16986] ovl_fill_super+0x38c3/0x4df0 [ 508.864696][T16986] ? ovl_mount+0x30/0x30 [ 508.868910][T16986] ? ida_alloc_range+0xa59/0xac0 [ 508.873818][T16986] ? delete_node+0x761/0x7b0 [ 508.878396][T16986] ? __radix_tree_replace+0x24d/0x2f0 [ 508.883750][T16986] ? up_read+0x10/0x10 [ 508.887786][T16986] ? sget+0x4cb/0x4e0 [ 508.891735][T16986] ? free_anon_bdev+0x20/0x20 [ 508.896387][T16986] ? ovl_mount+0x30/0x30 [ 508.900601][T16986] mount_nodev+0x52/0xe0 [ 508.904840][T16986] legacy_get_tree+0xde/0x170 [ 508.909646][T16986] ? fuse_emit+0x7d0/0x7d0 [ 508.914044][T16986] vfs_get_tree+0x85/0x260 [ 508.918428][T16986] do_mount+0x1a15/0x28c0 [ 508.922726][T16986] ? copy_mount_string+0x30/0x30 [ 508.927632][T16986] ? copy_mount_options+0x59/0x320 [ 508.932711][T16986] ? copy_mount_options+0x293/0x320 [ 508.937922][T16986] ksys_mount+0xc2/0xf0 [ 508.942130][T16986] __x64_sys_mount+0xb1/0xc0 [ 508.946696][T16986] do_syscall_64+0xcb/0x150 [ 508.951170][T16986] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 508.957036][T16986] RIP: 0033:0x45ca59 [ 508.960911][T16986] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 508.980499][T16986] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:43:55 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000001c0)={0x5, 0x1}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x121) io_setup(0x2, &(0x7f0000000240)=0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2}]) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x27, &(0x7f0000000280)=0x9000000, 0x4) sendmmsg$inet6(r6, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) sendfile(r6, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 508.988925][T16986] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 508.996890][T16986] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 509.004855][T16986] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 509.012796][T16986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 509.020752][T16986] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 509.040343][T16986] overlayfs: failed to create directory ./file1/work (errno: 12); mounting read-only [ 509.183994][ T115] usb 2-1: new high-speed USB device number 15 using dummy_hcd 18:43:55 executing program 4 (fault-call:8 fault-nth:30): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:55 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x801}], 0x4cc, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pptp(0x18, 0x1, 0x2) io_setup(0x5ff, &(0x7f0000000040)=0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) io_submit(r3, 0x1, &(0x7f0000000640)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x2000}]) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) io_submit(r3, 0x2, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xcca, r5, &(0x7f0000000300)="07ef55c85bf5769a084aaae05e5dc7b31243d553a6c0fab5ca1765ae15bd2bb9df7ca1d998a83ef9fc9b92efa953363cdb21316b98a41134b92150f1744ff35ea8a6d3e3323a652f68e8f02676dcbff71e8603d0e04fef7b8f96b81fe310d87485b7cb72bc604066d342f9b7f2ec91c947ee299db2cbe91ef30daa4b19d4c77d8126d0eaf70d8d814b8b95d7efe23cf4a0074d7cced1d499bd3c577f58426839413c7d5385e576d3dc34940eba2e6f93f057f30a111036e6ac72365ed9bf6d4024ca1a5587bddb2bf604ea157496c2260dc4f2ce9607a17fbe98ae5c400677967cef20abe07310f4173028aaf35c0b265a75ef5dcf6df9d946622fededb7f68eb3836d387d9af667c1b5a6278682073aae4a00b56767309c5f654a337a8ff54e721235fdc02baa64aa9d57c8f94fde0d9db6650ffdf448a53766ea201d7517c97750e78e9b512001ccaa8860a9f5c54936c1528b9c9e5801bebf7ceaed687b4fc93d7f07646630e72fbababa99781406aedd73683960ebbb39a8eb9e298cdab1a6540f4c431963a4da88d4ecb95314ff2a215c626f6c90b1c7d73fdd0b6c20cdf3e83393244287b64827a2162f76b393cca4029c1c1ba78af773efd59ae2e44881c87a56e932ce42e168937dd061f6bf8d97dee0824f63f7b3796cf421ce911ba44ec1698c2c1631c33acadace151b60d5e56701d7dfc3f53d2157a9d0f268fefe8d1d5016fe701ae90c985f47380f6c5b3098f60ba2a3490d526a35af631ca69550ba9c863ccea37fe4ad88e693a98661a8db8acdddcc94b13e73141cf2187e2bdfc16486aafff1136100e25b8b4e686da6e4d765bc3d63ce4e8270ac35c5cd388c8aae801238614c689fda48b51b8e939f9126c75e1cfbff9469d078c431f4834fb60b117759e856cb9895f15fc9b6d3d7bfa8f1544d1dc62a79493cadb2bda5fe058f9dd49bf899b8fdb6bacb633e54f6b914e213be174d0147862607ea384a9717befd5d827acdf12ae1c22cab2c37ab662d22d351c2508cb4ad5298de78e65e82d5ee10d1af8349515bd65dc33223f2ca903b61c5d36d1bb9221c374e5d9d5338ece64db2a02ad13012d83f855956f1972e614ce41c8c206a721eb579343775851fb4e7cd994ef868decc728a2a6a871f51a328bc8d3c2e40ed8e5d2a26768153bbfdded2e4c4dae86770271873f41a3d90d17f834654424eed99511902ebdade62725b23ff18757509f3b46f74173942f115b1af98c7979b19693d038ea1c99c525172c3c798565d621f56d2cfaae95fb4005a1d904f41ebb60b08284006ba655bfa11551ac84e8b223e01f7e97ff889a12df6d559b815a3ea1e351a2d7cd3fd1d7b13faedd207bce0fe3b0e9916be00501fe918bb23b88f546e9cdd518047f8a94686772c4a24786e016797089a42c0f1427ec19887c2265cc7f62bb61a5685eed3c3180efb1032e999cfca1b019ff055088ed7aa1319a6caf4bd870721d1488161308fc6851f9e3ad3157406cb1556076e18de8113baec89ac5d8e2f792cf1ab7db95980c706080f03a9beff0bdd822a9bc1d30f051c84b85ad9261700116b538f41996d52eca19626a9be753283d1ea0515a5315182aa256d105b04c4d2d6c92ee4552f7c741f82ad13c464367c536a301e0675050c6a795538d5fdae6c4de55f004c30f24f234741597096e7eb91cb18387524694bbf375804ce307509a60ab4665722c257f0eb9f3ac4adcc0efac57c970ef9823bd734a5302f91e9cdc912c878d26f87bc4e80b33753b12940efe9fd93a33e57c36eb41bb3243d069fd15ec6de775b508479e0272b3580add46a670191da6510429658f0830814b3185eedb38a09a59b3dfb68f7a0e9bfb387fe6a55b2f2df523accf0d2b18d5b644deb45173fc762ca6416c2e76f8fb12143bc2c0d438dc79c8129254652065c5344ca69784e61fee1362e5df8df327c099840cca0735e268dbd5ec04b9fddf5eab7a285d1d2aef329ba617698f73bc58ce3237af1eb71915dbd62ade0d7393ae58a3850480302cb4fed74daa16eabc918ebfd1e64e246a173413cbd995b5b5b70c54e04263b378e99df54b2ecc778e569b8fbbbbc63fe1fb95d715a29a3c9657668604b37405ea64fe09ef78a77ffda7a4882ca6ce50921b173725989dc785a6b8e9ceafb53ae6c8ce2e6adb6129ca3359041fe549c372f71f36f98164258b254aaf1e57afc7fac6dcc239594ff1d1ed2b3697dd6cb462c5e2a926905d5f26a06ab3144f0cddf3c04cba8cd576aba289d253f2dc3d9d74e24f0c1deb91326aa07a6328fef255288d7ce6ac2f5116d08fb439ad2f850f874178801221a80e7544d511aa1fc2f3ae4462bf832d5c0a5a80b40bf109eb053c2ae15440dd32627b4f17d8fa1344b6c399865cd65579ed7451868b5d3111c1207e7d4a6ceb4c785acdb843e8c60fe4f998e14d7626657d08edf42af5319cc6c88104304c1c347cc3db73f812a9f11927a93d9e01e6dee0800e2c9d291693eb563b2ba5af32f5f75ad46c72de1cab916fc70d5bbb4b3f9725f45fd5ab422707717b74c1a3eb1844212addb9af564abbefa8762df0fd2daf025c04e706d7d88f601e84401c8c5c39006ec9cc631f6a83bcee9acab45a158861babf5952ed8940b36ff7280c4817ca7c1c76f83050b3b3528d39ed1e909ef93d37e720e3420ca8b63ca6e275b46fd2520205a314d5d01f593b213f0f8c3043f9adc4cbc6f54ee0e8c1f121ccbe3621b0af6f685d75066121e26c4d82b7d63d749f7aeaa9de5c11208bac18b14b85efb2a8ae3d22d21721af43e16319eade6448e441b50df00bf25dd56edd42302434dbb4681c88126c8bf964371b99cb9fe0d5921dbba731611a3f038f686c0f5a728ed8b1b1a1b946c0905512695fb62db298e9843e692c4115a893dad9254100f55e325940180f059ff11f60bff0706296aaccaa997575963ca7857f8bc08b39c40678d2199a8addb2f46e1863b8b40c49d0b4e6e66331600c9ec415b06342119b2f1aa47e0908287009818e61f36d71d20dd52096dd7a2436ba61c4336e72b62a2e77e6f5889309f76f830ee03bb5a631cf8d48ad70718a32e53be447df6cdb56f45450d91ad3c332b1258c7e073359e8bb92f362449b028b5370fe8a2913ea40ddfef2a3d9ac33849ead6258380252566f66e24b6ca7d19e7327c3f394b1e943b92e05fbd4d0e3aa36b094e1faae3a7ec59fb059266317a8a6eab877f8dc2e0b2ffd7b17ceebe824a3b56055cde5fcded415640ee2b38a773f1d9f7f449c3e7870512d7d0469114aae99e150ff8ace19d3425d5e71a4d5de20f54fbcdc24ed36721ec4cd43668ecde5e5138172af6bb9c233160b303e6633fe2003c7a6bebb671e4d37c4f31ec2cfc39c1fc10ba2d9479f8ee04fc0201fa9eb8e43325d0ba1930ceb9edfed283603df209fb5309c21c876235eeddd61226a15f3c31b6c97eeb6909959abbceb0547117ff698a1e4f53d01a3bda3c6a42486a2b85d88c62f0dd605328b33c3085e55189d5e0d1ac81d2778c51fe5e5e644e9b1459fd80c97e4b4687509f7113cb72ad99456d37fc505e2e17df9dce113c1cc7c27d2619020dffb2e35081dce3cc4398b13284b2fdf19a29aaae814e61afd18a05fce119143c5af77724286d109e539bb1080a95a2300876cc2163b6d006b6f101d67238113cf99ce3b6ee560de30df325810e9786c05c2c88fca6bfeb480cdc1655d8f80dd11fa8273e4b7c476ff06891089537dc4715450a28b90e144247b639e7545120c983779e8def85ec5b000b95c4e43a2bfa25c6fa78504458354dd995ebc50406a503831584cf968bb2416d83e578bdf78d1cf6b877fccdd2ce7a40b373069dab3802447a621b6bbef142e08311a40e638010bab25c968ade74f08c6dcc0bc7fd0e23b9f6fcaa878ffedb46cc025db8db2c9b431b1128a78ab7fac56cdec36404b1bfa37425704a0b45672f1f8a5e994fa198b8e11974cb8d0b817aa799d515f1a1ff7919d4eb1b1199f9bb612a80613e3aa351669bdaf3eb2a858618f14156b4376b9b562cdeb1c50ba921fb50f51d1cb9295298e9495487876e7b9fad019c5a67725c033a79947e6d9247321bb2b657dabf60ff682d77b5efe3e14188fddefbc4cf1a58e2f8009f28ed30544ff64cfd0167b89d73740ad24a3e10609091a689ff6147b2474c87ad4514ac2acd02effbc14226b47638d37deef1236dbf60e4a9aefe00ca35c72dbaffcab402af83c0cb3fb1fb337e5f1d6db990fac5b63675c97db0de749f5b690d3fb2e395691f148a199686efe4da8099b69f3a83feb92637c696a4d8b5cdf657de2911c5d568e1b35782dadf4f61da8c54b092b4f816c18a2c01ebe09455a550735c0a4f876b8297c3198bcb1833498060350e145eab49e089802ba2050ceebe5ed71fcc85283da61266837af4faf0ede1d36c9f216af72a1b6b0ca21ac62c21cb201fae235fff8df4911c0a8589da444ff897441435c6f3b2d2368528d63d15088a95e94c1ea00e033a9b3cbb98c907561aee06c7870889f69e4b6f8bca82eedf3d63926f281866e62bea44590738cfb9212a0102c60fc11a6a6a6400f27f436d57822c02f73d2bbff309288443db7001b5049b5601a48a4fb74f8822034b796dc425bfaaf0626fee43ab56c4e4b49f5b1847ce5b6d26ba8d9dab0bbf7b6532db232320fcbbb1b354bd4f1bd5839fc5d11fdc84cc73131ab69cfc3cfaba20cbcf3433a3590779419ae7b447771f34194100cad75b4f6891ba7d0f88759fc2485ba70110711787767bcd9b3ccaac97a5b82343fd8fea2cef65b6daa8ea3e06365411f3f7febbb999c2d44d2617e55338a345c7b8843951a18c6eaaf1f6a19b743d0a59c2c4767301960338d25f1bc1679b8ea3862ba2d3d77a9f91c71a6d5dd4b077153ffbe4a4c2b2493634b9e0520a5c5adc10940b827fd9422f25bded85a562015446b4b91ee9807a69d29177a76e274f990b2ae1f301fbda4beb2185e3035e32095392a3fea5f10754c3fd2dd695b77e24b550507a61d135f6f2a34c91f9b3074315d04a68e7fcb351214392f85424fe90e380e1655fb2558784e2023d9e9085218c078c3e53cbb1cf7b9b1828d95ccafae9daced1f7f1795b54a3e02c73cb249533f770d98227406cf462f63978e7952affca974f4d0d20a6510ac10475cecae91965719e83713f952a0ac5cb5ae6e6c5eb0ebf45e69badb5e27cbc35c695ae954f2306d015ba1839c3244021fba94c1fb86e0e56fd81c1a53dde4eda1f3fbb5a28ae6948e63efd1985c20b5a3fa81d1637a9f30ec02ebfec50fae6011d2a7b09007093997711f64db5ae9832d49ef946687b7bacd0bbb70091a8cf8db0f9bc38e52acaf0f73c96160784ea8c391d4d38d0db9a2cf5433d77df8d7f1bb5d31b1093de68b7608dbc794ff9db1b4b1bdd0945dcdf0b835167185113c2d666aba72b93dabe0d2553bb7d0cc8be733f539420788dab178e0a1b3af17fe792959e8189a4da3d3ec03a9ccf2038577f888c13f3f1a11d2a661fd24b2c70c829149b0bb527bb7c4ba30b5d3b7bd4a986d595ab4eb58c798b54206e7c90e52a919b8f198a1ef38800e0ce4ff52c01b0d577c65f85f19e8c978a92c9a0af63e6887da2ab5d91cff585d1ca1dfe70ea76f3934383b8e913db58ad9c19a504c4c942af519b1514f3638cd0947ce503354e1ea463f2348d39c23426e5bbe74356490c70dff7bc0bdeee7c43d3f3895fad6a36283e9c436487fda26a96cd5e31", 0x1000, 0xe148, 0x0, 0x5, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f00000000c0)="bb31fdb545b35575cebf08ff9ea69f91acc1d1715ce8b31b8c5108965fde371f557d4a14c237daf5559e0ff6308f736cc9503290cf28c33b0a05271971f38ebe681c4d132cee360821dbfdf993e11e7e1248165bb6385642cbcd5606efe918a80d04ed668a0365edc47ff15929a3980c2e24a19b5c937c61770ebecbffbe02a59c5e7012ccab27291f4392f1716f0831eeebc25d2d9d1e5ab15fcaed3243afc990242895168723d3384a287e495e61c06b14b352f94157940ad7ee3e1e7f0c847844b6bcfeb02b1a35", 0xc9, 0xffffffffffffffff, 0x0, 0x1}]) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x2, 'veth0_vlan\x00', {0x9}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r6, &(0x7f00000017c0), 0x315, 0x800000) 18:43:55 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) setns(r1, 0x8000000) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) connect$unix(r5, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r6 = open(&(0x7f0000000080)='./bus\x00', 0x101000, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) sendfile(r7, r6, 0x0, 0x8400fffffdf3) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x80400001) [ 509.368961][T17001] FAULT_INJECTION: forcing a failure. [ 509.368961][T17001] name failslab, interval 1, probability 0, space 0, times 0 [ 509.381618][T17001] CPU: 1 PID: 17001 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 509.391745][T17001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.401874][T17001] Call Trace: [ 509.405147][T17001] dump_stack+0x14a/0x1ce [ 509.409463][T17001] ? devkmsg_release+0x11c/0x11c [ 509.414394][T17001] ? show_regs_print_info+0x12/0x12 [ 509.419576][T17001] should_fail+0x6fb/0x860 [ 509.423971][T17001] ? setup_fault_attr+0x3d0/0x3d0 [ 509.428978][T17001] ? ebitmap_cmp+0x1c8/0x230 [ 509.433548][T17001] ? mls_compute_context_len+0x81b/0x850 [ 509.439167][T17001] ? context_struct_to_string+0x3e4/0x820 [ 509.444931][T17001] should_failslab+0x5/0x20 [ 509.449512][T17001] __kmalloc+0x5f/0x2d0 [ 509.453656][T17001] context_struct_to_string+0x3e4/0x820 [ 509.459173][T17001] ? security_bounded_transition+0x560/0x560 [ 509.465128][T17001] ? ebitmap_contains+0x6d8/0x780 [ 509.470162][T17001] ? hashtab_search+0x1bf/0x200 [ 509.474980][T17001] context_add_hash+0x145/0x280 [ 509.479912][T17001] ? security_sid_to_context_inval+0x40/0x40 [ 509.485876][T17001] ? mls_context_isvalid+0x98/0x380 [ 509.491061][T17001] ? policydb_context_isvalid+0x1b6/0x400 [ 509.496765][T17001] security_compute_sid+0x11da/0x1d50 [ 509.502122][T17001] ? security_transition_sid+0x90/0x90 [ 509.507565][T17001] ? avc_denied+0x1c0/0x1c0 [ 509.512051][T17001] ? avc_has_perm_noaudit+0x30c/0x400 [ 509.517414][T17001] ? avc_has_perm_noaudit+0x400/0x400 [ 509.522770][T17001] security_transition_sid+0x78/0x90 [ 509.528036][T17001] may_create+0x64e/0x9a0 [ 509.532350][T17001] ? show_sid+0x250/0x250 [ 509.536666][T17001] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 509.542455][T17001] ? generic_permission+0x190/0x4a0 [ 509.547639][T17001] security_inode_mkdir+0xa6/0x130 [ 509.552736][T17001] vfs_mkdir2+0x35b/0x620 [ 509.557050][T17001] ovl_create_real+0x148/0x330 [ 509.561789][T17001] ovl_workdir_create+0x3df/0x590 [ 509.566784][T17001] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 509.572041][T17001] ? __sb_start_write+0xa5/0x150 [ 509.576954][T17001] ovl_fill_super+0x38c3/0x4df0 [ 509.581793][T17001] ? ovl_mount+0x30/0x30 [ 509.586009][T17001] ? ida_alloc_range+0xa59/0xac0 [ 509.590923][T17001] ? delete_node+0x761/0x7b0 [ 509.595497][T17001] ? __radix_tree_replace+0x24d/0x2f0 [ 509.600850][T17001] ? up_read+0x10/0x10 [ 509.604899][T17001] ? sget+0x4cb/0x4e0 [ 509.608855][T17001] ? free_anon_bdev+0x20/0x20 [ 509.613515][T17001] ? ovl_mount+0x30/0x30 [ 509.617726][T17001] mount_nodev+0x52/0xe0 [ 509.621939][T17001] legacy_get_tree+0xde/0x170 [ 509.626606][T17001] ? fuse_emit+0x7d0/0x7d0 [ 509.630992][T17001] vfs_get_tree+0x85/0x260 [ 509.635491][T17001] do_mount+0x1a15/0x28c0 [ 509.639795][T17001] ? copy_mount_string+0x30/0x30 [ 509.644701][T17001] ? copy_mount_options+0x59/0x320 [ 509.649783][T17001] ? copy_mount_options+0x293/0x320 [ 509.654969][T17001] ksys_mount+0xc2/0xf0 [ 509.659101][T17001] __x64_sys_mount+0xb1/0xc0 [ 509.663662][T17001] do_syscall_64+0xcb/0x150 [ 509.668135][T17001] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.673994][T17001] RIP: 0033:0x45ca59 [ 509.677860][T17001] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 509.697433][T17001] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 509.705818][T17001] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 509.713777][T17001] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 509.721720][T17001] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 509.729659][T17001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 509.737605][T17001] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 509.745931][T17001] overlayfs: failed to create directory ./file1/work (errno: 12); mounting read-only [ 509.793885][ T115] usb 2-1: Using ep0 maxpacket: 8 [ 509.913940][ T115] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 247 [ 509.924296][ T115] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 564 [ 509.934725][ T115] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.104009][ T115] usb 2-1: New USB device found, idVendor=0424, idProduct=9e00, bcdDevice= 0.40 [ 510.113077][ T115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.121089][ T115] usb 2-1: Product: syz [ 510.125264][ T115] usb 2-1: Manufacturer: syz [ 510.129866][ T115] usb 2-1: SerialNumber: syz [ 510.153870][T16984] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 510.160687][T16984] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 510.174185][ T115] usb 2-1: bad CDC descriptors [ 510.179189][ T115] smsc95xx v1.0.6 [ 510.374082][T16984] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 510.380926][T16984] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 510.613721][ T115] smsc95xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 510.624476][ T115] smsc95xx 2-1:1.0 (unnamed net_device) (uninitialized): Error reading E2P_CMD 18:43:57 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 18:43:57 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20000020) io_setup(0x2, &(0x7f0000000240)=0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:57 executing program 4 (fault-call:8 fault-nth:31): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:57 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x33) write$FUSE_ENTRY(r3, &(0x7f0000000340)={0x90, 0xfffffffffffffff5, 0x8, {0x3, 0x1, 0x3f, 0x0, 0x8000, 0x3f, {0x4, 0x6, 0x3f, 0x4, 0x0, 0x800005, 0xffff4298, 0x1, 0x2, 0x8000, 0x6, 0x0, 0x0, 0xffff, 0x80000001}}}, 0x90) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) sched_setparam(r6, &(0x7f00000001c0)=0x800) sendmmsg$inet6(r5, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) fsetxattr(r5, &(0x7f0000000000)=@known='trusted.overlay.impure\x00', &(0x7f0000000100)='-[\\\x00', 0x4, 0x3) 18:43:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000140)={'macvlan0\x00', {0x2, 0x4e24, @private=0xa010100}}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000002c0)='task\x00') write(r0, &(0x7f0000000040)="275b4dfbb7874bdd71d25038f0ddd494e668a32a609d5db7fb0311aced98c7471f6950c24f5fd309ed272d74f13e89496a2c89fd572936ab279a30c21884b39339f357019f4e60abd4f400e3dbcb7f023677a1035aee3ee7ccd83d53b4bed3ea558482c4b8132a7d98c71459ff987bf71ca9a0e8e016d4d8fa710b0c9c82eb094feec16f45da702f136b831d5addee8a2c3a0af2cfb600de8ca8ec8cc1c7d7d9c06534f4e4595a7396d0ba0ea982d70472ae9672d728058342cf7a95050bd6c65508f7ac65541b7125626726560b5211eb4c6d48e2cc19c63de183cd6d177b68c3870405abb07526fc65142940d5f340f65132ca050131c016", 0xf9) preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) accept4$packet(r3, &(0x7f0000003c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003c80)=0x14, 0x800) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000003d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003cc0)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 511.083614][ T115] smsc95xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 511.163530][T17026] FAULT_INJECTION: forcing a failure. [ 511.163530][T17026] name failslab, interval 1, probability 0, space 0, times 0 [ 511.176267][T17026] CPU: 0 PID: 17026 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 511.186413][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.196440][T17026] Call Trace: [ 511.199712][T17026] dump_stack+0x14a/0x1ce [ 511.204012][T17026] ? devkmsg_release+0x11c/0x11c [ 511.208916][T17026] ? show_regs_print_info+0x12/0x12 [ 511.214082][T17026] should_fail+0x6fb/0x860 [ 511.218467][T17026] ? setup_fault_attr+0x3d0/0x3d0 [ 511.223459][T17026] ? sidtab_context_to_sid+0x68/0x10c0 [ 511.228896][T17026] ? ext4_alloc_inode+0x1b/0x620 [ 511.233828][T17026] should_failslab+0x5/0x20 [ 511.238302][T17026] kmem_cache_alloc+0x36/0x260 [ 511.243037][T17026] ? set_qf_name+0x350/0x350 [ 511.247609][T17026] ext4_alloc_inode+0x1b/0x620 [ 511.252344][T17026] ? set_qf_name+0x350/0x350 [ 511.256900][T17026] new_inode_pseudo+0x64/0x240 [ 511.261631][T17026] new_inode+0x25/0x1d0 [ 511.265755][T17026] ? memset+0x1f/0x40 [ 511.269711][T17026] __ext4_new_inode+0x63a/0x5cf0 [ 511.274617][T17026] ? avc_has_perm_noaudit+0x37d/0x400 [ 511.279959][T17026] ? avc_has_perm_noaudit+0x30c/0x400 [ 511.285304][T17026] ? ext4_read_inode_bitmap+0x1950/0x1950 [ 511.290988][T17026] ? memset+0x1f/0x40 [ 511.294937][T17026] ? __dquot_initialize+0x227/0xd70 [ 511.300103][T17026] ? avc_has_perm+0x176/0x280 [ 511.304751][T17026] ? security_transition_sid+0x78/0x90 [ 511.310182][T17026] ext4_mkdir+0x41e/0x1530 [ 511.314570][T17026] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 511.320362][T17026] ? ext4_symlink+0x1020/0x1020 [ 511.325190][T17026] ? generic_permission+0x190/0x4a0 [ 511.330357][T17026] ? security_inode_mkdir+0xed/0x130 [ 511.335610][T17026] vfs_mkdir2+0x448/0x620 [ 511.339912][T17026] ovl_create_real+0x148/0x330 [ 511.344655][T17026] ovl_workdir_create+0x3df/0x590 [ 511.349649][T17026] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 511.354900][T17026] ? __sb_start_write+0xa5/0x150 [ 511.359805][T17026] ovl_fill_super+0x38c3/0x4df0 [ 511.364624][T17026] ? ovl_mount+0x30/0x30 [ 511.368844][T17026] ? ida_alloc_range+0xa59/0xac0 [ 511.373753][T17026] ? delete_node+0x761/0x7b0 [ 511.378310][T17026] ? __radix_tree_replace+0x24d/0x2f0 [ 511.383654][T17026] ? up_read+0x10/0x10 [ 511.387703][T17026] ? sget+0x4cb/0x4e0 [ 511.391663][T17026] ? free_anon_bdev+0x20/0x20 [ 511.396310][T17026] ? ovl_mount+0x30/0x30 [ 511.400520][T17026] mount_nodev+0x52/0xe0 [ 511.404731][T17026] legacy_get_tree+0xde/0x170 [ 511.409381][T17026] ? fuse_emit+0x7d0/0x7d0 [ 511.413771][T17026] vfs_get_tree+0x85/0x260 [ 511.418155][T17026] do_mount+0x1a15/0x28c0 [ 511.422452][T17026] ? copy_mount_string+0x30/0x30 [ 511.427356][T17026] ? copy_mount_options+0x59/0x320 [ 511.432436][T17026] ? copy_mount_options+0x293/0x320 [ 511.437600][T17026] ksys_mount+0xc2/0xf0 [ 511.441741][T17026] __x64_sys_mount+0xb1/0xc0 [ 511.446297][T17026] do_syscall_64+0xcb/0x150 [ 511.450768][T17026] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.456626][T17026] RIP: 0033:0x45ca59 [ 511.460501][T17026] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 511.480073][T17026] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 511.488456][T17026] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 511.496401][T17026] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 511.504341][T17026] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 18:43:57 executing program 4 (fault-call:8 fault-nth:32): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 511.512283][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 511.520247][T17026] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 511.529203][T17026] overlayfs: failed to create directory ./file1/work (errno: 12); mounting read-only [ 511.553833][ T115] smsc95xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000114: -32 [ 511.598190][ T115] smsc95xx 2-1:1.0 (unnamed net_device) (uninitialized): Error reading MII_ACCESS [ 511.619595][ T115] smsc95xx 2-1:1.0 (unnamed net_device) (uninitialized): MII is busy in smsc95xx_mdio_read [ 511.666673][T17042] FAULT_INJECTION: forcing a failure. [ 511.666673][T17042] name failslab, interval 1, probability 0, space 0, times 0 [ 511.679559][ T115] smsc95xx 2-1:1.0 eth1: Failed to read reg index 0x00000130: -32 [ 511.688332][T17042] CPU: 1 PID: 17042 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 511.698473][T17042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.708511][T17042] Call Trace: [ 511.711798][T17042] dump_stack+0x14a/0x1ce [ 511.716116][T17042] ? devkmsg_release+0x11c/0x11c [ 511.721043][T17042] ? show_regs_print_info+0x12/0x12 [ 511.726228][T17042] should_fail+0x6fb/0x860 [ 511.730632][T17042] ? setup_fault_attr+0x3d0/0x3d0 [ 511.735647][T17042] ? make_kgid+0x228/0x3a0 [ 511.740049][T17042] ? security_inode_alloc+0x32/0x1f0 [ 511.745321][T17042] should_failslab+0x5/0x20 [ 511.749926][T17042] kmem_cache_alloc+0x36/0x260 [ 511.754686][T17042] security_inode_alloc+0x32/0x1f0 [ 511.759783][T17042] inode_init_always+0x37c/0x800 [ 511.764707][T17042] ? set_qf_name+0x350/0x350 [ 511.769318][T17042] new_inode_pseudo+0x7b/0x240 [ 511.774067][T17042] new_inode+0x25/0x1d0 [ 511.778210][T17042] ? memset+0x1f/0x40 [ 511.782178][T17042] __ext4_new_inode+0x63a/0x5cf0 [ 511.787279][T17042] ? avc_has_perm_noaudit+0x37d/0x400 [ 511.792640][T17042] ? avc_has_perm_noaudit+0x30c/0x400 [ 511.798000][T17042] ? ext4_read_inode_bitmap+0x1950/0x1950 [ 511.803705][T17042] ? memset+0x1f/0x40 [ 511.807678][T17042] ? __dquot_initialize+0x227/0xd70 [ 511.812861][T17042] ? avc_has_perm+0x176/0x280 [ 511.817529][T17042] ? security_transition_sid+0x78/0x90 [ 511.822977][T17042] ext4_mkdir+0x41e/0x1530 [ 511.827389][T17042] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 511.833183][T17042] ? ext4_symlink+0x1020/0x1020 [ 511.838024][T17042] ? generic_permission+0x190/0x4a0 [ 511.843212][T17042] ? security_inode_mkdir+0xed/0x130 [ 511.848484][T17042] vfs_mkdir2+0x448/0x620 [ 511.852801][T17042] ovl_create_real+0x148/0x330 [ 511.857554][T17042] ovl_workdir_create+0x3df/0x590 [ 511.862565][T17042] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 511.867837][T17042] ? __sb_start_write+0xa5/0x150 [ 511.872763][T17042] ovl_fill_super+0x38c3/0x4df0 [ 511.877604][T17042] ? ovl_mount+0x30/0x30 [ 511.881832][T17042] ? ida_alloc_range+0xa59/0xac0 [ 511.886756][T17042] ? delete_node+0x761/0x7b0 [ 511.891331][T17042] ? __radix_tree_replace+0x24d/0x2f0 [ 511.897820][T17042] ? up_read+0x10/0x10 [ 511.901876][T17042] ? sget+0x4cb/0x4e0 [ 511.905843][T17042] ? free_anon_bdev+0x20/0x20 [ 511.910508][T17042] ? ovl_mount+0x30/0x30 [ 511.914741][T17042] mount_nodev+0x52/0xe0 [ 511.918990][T17042] legacy_get_tree+0xde/0x170 [ 511.923661][T17042] ? fuse_emit+0x7d0/0x7d0 [ 511.928065][T17042] vfs_get_tree+0x85/0x260 [ 511.932473][T17042] do_mount+0x1a15/0x28c0 [ 511.936794][T17042] ? copy_mount_string+0x30/0x30 [ 511.941722][T17042] ? copy_mount_options+0x59/0x320 [ 511.946825][T17042] ? copy_mount_options+0x293/0x320 [ 511.952009][T17042] ksys_mount+0xc2/0xf0 [ 511.956152][T17042] __x64_sys_mount+0xb1/0xc0 [ 511.960728][T17042] do_syscall_64+0xcb/0x150 [ 511.965221][T17042] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.971105][T17042] RIP: 0033:0x45ca59 [ 511.974985][T17042] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 511.994834][T17042] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 512.003235][T17042] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 512.011198][T17042] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 512.019157][T17042] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 512.027116][T17042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 512.035078][T17042] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 512.044058][ T115] smsc95xx 2-1:1.0 eth1: set_features() failed (-32); wanted 0x0000008000004002, left 0x0000008000004802 [ 512.056215][ T115] smsc95xx 2-1:1.0 eth1: register 'smsc95xx' at usb-dummy_hcd.1-1, smsc95xx USB 2.0 Ethernet, 7e:84:44:78:7f:f9 [ 512.070478][T17042] overlayfs: failed to create directory ./file1/work (errno: 12); mounting read-only [ 512.173362][T17038] smsc95xx 2-1:1.0 eth1: Failed to read reg index 0x00000130: -32 [ 512.183810][T17038] smsc95xx 2-1:1.0 eth1: set_features() failed (-32); wanted 0x0000008000004002, left 0x0000008000004802 18:43:59 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x91) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r7}, 0x80, 0x0}}], 0x1, 0x2404c040) sendmsg$xdp(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x0, r7, 0x27}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="bd4fe0a01b7da88bd5", 0x9}, {&(0x7f0000000280)="74df98688c5a438f3c672cdc1a7e5fd7c9c617e17dd17b07e295c7b8cf182857721fdfe48255bf63b08f59baa383285eaa829234d3be09f13f63cccc51afe9cb744b2177148e9ccd688be7a5a24c3d8c484527d6a82b806feedb1da001c274bde0f723c7f501a817d03cf8387ce1c08638caf6da927fcb05e950de7ba1a698b6700eb98e59cc1a99ff42b97f99bc94348825c9237b2aed2a3ea1edab381a51498f1dde1ef35b83b81dcd86b5289bf7b6b64f768202b68a2c5c891e409814f49b0ec41abe10350ddd84ecca8cfcf166dae8f6ea1162f82f71906a65d8001364dff2a8bac850a49d3c3d6ed53b801587e2d6fc01", 0xf3}], 0x2, 0x0, 0x0, 0x1}, 0x880) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000380)) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:59 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80002, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:43:59 executing program 4 (fault-call:8 fault-nth:33): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:43:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r2 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000002a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000051) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x76cc}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80001) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe8, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0xb}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000800}, 0x840) sendmmsg$inet6(r3, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1}, 0x3}], 0x1, 0x2040, &(0x7f0000000380)={0x0, 0x989680}) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000008c0)="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", &(0x7f0000001a00)=""/4096, 0x4}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r7, &(0x7f00000017c0), 0x315, 0x800000) [ 513.349950][ T234] usb 2-1: USB disconnect, device number 15 [ 513.356433][ T234] smsc95xx 2-1:1.0 eth1: unregister 'smsc95xx' usb-dummy_hcd.1-1, smsc95xx USB 2.0 Ethernet 18:43:59 executing program 1: r0 = geteuid() setreuid(r0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@dev={0xfe, 0x80, [], 0x3e}, @in6=@mcast2, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x60, 0x67, 0x0, r0}, {0xd33f, 0x3c4, 0x8, 0x7, 0x3f, 0x9, 0x8, 0x9}, {0x100, 0xffff, 0x1000, 0x2fb}, 0x7, 0x6e6bbc, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d5, 0x33}, 0x8, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3501, 0x0, 0x0, 0x2, 0xfc84, 0x800, 0x2}}, 0xe8) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r2, r3) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x1, r6, 0x0, r5}, 0x10) r7 = geteuid() setreuid(r7, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@dev={0xfe, 0x80, [], 0x3e}, @in6=@mcast2, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x60, 0x67, r6, r7}, {0xd33f, 0x3c4, 0x8, 0x7, 0x3f, 0x9, 0x8, 0x9}, {0x100, 0xffff, 0x1000, 0x2fb}, 0x7, 0x6e6bbc, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d5, 0x33}, 0x8, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3501, 0x0, 0x0, 0x2, 0xfc84, 0x800, 0x2}}, 0xe8) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000000)={0x79, 0x7d, 0x1, {{0x0, 0x64, 0x200, 0x9, {0x0, 0x1, 0x5}, 0x41080000, 0x9, 0x1, 0x1, 0xd, '/proc/crypto\x00', 0x2, '-\xa8', 0x15, '/dev/bus/usb/00#/00#\x00', 0xd, '/proc/crypto\x00'}, 0x0, '', r0, r3, r7}}, 0x79) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$MON_IOCT_RING_SIZE(r8, 0x9204, 0x754a3) [ 513.390131][T17055] FAULT_INJECTION: forcing a failure. [ 513.390131][T17055] name failslab, interval 1, probability 0, space 0, times 0 [ 513.404382][T17055] CPU: 0 PID: 17055 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 513.414535][T17055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.424576][T17055] Call Trace: [ 513.427870][T17055] dump_stack+0x14a/0x1ce [ 513.432193][T17055] ? devkmsg_release+0x11c/0x11c [ 513.437123][T17055] ? show_regs_print_info+0x12/0x12 [ 513.442315][T17055] should_fail+0x6fb/0x860 [ 513.446720][T17055] ? setup_fault_attr+0x3d0/0x3d0 [ 513.451726][T17055] ? make_kgid+0x228/0x3a0 [ 513.456116][T17055] ? security_inode_alloc+0x32/0x1f0 [ 513.461372][T17055] should_failslab+0x5/0x20 [ 513.465847][T17055] kmem_cache_alloc+0x36/0x260 [ 513.470586][T17055] security_inode_alloc+0x32/0x1f0 [ 513.475681][T17055] inode_init_always+0x37c/0x800 [ 513.480588][T17055] ? set_qf_name+0x350/0x350 [ 513.485161][T17055] new_inode_pseudo+0x7b/0x240 [ 513.489891][T17055] new_inode+0x25/0x1d0 [ 513.494028][T17055] ? memset+0x1f/0x40 [ 513.497980][T17055] __ext4_new_inode+0x63a/0x5cf0 [ 513.502890][T17055] ? avc_has_perm_noaudit+0x37d/0x400 [ 513.508246][T17055] ? avc_has_perm_noaudit+0x30c/0x400 [ 513.513588][T17055] ? ext4_read_inode_bitmap+0x1950/0x1950 [ 513.519272][T17055] ? memset+0x1f/0x40 [ 513.523223][T17055] ? __dquot_initialize+0x227/0xd70 [ 513.528389][T17055] ? avc_has_perm+0x176/0x280 [ 513.533035][T17055] ? security_transition_sid+0x78/0x90 [ 513.538468][T17055] ext4_mkdir+0x41e/0x1530 [ 513.542872][T17055] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 513.548650][T17055] ? ext4_symlink+0x1020/0x1020 [ 513.553467][T17055] ? generic_permission+0x190/0x4a0 [ 513.558647][T17055] ? security_inode_mkdir+0xed/0x130 [ 513.563906][T17055] vfs_mkdir2+0x448/0x620 [ 513.568214][T17055] ovl_create_real+0x148/0x330 [ 513.572950][T17055] ovl_workdir_create+0x3df/0x590 [ 513.577967][T17055] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 513.583220][T17055] ? __sb_start_write+0xa5/0x150 [ 513.588139][T17055] ovl_fill_super+0x38c3/0x4df0 [ 513.592966][T17055] ? ovl_mount+0x30/0x30 [ 513.597178][T17055] ? ida_alloc_range+0xa59/0xac0 [ 513.602084][T17055] ? delete_node+0x761/0x7b0 [ 513.606647][T17055] ? __radix_tree_replace+0x24d/0x2f0 [ 513.611999][T17055] ? up_read+0x10/0x10 [ 513.616040][T17055] ? sget+0x4cb/0x4e0 [ 513.619988][T17055] ? free_anon_bdev+0x20/0x20 [ 513.624663][T17055] ? ovl_mount+0x30/0x30 [ 513.628874][T17055] mount_nodev+0x52/0xe0 [ 513.633085][T17055] legacy_get_tree+0xde/0x170 [ 513.637730][T17055] ? fuse_emit+0x7d0/0x7d0 [ 513.642117][T17055] vfs_get_tree+0x85/0x260 [ 513.646513][T17055] do_mount+0x1a15/0x28c0 [ 513.650833][T17055] ? copy_mount_string+0x30/0x30 [ 513.655743][T17055] ? copy_mount_options+0x59/0x320 [ 513.660827][T17055] ? copy_mount_options+0x293/0x320 [ 513.665997][T17055] ksys_mount+0xc2/0xf0 [ 513.670125][T17055] __x64_sys_mount+0xb1/0xc0 [ 513.674698][T17055] do_syscall_64+0xcb/0x150 [ 513.679186][T17055] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.685049][T17055] RIP: 0033:0x45ca59 [ 513.688926][T17055] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 513.703013][ T115] smsc95xx 2-1:1.0 eth1 (unregistering): Failed to read reg index 0x00000114: -19 [ 513.708515][T17055] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 513.708525][T17055] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 18:43:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x4, {0x10001}}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="bca1ff7d2219cbf02962986103ca78ed4341c3268c6f0d7c81594d1748646c64f7e35fc53d44185013a2b689d26740889a9cb0fa4d3d4a84406fccae715111ea571c8e3e", @ANYRES16=r2, @ANYBLOB="000125bd702dfb60df25130000002000028025000200040008000100097629d77b023391e526028225f9a1e14807a3ba3425ba7ea6457605e3f561cacf48faa60bd4ca37a3a8623fa28277defc00c71d3ec2ddab308d52ae42b9c6a41cbd59a83771a55d8a190a027febc20217d5e1e0218a5f2d85b41fad73"], 0x34}, 0x1, 0x0, 0x0, 0x4044052}, 0x40059) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x304, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x76}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfd0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6cd1ec3d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x182}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5d8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9309}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x130, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b56}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x97}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7d2842}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x4008881}, 0x20041081) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) [ 513.708530][T17055] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 513.708549][T17055] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 513.717825][ T115] smsc95xx 2-1:1.0 eth1 (unregistering): Error reading MII_ACCESS [ 513.726087][T17055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 513.726092][T17055] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 513.737169][T17055] overlayfs: failed to create directory ./file1/work (errno: 12); mounting read-only [ 513.761747][ T115] ================================================================== [ 513.791418][ T115] BUG: KASAN: use-after-free in smsc95xx_mdio_read+0x251/0x870 [ 513.798943][ T115] Read of size 8 at addr ffff8881c5ff29c8 by task kworker/1:1/115 [ 513.806721][ T115] [ 513.809038][ T115] CPU: 1 PID: 115 Comm: kworker/1:1 Not tainted 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 513.818985][ T115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.829015][ T115] Workqueue: events check_carrier [ 513.834004][ T115] Call Trace: [ 513.837446][ T115] dump_stack+0x14a/0x1ce [ 513.841762][ T115] ? show_regs_print_info+0x12/0x12 [ 513.846940][ T115] ? printk+0xd2/0x114 [ 513.850980][ T115] print_address_description+0x93/0x620 [ 513.856492][ T115] ? netdev_warn+0x124/0x16b [ 513.861047][ T115] ? vprintk_emit+0x39e/0x4f0 [ 513.865690][ T115] ? netdev_crit+0x16b/0x16b [ 513.870246][ T115] __kasan_report+0x16d/0x1e0 [ 513.874905][ T115] ? smsc95xx_mdio_read+0x251/0x870 [ 513.880084][ T115] kasan_report+0x34/0x60 [ 513.884397][ T115] smsc95xx_mdio_read+0x251/0x870 [ 513.889396][ T115] ? smsc95xx_set_multicast+0x880/0x880 [ 513.894923][ T115] ? _raw_spin_unlock_irq+0x5/0x20 [ 513.900011][ T115] ? finish_task_switch+0x235/0x4c0 [ 513.905189][ T115] check_carrier+0xd1/0x2e0 [ 513.909669][ T115] process_one_work+0x777/0xf90 [ 513.914502][ T115] worker_thread+0xa8f/0x1430 [ 513.919168][ T115] kthread+0x2df/0x300 [ 513.923243][ T115] ? process_one_work+0xf90/0xf90 [ 513.928246][ T115] ? kthread_destroy_worker+0x280/0x280 [ 513.933765][ T115] ret_from_fork+0x1f/0x30 [ 513.938152][ T115] [ 513.940451][ T115] Allocated by task 115: [ 513.944674][ T115] __kasan_kmalloc+0x12c/0x1c0 [ 513.949405][ T115] __kmalloc+0xf7/0x2d0 [ 513.953537][ T115] kvmalloc_node+0xc2/0x120 [ 513.958007][ T115] alloc_netdev_mqs+0x85/0xc60 [ 513.962737][ T115] usbnet_probe+0x1ae/0x2770 [ 513.967302][ T115] usb_probe_interface+0x631/0xad0 [ 513.972381][ T115] really_probe+0x764/0xf70 [ 513.976852][ T115] driver_probe_device+0xe6/0x230 [ 513.981862][ T115] bus_for_each_drv+0x17a/0x200 [ 513.986688][ T115] __device_attach+0x27b/0x420 [ 513.991418][ T115] bus_probe_device+0xbb/0x200 [ 513.996149][ T115] device_add+0x13db/0x17c0 [ 514.000622][ T115] usb_set_configuration+0x197f/0x1f00 [ 514.006060][ T115] generic_probe+0x82/0x140 [ 514.010541][ T115] really_probe+0x764/0xf70 [ 514.015010][ T115] driver_probe_device+0xe6/0x230 [ 514.020000][ T115] bus_for_each_drv+0x17a/0x200 [ 514.024816][ T115] __device_attach+0x27b/0x420 [ 514.029547][ T115] bus_probe_device+0xbb/0x200 [ 514.034276][ T115] device_add+0x13db/0x17c0 [ 514.038757][ T115] usb_new_device+0xda7/0x1710 [ 514.043487][ T115] hub_event+0x2963/0x4fa0 [ 514.047869][ T115] process_one_work+0x777/0xf90 [ 514.052683][ T115] worker_thread+0xa8f/0x1430 [ 514.057337][ T115] kthread+0x2df/0x300 [ 514.061373][ T115] ret_from_fork+0x1f/0x30 [ 514.065753][ T115] [ 514.068048][ T115] Freed by task 234: [ 514.071918][ T115] __kasan_slab_free+0x181/0x230 [ 514.076823][ T115] slab_free_freelist_hook+0xd0/0x150 [ 514.082178][ T115] kfree+0x12b/0x600 [ 514.086050][ T115] device_release+0x70/0x1a0 [ 514.090622][ T115] kobject_put+0x1a9/0x250 [ 514.095031][ T115] usb_unbind_interface+0x1d8/0x850 [ 514.100215][ T115] device_release_driver_internal+0x515/0x7b0 [ 514.106256][ T115] bus_remove_device+0x2e7/0x350 [ 514.111166][ T115] device_del+0x7bc/0x1200 [ 514.115566][ T115] usb_disable_device+0x3fe/0xc90 [ 514.120559][ T115] usb_disconnect+0x341/0x880 [ 514.125205][ T115] hub_event+0x1c6c/0x4fa0 [ 514.129603][ T115] process_one_work+0x777/0xf90 [ 514.134428][ T115] worker_thread+0xa8f/0x1430 [ 514.139075][ T115] kthread+0x2df/0x300 [ 514.143111][ T115] ret_from_fork+0x1f/0x30 [ 514.147490][ T115] [ 514.149790][ T115] The buggy address belongs to the object at ffff8881c5ff2000 [ 514.149790][ T115] which belongs to the cache kmalloc-4k of size 4096 [ 514.163808][ T115] The buggy address is located 2504 bytes inside of [ 514.163808][ T115] 4096-byte region [ffff8881c5ff2000, ffff8881c5ff3000) [ 514.177231][ T115] The buggy address belongs to the page: [ 514.182832][ T115] page:ffffea000717fc00 refcount:1 mapcount:0 mapping:ffff8881da80c280 index:0x0 compound_mapcount: 0 [ 514.193726][ T115] flags: 0x8000000000010200(slab|head) [ 514.199165][ T115] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881da80c280 [ 514.207732][ T115] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 514.216288][ T115] page dumped because: kasan: bad access detected [ 514.222663][ T115] [ 514.224959][ T115] Memory state around the buggy address: [ 514.230560][ T115] ffff8881c5ff2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 18:44:00 executing program 4 (fault-call:8 fault-nth:34): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:44:00 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 18:44:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x8000, 0x122) pread64(r2, &(0x7f00000000c0)=""/169, 0xa9, 0x7) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @empty}, {0x1, @multicast}, 0x5a, {0x2, 0x4e20, @broadcast}, 'veth1_to_batadv\x00'}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 514.238587][ T115] ffff8881c5ff2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.246614][ T115] >ffff8881c5ff2980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.254647][ T115] ^ [ 514.261028][ T115] ffff8881c5ff2a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.269055][ T115] ffff8881c5ff2a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.277079][ T115] ================================================================== [ 514.285115][ T115] Disabling lock debugging due to kernel taint 18:44:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) unlink(&(0x7f0000000000)='./file0\x00') 18:44:00 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xeb142, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) 18:44:00 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x40, 0x7f, 0x0, 0x7, 0x1a, "c3fcb362aad19022"}) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 514.308903][ T115] usb °¦Úˆÿÿs (unnamed net_device) (released): MII is busy in smsc95xx_mdio_read [ 514.323970][ T115] usb °¦Úˆÿÿs (unnamed net_device) (released): Failed to read MII_BMSR [ 514.392730][T17095] FAULT_INJECTION: forcing a failure. [ 514.392730][T17095] name failslab, interval 1, probability 0, space 0, times 0 [ 514.405468][T17095] CPU: 1 PID: 17095 Comm: syz-executor.4 Tainted: G B 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 514.416978][T17095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.427003][T17095] Call Trace: [ 514.430294][T17095] dump_stack+0x14a/0x1ce [ 514.434593][T17095] ? devkmsg_release+0x11c/0x11c [ 514.439531][T17095] ? mls_context_isvalid+0x98/0x380 [ 514.444704][T17095] ? show_regs_print_info+0x12/0x12 [ 514.449870][T17095] ? memset+0x1f/0x40 [ 514.453820][T17095] should_fail+0x6fb/0x860 [ 514.458203][T17095] ? setup_fault_attr+0x3d0/0x3d0 [ 514.463209][T17095] ? ebitmap_cmp+0x1c8/0x230 [ 514.467780][T17095] ? mls_compute_context_len+0x81b/0x850 [ 514.473380][T17095] ? context_struct_to_string+0x3e4/0x820 [ 514.479066][T17095] should_failslab+0x5/0x20 [ 514.483535][T17095] __kmalloc+0x5f/0x2d0 [ 514.487659][T17095] context_struct_to_string+0x3e4/0x820 [ 514.493188][T17095] ? security_bounded_transition+0x560/0x560 [ 514.499136][T17095] ? sidtab_search_force+0x139/0x330 [ 514.504388][T17095] security_sid_to_context_core+0x270/0x3a0 [ 514.510258][T17095] selinux_inode_init_security+0x709/0xb00 [ 514.516055][T17095] ? selinux_inode_free_security+0x1d0/0x1d0 [ 514.522018][T17095] ? crc16+0x1e6/0x230 [ 514.526065][T17095] security_inode_init_security+0x16f/0x3c0 [ 514.531931][T17095] ? ext4_init_security+0x40/0x40 [ 514.536926][T17095] ? security_dentry_create_files_as+0xe0/0xe0 [ 514.543134][T17095] ? _raw_spin_unlock+0x5/0x20 [ 514.547869][T17095] __ext4_new_inode+0x46c0/0x5cf0 [ 514.552862][T17095] ? ext4_read_inode_bitmap+0x1950/0x1950 [ 514.558563][T17095] ? memset+0x1f/0x40 [ 514.562533][T17095] ? __dquot_initialize+0x227/0xd70 [ 514.567700][T17095] ? avc_has_perm+0x176/0x280 [ 514.572362][T17095] ? security_transition_sid+0x78/0x90 [ 514.577803][T17095] ext4_mkdir+0x41e/0x1530 [ 514.582189][T17095] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 514.587959][T17095] ? ext4_symlink+0x1020/0x1020 [ 514.592794][T17095] ? generic_permission+0x190/0x4a0 [ 514.597974][T17095] ? security_inode_mkdir+0xed/0x130 [ 514.603244][T17095] vfs_mkdir2+0x448/0x620 [ 514.607544][T17095] ovl_create_real+0x148/0x330 [ 514.612276][T17095] ovl_workdir_create+0x3df/0x590 [ 514.617281][T17095] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 514.622545][T17095] ? __sb_start_write+0xa5/0x150 [ 514.627541][T17095] ovl_fill_super+0x38c3/0x4df0 [ 514.632375][T17095] ? ovl_mount+0x30/0x30 [ 514.636592][T17095] ? ida_alloc_range+0xa59/0xac0 [ 514.641606][T17095] ? delete_node+0x761/0x7b0 [ 514.646172][T17095] ? __radix_tree_replace+0x24d/0x2f0 [ 514.651604][T17095] ? up_read+0x10/0x10 [ 514.655817][T17095] ? sget+0x4cb/0x4e0 [ 514.659766][T17095] ? free_anon_bdev+0x20/0x20 [ 514.664436][T17095] ? ovl_mount+0x30/0x30 [ 514.668646][T17095] mount_nodev+0x52/0xe0 [ 514.672869][T17095] legacy_get_tree+0xde/0x170 [ 514.677512][T17095] ? fuse_emit+0x7d0/0x7d0 [ 514.681894][T17095] vfs_get_tree+0x85/0x260 [ 514.686281][T17095] do_mount+0x1a15/0x28c0 [ 514.690581][T17095] ? copy_mount_string+0x30/0x30 [ 514.695491][T17095] ? copy_mount_options+0x59/0x320 [ 514.700572][T17095] ? copy_mount_options+0x293/0x320 [ 514.705743][T17095] ksys_mount+0xc2/0xf0 [ 514.709867][T17095] __x64_sys_mount+0xb1/0xc0 [ 514.714426][T17095] do_syscall_64+0xcb/0x150 [ 514.718901][T17095] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.724762][T17095] RIP: 0033:0x45ca59 18:44:01 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@sha1={0x1, "3e5e089268c7abe2a899891ef86ea0cd7a5fbebe"}, 0x15, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:44:01 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe07}}], 0x2, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r7}, 0x80, 0x0}}], 0x1, 0x2404c040) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r6, @ANYRES16=r4, @ANYBLOB="000b2cbdaae3b100ad143fb26f4c0cbb45a4505c533b2750", @ANYRES32=r7, @ANYRES64, @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x20048080) fcntl$setsig(r3, 0xa, 0x8) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:44:01 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xfffffffffffffff7, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f00000000c0)={{0x1, 0x0, @identifier="927473716dbb980775b5860b5f861b98"}}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/86) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:44:01 executing program 4 (fault-call:8 fault-nth:35): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:44:01 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x40000) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000080)=0x8) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x3, 0x6, @dev={[], 0x3b}}, 0x14) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f00000001c0)='./bus/file0\x00', 0x290283, 0x6) sendfile(r0, r6, 0x0, 0x8400fffffffb) [ 514.728624][T17095] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 514.748195][T17095] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 514.756576][T17095] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 514.764609][T17095] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 514.772549][T17095] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 514.780493][T17095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 18:44:01 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000000)=""/55, 0x37) 18:44:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000), &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) [ 514.788464][T17095] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 514.797487][T17095] overlayfs: failed to create directory ./file1/work (errno: 12); mounting read-only [ 514.889917][T17108] FAULT_INJECTION: forcing a failure. [ 514.889917][T17108] name failslab, interval 1, probability 0, space 0, times 0 [ 514.903800][T17108] CPU: 0 PID: 17108 Comm: syz-executor.4 Tainted: G B 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 514.915341][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.925385][T17108] Call Trace: [ 514.928667][T17108] dump_stack+0x14a/0x1ce [ 514.932995][T17108] ? devkmsg_release+0x11c/0x11c [ 514.937925][T17108] ? show_regs_print_info+0x12/0x12 [ 514.943117][T17108] ? mark_page_accessed+0x282/0x5b0 [ 514.948293][T17108] should_fail+0x6fb/0x860 [ 514.952679][T17108] ? setup_fault_attr+0x3d0/0x3d0 [ 514.957718][T17108] ? write_boundary_block+0x150/0x150 [ 514.963102][T17108] ? kcalloc+0x2b/0x50 [ 514.967176][T17108] should_failslab+0x5/0x20 [ 514.971676][T17108] __kmalloc+0x5f/0x2d0 [ 514.975827][T17108] ? __rcu_read_lock+0x50/0x50 [ 514.980559][T17108] kcalloc+0x2b/0x50 [ 514.984437][T17108] ext4_find_extent+0x2bb/0xce0 [ 514.989265][T17108] ext4_ext_map_blocks+0x3b7/0x46a0 [ 514.994447][T17108] ? __ext4_journal_get_create_access+0x2e0/0x2e0 [ 515.000830][T17108] ? __ext4_get_inode_loc+0x4b0/0x1080 [ 515.006266][T17108] ? _raw_spin_unlock+0x5/0x20 [ 515.011011][T17108] ? ext4_ext_release+0x10/0x10 [ 515.015843][T17108] ? __down_read+0xfc/0x240 [ 515.020315][T17108] ? _raw_read_unlock+0xe/0x30 [ 515.025061][T17108] ? ext4_es_lookup_extent+0x415/0x900 [ 515.030498][T17108] ext4_map_blocks+0x4a0/0x1e60 [ 515.035348][T17108] ? _raw_spin_unlock+0x5/0x20 [ 515.040101][T17108] ? ext4_issue_zeroout+0x160/0x160 [ 515.045275][T17108] ext4_getblk+0x111/0x560 [ 515.049675][T17108] ? ext4_get_block_trans+0x5a0/0x5a0 [ 515.055019][T17108] ? memset+0x1f/0x40 [ 515.058998][T17108] ext4_bread+0x8e/0x390 [ 515.063222][T17108] ? ext4_getblk+0x560/0x560 [ 515.067792][T17108] ext4_append+0x153/0x2d0 [ 515.072203][T17108] ext4_mkdir+0x7f8/0x1530 [ 515.076688][T17108] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 515.082482][T17108] ? ext4_symlink+0x1020/0x1020 [ 515.087311][T17108] ? generic_permission+0x190/0x4a0 [ 515.092483][T17108] ? security_inode_mkdir+0xed/0x130 [ 515.098013][T17108] vfs_mkdir2+0x448/0x620 [ 515.102315][T17108] ovl_create_real+0x148/0x330 [ 515.107070][T17108] ovl_workdir_create+0x3df/0x590 [ 515.112066][T17108] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 515.117318][T17108] ? __sb_start_write+0xa5/0x150 [ 515.122226][T17108] ovl_fill_super+0x38c3/0x4df0 [ 515.127046][T17108] ? ovl_mount+0x30/0x30 [ 515.131257][T17108] ? ida_alloc_range+0xa59/0xac0 [ 515.136217][T17108] ? delete_node+0x761/0x7b0 [ 515.140815][T17108] ? __radix_tree_replace+0x24d/0x2f0 [ 515.146206][T17108] ? up_read+0x10/0x10 [ 515.150263][T17108] ? sget+0x4cb/0x4e0 [ 515.154213][T17108] ? free_anon_bdev+0x20/0x20 [ 515.158856][T17108] ? ovl_mount+0x30/0x30 [ 515.163066][T17108] mount_nodev+0x52/0xe0 [ 515.167292][T17108] legacy_get_tree+0xde/0x170 [ 515.171936][T17108] ? fuse_emit+0x7d0/0x7d0 [ 515.176324][T17108] vfs_get_tree+0x85/0x260 [ 515.180718][T17108] do_mount+0x1a15/0x28c0 [ 515.185020][T17108] ? copy_mount_string+0x30/0x30 [ 515.189922][T17108] ? copy_mount_options+0x59/0x320 [ 515.195001][T17108] ? copy_mount_options+0x293/0x320 [ 515.200187][T17108] ksys_mount+0xc2/0xf0 [ 515.204311][T17108] __x64_sys_mount+0xb1/0xc0 [ 515.209043][T17108] do_syscall_64+0xcb/0x150 [ 515.213516][T17108] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.219374][T17108] RIP: 0033:0x45ca59 [ 515.223237][T17108] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 515.242810][T17108] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 515.251187][T17108] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 515.259187][T17108] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 515.267187][T17108] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 515.275131][T17108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 515.283160][T17108] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 18:44:03 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/raw6\x00') preadv(r3, &(0x7f00000017c0), 0x0, 0x7) 18:44:03 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 18:44:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) r1 = accept(r0, &(0x7f0000001780)=@isdn, &(0x7f0000001800)=0x80) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r4}, 0x80, 0x0}}], 0x1, 0x2404c040) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x18045}, 0x40010) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:44:03 executing program 4 (fault-call:8 fault-nth:36): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:44:03 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) openat$cgroup_ro(r1, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote, 0xfffffffc}, 0x1c, 0x0, 0x44}}, {{0x0, 0x1f, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x82800) ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f0000000280)=0x7) flock(r5, 0x8) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000001c0)) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:44:03 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000100)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:44:03 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x5c, @multicast2, 0x4e20, 0x4, 'dh\x00', 0x4, 0xfffffffa, 0x31}, 0x2c) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b90000009000"/16, @ANYRES16=r5, @ANYBLOB="00032dbd7000fcdbdf2502000000080001000000000008000100010000000800010002000000"], 0x2c}}, 0x40400) preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 18:44:03 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, r4}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:44:03 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x1, r1, 0x0, r0}, 0x10) r2 = geteuid() setreuid(r2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@dev={0xfe, 0x80, [], 0x3e}, @in6=@mcast2, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x60, 0x67, r1, r2}, {0xd33f, 0x3c4, 0x8, 0x7, 0x3f, 0x9, 0x8, 0x9}, {0x100, 0xffff, 0x1000, 0x2fb}, 0x7, 0x6e6bbc, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d5, 0x33}, 0x8, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3501, 0x0, 0x0, 0x2, 0xfc84, 0x800, 0x2}}, 0xe8) ioprio_set$uid(0x0, r2, 0x8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5) [ 517.327416][T17133] FAULT_INJECTION: forcing a failure. [ 517.327416][T17133] name failslab, interval 1, probability 0, space 0, times 0 [ 517.340067][T17133] CPU: 0 PID: 17133 Comm: syz-executor.4 Tainted: G B 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 517.351592][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.361637][T17133] Call Trace: [ 517.364923][T17133] dump_stack+0x14a/0x1ce [ 517.369247][T17133] ? devkmsg_release+0x11c/0x11c [ 517.374178][T17133] ? show_regs_print_info+0x12/0x12 [ 517.379368][T17133] ? memset+0x1f/0x40 [ 517.383347][T17133] ? __es_remove_extent+0xc0b/0x2280 [ 517.388626][T17133] should_fail+0x6fb/0x860 [ 517.393039][T17133] ? setup_fault_attr+0x3d0/0x3d0 [ 517.398059][T17133] ? __kasan_kmalloc+0x12c/0x1c0 [ 517.402990][T17133] ? __kmalloc+0xf7/0x2d0 [ 517.407308][T17133] ? kcalloc+0x2b/0x50 [ 517.411371][T17133] ? ext4_find_extent+0x2bb/0xce0 [ 517.416408][T17133] ? ext4_map_blocks+0x4a0/0x1e60 [ 517.421423][T17133] ? ext4_bread+0x8e/0x390 [ 517.425832][T17133] ? ext4_append+0x153/0x2d0 [ 517.430415][T17133] ? ext4_mkdir+0x7f8/0x1530 [ 517.434998][T17133] ? __es_insert_extent+0x7a4/0x1770 [ 517.440265][T17133] should_failslab+0x5/0x20 [ 517.444758][T17133] kmem_cache_alloc+0x36/0x260 [ 517.449504][T17133] __es_insert_extent+0x7a4/0x1770 [ 517.454590][T17133] ? _raw_write_lock+0xa1/0x170 [ 517.459411][T17133] ext4_es_insert_extent+0x43b/0x3100 [ 517.464831][T17133] ? kcalloc+0x2b/0x50 [ 517.468911][T17133] ? ext4_es_scan_clu+0x2c0/0x2c0 [ 517.473907][T17133] ? ext4_ext_convert_to_initialized+0x1e50/0x1e50 [ 517.480377][T17133] ? ext4_ext_convert_to_initialized+0x1e50/0x1e50 [ 517.486844][T17133] ? ext4_es_find_extent_range+0x1a7/0x300 [ 517.492619][T17133] ext4_ext_map_blocks+0x1836/0x46a0 [ 517.497875][T17133] ? __ext4_journal_get_create_access+0x2e0/0x2e0 [ 517.504257][T17133] ? __ext4_get_inode_loc+0x4b0/0x1080 [ 517.509686][T17133] ? _raw_spin_unlock+0x5/0x20 [ 517.514435][T17133] ? ext4_ext_release+0x10/0x10 [ 517.519260][T17133] ? __down_read+0xfc/0x240 [ 517.523735][T17133] ? _raw_read_unlock+0xe/0x30 [ 517.528466][T17133] ? ext4_es_lookup_extent+0x415/0x900 [ 517.533909][T17133] ext4_map_blocks+0x4a0/0x1e60 [ 517.538739][T17133] ? _raw_spin_unlock+0x5/0x20 [ 517.543541][T17133] ? ext4_issue_zeroout+0x160/0x160 [ 517.548743][T17133] ext4_getblk+0x111/0x560 [ 517.553132][T17133] ? ext4_get_block_trans+0x5a0/0x5a0 [ 517.558481][T17133] ? memset+0x1f/0x40 [ 517.562520][T17133] ext4_bread+0x8e/0x390 [ 517.567347][T17133] ? ext4_getblk+0x560/0x560 [ 517.571934][T17133] ext4_append+0x153/0x2d0 [ 517.576321][T17133] ext4_mkdir+0x7f8/0x1530 [ 517.580710][T17133] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 517.586498][T17133] ? ext4_symlink+0x1020/0x1020 [ 517.591319][T17133] ? generic_permission+0x190/0x4a0 [ 517.596499][T17133] ? security_inode_mkdir+0xed/0x130 [ 517.601758][T17133] vfs_mkdir2+0x448/0x620 [ 517.606060][T17133] ovl_create_real+0x148/0x330 [ 517.610813][T17133] ovl_workdir_create+0x3df/0x590 [ 517.615807][T17133] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 517.621081][T17133] ? __sb_start_write+0xa5/0x150 [ 517.625988][T17133] ovl_fill_super+0x38c3/0x4df0 [ 517.630821][T17133] ? ovl_mount+0x30/0x30 [ 517.635049][T17133] ? ida_alloc_range+0xa59/0xac0 [ 517.639973][T17133] ? delete_node+0x761/0x7b0 [ 517.644544][T17133] ? __radix_tree_replace+0x24d/0x2f0 [ 517.649903][T17133] ? up_read+0x10/0x10 [ 517.653950][T17133] ? sget+0x4cb/0x4e0 [ 517.657927][T17133] ? free_anon_bdev+0x20/0x20 [ 517.662575][T17133] ? ovl_mount+0x30/0x30 [ 517.666786][T17133] mount_nodev+0x52/0xe0 [ 517.671042][T17133] legacy_get_tree+0xde/0x170 18:44:04 executing program 4 (fault-call:8 fault-nth:37): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 517.675693][T17133] ? fuse_emit+0x7d0/0x7d0 [ 517.680085][T17133] vfs_get_tree+0x85/0x260 [ 517.684499][T17133] do_mount+0x1a15/0x28c0 [ 517.688823][T17133] ? copy_mount_string+0x30/0x30 [ 517.693733][T17133] ? copy_mount_options+0x59/0x320 [ 517.698816][T17133] ? copy_mount_options+0x293/0x320 [ 517.703982][T17133] ksys_mount+0xc2/0xf0 [ 517.708115][T17133] __x64_sys_mount+0xb1/0xc0 [ 517.712690][T17133] do_syscall_64+0xcb/0x150 [ 517.717166][T17133] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.723031][T17133] RIP: 0033:0x45ca59 [ 517.726915][T17133] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 517.746506][T17133] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 517.754899][T17133] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 517.762843][T17133] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 517.770790][T17133] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 18:44:04 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) write(r3, &(0x7f00000000c0)="55a4db59bff879cdee9882", 0xb) preadv(r3, &(0x7f0000000200)=[{&(0x7f00000007c0)=""/154, 0xfffffffffffffd83}, {&(0x7f0000000300)=""/269, 0xff}], 0x2, 0xfffb) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'veth1\x00', 0x600}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) write$P9_RGETLOCK(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2f00003ce0030000ffffffff00000000c092000000000000", @ANYRES32=r2, @ANYBLOB="11006765742f6983365f30353c9e616368656d"], 0x2f) r5 = syz_open_procfs(r2, &(0x7f0000000040)='net/ip6_mr_cache\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) 18:44:04 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xfff9, r3, &(0x7f0000000280)="7fce62489fd3cd75da085e8832f8c4a04560738e1977a215318e05a9bf81c322cf6c254e2217ecbc51a76f65b20d24d8445e39eceec57d3f2e24180457cb377648fedfdc107971c94a88e49f6738fc30b768b704a04c1871e1c7e3d762e052d2ab0403776e14133005c4e1abbe1dff8e76cf5e534fc003f0c7fd99cbc424864b6027cdcd23c24ba85fd56e1f40383eadc1bb9d92985d2a7e6e61fdc737350c8f3ff694c357f13095d7d2674d6f491380f39f2fa688a1ca81d50ee026cf1d0205854097b500b36b6ac158a8d22d289d7d0648b5bd643c907b971c", 0xda, 0xbc, 0x0, 0x0, r3}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="050a00000000000000000a00020004085a80"], 0x18}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r6, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r8}, 0x80, 0x0}}], 0x1, 0x2404c040) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x94, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x78, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x24, 0x1, "33a735445477cccf8da57e34a88c7dcb7265b617a33e40f754ef001ed7858032"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1a, 0x1, "f5df9f972b393ac169c85c010a954cc78c29e5f10033"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x9, 0x1, "5e7806ca69"}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000890}, 0x40100) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:44:04 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$FUSE(r1, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0xd, 0x8000200, 0x0, 0x2003, 0x4}}, 0x50) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000880), 0x0, 0xfffe) ioctl$KDDELIO(r6, 0x4b35, 0x798) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)) r7 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000002e00)={0x0, 0x3, 0x80000000008, 0x7fffffd}) [ 517.778732][T17133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 517.786671][T17133] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 517.836124][T17167] FAULT_INJECTION: forcing a failure. [ 517.836124][T17167] name failslab, interval 1, probability 0, space 0, times 0 [ 517.849253][T17167] CPU: 0 PID: 17167 Comm: syz-executor.4 Tainted: G B 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 517.860774][T17167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.870836][T17167] Call Trace: [ 517.874120][T17167] dump_stack+0x14a/0x1ce [ 517.878441][T17167] ? devkmsg_release+0x11c/0x11c [ 517.883372][T17167] ? show_regs_print_info+0x12/0x12 [ 517.888564][T17167] should_fail+0x6fb/0x860 [ 517.892974][T17167] ? setup_fault_attr+0x3d0/0x3d0 [ 517.897989][T17167] ? kcalloc+0x2b/0x50 [ 517.902046][T17167] should_failslab+0x5/0x20 [ 517.906543][T17167] __kmalloc+0x5f/0x2d0 [ 517.910694][T17167] ? slab_free_freelist_hook+0xd0/0x150 [ 517.916277][T17167] kcalloc+0x2b/0x50 [ 517.920165][T17167] ext4_find_extent+0x2bb/0xce0 [ 517.925015][T17167] ? ext4_ext_convert_to_initialized+0x1e50/0x1e50 [ 517.931512][T17167] ext4_ext_map_blocks+0x3b7/0x46a0 [ 517.936704][T17167] ? __ext4_journal_get_create_access+0x2e0/0x2e0 [ 517.943108][T17167] ? _raw_spin_unlock+0x5/0x20 [ 517.947864][T17167] ? ext4_ext_release+0x10/0x10 [ 517.952715][T17167] ? ext4_es_lookup_extent+0x415/0x900 [ 517.958169][T17167] ext4_map_blocks+0x975/0x1e60 [ 517.963016][T17167] ? _raw_spin_unlock+0x5/0x20 [ 517.967775][T17167] ? ext4_issue_zeroout+0x160/0x160 [ 517.972968][T17167] ext4_getblk+0x111/0x560 [ 517.977463][T17167] ? ext4_get_block_trans+0x5a0/0x5a0 [ 517.982828][T17167] ? memset+0x1f/0x40 [ 517.986860][T17167] ext4_bread+0x8e/0x390 [ 517.991086][T17167] ? ext4_getblk+0x560/0x560 [ 517.995793][T17167] ext4_append+0x153/0x2d0 [ 518.000183][T17167] ext4_mkdir+0x7f8/0x1530 [ 518.004808][T17167] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 518.010590][T17167] ? ext4_symlink+0x1020/0x1020 [ 518.015416][T17167] ? generic_permission+0x190/0x4a0 [ 518.020587][T17167] ? security_inode_mkdir+0xed/0x130 [ 518.025857][T17167] vfs_mkdir2+0x448/0x620 [ 518.030169][T17167] ovl_create_real+0x148/0x330 [ 518.036036][T17167] ovl_workdir_create+0x3df/0x590 [ 518.041045][T17167] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 518.046312][T17167] ? __sb_start_write+0xa5/0x150 [ 518.051517][T17167] ovl_fill_super+0x38c3/0x4df0 [ 518.056352][T17167] ? ovl_mount+0x30/0x30 [ 518.060570][T17167] ? ida_alloc_range+0xa59/0xac0 [ 518.065527][T17167] ? delete_node+0x761/0x7b0 [ 518.070263][T17167] ? __radix_tree_replace+0x24d/0x2f0 [ 518.075607][T17167] ? up_read+0x10/0x10 [ 518.079645][T17167] ? sget+0x4cb/0x4e0 [ 518.083598][T17167] ? free_anon_bdev+0x20/0x20 [ 518.088248][T17167] ? ovl_mount+0x30/0x30 [ 518.092466][T17167] mount_nodev+0x52/0xe0 [ 518.096699][T17167] legacy_get_tree+0xde/0x170 [ 518.101345][T17167] ? fuse_emit+0x7d0/0x7d0 [ 518.105775][T17167] vfs_get_tree+0x85/0x260 [ 518.110178][T17167] do_mount+0x1a15/0x28c0 [ 518.114478][T17167] ? copy_mount_string+0x30/0x30 [ 518.119386][T17167] ? copy_mount_options+0x59/0x320 [ 518.124468][T17167] ? copy_mount_options+0x293/0x320 [ 518.129633][T17167] ksys_mount+0xc2/0xf0 [ 518.133773][T17167] __x64_sys_mount+0xb1/0xc0 [ 518.138341][T17167] do_syscall_64+0xcb/0x150 [ 518.142828][T17167] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.148689][T17167] RIP: 0033:0x45ca59 [ 518.152553][T17167] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 518.172139][T17167] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 518.180518][T17167] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 518.188476][T17167] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 518.196432][T17167] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 518.204379][T17167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 518.212337][T17167] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 518.221790][T17167] overlayfs: failed to create directory ./file1/work (errno: 12); mounting read-only 18:44:06 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 18:44:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) 18:44:06 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x2400) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) dup(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:44:06 executing program 4 (fault-call:8 fault-nth:38): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:44:06 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000080)='comm\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) getpgrp(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:44:06 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:44:06 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r2) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x10000, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000000c0)={'wg2\x00', 0x80000001}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:44:06 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f00000001c0)="dc9d2bf7463e8fcc1fce77de9aa7590520f39107fc1f43f67d8ef62b1f658349586b3f3860e9612cfaf1a0f8b2994e3540e35e2909b606a131826053bfce10ffb4e5f8036f8e0af9d9cc13fb6d4c9ed6e21c2194df808df5117e2413f707240f66ebadcb6fd5fbba4b4069e7c3bc757e9f934f85538762864ca9b3b2889618f6faeec59417d5b7d5a3379f7725f68aebbee84f381e5000e263d7542a173f61449a1b372d964a586637fc4e28817d541b5c6a9195c9a9637bd5", 0xb9) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1706, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c040}, 0x8d1) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x8, &(0x7f0000000280)="a39ae86a0c6503f617856fad6dc54da6fbfcd00d93d59a4ad1f54aa25a88482654dc55eeedef39c1871639d92a492aa11bf33fe02b0360") ptrace$cont(0x7, r4, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) sendfile(r5, r1, 0x0, 0xffffffff) [ 520.372858][T17194] FAULT_INJECTION: forcing a failure. [ 520.372858][T17194] name failslab, interval 1, probability 0, space 0, times 0 [ 520.402221][T17194] CPU: 1 PID: 17194 Comm: syz-executor.4 Tainted: G B 5.4.46-syzkaller-00154-g30c93f3226d8 #0 18:44:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3600000417", @ANYRES16=r4, @ANYBLOB="00002bbd7000fddbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x800) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042abd7000fddbdf2501000000080001007063690011000200303030303a30303a31302e3000303021b13a30303a31302e3000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 18:44:06 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x5, 0x5, 0xfff, 0xfff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) [ 520.413772][T17194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.423815][T17194] Call Trace: [ 520.427114][T17194] dump_stack+0x14a/0x1ce [ 520.431439][T17194] ? devkmsg_release+0x11c/0x11c [ 520.436404][T17194] ? show_regs_print_info+0x12/0x12 [ 520.441602][T17194] ? ext4_evict_inode+0x1a70/0x1a70 [ 520.446797][T17194] ? _raw_spin_unlock+0x5/0x20 [ 520.451557][T17194] ? __dquot_alloc_space+0x2a1/0xce0 [ 520.456832][T17194] ? ext4_append+0x153/0x2d0 [ 520.461419][T17194] should_fail+0x6fb/0x860 [ 520.465841][T17194] ? setup_fault_attr+0x3d0/0x3d0 [ 520.470860][T17194] ? inode_io_list_move_locked+0x2bb/0x300 [ 520.476687][T17194] ? ext4_mb_new_blocks+0x423/0x28a0 [ 520.481968][T17194] should_failslab+0x5/0x20 [ 520.486472][T17194] kmem_cache_alloc+0x36/0x260 [ 520.491325][T17194] ext4_mb_new_blocks+0x423/0x28a0 [ 520.496444][T17194] ? __kmalloc+0xf7/0x2d0 [ 520.500763][T17194] ? kcalloc+0x2b/0x50 [ 520.504828][T17194] ? ext4_mb_pa_callback+0xc0/0xc0 [ 520.509951][T17194] ? ext4_find_extent+0xa52/0xce0 [ 520.514973][T17194] ? ext4_inode_to_goal_block+0x263/0x370 [ 520.520687][T17194] ext4_ext_map_blocks+0x2e4e/0x46a0 [ 520.526068][T17194] ? __ext4_journal_get_create_access+0x2e0/0x2e0 [ 520.532518][T17194] ? ext4_ext_release+0x10/0x10 [ 520.537373][T17194] ? ext4_es_lookup_extent+0x415/0x900 [ 520.542829][T17194] ext4_map_blocks+0x975/0x1e60 [ 520.547678][T17194] ? _raw_spin_unlock+0x5/0x20 [ 520.552437][T17194] ? ext4_issue_zeroout+0x160/0x160 [ 520.557628][T17194] ext4_getblk+0x111/0x560 [ 520.562046][T17194] ? ext4_get_block_trans+0x5a0/0x5a0 [ 520.567421][T17194] ? memset+0x1f/0x40 18:44:06 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002480)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="00c96feece70edec9f6c8b50f48c1267d1fe11c5a96db8a5855dbe90f442318e300cb19300921d039df6fea1fca6d5c68174303f10bf4219540faddd24f72aa8f36b3d32f848a28b03449b9922c850e4d568fc7bed8b4c390f", 0x59}, {&(0x7f00000001c0)="edc73c688b9030acb5a141793ad959b7b6c47b1650026b5b12f1b3afd22f775dab7928630ed4462e3d7183e8b1122ad6e45ceed54218e4a7524fa99df1fcf521d4b886d099ea0b88db56c32202f48cdd8f5e6859748af56cb218c054357af6e46c9104258feaca8042234d74d7825515470399c410e58b4eada58d643b92a85853653fb2743a591a28d33d578107", 0x8e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="1455fb8318180e9d8b912bdece357ca1ec5f30d71ea0b6d858877d476b50fdc88f38bef668a681d12e15583185c07f7109e5f4aea6f9c4e742800a02dc5b894a67edae9a4826e3b986cd6a82775f7ec88015eb471fc4216773b4", 0x5a}, {&(0x7f0000000300)="13269fe460abc04610ff56762e90496f533e57d9a0728dc91e4615e1dc168f39cd21d823f328cf4fe8d5c530e48bf4dfe195d115a336f4b27273a8082793ce71de1a71267673326cacef53d35a860382365bcaeaca0fc1ed6d13aa2bba872073cd26c745f42b05492a660c9d6ace812eb583a092fe565478fe28fccaa4e41b494138ea9a205ee8b13a177fc1bf74543053927cb7b1c51d6c0850185a031cb45b768880fd4012e7f6246dbe1e1d44fec8b8db78886db9dee330e72b42158b30", 0xbf}, {&(0x7f00000003c0)="88ee70bc28b7fd8d109ef4026c440ccebb4a1d492c1360a8f6959bf20668abb0cf27f5bea70c92702398d72e22b4e66aade210af87f1409564e97af98de42fb606873a8e4fba20421b473605c7321913ef0fd32e1cae33b06ce2c6221c5bd7243c689e4adf466ea4a3d371d059c0c8fd2d8ab6f3baed5285cbc4d2e132caa662090155b4f536cbc78355e54b8af819d185ae586fbcd4f8b034ee6d7d4e54660cc4c765b79b0e277cb776baa84f5ddb59b7f8f2aacc46c36540655520", 0xbc}, {&(0x7f0000000480)="05850bee11480728d05773274f5d44ad500d31c95dcf6b9aeb2aa997a4d0430596ab605e0315c709fa4d0d7bd8d43b2b10738c851c69ab1926614afbaca267222d666df420", 0x45}, {&(0x7f0000000500)="66622227821d3539faa6526eb2df752bd51065b33c0505091db34698caeeba789c3b9eedee57451b1feb28421d92e5641378883680b97208", 0x38}, {&(0x7f0000000540)}, {&(0x7f0000000580)="a0ffdd21f61459c7c261d0a365b712acf071f99ba2c57e71182fe1a328cdc997c23004df823bf8a8dcdb482e225d4df0d80b55e724de73acb44912651b38513ce1d10c0c992e555892486fe31eec9cd4ba57323a37b1640a9d1eb9b5e65a19b5cdd44f27627eb6eca292bee56539f280b9553c5d938d4ae11d7eb47caa21c2f9b51b899525f149007491161a2942e2c3ba7bd0d87f06f6c03b5e1f7784a5fbca7c5bedbf842f9b27079ed080756f20f182dab32608959c4ba262f35567b78b66941225c4cb197cdb", 0xc8}, {&(0x7f0000000680)="c065c44998d0c73530060643cc5e6d2395c7b05764198caa96cfd9076c599885d4650cb636f70a91f73fbaa249cece9c1d2c3a2914b652223296cc3548724e81c9ecbdbc77f9872a203682446c337fe9bf1422e0c9a97d81978fa432c27de6ea2bc071faddf86b269a7a744160538daa7023e1045a82492eedbe520028931ff7f575cbc0427c7636f58792bb3987494ef61dac3b57f4fc727a713d789624b10ec8891576c8e87e4132ed849a12c3c6cf2784af1939ee5ef910ce64e60ba91bab3e339e", 0xc3}], 0x8}}, {{&(0x7f0000000800)={0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, [], 0x1}, 0x1f}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000840)="c32d8fdb2d017eef8d146397e52d0a2e19fe9229e0b0e5f927fc19eb471183d12af9528b19ecac78215d70cfae760c51c0a01fa85856638779af7b555e2580c3fe05b6542e73aa4a72ef44e53369217d3ff1579f72178fdd75de4228a248a4d52dddb36c2d426f9c6a9fb5eebe0c8f5baf5fe94c48b99f79a52d263c2ec60155f47f8de74acbaa37cb9a9a31c48a60b45594a6c48769cc877c7278d2b24173eabe96c2b6233e0b7331d49efbd3099360425a982c09e05a7e9a58ecb4ae2f592cc8ed981540efae91c50554379652ac", 0xcf}], 0x1}}, {{&(0x7f0000000980)={0xa, 0x4e23, 0x7fe0000, @private0, 0x40}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000009c0)="bc5fb65c15bab9040cb1f270c2bc36d723d62f0d93c3ca28e9a82ea31354f15ae4ed21824cf9c8d1d8adc483565b26b62b910277db79c40c090b38edb38e777d63ec210a38789a11903ac7cc91799eaf4e169fe69826fffa59f0fd1eecc53b84c99bb2e9436fba55535ba458f21760350f63323f6934aadf2daf38", 0x7b}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="86044e327ec7389a3593643877cc8039ec53dc937155697fda61a776c09f48f434c44512790d1ddb05ef40dbe6ce05bf994116a293200dc48182de814881208f100cea08f4642fd2f7d246b3017c49de836aa6c65005cbd0e9bcc18bd561863810dfcafd47690b0257bb3ed6aebe7703c2303104aa1b01cec3c3de7a56347f3ca6e46fcd9df0ebfd9f1b2062494d6a6df112ec8819e2d8e6c41991a763f4c8881b66661db0fe52c3593091c513abb9cf745bf5ae02f20695b2db97d70d234cf01a644dfd0845f507d9afa8866e368b3fe5961952659fa6f33a14d2b1c0825630b5c015e2083780607a50f4fc12fc", 0xee}], 0x3, &(0x7f0000001ec0)=[@dstopts_2292={{0x68, 0x29, 0x4, {0x1d, 0x9, [], [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4531}, @calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x6, [0x8000000000, 0x7fffffff, 0x6, 0x2]}}, @enc_lim={0x4, 0x1, 0x40}]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x0, 0x5, [], [@ra={0x5, 0x2, 0x317f}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x34}}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x47}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x1, 0x80, 0x0, [@private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00', @mcast1, @loopback]}}}, @dstopts_2292={{0x138, 0x29, 0x4, {0xc, 0x23, [], [@hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0xfff}, @pad1, @enc_lim={0x4, 0x1, 0xff}, @generic={0x3, 0xf3, "e584dfdafea2de58e2fefc3a6f2d0b9a45405aa8fa4d0972648bce3a30692b1fe54a982b1f54858006190cadbfc7621ad877bdba3667231346cbcf6e85ef73a9825fd248d2022b2893a5fd436769adc80e15bdff04d8ebbe850c2d1187488405cd54858e2fa350c432ae64812e1fb533b6acfe6d07c88a65be26d5664c8a593dc22948e4c83222935385f3113aad2e4fbc3d791c917374fab858584c3b769a16de0e8b0bb807c9985867f559fa64b71e5b8e17301c247360dfa26c3416029585d55d41a75f844652a027106521fd01655461091da6652ae593d92ca9a8b29cb73062b3aec48ee995fa17692c7a8bb8b83c4790"}]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0x0, 0xd, [], [@calipso={0x7, 0x10, {0x2, 0x2, 0x2, 0xfffa, [0x80000001]}}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x40, {0x1, 0xe, 0x6, 0xffff, [0x80, 0xdf6eb58, 0xffffffffffffbd38, 0x100000000, 0x5, 0x6, 0x5]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffff}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x200}}, @flowinfo={{0x14, 0x29, 0xb, 0x549}}], 0x2f8}}, {{&(0x7f0000001b80)={0xa, 0x4e24, 0x200, @ipv4={[], [], @local}, 0xfffffeff}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001bc0)="8677ba163ef70bd67fd533cfcf3318128fbbcb181a8a5b67a93f814c0d5a6bd3af97b945160a1890b13f58cb82f3a558ff101b9bf70918f375642845f5b053b7560a6f8b6e03d4cd3ecfd501f00e8a2a178e4c179cbdcf337cdfe83f68c49d6b7aabf08e9ef58c12e40aa1e52713246f840b1a267a070575f167ee89530d5fe5796d7c0c91a40de6449fd01f311fff8f3ec7eca42b1988a64c4cf62668f9020dd965c8af23ec8f8f9a5d1403e8fb290f0a8b09a8154e1d2e9879aa532d", 0xbd}, {&(0x7f0000001c80)="aefa00848cbf47e28911e107e328fafe57e151f539792fd3caa68b4e640ad9067b0132f1611b6965fdeb2bfc0512e126e5fdfbf6c8d6223d4821049819cd4ec47c1b9163c45c99090c0ff9a862c60b6b035146299c2e6bb458dea87ca2d25e41a635b80f7f83372375befd8051e6452a58bcc4cacd5e8e1d5e06c4e7fa25436a8bae749cca16be4ba92162964cbd3ab8757ddfd6d7f95c11906718bac922301d7d", 0xa1}, {&(0x7f0000001d40)="514aeb1ff0b95804d1db389824d3033dca1490a3f1f395ad9e2edcbcc7ec007421dfbe23d17f7e1fa67881c0c41bd9b123943a92bca2e1777eb666522f66d851c6291beefbad5513cdcd23e7a0b2917157d58846bffc10c2c776e5be0a22", 0x5e}], 0x3}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002200)="df09ecc8f3abf6ded94d551e17b4c3e54eadfb90b90db644755080ba1e857f71cc2c3aec278c33b4927f6cd2b5b8429e331883441b804de196f237220a2cd7761044838852b37ca877fd272cea8a1ad3e3d97abdc9bff492f4d6e60c7d138d60cc451077506b61775d27a6", 0x6b}, {&(0x7f0000001e00)="e2f4cac9c1590567b756145431c1ebc16589cb003db03f9c45ef41b209d3b94b5688964ec17da47bc02f2f931ecee2cfdce7c337e7ede235c0d949", 0x3b}], 0x2, &(0x7f00000022c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x10000}}, @tclass={{0x14, 0x29, 0x43, 0x3f}}, @tclass={{0x14, 0x29, 0x43, 0x96}}, @dstopts={{0x20, 0x29, 0x37, {0x2, 0x0, [], [@ra={0x5, 0x2, 0x8}]}}}], 0x68}}, {{&(0x7f0000002340)={0xa, 0x4e23, 0x1, @empty, 0x4}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000002380)="e07b7d750e955c97cde3edbdd76a399d9391403067e3e86d5060e238d5ece669c924486f3c2816f73d5a695dfa27d924635be6def92cfdf863b56ddf1b90484c7e30197c9a43c5d1cb68f29533ef3465987c41a3586145529fb236007f6e2b8ad9ea3f08854039c450216471b736f36276a8fb8ae673cc132cb5eabca2", 0x7d}, {&(0x7f0000002400)="d5e4e910603c51de34ec1baa1b5156e763a94f89c2d7b1", 0x17}], 0x2}}], 0x9, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U-', 0x3}, 0x16, 0x2) 18:44:06 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x74, 0x24841) [ 520.571427][T17194] ext4_bread+0x8e/0x390 [ 520.575694][T17194] ? ext4_getblk+0x560/0x560 [ 520.580280][T17194] ext4_append+0x153/0x2d0 [ 520.584692][T17194] ext4_mkdir+0x7f8/0x1530 [ 520.589105][T17194] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 520.594903][T17194] ? ext4_symlink+0x1020/0x1020 [ 520.599751][T17194] ? generic_permission+0x190/0x4a0 [ 520.604942][T17194] ? security_inode_mkdir+0xed/0x130 [ 520.610212][T17194] vfs_mkdir2+0x448/0x620 [ 520.614533][T17194] ovl_create_real+0x148/0x330 [ 520.619293][T17194] ovl_workdir_create+0x3df/0x590 [ 520.624313][T17194] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 520.629591][T17194] ? __sb_start_write+0xa5/0x150 [ 520.634519][T17194] ovl_fill_super+0x38c3/0x4df0 [ 520.639362][T17194] ? ovl_mount+0x30/0x30 [ 520.643595][T17194] ? ida_alloc_range+0xa59/0xac0 [ 520.648522][T17194] ? delete_node+0x761/0x7b0 [ 520.653099][T17194] ? __radix_tree_replace+0x24d/0x2f0 [ 520.658465][T17194] ? up_read+0x10/0x10 [ 520.662524][T17194] ? sget+0x4cb/0x4e0 [ 520.666504][T17194] ? free_anon_bdev+0x20/0x20 [ 520.671174][T17194] ? ovl_mount+0x30/0x30 [ 520.675670][T17194] mount_nodev+0x52/0xe0 [ 520.679918][T17194] legacy_get_tree+0xde/0x170 [ 520.684764][T17194] ? fuse_emit+0x7d0/0x7d0 [ 520.689171][T17194] vfs_get_tree+0x85/0x260 [ 520.693584][T17194] do_mount+0x1a15/0x28c0 [ 520.698269][T17194] ? copy_mount_string+0x30/0x30 [ 520.703231][T17194] ? copy_mount_options+0x59/0x320 [ 520.708435][T17194] ? copy_mount_options+0x293/0x320 [ 520.713715][T17194] ksys_mount+0xc2/0xf0 [ 520.717867][T17194] __x64_sys_mount+0xb1/0xc0 [ 520.722443][T17194] do_syscall_64+0xcb/0x150 [ 520.726925][T17194] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.732831][T17194] RIP: 0033:0x45ca59 [ 520.736695][T17194] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 520.756269][T17194] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 520.764707][T17194] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 520.772780][T17194] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 520.780740][T17194] RBP: 000000000078bf00 R08: 00000000200002c0 R09: 0000000000000000 [ 520.788691][T17194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 520.796668][T17194] R13: 0000000000000773 R14: 00000000004ca5ad R15: 00007feac1c906d4 [ 520.805869][T17194] overlayfs: failed to create directory ./file1/work (errno: 12); mounting read-only 18:44:09 executing program 5: r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x51}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x60}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 18:44:09 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x138, r1, 0x610, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x680a0c94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50821e88}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5857d47d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b65}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68314c44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27a995c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9dfc}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x138}, 0x1, 0x0, 0x0, 0x8040}, 0x10) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x20001, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000300)=""/29, 0x1d}], 0x2, 0x8) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) 18:44:09 executing program 4 (fault-call:8 fault-nth:39): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 18:44:09 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x29, 0x0}, 0x6ff}], 0x1, 0x40000021, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000000)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:44:09 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x7, 0x5, 0x0, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000038c0)=""/4117, 0x1015}], 0x1, &(0x7f00000000c0)=""/9, 0x9}, 0x3a12}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006f80)=""/19, 0x13}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x4, 0x4, 0x3, 0x0, 0x0, 0x0, 0xdffffffe}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x12) fchdir(r4) creat(&(0x7f0000000080)='./bus\x00', 0x0) 18:44:09 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) getrandom(&(0x7f0000000280)=""/165, 0xa5, 0x1) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200025bd7000fddbdf25050000000800040000000000110001002b5e5b757365722e73656c6600000000395665ca1e6ae6616387dad5e68399c24063c6b30d0c8fe65eb8c335248626c8ca3b55ddc87a0658ddc7d35885824722786e77face911f334c2d5048137b8936db0ea113258295f0ca3e3f301d4fd5081842e46dfc61d1ecea5237acc2a24a9c2db60ee2dca3e0792161ba937303f9cd5fd98d00e03134fc5b5ffea5a0c609382e4b81f84f8e8fcb914658ffcde4e62c15569e0f06e28497dabef0b8d4ab62e95a058c6c3fe7a957621db99667991fa75a1b43bd8bc5f8d6076131875f55bd159be83e57b10b37f906ed6032baf4f1ca7f3052cb30eeff39774859f943d7bb75f23cd066b33c9e79b17bc330b65f401512e31a2cb105e8813ef083447ef4ff1dd712be4e7ebe653de81c67fd011380c4417848528d346c413c63db3d8a1da52c043f2908b80f082e5ee00fa99429abfe868d670a45596fcb41f7000000000000000000002279479ec6cb0001c70448b082e69bd1a8cd84"], 0x30}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x38, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x24}}, 0x4000) 18:44:09 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 18:44:09 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000140)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x75e, 0x400080) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000040)) preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000200)={0xfe, 0xe, [{0x3}, {0xa, 0x1}, {0xe}, {0x4, 0x1}, {0xb, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {0x4}, {0xd}, {0x4}, {0x6, 0x1}, {0xa, 0x1}, {0x7}, {0x3}]}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) write$P9_RLOCK(r5, &(0x7f00000001c0)={0x8, 0x35, 0x2, 0x1}, 0x8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/139, 0x8b}], 0x1, 0xffff) ioctl$TCGETX(r6, 0x5432, &(0x7f0000000100)) 18:44:09 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x2142, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000001300)) preadv(r2, &(0x7f0000001380)=[{&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000100)=""/130, 0x82}, {&(0x7f00000001c0)=""/228, 0xe4}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/4087, 0xff7}, {&(0x7f0000005a00)=""/4105, 0x1009}, {&(0x7f0000003a00)=""/4104, 0x1008}], 0x8, 0x800010) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) dup2(r4, r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000001400)={0x0, {{0x2, 0x4e20, @loopback}}}, 0x88) [ 523.389627][T17235] FAULT_INJECTION: forcing a failure. [ 523.389627][T17235] name failslab, interval 1, probability 0, space 0, times 0 [ 523.407604][T17235] CPU: 0 PID: 17235 Comm: syz-executor.4 Tainted: G B 5.4.46-syzkaller-00154-g30c93f3226d8 #0 [ 523.419174][T17235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.429220][T17235] Call Trace: [ 523.432506][T17235] dump_stack+0x14a/0x1ce 18:44:09 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x8000000000001000, 0x41) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x8, {0x3}}, 0x18) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$USBDEVFS_RESET(r0, 0x5514) 18:44:09 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfff, 0xc0) inotify_add_watch(r0, &(0x7f0000000100)='./bus\x00', 0x50000008) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000140)={0x5, 0x401, 0x9, 0x8, 0x7c, 0x7}) fcntl$setstatus(r1, 0x4, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7) r5 = open(&(0x7f0000000200)='./bus\x00', 0x80805, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x80000000008, 0x8000000}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 523.436833][T17235] ? devkmsg_release+0x11c/0x11c [ 523.441762][T17235] ? show_regs_print_info+0x12/0x12 [ 523.446956][T17235] ? ext4_evict_inode+0x1a70/0x1a70 [ 523.452145][T17235] ? _raw_spin_unlock+0x5/0x20 [ 523.456898][T17235] ? __dquot_alloc_space+0x2a1/0xce0 [ 523.462170][T17235] ? ext4_append+0x153/0x2d0 [ 523.466749][T17235] should_fail+0x6fb/0x860 [ 523.471156][T17235] ? setup_fault_attr+0x3d0/0x3d0 [ 523.476171][T17235] ? inode_io_list_move_locked+0x2bb/0x300 [ 523.481972][T17235] ? ext4_mb_new_blocks+0x423/0x28a0 18:44:09 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x72f8, 0x6bf2, 0xf5df}) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/154, 0x9a}], 0x1, 0xffff) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000040)={0xe9b1, 0x101, 0x9}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 523.487248][T17235] should_failslab+0x5/0x20 [ 523.491741][T17235] kmem_cache_alloc+0x36/0x260 [ 523.496495][T17235] ext4_mb_new_blocks+0x423/0x28a0 [ 523.501603][T17235] ? __kmalloc+0xf7/0x2d0 [ 523.505920][T17235] ? kcalloc+0x2b/0x50 [ 523.509987][T17235] ? ext4_mb_pa_callback+0xc0/0xc0 [ 523.515089][T17235] ? ext4_find_extent+0xa52/0xce0 [ 523.520105][T17235] ? ext4_inode_to_goal_block+0x263/0x370 [ 523.525822][T17235] ext4_ext_map_blocks+0x2e4e/0x46a0 [ 523.531101][T17235] ? __ext4_journal_get_create_access+0x2e0/0x2e0 [ 523.537516][T17235] ? ext4_ext_release+0x10/0x10 [ 523.542360][T17235] ? ext4_es_lookup_extent+0x415/0x900 [ 523.547810][T17235] ext4_map_blocks+0x975/0x1e60 [ 523.552665][T17235] ? _raw_spin_unlock+0x5/0x20 [ 523.557413][T17235] ? ext4_issue_zeroout+0x160/0x160 [ 523.562598][T17235] ext4_getblk+0x111/0x560 [ 523.566983][T17235] ? ext4_get_block_trans+0x5a0/0x5a0 [ 523.572322][T17235] ? memset+0x1f/0x40 [ 523.576273][T17235] ext4_bread+0x8e/0x390 [ 523.580484][T17235] ? ext4_getblk+0x560/0x560 [ 523.585054][T17235] ext4_append+0x153/0x2d0 [ 523.589438][T17235] ext4_mkdir+0x7f8/0x1530 [ 523.593844][T17235] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 523.599626][T17235] ? ext4_symlink+0x1020/0x1020 [ 523.604472][T17235] ? generic_permission+0x190/0x4a0 [ 523.609640][T17235] ? security_inode_mkdir+0xed/0x130 [ 523.614912][T17235] vfs_mkdir2+0x448/0x620 [ 523.619218][T17235] ovl_create_real+0x148/0x330 [ 523.623973][T17235] ovl_workdir_create+0x3df/0x590 [ 523.629017][T17235] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 523.634285][T17235] ? __sb_start_write+0xa5/0x150 [ 523.639195][T17235] ovl_fill_super+0x38c3/0x4df0 [ 523.644022][T17235] ? ovl_mount+0x30/0x30 [ 523.648239][T17235] ? ida_alloc_range+0xa59/0xac0 [ 523.653159][T17235] ? delete_node+0x761/0x7b0 [ 523.657725][T17235] ? __radix_tree_replace+0x24d/0x2f0 [ 523.663072][T17235] ? up_read+0x10/0x10 [ 523.667128][T17235] ? sget+0x4cb/0x4e0 [ 523.671115][T17235] ? free_anon_bdev+0x20/0x20 [ 523.675775][T17235] ? ovl_mount+0x30/0x30 [ 523.680002][T17235] mount_nodev+0x52/0xe0 [ 523.684227][T17235] legacy_get_tree+0xde/0x170 [ 523.688887][T17235] ? fuse_emit+0x7d0/0x7d0 [ 523.693290][T17235] vfs_get_tree+0x85/0x260 [ 523.697691][T17235] do_mount+0x1a15/0x28c0 [ 523.701992][T17235] ? copy_mount_string+0x30/0x30 [ 523.706918][T17235] ? copy_mount_options+0x59/0x320 [ 523.711996][T17235] ? copy_mount_options+0x293/0x320 [ 523.717176][T17235] ksys_mount+0xc2/0xf0 [ 523.721308][T17235] __x64_sys_mount+0xb1/0xc0 [ 523.725878][T17235] do_syscall_64+0xcb/0x150 [ 523.730358][T17235] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.736300][T17235] RIP: 0033:0x45ca59 [ 523.741382][T17235] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 523.760957][T17235] RSP: 002b:00007feac1c8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 523.769446][T17235] RAX: ffffffffffffffda RBX: 00000000004f6ea0 RCX: 000000000045ca59 [ 523.777389][T17235] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000