ES16=0x0], 0xff5a) recvmsg(r2, &(0x7f0000000140)={0x0, 0x3a, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x1450}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) tee(0xffffffffffffffff, r2, 0x4, 0x9) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) fsetxattr$smack_xattr_label(r3, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000180)={'bbr\x00'}, 0x5, 0x1) 04:16:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x8) [ 901.929110][T16317] input: syz1 as /devices/virtual/input/input11 04:16:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32=0x0], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f0000000080), 0x51e) 04:16:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9, {0xc5, 0x4, 0xfd, 0x5, 0x1, 0x3}, 0x3, 0x80}, 0xe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000140)) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'bond_slave_0\x00\x00\x00\x00\x00\x00\x00\a\x00', {0x3}, 0x8e02}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x1800000000000060, 0xffffffffffffff93, 0x0, &(0x7f0000000180)="000000590089275d2d81025ecaffa1606e413ef15252841e2b2336dbddc395f70eccf6230a1cb58ab4ed0c89b4cc4f8348b350d1305c7412b03a8ec577396f227f82f102bfb1709f8f9240133079336c8101fc3b3dc6ea48cb3a8159e37088eb80e94308960de539450af062334482d68cf0cb5a1d1d7a6644", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 902.130260][T16329] input: syz1 as /devices/virtual/input/input12 04:16:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/179}) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/49, 0x31}], 0x1) 04:16:53 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff020000ff00000a004500005c000000fbb063fc156662aabb190000019078ac7010bbac141411050290780000000000210000ac14140dac141400082c000000000000000000003f000000000000e080000100000000000000007f0000010000000000000000"], 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x1}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdc1) ioctl(r2, 0x10000, &(0x7f0000000400)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) syz_open_dev$audion(0x0, 0x0, 0x80100) r5 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0xfff, 0x111600) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000440)=r6) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x10}) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x1, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x400, 0x2}}, 0x44) r7 = memfd_create(&(0x7f0000000c40)='memory.events\x00\xf0\xb5zCw/Z3\xac\xa2\xd2\xc4\x1c~\xf9M\xe7\xd2R\xe9\x1f\x99 >\xa7\xfe\xb6\xcbQH\xf5\xee\xdfL\xbev\x98\'\x14\xbd\"\xcfT\xde\xe7\x11+\xa5\x9b\xbdMy\xc7\x9b\x9a\x8d\xf5\x978\xb8\x8e>X\xeaq\x9a\xc4\x90\x14\xf5\xae\x90\v\x06\x86\xd1\x1d\x82n\xfa7\xe7}\xc9\xf1u\xee\xb9\xf2\ar\xc8\xeb\x15\x93\xf7\xd5\x14\x8dD\x88\xe4\xca3\x032f\x11%s\xc28\x94\xb9\xd8\xa2\x86\x8c\xf9\xa3;G\x90\xef\xbf\xd9\xb5j}\xec\xc9\x1f&r\xb9I\xba`\xc0\xfen\xf0\xe8\x03\xf0\xee\x82\xbd5b=\xd9\xda^\xb7k`\xedz\x86P\xba\xc9\v\x1fgt\xbaN\xfe7)\xd5\xa4\xf9\xc0\xfa\f_\x15\xd5\xe2v\r)\xa6\xdc\xe3B\x17\xb2\xb2\a\xad\xe6\xa0*\x95\xb2\x91,^\xed3o\x1di\x14\x81>\xa8\xdcb\xe7\x8a\xfc', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) r8 = dup3(r1, r7, 0x10000) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffe3, 0x7, 0x1f, 0x6, 0x9cb, 0x8001, 0x7d, 0x2, 0x86}, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b0011002f004c00000020140e000a0002009d0edc2976d153b4", 0x235}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b0011002f004c00000020140e000a0002009d0edc2976d153b4", 0x235}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b0011002f004c00000020140e000a0002009d0edc2976d153b4", 0x235}], 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[]}}, 0x204c810) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/379, @ANYRESDEC=r1], 0x174}}, 0x0) [ 902.513023][T16344] bridge0: port 3(team0) entered blocking state [ 902.533431][T16344] bridge0: port 3(team0) entered disabled state [ 902.558477][T16347] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 902.622989][T16344] device team0 entered promiscuous mode [ 902.629645][T16344] device team_slave_0 entered promiscuous mode [ 902.646304][T16344] device team_slave_1 entered promiscuous mode [ 902.656421][T16344] bridge0: port 3(team0) entered blocking state [ 902.662930][T16344] bridge0: port 3(team0) entered forwarding state [ 902.745183][T16350] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 902.756516][T16350] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 902.774584][T16350] CPU: 0 PID: 16350 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 902.783458][T16350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.793659][T16350] Call Trace: [ 902.797017][T16350] dump_stack+0x11d/0x181 [ 902.801405][T16350] sysfs_warn_dup.cold+0x1c/0x33 [ 902.806411][T16350] sysfs_do_create_link_sd.isra.0+0x11b/0x130 [ 902.812485][T16350] sysfs_create_link+0x5c/0xa0 [ 902.817310][T16350] device_add+0x514/0x1040 [ 902.821717][T16350] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 902.827608][T16350] wiphy_register+0x12c9/0x17d0 [ 902.832452][T16350] ? kobject_uevent_env+0x1f1/0xc80 [ 902.837664][T16350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 902.843909][T16350] ? ieee80211_cs_list_valid+0x10a/0x170 [ 902.849568][T16350] ieee80211_register_hw+0xcb5/0x1ea0 [ 902.854935][T16350] ? hrtimer_init+0x59/0x150 [ 902.859553][T16350] mac80211_hwsim_new_radio+0x12d2/0x1ac0 [ 902.865259][T16350] ? kasprintf+0x74/0xa0 [ 902.869503][T16350] hwsim_new_radio_nl+0x63d/0x890 [ 902.874537][T16350] genl_rcv_msg+0x413/0x900 [ 902.879030][T16350] netlink_rcv_skb+0xb0/0x260 [ 902.883694][T16350] ? genl_family_rcv_msg_attrs_parse+0x1f0/0x1f0 [ 902.890037][T16350] genl_rcv+0x32/0x50 [ 902.894076][T16350] netlink_unicast+0x3a6/0x4d0 [ 902.898825][T16350] netlink_sendmsg+0x4d3/0x8b0 [ 902.903620][T16350] ? netlink_unicast+0x4d0/0x4d0 [ 902.908544][T16350] sock_sendmsg+0x9f/0xc0 [ 902.912891][T16350] ____sys_sendmsg+0x49d/0x4d0 [ 902.917658][T16350] ___sys_sendmsg+0xb5/0x100 [ 902.922233][T16350] ? __fget+0xb8/0x1d0 [ 902.926318][T16350] ? __fget_light+0xaf/0x190 [ 902.930890][T16350] ? __fdget+0x2c/0x40 [ 902.934942][T16350] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 902.941165][T16350] __sys_sendmsg+0xa0/0x160 [ 902.945753][T16350] __x64_sys_sendmsg+0x51/0x70 [ 902.950590][T16350] do_syscall_64+0xcc/0x3a0 [ 902.955084][T16350] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 902.960956][T16350] RIP: 0033:0x45a919 [ 902.964915][T16350] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 902.984560][T16350] RSP: 002b:00007fcbbedc6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.992969][T16350] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 903.000924][T16350] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000a [ 903.008898][T16350] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 903.016913][T16350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbbedc76d4 [ 903.024884][T16350] R13: 00000000004c99b6 R14: 00000000004e1888 R15: 00000000ffffffff [ 903.036314][T16351] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 903.059607][T16351] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 903.067450][T16351] CPU: 0 PID: 16351 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 903.076131][T16351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.086189][T16351] Call Trace: [ 903.089480][T16351] dump_stack+0x11d/0x181 [ 903.093826][T16351] sysfs_warn_dup.cold+0x1c/0x33 [ 903.098826][T16351] sysfs_do_create_link_sd.isra.0+0x11b/0x130 [ 903.104953][T16351] sysfs_create_link+0x5c/0xa0 [ 903.109738][T16351] device_add+0x514/0x1040 [ 903.114152][T16351] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 903.120045][T16351] wiphy_register+0x12c9/0x17d0 [ 903.125014][T16351] ? kobject_uevent_env+0x1f1/0xc80 [ 903.130227][T16351] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 903.136490][T16351] ? ieee80211_cs_list_valid+0x10a/0x170 [ 903.142120][T16351] ieee80211_register_hw+0xcb5/0x1ea0 [ 903.147525][T16351] ? hrtimer_init+0x59/0x150 [ 903.152184][T16351] mac80211_hwsim_new_radio+0x12d2/0x1ac0 [ 903.157900][T16351] ? kasprintf+0x74/0xa0 [ 903.162213][T16351] hwsim_new_radio_nl+0x63d/0x890 [ 903.167309][T16351] genl_rcv_msg+0x413/0x900 [ 903.171888][T16351] netlink_rcv_skb+0xb0/0x260 [ 903.176565][T16351] ? genl_family_rcv_msg_attrs_parse+0x1f0/0x1f0 [ 903.182883][T16351] genl_rcv+0x32/0x50 [ 903.186918][T16351] netlink_unicast+0x3a6/0x4d0 [ 903.191668][T16351] netlink_sendmsg+0x4d3/0x8b0 [ 903.196441][T16351] ? netlink_unicast+0x4d0/0x4d0 [ 903.201378][T16351] sock_sendmsg+0x9f/0xc0 [ 903.205773][T16351] ____sys_sendmsg+0x49d/0x4d0 [ 903.210524][T16351] ___sys_sendmsg+0xb5/0x100 [ 903.215139][T16351] ? __fget+0xb8/0x1d0 [ 903.219207][T16351] ? __fget_light+0xaf/0x190 [ 903.223847][T16351] ? __fdget+0x2c/0x40 [ 903.227903][T16351] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 903.234246][T16351] __sys_sendmsg+0xa0/0x160 [ 903.238751][T16351] __x64_sys_sendmsg+0x51/0x70 [ 903.243559][T16351] do_syscall_64+0xcc/0x3a0 [ 903.248174][T16351] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 903.254065][T16351] RIP: 0033:0x45a919 [ 903.257967][T16351] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 903.277676][T16351] RSP: 002b:00007fcbbeda5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.286094][T16351] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 903.294060][T16351] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000b [ 903.302036][T16351] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 903.310039][T16351] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbbeda66d4 [ 903.318006][T16351] R13: 00000000004c99b6 R14: 00000000004e1888 R15: 00000000ffffffff [ 905.103185][ C1] net_ratelimit: 22 callbacks suppressed [ 905.103195][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 905.114645][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 905.343188][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 905.349036][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 905.983164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 905.988959][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 905.994737][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 906.000477][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 906.063174][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 906.068996][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 910.143132][ C1] net_ratelimit: 18 callbacks suppressed [ 910.143146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 910.154676][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 910.160439][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 910.166193][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 910.223153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 910.228918][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 910.463152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 910.469044][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 911.343187][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 911.349004][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:17:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460bb8002f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:17:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9, {0xc5, 0x4, 0xfd, 0x5, 0x1, 0x3}, 0x3, 0x80}, 0xe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000140)) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'bond_slave_0\x00\x00\x00\x00\x00\x00\x00\a\x00', {0x3}, 0x8e02}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x1800000000000060, 0xffffffffffffff93, 0x0, &(0x7f0000000180)="000000590089275d2d81025ecaffa1606e413ef15252841e2b2336dbddc395f70eccf6230a1cb58ab4ed0c89b4cc4f8348b350d1305c7412b03a8ec577396f227f82f102bfb1709f8f9240133079336c8101fc3b3dc6ea48cb3a8159e37088eb80e94308960de539450af062334482d68cf0cb5a1d1d7a6644", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:17:02 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x100, 0x2) sendto$inet(r1, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8d22720", 0xee, 0x0, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000580)=[{&(0x7f0000000500)}], 0x1, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') r6 = dup(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x0, 'syz1\x00', 0x401}, 0x0, 0x500, 0x2, r7, 0x2, 0x6, 'syz1\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x0, 0x1, 0x2]}) sched_setattr(r7, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r10 = socket(0xa, 0x1, 0x0) r11 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r11) r12 = socket$inet6(0xa, 0x3, 0x2) r13 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r13, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r14 = socket(0xa, 0x1, 0x0) socket(0x1000000010, 0x400000400080803, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r15, &(0x7f0000000100), 0x18d, 0x6c00) r16 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r16, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000000940)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000a40)=0x3ee) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r17}) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000500)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, r18}) fcntl$F_GET_RW_HINT(r12, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f00000002c0)={@remote, 0x0, r18}) getsockopt$IP_VS_SO_GET_SERVICES(r12, 0x0, 0x482, 0x0, &(0x7f0000000100)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0x64) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@remote, 0x7e}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r8, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) syslog(0x0, &(0x7f0000000300)=""/120, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 04:17:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast1}}}, 0x90) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000180)={0x1, 0x0, [{}]}) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x8) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/147, 0x93}, {&(0x7f00000000c0)=""/110, 0x6e}], 0x2, 0x6) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000007ffd)) 04:17:02 executing program 3: r0 = socket$kcm(0x2, 0x11eaae2b50a3cff7, 0x84) sendmsg$inet(r0, &(0x7f0000005580)={&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000054c0)=[{&(0x7f0000000000)="70c406ebe5597ab0395d08171c", 0xd}], 0x1}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @remote}, 0x4, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)='nr0\x00', 0x4, 0x7, 0x6331}) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000080)) 04:17:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x8000, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x80000000}) r3 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r4 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) 04:17:02 executing program 5: getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r9}}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r12) r13 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r14, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r17}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r20, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r21 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r21, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000230e4f76"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800070400"/20, @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r7}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) 04:17:02 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000100)=""/27) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000002c0)={'syzkaller0\x00', {0x2, 0x4e22, @multicast1}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x0, @empty}}) r5 = socket(0x3, 0x140002, 0x0) write(r5, &(0x7f0000000000)="2600000013003ff1eb14c1f8030322ff000c00e313000000093903680000000006000300124b", 0x26) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2600000013003ff1eb14c1f8030322ff000c00e313000000093903680000000006000300124b", 0x26) r7 = dup3(r5, r6, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000100), 0x18d, 0x6c00) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="210200000000000000000c0000001800050008000100756470000c00020040000300f7080000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000127bd7000fddbdf250800000001000008000100ff010000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) write$cgroup_int(r7, &(0x7f0000000140)=0x9, 0x12) socket(0x10, 0x3, 0x0) r11 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r11, 0x200004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x54, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r11, 0x0, 0x80001d00c0d0) 04:17:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r1}, &(0x7f0000000080)) r2 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r2}, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) r5 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r7, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) 04:17:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9, {0xc5, 0x4, 0xfd, 0x5, 0x1, 0x3}, 0x3, 0x80}, 0xe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000140)) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'bond_slave_0\x00\x00\x00\x00\x00\x00\x00\a\x00', {0x3}, 0x8e02}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e07dfbdfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c247f195e32f17799d6707432ff48bc085763314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd117252e47ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c6e62d0967ab7e43686b4d1e03e326beea7905ef7c7375ef8bc8143df20d13c37db2699f1210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f9197e7a5513c13e79d46bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb400"/585], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x1800000000000060, 0xffffffffffffff93, 0x0, &(0x7f0000000180)="000000590089275d2d81025ecaffa1606e413ef15252841e2b2336dbddc395f70eccf6230a1cb58ab4ed0c89b4cc4f8348b350d1305c7412b03a8ec577396f227f82f102bfb1709f8f9240133079336c8101fc3b3dc6ea48cb3a8159e37088eb80e94308960de539450af062334482d68cf0cb5a1d1d7a6644", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 912.500529][T16382] device nr0 entered promiscuous mode 04:17:03 executing program 2: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000080)={0x6, "8325d1978332af8baa80d58220800fe4c7d95d80a17877f101e5668bc6f8da89", 0x2, 0x1}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x800) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 912.541147][T16388] K: renamed from caif0 [ 912.643950][T16388] device K entered promiscuous mode [ 912.651430][T16394] __nla_validate_parse: 6 callbacks suppressed [ 912.651462][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 04:17:03 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r1}, &(0x7f0000000080)) clone3(&(0x7f0000000300)={0x1000, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {}, &(0x7f0000000180)=""/110, 0x6e, &(0x7f0000000200)=""/107, &(0x7f0000000280)=[r1], 0x1}, 0x50) fcntl$setown(r0, 0x8, r2) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="318533735b5bae", 0x7}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x6, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000380)={0x1, 0x4, 0x77}) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x43, 0x0) [ 913.031147][T16385] device nr0 entered promiscuous mode [ 913.039643][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 915.503206][ C1] net_ratelimit: 23 callbacks suppressed [ 915.503215][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 915.514800][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 915.743156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 915.748930][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 916.383176][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 916.389018][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 916.394791][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 916.400732][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 916.463138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 916.469231][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:17:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600e0002f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:17:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000140)=""/92) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000300)={r5}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000000c0)={r5, &(0x7f0000000200)=""/100}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000080)={0x3, 0x100, 0x1fb646c2f52a6dbf, {0x7f, 0x1, 0x4, 0x1}}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:17:10 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x100, 0x2) sendto$inet(r1, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8d22720", 0xee, 0x0, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000580)=[{&(0x7f0000000500)}], 0x1, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') r6 = dup(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x0, 'syz1\x00', 0x401}, 0x0, 0x500, 0x2, r7, 0x2, 0x6, 'syz1\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x0, 0x1, 0x2]}) sched_setattr(r7, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r10 = socket(0xa, 0x1, 0x0) r11 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r11) r12 = socket$inet6(0xa, 0x3, 0x2) r13 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r13, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r14 = socket(0xa, 0x1, 0x0) socket(0x1000000010, 0x400000400080803, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r15, &(0x7f0000000100), 0x18d, 0x6c00) r16 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r16, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000000940)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000a40)=0x3ee) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r17}) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000500)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, r18}) fcntl$F_GET_RW_HINT(r12, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f00000002c0)={@remote, 0x0, r18}) getsockopt$IP_VS_SO_GET_SERVICES(r12, 0x0, 0x482, 0x0, &(0x7f0000000100)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0x64) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@remote, 0x7e}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r8, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) syslog(0x0, &(0x7f0000000300)=""/120, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 04:17:10 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1c) r0 = socket(0x10, 0x80002, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0xb) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000100)=@unspec, 0xc) close(0xffffffffffffffff) open(&(0x7f0000000740)='./file0\x00', 0x4000, 0x1) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000140)={0x6, 0x7fff, 0x6, 0x0, 0x3f}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x5e8) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000700)) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(0x0, 0x143042, 0x0) ftruncate(r7, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(r8, r5, 0x0, 0xfffe) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x7307}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000380)={r9, 0x73}, 0x8) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000400)="c189ef4fd17c2ddcb3632ef404103cbb92c78e189e9bcc9e1ebc9f8b84b02ae2d18de80dbb9b65cd291efdac1a9a20a96223b43557745b8ff3f1be1429b3e0ddc9b8c7f6f22ccbd9be70234221adf91cb9fd4e15d036a17d0fdfedcdc837fbf5abacea2221e0e22f63658966675d0b597c05e114dc78051da628b9ec7653ea7ebc", 0x81, 0x24000805, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) 04:17:10 executing program 5: getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r9}}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r12) r13 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r14, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r17}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r20, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r21 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r21, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000230e4f76"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800070400"/20, @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r7}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) 04:17:10 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000100)=""/27) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000002c0)={'syzkaller0\x00', {0x2, 0x4e22, @multicast1}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x0, @empty}}) r5 = socket(0x3, 0x140002, 0x0) write(r5, &(0x7f0000000000)="2600000013003ff1eb14c1f8030322ff000c00e313000000093903680000000006000300124b", 0x26) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2600000013003ff1eb14c1f8030322ff000c00e313000000093903680000000006000300124b", 0x26) r7 = dup3(r5, r6, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000100), 0x18d, 0x6c00) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="210200000000000000000c0000001800050008000100756470000c00020040000300f7080000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000127bd7000fddbdf250800000001000008000100ff010000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) write$cgroup_int(r7, &(0x7f0000000140)=0x9, 0x12) socket(0x10, 0x3, 0x0) r11 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r11, 0x200004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x54, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r11, 0x0, 0x80001d00c0d0) 04:17:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x5, 0x1, 0x1000}) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200004, 0x0, "000003009e0086e20300000000000000001000"}) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x9}, 0x4) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000040)) [ 919.465111][T16437] device nr0 entered promiscuous mode 04:17:10 executing program 2: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x800) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 919.554205][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 04:17:10 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1c) r0 = socket(0x10, 0x80002, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0xb) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000100)=@unspec, 0xc) close(0xffffffffffffffff) open(&(0x7f0000000740)='./file0\x00', 0x4000, 0x1) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000140)={0x6, 0x7fff, 0x6, 0x0, 0x3f}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x5e8) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000700)) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(0x0, 0x143042, 0x0) ftruncate(r7, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(r8, r5, 0x0, 0xfffe) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x7307}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000380)={r9, 0x73}, 0x8) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000400)="c189ef4fd17c2ddcb3632ef404103cbb92c78e189e9bcc9e1ebc9f8b84b02ae2d18de80dbb9b65cd291efdac1a9a20a96223b43557745b8ff3f1be1429b3e0ddc9b8c7f6f22ccbd9be70234221adf91cb9fd4e15d036a17d0fdfedcdc837fbf5abacea2221e0e22f63658966675d0b597c05e114dc78051da628b9ec7653ea7ebc", 0x81, 0x24000805, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) 04:17:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x200, @local, 0x8}, {0xa, 0x4e24, 0x7fff, @mcast2, 0x3}, 0x6, [0x4, 0x7f, 0xd9da, 0x3, 0x5, 0x400, 0x101, 0x2]}, 0x5c) 04:17:10 executing program 3: getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r9}}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r12) r13 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r14, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r17}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r20, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r21 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r21, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000230e4f76"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800070400"/20, @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r7}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) 04:17:11 executing program 1: getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r9}}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r12) r13 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r14, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r17}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r20, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r21 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r21, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000230e4f76"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800070400"/20, @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r7}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) [ 920.553134][ C1] net_ratelimit: 19 callbacks suppressed [ 920.553145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 920.564938][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 920.570734][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 920.576627][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 920.623136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 920.628965][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 920.873212][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 920.879539][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 921.743217][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 921.749404][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:17:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000032006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:17:14 executing program 5: getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r9}}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r12) r13 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r14, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r17}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r20, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r21 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r21, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000230e4f76"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800070400"/20, @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r7}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) 04:17:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xa) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x0) 04:17:14 executing program 4: getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r9}}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r12) r13 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r14, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r17}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r20, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r21 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r21, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000230e4f76"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800070400"/20, @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r7}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) 04:17:14 executing program 3: getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r9}}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r12) r13 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r14, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r17}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r20, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r21 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r21, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000230e4f76"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800070400"/20, @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r7}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) 04:17:14 executing program 1: getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r9}}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r12) r13 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r14, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r17}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r20, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r21 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r21, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000230e4f76"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800070400"/20, @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r7}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) 04:17:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x101, 0x2, 0x3, 0x7, 0x1, 0x9, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x1, 0x40, 0x1227, 0x4, 0x3}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r4, 0x8, 0x20}, &(0x7f0000000200)=0xc) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 04:17:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xdd) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000040)) 04:17:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x2}, {0x80000006}]}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r5 = dup(r0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) readv(r4, &(0x7f00000001c0), 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2000, 0x0) 04:17:14 executing program 5: getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r9}}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r12) r13 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r14, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r17}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r20, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r21 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r21, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000230e4f76"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800070400"/20, @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r7}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) 04:17:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x1, 0xc, 0x4, 0x200000, 0x7, {0x0, 0x7530}, {0x2, 0x0, 0x9, 0x6, 0x9, 0x3f, '\t:MR'}, 0x6, 0x6, @userptr=0xfff0000000, 0x4, 0x0, r2}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe8, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1b0}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 04:17:15 executing program 4: r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="820266696c6530000000"], 0x10) execve(0x0, 0x0, 0x0) [ 925.903224][ C1] net_ratelimit: 22 callbacks suppressed [ 925.903235][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 925.915275][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 926.143197][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 926.149832][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 926.783215][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 926.789177][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 926.795041][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 926.801030][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 926.863180][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 926.869210][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:17:21 executing program 3: getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r9}}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r12) r13 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r14, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r17}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r20, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r21 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r21, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000230e4f76"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800070400"/20, @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r7}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) 04:17:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000033006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:17:21 executing program 1: setrlimit(0x40000000000008, &(0x7f0000000000)={0x4847, 0xfffffffbfffff004}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00009b3000)) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 04:17:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x20) write$P9_RFLUSH(r1, 0x0, 0x0) 04:17:21 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x202000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x40) dup(0xffffffffffffffff) getcwd(0x0, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000540)={0x44}, 0xffdf) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x8d}, 0x28240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x80) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') pipe(&(0x7f0000000280)) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffffbe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x401, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x55, 0x6e3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0xe410, 0x5, 0x0, 0x0, 0xfffffffffffffffe, 0x6}, 0x0, 0xb, 0xffffffffffffff9c, 0x19) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x80010) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) rmdir(&(0x7f0000000100)='./file0\x00') r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) 04:17:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) r2 = syz_open_pts(r1, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:17:21 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r3, &(0x7f0000000200)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="0804b5055e0bcfe8474071") r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6b) r5 = socket(0x10, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000d80)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000b40)='@cgrouptrusted\x18#bdev)/[%/wlan0\xc8\x00'}, 0x30) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl(0xffffffffffffffff, 0x0, 0x0) 04:17:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x58b240, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x3bf, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r4}]]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @random="77ec90726a60"}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 930.943598][ C1] net_ratelimit: 18 callbacks suppressed [ 930.949592][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 930.956093][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 930.963100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 930.969384][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 931.023176][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 931.029339][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 931.044230][ T27] audit: type=1804 audit(1577333841.807:155): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir466351936/syzkaller.2se6fN/239/memory.events" dev="sda1" ino=16540 res=1 04:17:21 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) pwritev(r0, &(0x7f00000003c0), 0x273, 0x0) [ 931.072744][ T27] audit: type=1800 audit(1577333841.807:156): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16540 res=0 04:17:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0xfc34, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/70, 0x3f}], 0x6c}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcc, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/243, 0xf3}, {0x0}], 0x2}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00546) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/120, 0x78}], 0x1}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r6, &(0x7f0000000180)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1) shutdown(r5, 0x0) shutdown(r3, 0x0) shutdown(r1, 0x0) [ 931.110151][ T27] audit: type=1804 audit(1577333841.807:157): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir466351936/syzkaller.2se6fN/239/memory.events" dev="sda1" ino=16540 res=1 04:17:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) 04:17:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7c0000002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000d000200000008000102736671004800020000000000000000682ca91c0000000000ff7f000000000000000000000000000000000000075200"/100], 0x7c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x572, 0x0) [ 931.263158][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 931.269114][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 931.303039][ T27] audit: type=1804 audit(1577333841.847:158): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir466351936/syzkaller.2se6fN/239/memory.events" dev="sda1" ino=16540 res=1 [ 931.420329][ T27] audit: type=1804 audit(1577333841.947:159): pid=16649 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir466351936/syzkaller.2se6fN/239/memory.events" dev="sda1" ino=16540 res=1 04:17:22 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 932.153263][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 932.159549][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 936.303189][ C1] net_ratelimit: 22 callbacks suppressed [ 936.308967][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 936.314738][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 936.543174][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 936.548964][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 937.183170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 937.189079][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 937.194858][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 937.200619][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 937.263166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 937.268986][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:17:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000003a006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:17:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000200)=""/146, 0x92}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000002c0)=""/31, 0x1f}], 0x4, &(0x7f0000000340)=""/161, 0xa1}, 0x61a}, {{&(0x7f0000000400)=@sco, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/218, 0xda}, {&(0x7f00000005c0)=""/169, 0xa9}, {&(0x7f0000000680)=""/88, 0x58}], 0x3, &(0x7f0000000740)=""/90, 0x5a}, 0x4}, {{&(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000000880)=""/11, 0xb}, {&(0x7f00000008c0)=""/185, 0xb9}, {&(0x7f0000000980)=""/40, 0x28}], 0x4}, 0xed}, {{&(0x7f0000000a00)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/57, 0x39}, {&(0x7f0000000ac0)=""/141, 0x8d}], 0x2, &(0x7f0000000bc0)=""/97, 0x61}, 0x5}, {{&(0x7f0000000c40)=@rc, 0x80, &(0x7f0000001080)=[{&(0x7f0000000cc0)=""/252, 0xfc}, {&(0x7f0000000dc0)=""/108, 0x6c}, {&(0x7f0000000e40)=""/226, 0xe2}, {&(0x7f0000000f40)=""/27, 0x1b}, {&(0x7f0000000f80)=""/216, 0xd8}], 0x5}, 0x2}, {{&(0x7f0000001100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001180)=""/186, 0xba}, {&(0x7f0000001240)=""/45, 0x2d}, {&(0x7f0000001280)}, {&(0x7f00000012c0)=""/196, 0xc4}], 0x4, &(0x7f0000001400)=""/233, 0xe9}, 0x8}], 0x6, 0x60000223, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280)='/dev/vcs\x00', 0x500000, 0x0) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000001700)=0x7f) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000001680)=0x6, &(0x7f00000016c0)=0x4) r3 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, "000003009e0086e20300000000000000001000"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TCSETX(r5, 0x5433, &(0x7f00000000c0)={0xf001, 0x1f, [0x2b, 0x4, 0x503, 0xfff, 0x1e], 0x200}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000040)={0xec, 0x7, 0x3, 0x80000000, 0x12, "8e8ce5f03f141959ab550958613500edc093c2"}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:17:30 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/70, 0x46}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/57}], 0x12d}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00546) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/120, 0x78}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r4, &(0x7f0000000180)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {0x0}], 0x2) shutdown(r3, 0x0) shutdown(r1, 0x0) 04:17:30 executing program 5: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000400)) syz_open_dev$vcsa(0x0, 0x0, 0x400000) openat$vhci(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhci\x00', 0x80000) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000500)=""/32) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = accept4$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @remote}, &(0x7f0000000300)=0x5, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0x32, @remote, 0x0, 0x2, 'nq\x00', 0x1, 0x9, 0x31}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 0x3, 0x5, 0x6e0999a8}}, 0x44) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8ed8}], 0x1, 0x0, 0x0, 0x0) 04:17:30 executing program 3: getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r9}}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r12) r13 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r14, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r17}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r20, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r21 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r21, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000230e4f76"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800070400"/20, @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r7}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) 04:17:30 executing program 1: getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r9}}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r12) r13 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r14, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r17}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r20, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r21 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r21, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000230e4f76"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800070400"/20, @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r7}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) 04:17:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) r2 = syz_open_pts(r1, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:17:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x6, 0x1, 0xffffffff, 0x0, 0xb, "66c315bf69ec297f06928f566522f76ab194e5"}) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x800) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) r4 = getgid() setresgid(r3, 0xffffffffffffffff, r4) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x9, 0x20000000, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TCFLSH(r5, 0x540b, 0x0) 04:17:31 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x411b) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[]], 0x8) close(r0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/autofs\x00', 0x88000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in6}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000800)=0xe8) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0xa340, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000000)='veth0_to_team\x00'}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:17:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xffffffffffffffff, 0x47, 0x70, @buffer={0x0, 0xbd, &(0x7f0000000200)=""/189}, &(0x7f0000000080)="f88f7f799d8e941a7e8ae4f3e044a33d1db843845dddd3f988c78996d1d0c1cc8b15309de9ae3147d5bed4dcb4181baf3f3e4748c65022e8be4392ac6cebfccc034e6aad689e6e", &(0x7f00000004c0)=""/4096, 0x3f, 0x40, 0x2, &(0x7f0000000140)}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:17:31 executing program 2: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x1, 0x5, 0x47, 0x0, 0x18, "359a1016013116de"}) r1 = syz_open_pts(0xffffffffffffffff, 0x800) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @remote}, {0x2, 0x4e21, @multicast2}, 0x38, 0x0, 0x0, 0x0, 0xe69, 0x0, 0x6, 0x0, 0x80}) readv(r1, &(0x7f0000000080), 0x1) 04:17:31 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r2 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x9ef1ce6a333fba72, &(0x7f0000000100)={0x0, 0x4, 0x99a, 0x0, r2}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$radio(0x0, 0x3, 0x2) write$UHID_CREATE(r3, &(0x7f00000001c0), 0x120) fsetxattr(r1, 0x0, &(0x7f0000000300)='/dev/radio#\x00', 0xc, 0x1) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000240)='inpu[\x00\x00%\x17\x82\x00', 0x0, 0xc80) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$ax25(r5, &(0x7f0000000640)="d07f8f887506a650752266d70d1cf838f99ee569b2d39cd24d9e2c6c8e3e59abd9a015c82a0d3ac46296bd1c2f752334e5c981c0d684cf1cf1c9a2d8b93fdbe8b652a1dad7e96570b7820720fc99497ebd0e4e4ddc52f0187aee8c090bba6090f800d7bf539fc5d431fadf5e82e0eac5f279efde2d1afbdac25b7b276bc231135bae4bb76c032475065e6b6a18731d73d04c5d147ad98eae1c142935b56b0e5d21e3f4b8bfd912e8d366f04ff03810c406f8ade036c80c5eb95875a27792c97d416e4037acc4cfec5c1f8009b9c57f6c393315ae4b5109", 0xd7, 0x24000851, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r6, &(0x7f00000012c0)="20265c927f1f6588b967481241ba7860f46ef65ac610ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) sendto$inet(r3, &(0x7f0000000500)="6bb3c52c9f9ee86fb44dd6dc311a5ce87cceec4f44bc92332c8e5679eeb388043617f453f635c27f182a9b970cc816601581123226410da19532680e6ad975e371655576ffebf328cd76a9c74309e2176ea6423d50a60a3570442636ed0058f5e9afb28dfa55c5b3bf9091f842b933f3613d71781d57e1462f0c5641acb96de4349e3708260d50da9d9ccbc1b5f1f59e3bdec5e142749b2c31e63feeb49e2a114fb909cadb96aa29074a52c25fc0685ecc2e8d00c4eb701e047e579ce810259a431180db51a0062f958971f4dda1bec43f", 0xd1, 0x4000008, 0x0, 0x0) [ 941.343112][ C1] net_ratelimit: 18 callbacks suppressed [ 941.343121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 941.354563][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 941.360486][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 941.366263][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 941.423118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 941.428934][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 941.673144][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 941.678971][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 942.543193][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 942.548980][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 946.703169][ C1] net_ratelimit: 22 callbacks suppressed [ 946.703183][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 946.714819][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 946.943152][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 946.948988][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:17:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000006c006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:17:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r5, 0x221, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f7}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x289308}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100229bd7000070000001000000028000200080001000200000004000400040004000400040008000200ff0f00000800010008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400a0}, 0x80) 04:17:38 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400006, 0x0, 0xdd, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6gre0\x00', 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x2300c0, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 04:17:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010003b0800ef5c0f5b00000010e1040000000000006e9a967492f2c4c9b14242e20d00000094d87926df9c36352b12af8e62f667f0cbdc1c09b973c678405e95ae8c531f03d5033b158ecccc3b6b97bebffbe075621849aaaed6d3f04382d394d76a1d264d884db595f9690f030c77dba865826d33b4a57ba6fb", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x6, @ANYBLOB="1c001200100001006970366772657461700000000800020004001200"], 0x5}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0x9a0000, 0xffff, 0x5, r1, 0x0, &(0x7f0000000000)={0x1e51cc3, 0x400, [], @value64=0x5}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r3, 0x80, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af41524513"}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r3, 0x3, 0x82d}, &(0x7f00000001c0)=0x10) 04:17:38 executing program 5: r0 = gettid() r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000003000000070000000000000055ba0000000000000300000000000000000000000000000001000000000000000700dc1e00000000000000000000000001010000000000003f000000000000000000000010000000ff010000000000004e0000000000000057b95110581e6069bc97edd122b53c52f10de9c13b"]) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c784512634c060cfb6b72c3c922835d2b5fe1600c22b487813885e8f91b96b20dfeb2afe849ea9853c8d9e91b812643c120b9b0a292476e34309c522fce639eccfc2945538a58098348819f04ceb62485fd73d395e2b66acc3f4fbaf1804f955d68266b3128bd56d996c733094dab9e723c64f124e7a00585742f2b3252f7110a9b8b84eae4843c"], 0x86) stat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, &(0x7f0000000140)) close(r2) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000000000000900000000000000070000000c0000001d0000000000000000000000000000000ae3dabd0200a4c84efed9e3"]) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x3202}) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="00030e80493f1ec2cec9607e8864"], 0xe) fstat(0xffffffffffffffff, &(0x7f0000000b00)) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}, {&(0x7f00000005c0)="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", 0xe93}], 0x2}, 0x0) r6 = getpid() r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) kcmp(r6, r7, 0x0, r5, 0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@dev}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r8, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0x270) getresuid(&(0x7f0000000500), &(0x7f00000007c0), &(0x7f0000000800)) getegid() ptrace$setopts(0x4206, r0, 0x0, 0x0) 04:17:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x2000000000012, 0x2, 0x4, 0x8000001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x18) [ 947.428082][T16779] EXT4-fs (loop3): invalid inodes per group: 16384 [ 947.428082][T16779] 04:17:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfe, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000200)=[{0x0, 0x0, [0x1fffc000, 0x4, 0x7, 0x2, 0x2, 0x8, 0x3, 0x3, 0x0, 0x86, 0xa50, 0x81, 0x800, 0x7f, 0x6, 0x7fffffff]}, {0x0, 0x0, [0x7, 0x80000000, 0x8, 0x1f4, 0x1, 0x9, 0x3f, 0x4, 0xbfb, 0x1, 0x800, 0x7, 0x400, 0x9e6, 0x0, 0x6]}, {0x14, 0x0, [0x5, 0x4, 0x9, 0x3, 0x7f, 0x2, 0x10001, 0x4, 0x200, 0x5, 0x1, 0xd9, 0x0, 0x7fffffff, 0x90, 0x2]}, {0x1, 0x0, [0x4, 0xffff0000, 0x8, 0xf8c, 0x4, 0x2, 0x81, 0x8, 0xf, 0x8, 0x3, 0x7, 0xe1d, 0xfffff000, 0x7, 0x20]}, {0x10, 0x0, [0x7fff, 0x1, 0x1d4, 0x52b, 0x3e, 0x4c, 0x1, 0x5, 0x5f9, 0x4, 0x0, 0x1, 0x4, 0x603, 0xf2b1, 0x1]}, {0x2, 0x0, [0xfffffffb, 0xffff, 0xffff8001, 0x0, 0x7, 0xf36d, 0x101, 0x9, 0x7fff, 0x0, 0x1, 0x2, 0x4db9, 0x537, 0x7, 0x6fa]}], r3, 0x1, 0x1, 0x1b0}}, 0x20) 04:17:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r5, 0x221, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f7}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x289308}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100229bd7000070000001000000028000200080001000200000004000400040004000400040008000200ff0f00000800010008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400a0}, 0x80) 04:17:38 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x1000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x45, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000140), 0x5}, 0x55881, 0x0, 0xffffffff, 0x0, 0xf1e}, 0x0, 0x7, r0, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xd2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x1000e, 0x8f, 0x0, &(0x7f00000006c0)="b9ff0300000d698cb89e40f02cea", 0x0, 0x102, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)="899ca36fd5569044c5769ba3ba1e573fefbf118d30efa15353b488d502918e94570c4947851a8384fb77f40184531ac86ccfacb61859b3124d44f34c7bc181af57ca059381cc492c94e15ace65a23d2dbab1579e18229c6c15246ce36105085b28f414e5ff762249fdce76fa011926c3e8667ccda9b37c2fb8701545cade43defb04438093cbf7806a3ed023d3932c53a5a8c88d2c44bd0735af3e0723c624"}, 0x28) 04:17:38 executing program 5: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000300)=""/149, &(0x7f0000000180)=0x95) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') accept4$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0x48, 0x800) [ 947.583183][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 947.588991][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 947.594782][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 947.600534][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:17:38 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000500)='./file1\x00', 0x0) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setxattr$system_posix_acl(0x0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100030000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0276bf00", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB='\b', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="10006b8300000000202d0001"], 0xc, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}}, 0x98) r1 = semget(0x2, 0x0, 0x460) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0xb4000, 0x0) lstat(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r5, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) fstat(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x8048, &(0x7f0000000680)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other='allow_other'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@seclabel='seclabel'}, {@euid_eq={'euid', 0x3d, r6}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>'}}]}}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r7, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f00000003c0)=0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000400)={{0x0, r2, r4, r8, 0xee00, 0xc0, 0x1}, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getpid() setuid(0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8d}, 0x98) r9 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}}, 0x98) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8d}, 0x98) [ 947.663113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 947.668941][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:17:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x7666b3) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000300)={0x8, 0x10001, 0x0, 'queue1\x00', 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, r6}}, 0x30) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r7, 0x4, 0x3800) socket$inet6(0xa, 0x13, 0x9) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) open(0x0, 0x0, 0x0) [ 948.275975][ T27] audit: type=1804 audit(1577333859.047:160): pid=16827 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir610856390/syzkaller.432xvs/326/file0/file0" dev="loop3" ino=235 res=1 [ 948.311419][ T27] audit: type=1800 audit(1577333859.077:161): pid=16820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="loop3" ino=235 res=0 [ 951.743155][ C1] net_ratelimit: 18 callbacks suppressed [ 951.743164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 951.756086][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 951.761859][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 951.767894][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 951.823155][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 951.828952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 952.063129][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 952.068939][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 952.953162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 952.967373][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:17:44 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x222a6d8102856fd9) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x20c2, 0x20, 0x5}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000005c0)={r4, 0x51, "7937bb335af3a7fa3553b6edaf0b67c0d06d711c1fa024f99e1754cf7964637ad8e17859bcaf52810d649e86a30650891296e785074800f0febcc19726cd194de1dc05deba26e7d5d5a24a99894897ce15"}, &(0x7f0000000640)=0x59) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(0x0, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r2, r5, 0x0, 0x102000003) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3f, 0x800}, &(0x7f00000000c0)=0x8) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x5522, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000780)=""/6) ioctl$USBDEVFS_SETINTERFACE(r7, 0x5522, 0x0) write$binfmt_misc(r7, &(0x7f0000000680)={'syz0', "6bdba66977f4943fd91bed1d9c9bbe753ef21ab8b7cd3daa4f0a1408449cf34efd239aa7e805136a2faa05ac590890f2c5deef90ed7edecfe24ed1f7838c71707a3714e60227a12a859d3c8a4d9eb5a2db621699a2a16b7d53530ce9746d303bde1937e5eaba125486027a382ba7c70e8155b86923d312fa81c758d4d24036e752880d6890c1d28c1a79055b52cd493099e2a832bdc693d11d444640cd5c591388ac8cb4cb172807f55b9776ac9e974b110517dd4bc1103c0d3337be6c070d3b2ed7c1afb57c21dac5a101c1c0e38c4cb60b8e9d199c8eecdfcd87"}, 0xdf) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000340)=ANY=[@ANYBLOB="008e00000100ffff2000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="3f8131070b446c9c3f99ab4cedb7be074406f176815bbce36216490a3a2b8ab2784ad9865f274ceba7ead19f079fbe8cdf1e0b8d658e584c8fbc502c6c118b8422ade5faa779124663574f771a942b9546728d4e59a6fdf3450fe6c0e444a192cb7fc0fe674165fac824d12a0ce0e8d94ae00edfed8c6f320e197187384bfa8cc547903bc303a46e31bf90b6dff8bc39a1d3e1e892719a3dc1dd30f9276ce25aa64c38121131039d1b99d8d8a02ff284ffe83ec68ff2b167fcf3aadc05d34168d43c1a870a9d93a5d45a63260b6346a5f377c6bb31e40ebfb9b73e76254303e8ed4d1ff4d29927a9d2f50bb7761438aa1e1f67a23dc6d4a7"], @ANYBLOB="f800000000000000080000002100000045000000ff7f0000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="89057f0008761935"], @ANYBLOB="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"]) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 04:17:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c46ffffff84006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:17:44 executing program 5: creat(0x0, 0x1) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000002c0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0x0, @remote}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x4}}}, 0xfffffffffffffebe) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x42200, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ppoll(&(0x7f0000000140)=[{}, {r1}], 0x2, 0x0, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000140)) execve(0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x40046109, &(0x7f0000000300)) close(r3) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x3, 0x0, 0xf0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1\x00'}, 0xf62c3dc8da425be8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r7, &(0x7f0000000100), 0x18d, 0x6c00) ioctl(r5, 0x9, &(0x7f0000000380)="51b4ae75268a04a52455ff49478d1622ccdb030f7b5907d8345bca77d0e913cf7ec96ae58256c7cfab8053f677419826a8990559a3074444a7f0cbd464ee3b63979bb84be15a4f1b35709e960cc04138fa2ab09772bd53f02cb3898bfd99191e495a3308a9be0dd6e0e5df50ab132c21340d6f87ae24f9dffd85172dbea3f116b807caa0c34e675af35972d41c38ba49a836fdcefb31a9bea729fe79fbdf679ebfb7022fbb2fb896fae2de7e32203c10e2c9d5c8fac4d8c0c98da5c7dfd1923c4c0915bf51cc844c144276d2bda7a1a5c7676939f95f3fa3035543f586565cbcbfa6ad24cd7e6af29f1c63cf") socket(0x40000000002, 0x3, 0x2) r8 = socket$inet(0x10, 0x2, 0x0) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 04:17:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/\x86K5\xcdptmx\x00', 0x51382, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000300)) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x6, 0x5, 0x4, 0x100000, 0x1, {0x77359400}, {0x7, 0x18fbed7071343928, 0x7, 0x0, 0x1f, 0xfa, "c857d983"}, 0x7, 0x1, @userptr=0x1, 0x0, 0x0, 0xffffffffffffffff}) read$rfkill(r1, &(0x7f00000003c0), 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000140)={0x9, 0x0, 0x8, 0x8, 'syz1\x00', 0x8}) r3 = syz_open_pts(r0, 0x800) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x4e24, 0x2, @ipv4={[], [], @loopback}, 0x4}}}, 0x88) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000340)={0x4, 0x0, {0x3, 0x1, 0x80, 0x0, 0x6}, 0x7}) 04:17:44 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x365000, 0x0) write$P9_RLERROR(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="130000000701000a0073797a6b616c76657200b4044977557931a8f36a34766c814185e1e38a3471d7174e07ef83a557d9d6dfcf7fe6eed3d6f915f9e110826396603790fb78bf620cdc53b46da6cf3c8905808424899b30dc680e33044eb0dbd5da9d76b0"], 0x13) write(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r2, 0x80, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af41524513"}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x9}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, &(0x7f00000001c0)=0x3) lstat(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x1800000000000060, 0xe80, 0xf10203, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff}, 0x28) 04:17:44 executing program 4: socket$isdn(0x22, 0x3, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000540)={0x0, &(0x7f0000000500)}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr=0x401, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:17:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x246900, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x9, 0x5, "00a81900000000002000"}) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x5, 0x4, 0x4, 0xfffffffc, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x2a0) [ 953.859029][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 04:17:44 executing program 3: ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000480)="680294a336a1d0e5f15b469ddeb7895a63bc8b48ae6b2fbd1d7c3d878a09a030de999bf44b17efb60450958485aa56389e910bb9f1d99a0fd1061aa6dffda7988e8786aff180842ece11ead980ef52b15a8ac6966c963f4b266a7288c4c9ac", 0x5f}], 0x1, 0xd) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "0cb5271857d6dde89b7a14df84dd79e7b104412a"}, 0x15, 0x3) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$TIOCCBRK(r2, 0x5428) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f0000000040)='em01T\xac\xbcj2N\x00']) 04:17:44 executing program 1: r0 = socket(0x10, 0x400000000080803, 0x0) write(r0, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x800, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) dup3(r0, r1, 0x0) 04:17:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) dup3(r1, r0, 0x0) 04:17:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) r2 = syz_open_dev$rtc(&(0x7f0000000180)='/dev/rtc#\x00', 0x813, 0x40840) preadv(r2, &(0x7f0000002640)=[{&(0x7f0000002540)=""/168, 0xa8}, {&(0x7f0000002600)=""/18, 0x12}], 0x2, 0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000440)={0x8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) getpeername$packet(r4, &(0x7f0000002cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002d00)=0x14) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002d40)='/dev/dlm-monitor\x00', 0x4000, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000002d80)={0x2c, 0x9, r5, 0x3a, r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) preadv(r7, &(0x7f00000024c0)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000200)=""/181, 0xb5}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/152, 0x98}], 0x8, 0xffffffff) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:17:45 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e24, @remote}, {0x306, @local}, 0x2, {0x2, 0x4e21, @broadcast}, 'syzkaller1\x00'}) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x2de, 0x0, 0x0, 0xffffffffffffff5e) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0xc4b, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 954.380751][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 04:17:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0x1, 0x6}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 957.103162][ C1] net_ratelimit: 22 callbacks suppressed [ 957.103173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 957.114682][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 957.343114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 957.348943][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 957.983187][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 957.989017][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 957.994789][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 958.000568][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 958.063161][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 958.069447][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:17:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c46ffffff88006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:17:50 executing program 1: mlockall(0x1) lookup_dcookie(0x0, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x88125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x67faf42d5e4f3ace}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getuid() openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) 04:17:50 executing program 5: creat(0x0, 0x1) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000002c0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0x0, @remote}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x4}}}, 0xfffffffffffffebe) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x42200, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ppoll(&(0x7f0000000140)=[{}, {r1}], 0x2, 0x0, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000140)) execve(0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x40046109, &(0x7f0000000300)) close(r3) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x3, 0x0, 0xf0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1\x00'}, 0xf62c3dc8da425be8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r7, &(0x7f0000000100), 0x18d, 0x6c00) ioctl(r5, 0x9, &(0x7f0000000380)="51b4ae75268a04a52455ff49478d1622ccdb030f7b5907d8345bca77d0e913cf7ec96ae58256c7cfab8053f677419826a8990559a3074444a7f0cbd464ee3b63979bb84be15a4f1b35709e960cc04138fa2ab09772bd53f02cb3898bfd99191e495a3308a9be0dd6e0e5df50ab132c21340d6f87ae24f9dffd85172dbea3f116b807caa0c34e675af35972d41c38ba49a836fdcefb31a9bea729fe79fbdf679ebfb7022fbb2fb896fae2de7e32203c10e2c9d5c8fac4d8c0c98da5c7dfd1923c4c0915bf51cc844c144276d2bda7a1a5c7676939f95f3fa3035543f586565cbcbfa6ad24cd7e6af29f1c63cf") socket(0x40000000002, 0x3, 0x2) r8 = socket$inet(0x10, 0x2, 0x0) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 04:17:50 executing program 4: getgroups(0x3, &(0x7f0000000340)=[0xffffffffffffffff, 0xee01, 0xee01]) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x604, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000100)="30e8f21a0d1949358f2788efd0dfa94f024f44c48f628b041ccd3783197f879d162459ac71d8dfc75e83900c861833c537f4dcd85c", 0x35, 0x9}, {&(0x7f0000000140), 0x0, 0xffffffffffffffc0}, {&(0x7f0000000180)="1c106416a795f154689189ce72526b017342ae228c213cddcfd80dfbdc2798f80411bb338a262976b00f0dad90c1ef2ba38d1d21c38814c1370c9fa6f2fe57bf2ef892a501805efb2c050914f27375ec3080230d73f970d47d022dab71538932a56e671ef5bb45b569fea0b772744a1eab3718938153f6832e21bbe657f892fc6afbbd345915a97e7b262a3997c536a74a204b47d05b297b6c04a6a06ad79f6c8d40c3b72d4790f662c5156adabad66f2496c1056a3329db29463fe0dd11cbcea5495506065b65f0241e28658a7a51d937bdf847f5abb55094969e29a17ff35c695316", 0xe3, 0x3ff}, {&(0x7f0000000280)="526a851d9086895f6534009788542a1b2f6b23eafcac1efb6e01f1f8aa7e29e650c5b8d1b6f6b83427825c5fdd47c9c6814d12e84535d92967", 0x39, 0x3}], 0x2000, &(0x7f0000000480)={[{@umask={'umask', 0x3d, 0x365a}}, {@gid={'gid', 0x3d, r0}}, {@type={'type', 0x3d, "3907807e"}}, {@file_umask={'file_umask', 0x3d, 0x6}}, {@creator={'creator', 0x3d, "14460a94"}}, {@gid={'gid', 0x3d, r1}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x39, 0x30300) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000540)=0x10000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0x8, 0x1, 'ipip\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PMTUDISC={0x8}]}}}]}, 0x3c}}, 0x0) 04:17:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r2, 0x80, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af41524513"}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r2, 0x9}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000001c0)={r2, 0xd3, 0x1, [0x5]}, &(0x7f0000000200)=0xa) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x3, 0x2, 0x505, 0x6, 0x5, 0x8001, 0x5819, 0xbd2, r5}, 0x20) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @empty, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x26}, r6}, 0x14) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000006700000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 04:17:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 960.076425][T16915] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 04:17:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x0, 0x6c04) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000140)) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0xd, 0x0, 0x0, 0xc, 0x5}, @ptr={0xe}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000280)=""/33, 0x34, 0x21, 0x1}, 0x20) socketpair(0x5bc630b49ee37be6, 0x80000, 0x1, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x3bf, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r8}]]}}}]}, 0x68}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b80)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000c80)=0xe8) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x3bf, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="6800000010000507000006000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004808120010000100697036677a657461700000003400020014000600fe80000000000000000000efffffffa914000700fe5f00000000000000000000000000aa08000100", @ANYRES32=r12], 0x68}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="a6e4f29453fe0e6b4e362bef63686892ee5000943093cd5f4f6d29b8045b6e812aa278e20bec65e2bd691ff1508200a5bad721dd3aeece307fc11eed453817e5357ca599089469ecb5faf3b3219e17a51bb34437fa648e899efc5bbd75353a00b2780830656119ebb3a15b42675585c8dc109e2c6b150d1a8407cf7a60026ed690524993ce487b0037a70681fdb59aa694", 0x91}, {&(0x7f0000000540)="971aecf43b4e30693f0d97c8b95130585387ff6ab1a73f915d395273351eb1144c9e3c5447c787338b89b4594bc3f19179d80f04492c1c13075ae642efc3f3c5d3d7718f0c57299515e261e5221b2cf7b82478b79370ab434c756031bd0fd44d0e672cd4cbbe2e083868b68e6715561b82fa6ea109cc2dd16031529cbfdcec63c368328d", 0x84}], 0x2}}, {{&(0x7f0000000600)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000640)="33e02d29954b15aa73da9e517e2f9f727bfbe096fa874e0dee566645a391c63352093ea9abc0fbed865059b67391b079a3bac31e6e4f06ce419f0a8f35281e81d6ab0e480d39255938c9253eecfde59abf5eb1d61ac5626577d03a0e2bcb1eae884244204540216bf1d0564164a55e8e500dfddb848588403b6b65b2c2b3024ae4a61bbf3d976c6340ed624fafd79f9b", 0x90}, {&(0x7f0000000700)="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", 0xff}], 0x2, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x98, 0x0, 0x7, {[@cipso={0x86, 0x41, 0x5, [{0x1, 0xaf}, {0x0, 0xd, "6bc87b16495848d2fa135b"}, {0x1, 0x2}, {0x7, 0x6, 'Zufl'}, {0x5, 0x4, "a278"}, {0x2, 0x5, "76e26f"}, {0x1, 0x5, "b5253f"}, {0x7, 0xa, "dee9eac3c994a641"}, {0x1, 0xc, "7bc3491a10ff3008acea"}]}, @rr={0x7, 0x7, 0x9, [@rand_addr=0x7]}, @noop, @timestamp={0x44, 0x24, 0x2, 0x1, 0x3, [{[], 0x1ff}, {}, {[@dev={0xac, 0x14, 0x14, 0xb}], 0x7}, {[], 0x7f}, {[], 0x1}, {[@dev={0xac, 0x14, 0x14, 0x22}], 0x7f}]}, @lsrr={0x83, 0x13, 0x20, [@multicast2, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @lsrr={0x83, 0x7, 0x4, [@empty]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4455}}], 0xe0}}, {{&(0x7f0000000940)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000980)="f7e3dc8f029cf25fcc29aab3ea2a891f9782ae91af40c04e364b9fa7d47d1a5d4edcf0ef69761449eb5ae45fa8546f17fb5c98d158aefda7614a215961849ba2e90ba973d11a27bc2646019026aa441a70d0190563b324c59ba79d77b8a1f81165301c899405bc5f9c05a5f97c9a909a700773ec57e900da34edec234896e1e060f13545aee9de87074646b11775de875d3b9bc7fddb68fb06138eab52ea4809f68d73e3eee917856bb87a6c0aa251a33765f5e15f139df290d1cc3c38a436be441971ad4c11484c39153f61c28fbf73e340c58c4559de668e856e7262d9b4840b52b6a299bc7fa956d3bafa5204afff4cb22593b4e0c12d67", 0xf9}, {&(0x7f0000000a80)="c7cf70a314f71792c2052a5e426f923270a89f2b51c6b9ab2d603169eb77b85a1ea1b9ede8699d83a3530f7b9df0fc4ddbab3e9a97d530fb1746d35f28b8d06cdbe07fe4b50de770bc04fe5900e24e51f654ae3ddf6e7e103d126679bbcbe81de020e88effdc416dc9cc4fb00592a501ccb38a5d311b8a67d2bf438d01b68db328722afb", 0x84}], 0x2, &(0x7f0000000cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @dev={0xac, 0x14, 0x14, 0xc}}}}], 0x70}}, {{&(0x7f0000000d40)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003240)=[{&(0x7f0000000d80)="fc9816f8c4f24a580535d18dc62411666664f5d72a01d8934b677fd48969d1e9fb52addee27a56b56bb7838f095b50133c652ba66b908997decb9f777702e8d8692af0c1d97deb40afeee5a0ec5267b13215eb00cfc2adcb88bab97ffa9bc9a47e786bfb5f0b5a78bb8d3f7dc1faa481a64a1f7c45100091bee3132ffd84011b1c5fc13dfc22affb46dd466e97324f459d466656ef318a68189c48ed3f0d5d48b20bba88c2e67dfc", 0xa8}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="4626a34f2f7af6283d23e650750548c64501b0880d74a49d7ccd786adf42e8569467d7ad206e6be32d854faa20e94f2c9b16f42df5f8e56cd8678e535a5364e00880d988", 0x44}, {&(0x7f0000001ec0)="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", 0xff}, {&(0x7f0000001fc0)="b3ad9ffbf1bcfe4624f03c02122b5630dbe024e97c386ecdc6d48687297803e0e508eecfff7e264ae6787d3703f581efcbd8ee8db641034f1a8a09ecc0f93477cd39961718ea33ef50523e40c2a36c444c07791e8b809b5d7b9dfacbed2de32f9ee7e459fba1af1cb2b6a8dd962897e80c5dea", 0x73}, {&(0x7f0000002040)="444ab26fa96151cdf276134dad8bfa23bddd8a42b270406fb593362ff16497c28fbefbeac243527bc13f4e74b3c36e855c69c7fda78e6e9de7c197976e9d1788f0542a80359c7dc28bba87646f396a936bac60860f3da4ecebc7951edf5144c339c5cd924360abe4f4a3995e49367216ace79152402a15a0df52112707e17d96be0bd6b646b008a32011f6f138c5946c0e7f070801c2e4c220ac6a1d173442", 0x9f}, {&(0x7f0000002100)="ea7320b6f83a687a172c562a31427d707e4ee1fa2bc6f5d0594fe830b755128d229399ec", 0x24}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000003140)="58d62fa82ae08390719f7c91fcff84a5f08156fda0f7e54b8b41fe6ea4d980009b5887c102a5928cdceb9fe6536937376c354d63615caeeb58a304c8d234b509c948ee9acc0ec6b70c861e9c4bb6a860ff53f40dd4594963b5bd210f89f806a424236e3cbfef551151f07f307aa05ceea31dfa3c29f832844bdf4bc15e146e0030d2152c8be30a8748b73c401282ed226ea3b4130c57f563d0b887b1e672b6445a15150dae7e724965a7f41b4a8ae9d042b335caf8550f7e00cc0dc7fb240940d1", 0xc1}], 0x9, &(0x7f0000003300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast1, @empty}}}], 0x50}}, {{&(0x7f0000003380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f00000047c0)=[{&(0x7f00000033c0)="eda33770582732607f23ae0bab8cff679cffb891c2732110e8b807cdbd6e9acc295eabaa56467849969211dad628605eb1baafe38fd7506a188cd684c24e0f9f73b61e251b729c0be6682b0f66c71c49ed44f91c3e635dd2177ea3289d0806839e75048e55405fccdce5b7211ea035368289a3b82a520d67d3c8c8f04e1de276f15a2605399b270969ac5aaf2ae8e2f6a7b220439101f545ec759c674d2f0ab164c7401d80dcbc209dd05c2f2e9f805519b06b599058a19facf7545f9b73e69ef0ee57238be92b4a02f43786d76b48fcf547cec4a62721336e7442874cba81c8c664aa0d5d1b17925d4c54", 0xeb}, {&(0x7f00000034c0)="95fe03d61c7b0228e350246efa39cf5de210547c806475cce042e2d49eee06ff15856ff6870d96e1fd10fa0934d3e670db9cb3ab88019f594ab27349eae7933f3d460b087d22319d23bfea39e3493cb923b2b5a2db6d0679b53dd8350c66a37b2b1c204efc92d311427b11324525a663cd80fc515857718109819097e04f352619e20172", 0x84}, {&(0x7f0000003580)="7d2d169f599a737dc4c902d5cd874008a24c41347d1e6d3cd87575faae2ead94470b87ca95b100e39c395f52cf6af77aeb47d5ab8302f4d756889fcffc2cba1dfa7ba1d4500997a08d8aacdb14287124", 0x50}, {&(0x7f0000003600)="bafbda179a484c2af64623cdee9135aa296997e522e9b8233cfff3cb3d4941d8cb986e5a88498a62a943ebebf69b07abb97005568ee688f3596bfe549a93d4612e7f3ba257bd34a9e9ed5eaf", 0x4c}, {&(0x7f0000003680)="594640be27671091874f06def41e8da4ef5e191dcdf6659f968f601f005a98415595990215aa713a1c26cb19a8f0cf314cc0e78e1b3ad4b601ed7c0efd5e5f033b4926c21f655e6619c057bf55ba0572c29fbf3df1b2a5ca6a7fb5e31bca9391f13997659ebed0f34341ad1d7ab9c8c7c4a9b033709bdd237abc84b017", 0x7d}, {&(0x7f0000003700)="64cd0b01e1bc4b77e82c18d34a", 0xd}, {&(0x7f0000003740)="f2eff6a417c800e526a44ceca85ad8bd5f544eab9ffdddda2615d48b82fa7dc758868c722737d5c30c357fcc53c432341e1483ec29357cbf3d841d4c5d69159b9f578418c2cd05e060d65d4385cc338f2d4e68", 0x53}, {&(0x7f00000037c0)="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", 0x1000}], 0x8, &(0x7f0000004840)=[@ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp={0x44, 0x34, 0x20, 0x0, 0x3, [{[], 0xff}, {[@multicast2], 0x2}, {[@multicast2], 0x1}, {[], 0x8001}, {}, {[], 0x2}, {[@multicast1], 0x5}, {[@local], 0x5}]}, @generic={0x0, 0xe, "7f5d87005c072a7c63967979"}, @ssrr={0x89, 0xb, 0x1, [@empty, @local]}, @lsrr={0x83, 0x17, 0x81, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @local, @multicast1]}, @end, @rr={0x7, 0x7, 0x20, [@multicast2]}, @ssrr={0x89, 0x1f, 0x9, [@broadcast, @remote, @broadcast, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}]}, @ssrr={0x89, 0x17, 0x1, [@multicast1, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @rr={0x7, 0x1f, 0x2, [@broadcast, @multicast2, @broadcast, @multicast1, @broadcast, @multicast1, @rand_addr=0x7ff]}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@noop, @cipso={0x86, 0x18, 0x80, [{0xa2c738cfad538fd1, 0x3, '\b'}, {0x2, 0x6, "767c9ed5"}, {0x1, 0x9, "aa6b3f1e9d6944"}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x3, [@broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa48f}}, @ip_tos_int={{0x14}}], 0x1c8}}, {{&(0x7f0000004a40)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000004ac0)=[{&(0x7f0000004a80)="fdacfca08d51d3336ca6332ab97ad56a82864d024a857a6de90715fc6ff162b264ba2724b4919216b829ef19c3d8ec4378ed2aab75c514053335", 0x3a}], 0x1}}, {{&(0x7f0000004b00)={0x2, 0x4e20, @rand_addr=0x8}, 0x10, &(0x7f0000004f40)=[{&(0x7f0000004b40)="1bfa82317f6c111995f31b84552bba14db95709be47d1ecef292cd27553135d7349460e1515204f77419897fa1ea390cc7e835ce7ab57446d304b2e9d4fe1c18d2a094fc", 0x44}, {&(0x7f0000004bc0)="0d52cefc59d585aa90f9e18d9cb63be3b3367623c38cdb4c233f8c2e7b042f69479efb7d87fec939074822578bd1c9e153d59e74467528b86fe0718176da8dd5c20ce1b068f99fe4b36fae06ebe5b4fbd1b1a5bf18e54dbfe8877e702e6df1733faeb975c1020ffa5b33c2ab85", 0x6d}, {&(0x7f0000004c40)="c86d2db13028115f5ee68af29ca924dbf204ea10dcd0ddc0943f430bc1a0664f0827435da80642c97e46e229b92cf611883d1840ba1581bf0713d92b9e3f62d09a02c07385eff173aed786615f0b581c158c33f05df592a884b93d24f46d5aa4575f36717c3f86237cb8754e2210b5ac84fb34529f0e", 0x76}, {&(0x7f0000004cc0)="d7919b8a5db4e97d71f65aa4a4c536dfe8b899cc0d7ad21bc179d5297edcfb9d25a8340e94047af33f97f489254a354dafe4a3230970cdc1ddbd1222131bfe66dc3e95cf9d586eca3d4f41a5b81e4b96ae1df81c938d2d5cb3bf53c43a76b9bf004a237cc5038f9704b3f19942170e52b8c0e15e2819318fc12be0a1159569a8b7514e236f8d137c24017e41abd98570d8d197f7dea6fa1dde58d71c6f46afc9a3329e7f76ac118809e2c62a9ae23ee5383307c8103f5cf512253f0c89", 0xbd}, {&(0x7f0000004d80)="ddb83633fe63d8867c7f691985809f4cff98ccf90994db0bf0aa06f4062697026d12830d5cace66de8bfa09790204c235924bfab4270", 0x36}, {&(0x7f0000004dc0)="cd1f78923bf514de6ad9094a356a3e1612ed7b8e289867aa1a0989b5092aae91772a8f3f84a0c8c4755fed218ce2920b2ac30d9ac8211698a8dab47ba61e10e65a1c49b4e05e11e3208088a0273ebf53aae4675349f233fb3c1fe621a14fe2e4c7cee28ff22a127fe3eb73d208d3016066a828c2578f8c609447b8c53311e165000cc61feca70833455d979a0bcd6705e5ee6c7c61b8a934e6cd5252d9d4b177a1887c0be4e1cd92305d68c1bffad0bc529e4d4528b68f3b24a8780c4b6e1d69b94abfca7f95ad943e1fec7d0c110d9ad2", 0xd1}, {&(0x7f0000004ec0)="49f954b54de6a42572a28640f2406c287fdbd30eab1e35127f5d4838a1db2e0565847e8c5fae2d32379eea57f89c707451b48b6665e55f119178cc6c2f7626ba5bb93bf7082406ff5bbda85656cc02fc4e30ab40d5b949eb85", 0x59}], 0x7, &(0x7f0000004fc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0xa8}}], 0x7, 0x2024080) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r13, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x40, @local}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x108) syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r14 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r14, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r15 = dup(r14) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=r16, @ANYBLOB="8000000083bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87f5ac2c23cd1939eeb0c35a316622c4798543b3d861feb47b2c73c57aad2d6ce505140aa0519877fe06cac1fcc7b9c0956189f61a665193d9f0750d40adeedb5c5bbd1571"], 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r15, 0x84, 0x73, &(0x7f0000000080)={r16, 0x2c1, 0x10, 0x4, 0x7}, &(0x7f00000000c0)=0x18) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000000)) getsockopt$inet6_mreq(r13, 0x29, 0x15, &(0x7f0000000340)={@initdev}, &(0x7f0000000380)=0x14) 04:17:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffffc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000fe5fd65a807197fc87bb448db13aa8ffff7a0af0fff8ffffff79a4f0ff00000000b7060000ff467d7da90ec468f363f8ffffff2d6405000000000065040400010000000404000001007d60b70300000000007a09d11be76b7728ae4a49006a0a00fe00000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x42, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000633a77fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000001c0)={0xffffffff, 0xfffff000}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$PPPIOCDISCONN(r1, 0x7439) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 04:17:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x4) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000080)=0x3) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 960.245700][T16914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 960.283599][T16914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 960.365514][T16923] batman_adv: Cannot find parent device [ 960.390894][T16923] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 960.434942][T16932] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 04:17:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da095c1392d90ff9"}, 0x28) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='\xaab\xc3|\xd8\xb6\x0e\xd9o\x00', 0xd93cb94a01fc10ae, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x20, 0x0, 0x6, 0x0, 0x69f, 0x0, 0x0, 0x20, 0xfffffffffffff264, 0x0, 0x3ff, 0x8, 0xffff, 0xff, 0x0, 0x3, 0x2, 0x9, 0x1, 0xffffffffffffff71, 0x9, 0x641, 0x3f, 0xa, 0xffffffffffff6276, 0x0, 0xfffffffffffffff7, 0x0, 0xb89, 0x0, 0x56e, 0x9, 0x0, 0x0, 0x450, 0x0, 0x0, 0x62bead59d4d92efb, @perf_config_ext={0x400000000004, 0x7}, 0x2010, 0xd91, 0x1, 0xf, 0xffff, 0x23, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x2) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000480)) r2 = syz_open_procfs(0x0, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000ed0000000000fc00000029f005b99b5356cf03a9b4a5199568d0593849eebf4b57737109c7de87237f81f8da7bc07c6f78907471b71c9d0a7d98c0ad17a76fcd23eb91e4bf215f7000a0027dcebd0d11b8afdeeaaf83410de45040425ae556e0a7ef036a14900af1cb1f6f8017fe49d4ebb6fa497cbdd6234a5bbff5d82f783beca9f377af439af9701789a5c976bc3c6ebed76b7e44bcee28e3cad939253b6d6270995a6c68d47b18ff0b1f3339b8472796e1856de80b4e29fda6283e99a62a4a6d7417c25434fd23bec9a3bc00ed92b5b666f44a757ef546ec8685e4db92ba8c0d90ada1f6008ae9a78128a3f57bb351f0f8c4c56430918f0f886c73f57b9a450ae3"], &(0x7f0000000200)=0x1) time(0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000c00)}, {&(0x7f0000000340)="97cb405b13aee053da452317acbc594447d4bf0aaeae6c1850c9c91d481d94b692e77fe3d750507bbc47dc0e2f6639aaf3e0a5a3", 0x31}, {&(0x7f0000000540)="e5", 0x1}, {&(0x7f0000000640)='|', 0x1}], 0x4, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000380)) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x80000162) listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000640)=""/233, 0xe9) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) fgetxattr(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="7472006d0931ee2674569f08100037f25aeebb3caa357c2478f73ede2217b95f03bafa83b7a90b67257570a74d8d048ad6306e34638f2c462f8c35db37a9abb0b84a6889bcb095e5c2709d8ca0b5945ab6ada918bee9dff256521268473d4bd1b505a281c1355258ae06eb7d97e41abbfb03e169cb0fcd296c3bef1f4015b79fc7e9dee197b0ab3401c7fb452b9358152d6faaa7775a9c60c8ce7250cd82855761d9b5ceb43a51063ef312a9524d439b72b3061070b644e483e0ef9dc686d053d14b6abec5384b3a880d3cf5486c05e6035313e55d677bf6"], &(0x7f0000000340)=""/36, 0x24) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000440)={0x0, 0x2e5, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x1}}, 0x0) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x2f2, &(0x7f0000003bc0)}}], 0x3a6, 0x0) 04:17:51 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000200)={'\x00', 0x6, 0xcdd}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$BLKTRACESTART(r0, 0x1274, 0x0) setxattr$security_smack_transmute(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.SMACK64TRANSMUTE\x00', &(0x7f00000003c0)='TRUE', 0x4, 0x1) preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) truncate(&(0x7f0000000300)='./file0\x00', 0x5656) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r3 = open(&(0x7f0000000080)='./file0\x00', 0x4001, 0xc4) openat$cgroup_ro(r3, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:17:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r4, 0x221, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f7}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1b4, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31f2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x88f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9e}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2800000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7e9d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f000}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) [ 962.143157][ C1] net_ratelimit: 19 callbacks suppressed [ 962.143167][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 962.154615][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 962.160384][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 962.166140][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 962.223160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 962.229359][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 962.463155][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 962.468953][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 963.343218][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 963.349021][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 967.503152][ C1] net_ratelimit: 22 callbacks suppressed [ 967.503161][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 967.514801][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 967.743154][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 967.748952][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:17:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460002002f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:17:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0xfffffec8, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r4, @ANYRES64, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYPTR64], @ANYRES64=r8, @ANYRES16=r9]], 0x3}}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008000a00567b8feb8b4df0f6ef1cad8f1017d9c4fee7b6da5ea14e7c9ce273d05a53232828d4", @ANYRES32=r5], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f00)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_QUERIER={0x8, 0x19, 0x8}]}}}]}, 0x3c}}, 0x0) [ 968.393137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 968.399023][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 968.404885][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 968.410633][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:17:59 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = getegid() chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}}) 04:17:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="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"], 0x7c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) getcwd(&(0x7f0000000300)=""/192, 0xc0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0xffffffff, "407246e9a261caf9ec6c0a6578e1c3cab9a834dc8e2191c49ac66e74ce54f700", 0x1, 0x1}) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 04:17:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) pipe(&(0x7f0000004740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000300)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000004780)={'HL\x00'}, &(0x7f00000047c0)=0x1e) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000340)={'nat\x00', 0x7b, "caee82a178bcf7a440475e7d061aad450114570c7c03975ac0454ef92004c2a61a387f159b770838ef22cd6c0614b89580472ffb862fb9733552536da148842c405ba7011e3197dbac393894a0cd3ddbf108e1cd1007faa319f5d25b6b58fb5651aa121ea0d40ae02f03821b267805b8fdeb70811aa0c03e4b4ed0"}, &(0x7f0000000400)=0x9f) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640100001000130700000000000000000000000000000000000000000000000000000000000000000000ffff00"/64, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000002c00130000000000000000000000000000000000cc02b3a6ff04728e7a9fdb9a702d93630000000002000000480001006d643500"/284], 0x164}}, 0x0) 04:17:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x4}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) r2 = syz_open_pts(r1, 0x801) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) setsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000080)={@remote, @empty}, 0x8) [ 968.463175][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 968.465250][T16962] device bridge_slave_0 left promiscuous mode [ 968.468992][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:17:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 968.513992][T16962] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.585783][T16969] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 04:17:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)='ceph\x00', 0x0) dup2(r0, r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x414800, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0xed, 0x1, @buffer={0x0, 0x77, &(0x7f0000000140)=""/119}, &(0x7f00000001c0)="d90912fbccce11c3450cbb4cfb238c1d7b00150926366d023b7733efd1ad5bfc81926b086803b175abe97b0edb20c9c64bf06ef164b894e853410f4275649b42b8f715ae331f63a388138d04dd81098342c6dd122716686e83e7408a7e37221ad5c5a911b52edd2b1fa9b8e1000eb9dfb0421b7ea859fb780f6a7fd0522944df628a02426869a4ab51c815ebc11e7a46b2de5f6e1dba3caaac04ab464386cce106cadc4eb59eb813d333000b8bfa75adc0571ec3c641a5e363dde338b1f530230ab8c8a10362ebc78fe142392e5f02285fea7051682016933aacca482647b173c04acf048c4b8e43dab33a0e5f", &(0x7f00000002c0), 0x7ff, 0x39, 0x2, &(0x7f0000000300)}) [ 968.635718][T16969] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 04:17:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:17:59 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = getegid() chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}}) 04:17:59 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KDDELIO(r0, 0x4b35, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 04:17:59 executing program 1: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0xc}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x28, &(0x7f0000000100)}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000068000/0x3000)=nil, 0x3000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x2, 0x0) r2 = getuid() r3 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0xb4000, 0x0) lstat(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r5, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) fstat(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x8048, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c91505acd67726f7570", @ANYRESDEC=r4, @ANYBLOB=',allow_other,mask=MAY_WRITE,seclabel,euid=', @ANYRESDEC=r6, @ANYBLOB=',fscontext=unconfined_u,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_ENTRY(r1, &(0x7f0000000440)={0x90, 0x0, 0x6, {0x4, 0x3, 0x2, 0x4e05, 0x7, 0x6a0b, {0x1, 0xb4, 0x5, 0x10000, 0x3d, 0x2, 0x0, 0x7, 0xff, 0x800, 0x550, r2, r4, 0x3, 0x6}}}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fcntl$notify(r7, 0x402, 0x80000004) r8 = openat$cgroup_ro(r7, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x7a05, 0x1700) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r10, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r11, 0x80, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af41524513"}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000880)=@assoc_value={r11, 0x2}, 0x8) pwrite64(r9, &(0x7f0000000200)="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", 0x200, 0x3200) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000a00)={0x1, {{0xa, 0x4e23, 0x0, @mcast2}}, {{0xa, 0x0, 0x100, @ipv4={[], [], @multicast2}, 0x3}}}, 0x108) r13 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x188) setsockopt$inet6_group_source_req(r13, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) splice(r12, &(0x7f0000000500)=0xc91c, r13, &(0x7f0000000540)=0x9, 0x0, 0x5) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfffffcbe) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x3, 0xa6, &(0x7f0000000780)=""/166, 0xfd, &(0x7f0000000b40)=""/253, 0xa6, &(0x7f0000000940)=""/166}) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 968.952899][T16998] bond0: (slave bond_slave_1): Releasing backup interface [ 969.170903][T16999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.199251][T16998] bond0: (slave bond_slave_1): Releasing backup interface [ 972.543202][ C1] net_ratelimit: 18 callbacks suppressed [ 972.543208][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 972.554719][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 972.560471][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 972.566270][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 972.623227][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 972.629059][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 972.863163][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 972.868980][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 973.743187][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 973.748970][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:18:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460003002f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:18:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0xb}) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/55, 0x37}], 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x28}}}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0xfffffffffffffefd) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000000c0)=""/225, &(0x7f00000001c0)=0xe1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)={0x1, 0x2, 0x4, 0x4000000, 0x80000000, {}, {0x2, 0x1, 0x5, 0x7, 0xb, 0x6, "2ac36ba0"}, 0x101, 0x3, @fd=r4, 0x9, 0x0, r5}) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000000280)={0x21, @rand_addr=0x478, 0x4e24, 0x0, 'nq\x00', 0x8, 0xd146, 0x28}, 0x2c) 04:18:05 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000a40)=""/214, 0xd6}, {&(0x7f0000000340)=""/87, 0x57}, {&(0x7f0000000b40)=""/176, 0xb0}, {&(0x7f0000000c00)=""/194, 0xc2}, {&(0x7f0000000d00)=""/207, 0xcf}], 0x6, &(0x7f0000000e80)=""/4096, 0x1000}, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000001c0)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x69e}}], 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0) 04:18:05 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = getegid() chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}}) 04:18:05 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000402) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x83, 0x100200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40000, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000002c0)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ftruncate(r0, 0x3ff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f00000000c0)={0x0, {0x9, 0x1}}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 04:18:05 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KDDELIO(r0, 0x4b35, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) [ 974.867433][T17017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 04:18:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000080)={0x21, @empty, 0x4e20, 0x2, 'nq\x00', 0x2a, 0xffffffff, 0x35}, 0x2c) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x7a05, 0x1700) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) 04:18:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x7, 0xb, 0x4, 0x800, 0x4, {}, {0x1725f7bde97de6b, 0x7, 0x1, 0x5, 0x4, 0x5, "133a9caf"}, 0x7ff8, 0x3, @userptr=0xc92, 0x1a, 0x0, r0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) 04:18:05 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KDDELIO(r0, 0x4b35, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) [ 975.078332][ T27] audit: type=1800 audit(1577333885.847:162): pid=17036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 04:18:05 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = getegid() chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}}) 04:18:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x3d6) [ 975.191061][T17042] bond0: (slave bond_slave_1): Releasing backup interface [ 975.460759][T17047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.903204][ C1] net_ratelimit: 22 callbacks suppressed [ 977.903213][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 977.914689][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 978.143155][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 978.148977][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 978.783170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 978.788927][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 978.794698][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 978.800429][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 978.863229][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 978.869063][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:18:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460004002f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:18:11 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) pipe(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r1, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r1, 0x1, 0x1f, &(0x7f0000000200), &(0x7f0000000240)=0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x5) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x0, 0x73) getsockname(0xffffffffffffffff, 0x0, &(0x7f000000ad00)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6(0xa, 0x800, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080)={0x3, [0x1, 0x1]}, 0x10) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 04:18:11 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'team0\x00', 0x2}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58) io_setup(0xf38b, &(0x7f0000000040)=0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x200) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) r7 = eventfd(0x5) r8 = socket$l2tp(0x18, 0x1, 0x1) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x200) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r9, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r9, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x200) syz_open_dev$cec(&(0x7f0000000740)='/dev/cec#\x00', 0x1, 0x2) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000780)=0x2137) write$cgroup_type(r10, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r10, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r10, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/pfkey\x00', 0x100, 0x0) r12 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r12, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) io_submit(r2, 0x6, &(0x7f0000000700)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8001, r3, &(0x7f0000000140)="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", 0xfd, 0x2bf85bdc, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x8001, r4, &(0x7f00000002c0)="a6b48276", 0x4, 0x40, 0x0, 0x0, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0xfff7, r6, &(0x7f0000000340)="757647922a6a3c1becbe554387ff4bb8005a2080307f4650641638d84a7c90beb7d6a8c0c20a29b358b1ede1c4bbd5810a5defd45da1f7a153aeafc53b53ddba53e6969c45f75b603e842f53112f0c4d066c73f90a35dcc68a39c5e70b8d547a3496a298eeac617206342646b82de9b2c478b5ad003e8f5f430ed6e0d8bb253089c89ea4bb47511415d0039ed5af364976ac463893c8801cc336be78ba704fb435b6693c3eb283646ac941e9bfd9162ed58c2157c4ce054dad47eb1e86056d394e03088054d2479d965766c003e88387041d9a08f93756143adaf193cfab2699307885c5764eaa83954b736f8a77dd2c9fdb484c4f503cef", 0xf8, 0x6, 0x0, 0x2, r7}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x7, r8, &(0x7f0000000480)="b66e783dc3bae4fbb5b0649931cd794b8cee0f90bf80ea4aef4c38b895b1a474e3ac748dc877fd7bd7e566c93e4c65167e521052e40b38438b7884e3444576122e3a5a59b81d47679061a8564da842b97814be9d15a13d4ac9b5b207b036cf2878140f916f39f8b765011d", 0x6b, 0x0, 0x0, 0x1, r9}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x3f, r0, &(0x7f0000000540)="f1291a08170d95786f7d12db97bddabe4d18aff8010c854b22686d65bdc3058258acaa350e7b20b73460295be13d33d2cd231e5f0c4a9301011bac3adcaa25bfe00695655f122fc792a07a3a4a59b96a24111df8bcb8e94619b5e8c1ce0cc8fc5eb10878d08cb53151d919e15fd79d540fdc73b3db8c57221a5856900f6b52a2ff3cc32d48a806aff45b7f4d77caeecd68c8fcc6e55f3ec3841d7881c8b48f86dc2002b568097c9a65c0ff3df251795ec12e8211c7529640d023ee4bf2", 0xbd, 0xffffffffffffff01, 0x0, 0x7b5b95f78afd6518}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000640)="dbd983f8c2586f143549f91949f26a5555cad83579bedf2e398a324873af740a2d6e6b4006", 0x25, 0x8001, 0x0, 0x3, r12}]) 04:18:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xffffffff}) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) fremovexattr(r1, &(0x7f0000000080)=@random={'system.', '/dev/ptmx\x00'}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0xfffffffffffff4d, 0x6c00) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f00000000c0)={0x0, 0xfc}) preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @empty, 0x6}, @in={0x2, 0x4e22}], 0x2c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) ioctl$FICLONE(r1, 0x40049409, r4) 04:18:11 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002ac0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) creat(0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000000003, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000002c0)="7685427801bf9010063037780953c84a646631", 0x13, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000006c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000700)='X', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) 04:18:11 executing program 3: setreuid(0x0, 0xee00) geteuid() setreuid(0x0, 0x0) mknod(0x0, 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0) r3 = dup2(r2, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000600)={{0x0, 0x4, 0x0, 0x100, 'syz0\x00', 0x6}, 0x1, 0x4, 0x7c, 0x0, 0x2, 0x3f, 'syz1\x00', &(0x7f0000000280)=['(\x00', '/dev/qat_adf_ctl\x00'], 0x13, [], [0x46, 0x7f, 0x9, 0x3ff]}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @ioapic={0x10000, 0xfffffffc, 0x0, 0x0, 0x0, [{}, {0x9, 0x0, 0x0, [], 0x6}, {0x4, 0x0, 0x7, [], 0x5}, {}, {0x5, 0x4, 0x9, [], 0xffffffffffffffff}, {0x0, 0x0, 0x0, [], 0x8}, {0x3, 0x0, 0x1, [], 0xc}, {0x80000001, 0x7, 0x7, [], 0x42a}, {0x4, 0x0, 0x3, [], 0x81}, {0x0, 0x0, 0x0, [], 0x2}, {0x0, 0x0, 0x6, [], 0x81}, {}, {0x0, 0x0, 0x0, [], 0x8}, {0x0, 0x0, 0x0, [], 0xfc}, {0x99, 0x0, 0x6}, {0x7, 0x7fff, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}]}}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x80080, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200000000000000) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000440)={0x377, 0x5, 0x4, 0x1000000, 0x1000, {r9, r10/1000+30000}, {0x5, 0xc, 0x2, 0xba, 0x9, 0x8, "fe9ae723"}, 0x1, 0x1, @offset, 0x80000000, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7], 0x0, 0x10000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) r12 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000440)=ANY=[]) ioctl$VIDIOC_QUERYCAP(r12, 0x80685600, &(0x7f0000000040)) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) [ 981.100149][T17069] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 2, id = 0 04:18:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 04:18:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYPTR, @ANYRES32], 0xfd6e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 981.339226][T17094] QAT: Invalid ioctl [ 981.353773][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 981.421775][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 981.442888][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 04:18:12 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x0, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) syz_open_dev$rtc(&(0x7f0000000180)='/dev/rtc#\x00', 0x4, 0x652000) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x100}, {r3, 0x2}], 0x3, &(0x7f00000002c0)={0x0, r4+30000000}, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 981.477851][ T27] audit: type=1804 audit(1577333892.247:163): pid=17077 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir466351936/syzkaller.2se6fN/252/file0" dev="sda1" ino=16676 res=1 [ 981.501941][T17092] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 981.551473][T17092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 981.563566][T17092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 04:18:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 981.767414][T17124] QAT: Invalid ioctl 04:18:12 executing program 3: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) socket(0x11, 0x800000003, 0x0) pipe2(&(0x7f0000000000), 0x80000) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x300) 04:18:12 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/226, 0xe2) [ 982.943142][ C1] net_ratelimit: 18 callbacks suppressed [ 982.943149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 982.954650][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 982.960420][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 982.966168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 983.023156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 983.028952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 983.263155][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 983.268927][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 984.143200][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 984.148977][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 988.303181][ C1] net_ratelimit: 22 callbacks suppressed [ 988.303192][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 988.314630][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 988.543160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 988.548945][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 989.183141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 989.188925][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 989.194693][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 989.200465][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 989.263141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 989.268965][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:18:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460007002f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:18:21 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28, 0x10, &(0x7f0000000000), 0xfeb6}, 0x48) r1 = dup(0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) dup2(r1, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="0c96fadfe67d576a000000e4ff00", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:18:21 executing program 5: syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:18:21 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x0, 0xd8, 0x0, 0xd8, 0xd8, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xd, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'b\x10\xbcaf\x040\x00', 'bond_slave_0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "6e1e"}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLE\xd6\xe4Y\x94R\x00\x00\x01\x01\x00', 0x0, {0x0, 'syz0\x00\x06\x00\x00\x00\x02\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x293) 04:18:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000380), 0x0, 0x80) accept$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) prctl$PR_CAPBSET_DROP(0x18, 0x24) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000150000012dbd7000fedbdf25020001fd", @ANYRES32=r3, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2000a0ce) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340)) r4 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000140)={0x980000, 0x100, 0x9, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0x7, [], @value64=0x7}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:21 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28, 0x10, &(0x7f0000000000), 0xfeb6}, 0x48) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="0c96fadfe67d576a000000e4ff00", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:18:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 990.416080][T17148] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 990.427348][T17155] x_tables: ip_tables: icmp match: only valid for protocol 1 04:18:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close(r0) io_setup(0x3, &(0x7f00000001c0)=0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 04:18:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x29, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r3, 0x10, 0x0, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x1c}, 0x401}}}, 0xa0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:21 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:18:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r0, 0x3a, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) [ 990.697326][T17172] overlayfs: conflicting lowerdir path 04:18:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00), &(0x7f0000048000), 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@mcast2}, &(0x7f00000003c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x281, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x34}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x281, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000023c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073a903fcb683e13e4cb99411d32a969f57fb87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1e, &(0x7f0000003540)={@empty}, &(0x7f0000003580)=0x14) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000023c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073a903fcb683e13e4cb99411d32a969f57fb87e54d66704d2654729"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000023c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000201140001000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073a903fcb683e13e4cb99411d32a969f57fb87e54d66704d2654729"], 0x5}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000023c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073a903fcb683e13e4cb99411d32a969f57fb87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x281, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x34}}, 0x0) [ 993.343183][ C1] net_ratelimit: 18 callbacks suppressed [ 993.348873][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 993.354607][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 993.360347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 993.366074][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 993.423173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 993.429029][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 993.663152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 993.668941][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 994.543192][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 994.549008][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:18:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460009002f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:18:29 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:18:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) shutdown(r1, 0x1) r2 = syz_open_pts(r0, 0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r4, 0x80, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af41524513"}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r4, 0xce4e}, &(0x7f00000000c0)=0x8) r5 = socket$inet(0x2, 0x4, 0xff) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000140)) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0x74dc, 0x0, 0x0, 0x0, 0x0, "040000ec7314320c842b5e0000000408001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:29 executing program 4: syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:18:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 04:18:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = dup(r1) write$P9_RATTACH(r2, 0x0, 0x0) [ 998.703161][ C1] net_ratelimit: 22 callbacks suppressed [ 998.703170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 998.714709][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:18:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x0, 0xd8, 0x0, 0xd8, 0xd8, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xd, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'b\x10\xbcaf\x040\x00', 'bond_slave_0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "6e1e"}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLE\xd6\xe4Y\x94R\x00\x00\x01\x01\x00', 0x0, {0x0, 'syz0\x00\x06\x00\x00\x00\x02\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x293) 04:18:29 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0xf900}) [ 998.826935][T17212] overlayfs: conflicting lowerdir path 04:18:29 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:18:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32=r1], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x2, 0x4000004, 0xffffff67}) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) lseek(r3, 0x2, 0x3) [ 998.941599][T17227] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 998.949098][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 998.949123][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:18:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") recvmmsg(r0, &(0x7f00000001c0), 0x38f, 0x0, 0x0) 04:18:29 executing program 3: syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x28, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "e661e3bd0a7c6dcc2a9832b154f7ba57"}]}}}}}}}}, 0x0) [ 999.120739][T17237] overlayfs: conflicting lowerdir path [ 999.583181][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 999.588994][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 999.594804][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 999.600557][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 999.673128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 999.678939][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1003.743221][ C1] net_ratelimit: 18 callbacks suppressed [ 1003.743228][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.754641][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1003.760370][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.766118][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1003.823148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.828980][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1004.063156][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.068978][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1004.943189][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.948972][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:18:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c46000a002f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:18:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, r2, 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) dup3(r3, 0xffffffffffffffff, 0x40000) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:35 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:18:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/70, 0x46}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcc, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/57}], 0x12d}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00546) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/120, 0x78}], 0x1}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r6, &(0x7f0000000180)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {0x0}], 0x2) shutdown(r5, 0x0) shutdown(r3, 0x0) shutdown(r1, 0x0) 04:18:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:18:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:18:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1005.100174][T17260] overlayfs: conflicting lowerdir path 04:18:35 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:18:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r9, &(0x7f0000000100), 0x18d, 0x6c00) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r13, &(0x7f0000000100), 0x18d, 0x6c00) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000001540)=ANY=[@ANYRES16=r4, @ANYBLOB="5e5521515da23d5101051291dfc63a3504e3d230ee8b714927f202c78093e386feb5059d8e7d26aa6d793b8bfd60390e418fd3eb8d926dfed14685a47308f44c1a9f391e1e52d117c4511f26380a9bf42d9a760d5af407b07b8890172e6d843f3fec1431278cc92e57dc93e44dd9d93767efeb1dcd7c3cb182c1c898136df861", @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR, @ANYPTR64], @ANYBLOB="c716c19585151b20a9e8b8780976f96b71fd6b97b5220449ee377a15437d4583d377d8645b186e50485f85a8ca740585a2611080157bd57592a9c3a99a05682e375cf02c1d4038c23b3da197d02a67fb2d9b3a76fa652aa9192ca0959f01adefdde5f0c70ef10dbbde64662c948c0c914021f354f1227ea2338ae633d4202a2c663e854eef5f5d384daa560d78e25631fc833cd3f0102144f6d59d91200657969e7e51741933f1275e2c87824f10ef616481dad16e33235f7bfe7bb523bb399fdc0c4d08f31deaf5537e719729626060f26c4c4045cb3ac29ab90d6feccef5b8609ea407ae8dc7375c89414f4b55d243ef9db8b9fa33e68a4c90861d3bb098549e914a31b654bc97180474252700be12bb973d4d38ed6f0b30cd7435a13b9e640be07d4e943680d9de05b85d9739d05be3e08734f90d2348cb940b95f2f62438620dd000207235ef469d3bb11de8f43c45ea9e9dbd8c0f89b8cf2ccef3973be6dc67754523ce36d50fd4dde5ddf227f1514a5e6b46036a4194c53e3ea8825bd1cdd8248da12fdba91be11cbda0639ae62e3792edcdee9a82f8901a754e71df4f1507f4f78f483802becac64cb266e3ef2edf4bb3946c8e6b93ff00e520c181bcc1f211e0acd45d53a445e52df1c24eb9fe312e9f65955a3cf758910277f09d9664d53e7d2fd03c84ea8cbbd4f080b17cb716a342952cb471a4d5c5cd4dac8fe0847e71a4478ca1e45c92152b9143a5e46e3eca684f0925d45c6a249a5e329cb340560d4aa72cf42087b85d8c640ebfdda3f7f5ae7620ffae30ba989cab701307c2d3cca402764ad4cb8c5ca4a85fee8581c007245c6d8356b85e3a5596fcffbb52067f24b2d8acb87271473644ec02ace447ff2a672717240d89e921622276fb6929afba84b553b2a01a6e08b2ad07fe33de583a0977a46e52df8ab7c30892d2431e63af2e05b1d5bf9a28eaa0b66d0dea4f7dee5db9f1522e5f60664d5f56c0d51fa65aa5a1276dcff92b95722d52c1ddb54602022b7690de8b78b94d1ceeb4f784801efec2cda8e74d6609e5cd229a1aa0a92e8d50153259881edcdb481650fa098abc768754129e2c5715dd3d0df3615f4fdfd76aeb1ce3d84839e6cae381f1bc46bd863aff7952cd014efdbf928e1f8c975215e2ef8fd994284a5a5ac7207c48fea43c3d585b38720ae4f27db302a57a8dc6d8e800966451aa985540b38d16ccf1be7818059b5b2c846256540fbb529053b71122e3dd86e6a7e871e2510e8c61969460e700f629c5e7805a327d5adcf05ea9c8a8fd1e46acaf60fed7e56a0c03de79ac3f66ea0b8e90a8a0b744d7bce2bb203b3d8f6aa4ec681b82db9d49755f95a0bd938f01260c443d597551a70b338bed5d0fe2bc330d38d417cefe20990242e832ded49272fb48181de8031cec89714d0d9844c63901c3b57bc41c37a10e983877c652d4fd20d4d043bf37452f46bd1e2905f2e7129f1278d65ef9cfe5733ffcb435be9061c8063afb3484e2b3205cab53e077f7d1e3cf783f9b55f7645d09c6235267d91b956918ca0bd67f36208b94d0f1affd31fd3f5890825e3880161ed45279cc5d297a7c3cdbfa2522cce13541c89eed610580c7e294f2074f1160dafbe405436b96e4720bf731c0f50682100cb5609631b1c26293f06d3a402da895601f127dc9aba25158bfed5c672a13283ae630961f4946e426a5a07397de3b066ef8e8f601dbeb22ac08858782917489fdc8d4b89c8b102da75fcf70bad1bbee0fa2b0c183d6a216eb811fcc31fef23c4c5fd74c2771fdb30c20b0ba463b4f39a053bf6e046061ec636be8d207871ffdf5f2691881335d87223099800d65d6a063c05073c1e13e3484a5281fd7842c7642272bc59c1bda825456e9e97b66333e5a6e20895e4438edb44661356f970d8c97163985c1613a714560e15cd188c1dc021c25034e2989121c969e76c098d0f6f63f3e95af3571b36307bf7c16df129fbb7cc7173f2e07cec5a2278026dca8b3f0ded3941c00be2ecd66bf513c3e05264d490dbbcfa4bca65511a46fdfbbba6f6d4820a8e21a563aa699737b73341cd2a153ebcbf14ccda83a7ab45bc52832f31791dcc57ce883d4938f599414e42709eae5c9cbe262739187dadd294daa3065b6b8a0cf0830860315c26789d835dd6be98bc6c257b501a553c465887729f77075dde32912f0c87d6f3e093247661dc0ba89826a3f8e789be19781418b41f0c3fd72a30ca7cf1a124b52a349b9d9c715a920fcbd389764f3a03c5a06d505d8814bf3b3e7c25f08ed68796399d77e2f46035d690d83e2360bb40498278b1745e006080e0c16ed3c01e97b8f6d5b33d7cdab2bfdcef7783babae988ba22f363bbef29cf3bee923fe800d60f71ee484e56fd64345adb0b169d6f9d93c3e885cc999f73ef90aedcce31437d76fddf0f5da8fc2e6157ed15c979216a1be9547546a5d9a3f404cd17114b03d2c82046c25032ed71dd4475b615a8fcbc44f4e9a97f534be4a7bfb7ca5c50682f5141e57f6409085c835697aab81dec3021eceb3eb5d17511921e60b9e99284af337fd66b22f65695ed4e405fe127585f4c68cc4bcf01a898e411ef650bb1ffab0083b13472f0066ae3426e349e505936a1fd447ab161375806d232e354a701450f7a041253f79d50a61b747244c6c59514b6b20f77b25396c76eb40e069583b4e84a58c62b8a9a0577bcfee5421c1a7119b67f288a91af4d6f19ae9d2fa8f02988206096375952c132651032110b3c66f9667b6f1107c860fc8060eeb23af37da350ec74939ccb61c42473476df00abd54d2f75c1ecd1ce007cc5b34310fb99d61dd4745af325da6157807bd840d95265aca9e015d8f30cabb1f147198f28f58a158c8d9fbd427ecb064a9f384b1a172665f3d91265add9a5711784d0e62877367e9103cfbdfe6a3de51332d947d3a3ff4ffd2598a547f6462351cc88d2a504df88db70ebc5dbff525a248169e143f9d8da55e643ace5b8067e3d56694cfac7faf4f7092516009e3c43c5d930da9e347ad96eca3896b457b83474a70fa2bbab638393d13eb835aebbd7b679b97c4aefbd9010e67d26b61b4364239e08666d144a5b5441b99e523af19329324dc59bcc5c9e580be2e4c189dffae9b10c0f792d2a086ee5e53814daf01c4be844f7d8b4cf02c1250d293fd4c42958357077c87c3b42a9634d8e97fdcccf733defefbf9324794d0bb018e5c2cd2040a379584e394a84902ec684af36525862a3b1f0880132c99ee95639b58177d5f317834d83f2860455e9b4a12794ef2443731b63fdc935ccc5e66d2d583eab8ab685468985002503bc2329c77d64cb8d7fb227179d6a542e2372651f83267b4dd6c9476f63380df6314b26d432aeed6ff8e8d8470ffde6c9a7e3673c6819c0224f63725825926c773f20f99eff122b9d3972ba8527b071ef474fc25841c4f0d9cd0635d877fbf7f9a358157e8c64506a476c840df9d8331fa30057cd14d3a814c25f7dbed9ecc3fde07e4b5bbacceb97410dfd7869ca78952965610a718051db5d2c529d332739748e24deb6ca97509417ac57311fda17a235320d67836def66b845387ff157162b82b0804544f8e91e2462b42c1fbecfb13a823e430bbfff59674dc6612763374090e72223efd1c3bf096af784f85840b67a17d585702810b4d8878417fdd3e70a411fd99307b9952b058ec520dceaaccfe4d1fc1cd32915bcd599414f0d2880e0bbc230a89e4e2dc5ed0e1561868a9d00d044b1d4aed72005f4c9ce00be467b78cc77a165a7a6fed35528aa46fb25e1699dd8c6409545367d69c244608a07394d6033149e58941e145b36e778d14fd64ddfe705fb3692e38dc1b0b97ed5f4cc2a29c817576c50166deef2391bf353c532c71914ffb272005f3f51b0b923cc4e0c67671d96b92c58075516a89d8cf0b74a5b0c4a94d20dfb73322012c4456a356be3eed060a274011998060bd44c4ef66f37659541cf24f3d2d030722d594ac73d9720bb521dfbdb4a42ac459f15f765f9669d1162f7b3fb1bf57ae2bf00339be91ac7a56d833cf784f2c77643aa214d3415f138be56d4dad6cf7fe61459266e3dfdaa56ab532682785f8789ca513ff21eca12fbe529152421dd705c98540d8ef3ea85e6d9689dfc63790f2dcbcaf412415e3aa4f9a45230b4589cb22f4621299d8cc6a044a460d3b52f91d9e2cade355cc0c65397c4d3e2f4dea2a64ab0df46089806bb37aa2402db7699f8c97cbbbd740e910480712c7365d0614b5fad5fcb0552c1b81412de103ad1f9d6d86995bc965b2ac05e5ba906250d8bef1f9984e95ba2718ad6f9227843dfb62d0b9d7989d86c3bbbe4334a89c37815c5e4c00f4bd7ed82c04f0ebabc34e0cda8dbf8d2e0f0a3f82a2cd36ed73977944978c64f6cf41d4453dbf9474712c74cab019a17d6d01b272f29db72a3b0ca2b47679bc14dcfe596377cb73ff3ff3883ac06d229d8a9c03ced616a537fe9c626e8b12d88808305ec35ebb7ecd52d8bd4f555f094c4090abf0b56017952d4ebfd262a9fb2ff546137cdacb3397e36431ebc8e1af3f00d6f88e3736dba1da94e71e1e70a4abff01ef06ef1e5f199cf03f3042dd54ee0174c49db6a0fca2af6a54499b70ff7338aebaff7ac267000c88e7ba746848ec869de19014d5a485b79fc155a61dfa2e21cc96fc818f379be625cf403c16f6fd1c943a76cc169dcb039f3993503006aa4b3a1839328344ab778b6b231b838854113f1028173c20e19fb869086cba846de4758c08fe3582b752d501f32d6687e99c70067d926e9f5ba7a32da11f16bd083babfec88d19edc8b3bb7d5ff93b6923084347ad806a1aa11c32faab10550996670c97b8e0b5d469dc1960bc5fea89381e620174f2c9eb208caa86d94f5898c7dded0b02c8e92f9fd449c6140d14cece7154599f623818d0f4db52a3316b58831edb8c5343799ef337c30d83c3226fd6889021ad697070a137640608c583a6441ca9d322243070b2ea306d21064ab223992c58fa89bff5725596541aaee67ae2c55307e5ea6ae2efd8b0bd6f7243f14ffa3e21d078debd56e9d04023fb4a0b6776ad0ffdf17e66cb826d2ec62b1bebddeb245a5040454a8b088d90211df17048b94d4a9169352d248eaf55d68f06064dc3a72191fea8d5f5183b83f3fcb5a52da3c398b3ed24861389a3160e6ae6af5a8eff57bd0bc1c28a003517cbabfa301691e06f5cae6c05ddff191d886a9d8308a0968f4a7627a34801456df838b4e15879f2b74f24974e6c5d017536e2e0c5f5c990600d9070136aac770e3c9db9399bcccab7c16ae63748c48d16130053f8d32f129a6279e8a19d9f9a2198a6abba6806e7638058d84dd389e4a35b57dedff6d4c89a88824bc59df19a02dfdb016ab769ac9923c5bd47d8d687721cfc4e258bb9bde13f2cb61cbd74cfdecbd026fff051d93500fed7f84a57290092f150280cdc3b4ab69eee110635d6b6ca371a9f248c9613c522a7454703f038048966de06d69aed6f771dcae4c45004fbe47924380a6a93a3112644cc1ad78bc01af3b2c1c1de4a54ca7aef99b2c336663e6190ea9497388a30506d3a057b58335f245e5145a2088698cf5da59668218a32ef0b778e3caf8d7008def61d13489b6ec0ae8dc8806049adc3e2f60f7aa2845d9fe90191c858ed177e48c72619d6f777f6dc31df1478483b8597438bcf38267819fa6fefb6db8b185e528da6f04681833fd3d8da185c565a43f8da7e00bdf2b3e096add3efcb6", @ANYRESHEX=r5, @ANYRESHEX=r6, @ANYRESDEC=r7, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRES64, @ANYRESHEX, @ANYRESDEC=r0, @ANYRESDEC], @ANYRES32=r9], @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES16=r10, @ANYRESHEX=r13, @ANYRESDEC=r12], @ANYRESDEC]], 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r14 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r14, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:18:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x40, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1005.385081][T17290] overlayfs: conflicting lowerdir path [ 1009.103191][ C1] net_ratelimit: 22 callbacks suppressed [ 1009.103200][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.114632][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1009.343140][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.348966][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1009.983144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.988928][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1009.994747][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1010.000474][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1010.063148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1010.069079][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:18:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c46000e002f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:18:43 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:18:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/62) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:43 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) 04:18:43 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r3, &(0x7f0000000200)="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", 0x200, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) socket(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[]}}, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000005c0)={0x0, @isdn={0x22, 0x0, 0x0, 0x0, 0x3}, @xdp, @sco={0x1f, {0x5, 0x7f, 0x20, 0x0, 0x1}}, 0x15, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9}) socket$inet_dccp(0x2, 0x6, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="0804b5055e0bcfe8474071") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003fc0)={0x0, 0x0, 0x0}, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='\b') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) socket(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 04:18:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1012.338511][ T27] audit: type=1804 audit(1577333923.107:164): pid=17316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir610856390/syzkaller.432xvs/346/memory.events" dev="sda1" ino=16766 res=1 [ 1012.375591][T17317] overlayfs: conflicting lowerdir path 04:18:43 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) [ 1012.393700][ T27] audit: type=1800 audit(1577333923.137:165): pid=17316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16766 res=0 04:18:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f00000000c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x60000, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000200)=""/173) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) socket$inet6(0xa, 0xe, 0x40) [ 1012.447771][ T27] audit: type=1804 audit(1577333923.147:166): pid=17316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir610856390/syzkaller.432xvs/346/memory.events" dev="sda1" ino=16766 res=1 04:18:43 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1012.548574][ T27] audit: type=1804 audit(1577333923.167:167): pid=17316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir610856390/syzkaller.432xvs/346/memory.events" dev="sda1" ino=16766 res=1 04:18:43 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) [ 1012.590199][ T27] audit: type=1804 audit(1577333923.267:168): pid=17324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir610856390/syzkaller.432xvs/346/memory.events" dev="sda1" ino=16766 res=1 04:18:43 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:18:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x800000}) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000200)=""/216) [ 1012.710975][T17337] overlayfs: conflicting lowerdir path [ 1012.856145][T17343] QAT: Invalid ioctl [ 1014.143141][ C1] net_ratelimit: 18 callbacks suppressed [ 1014.143148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.154844][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.160601][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.166355][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.223150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.228943][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.463171][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.468963][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1015.343180][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1015.349032][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:18:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460011002f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:18:48 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:18:48 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:18:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x200, 0x8, 0xffffffff, 0x0, 0x0, "00088000000000000000000000000000510500"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/62) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:18:48 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:18:48 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'team0\x00', 0x2}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58) io_setup(0xf38b, &(0x7f0000000040)=0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x200) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) r7 = eventfd(0x5) r8 = socket$l2tp(0x18, 0x1, 0x1) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x200) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r9, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r9, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x200) syz_open_dev$cec(&(0x7f0000000740)='/dev/cec#\x00', 0x1, 0x2) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000780)=0x2137) write$cgroup_type(r10, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r10, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r10, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/pfkey\x00', 0x100, 0x0) r12 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r12, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) io_submit(r2, 0x6, &(0x7f0000000700)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8001, r3, &(0x7f0000000140)="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", 0xfd, 0x2bf85bdc, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x8001, r4, &(0x7f00000002c0)="a6b48276", 0x4, 0x40, 0x0, 0x0, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0xfff7, r6, &(0x7f0000000340)="757647922a6a3c1becbe554387ff4bb8005a2080307f4650641638d84a7c90beb7d6a8c0c20a29b358b1ede1c4bbd5810a5defd45da1f7a153aeafc53b53ddba53e6969c45f75b603e842f53112f0c4d066c73f90a35dcc68a39c5e70b8d547a3496a298eeac617206342646b82de9b2c478b5ad003e8f5f430ed6e0d8bb253089c89ea4bb47511415d0039ed5af364976ac463893c8801cc336be78ba704fb435b6693c3eb283646ac941e9bfd9162ed58c2157c4ce054dad47eb1e86056d394e03088054d2479d965766c003e88387041d9a08f93756143adaf193cfab2699307885c5764eaa83954b736f8a77dd2c9fdb484c4f503cef", 0xf8, 0x6, 0x0, 0x2, r7}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x7, r8, &(0x7f0000000480)="b66e783dc3bae4fbb5b0649931cd794b8cee0f90bf80ea4aef4c38b895b1a474e3ac748dc877fd7bd7e566c93e4c65167e521052e40b38438b7884e3444576122e3a5a59b81d47679061a8564da842b97814be9d15a13d4ac9b5b207b036cf2878140f916f39f8b765011d", 0x6b, 0x0, 0x0, 0x1, r9}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x3f, r0, &(0x7f0000000540)="f1291a08170d95786f7d12db97bddabe4d18aff8010c854b22686d65bdc3058258acaa350e7b20b73460295be13d33d2cd231e5f0c4a9301011bac3adcaa25bfe00695655f122fc792a07a3a4a59b96a24111df8bcb8e94619b5e8c1ce0cc8fc5eb10878d08cb53151d919e15fd79d540fdc73b3db8c57221a5856900f6b52a2ff3cc32d48a806aff45b7f4d77caeecd68c8fcc6e55f3ec3841d7881c8b48f86dc2002b568097c9a65c0ff3df251795ec12e8211c7529640d023ee4bf2", 0xbd, 0xffffffffffffff01, 0x0, 0x7b5b95f78afd6518}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000640)="dbd983f8c2586f143549f91949f26a5555cad83579bedf2e398a324873af740a2d6e6b4006", 0x25, 0x8001, 0x0, 0x3, r12}]) [ 1017.651592][T17358] overlayfs: conflicting lowerdir path 04:18:48 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:18:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) io_setup(0x1a, 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) socket(0x0, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) creat(0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r1, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x800) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 1017.787577][T17371] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 2, id = 0 04:18:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) [ 1017.988023][T17382] overlayfs: conflicting lowerdir path 04:18:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) [ 1018.226117][ T27] audit: type=1804 audit(1577333928.997:169): pid=17370 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir610856390/syzkaller.432xvs/348/file0" dev="sda1" ino=16792 res=1 [ 1019.513154][ C1] net_ratelimit: 22 callbacks suppressed [ 1019.513164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.524623][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.743143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.749023][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1020.383141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1020.388986][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1020.394791][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1020.400523][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1020.463152][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1020.468985][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:18:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x9) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:54 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:18:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:18:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460038002f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:18:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x200, 0x8, 0xffffffff, 0x0, 0x0, "00088000000000000000000000000000510500"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:18:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fchdir(r0) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0xf) 04:18:54 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'team0\x00', 0x2}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512,xts-twofish-avx)\x00'}, 0x58) io_setup(0xf38b, &(0x7f0000000040)=0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x200) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) r7 = eventfd(0x5) r8 = socket$l2tp(0x18, 0x1, 0x1) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x200) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r9, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r9, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x200) syz_open_dev$cec(&(0x7f0000000740)='/dev/cec#\x00', 0x1, 0x2) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000780)=0x2137) write$cgroup_type(r10, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r10, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r10, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/pfkey\x00', 0x100, 0x0) r12 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r12, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) io_submit(r2, 0x6, &(0x7f0000000700)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8001, r3, &(0x7f0000000140)="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", 0xfd, 0x2bf85bdc, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x8001, r4, &(0x7f00000002c0)="a6b48276", 0x4, 0x40, 0x0, 0x0, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0xfff7, r6, &(0x7f0000000340)="757647922a6a3c1becbe554387ff4bb8005a2080307f4650641638d84a7c90beb7d6a8c0c20a29b358b1ede1c4bbd5810a5defd45da1f7a153aeafc53b53ddba53e6969c45f75b603e842f53112f0c4d066c73f90a35dcc68a39c5e70b8d547a3496a298eeac617206342646b82de9b2c478b5ad003e8f5f430ed6e0d8bb253089c89ea4bb47511415d0039ed5af364976ac463893c8801cc336be78ba704fb435b6693c3eb283646ac941e9bfd9162ed58c2157c4ce054dad47eb1e86056d394e03088054d2479d965766c003e88387041d9a08f93756143adaf193cfab2699307885c5764eaa83954b736f8a77dd2c9fdb484c4f503cef", 0xf8, 0x6, 0x0, 0x2, r7}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x7, r8, &(0x7f0000000480)="b66e783dc3bae4fbb5b0649931cd794b8cee0f90bf80ea4aef4c38b895b1a474e3ac748dc877fd7bd7e566c93e4c65167e521052e40b38438b7884e3444576122e3a5a59b81d47679061a8564da842b97814be9d15a13d4ac9b5b207b036cf2878140f916f39f8b765011d", 0x6b, 0x0, 0x0, 0x1, r9}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x3f, r0, &(0x7f0000000540)="f1291a08170d95786f7d12db97bddabe4d18aff8010c854b22686d65bdc3058258acaa350e7b20b73460295be13d33d2cd231e5f0c4a9301011bac3adcaa25bfe00695655f122fc792a07a3a4a59b96a24111df8bcb8e94619b5e8c1ce0cc8fc5eb10878d08cb53151d919e15fd79d540fdc73b3db8c57221a5856900f6b52a2ff3cc32d48a806aff45b7f4d77caeecd68c8fcc6e55f3ec3841d7881c8b48f86dc2002b568097c9a65c0ff3df251795ec12e8211c7529640d023ee4bf2", 0xbd, 0xffffffffffffff01, 0x0, 0x7b5b95f78afd6518}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000640)="dbd983f8c2586f143549f91949f26a5555cad83579bedf2e398a324873af740a2d6e6b4006", 0x25, 0x8001, 0x0, 0x3, r12}]) [ 1023.928798][T17411] overlayfs: conflicting lowerdir path 04:18:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'user.', 'bdev\x00'}, &(0x7f0000000280)=""/186, 0xba) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000140)=""/117) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xaa1, 0x3, 0x8000, 0x6, 0x4, "d937a4ec329621023849069be57e2e5b290e96"}) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7f, 0x220001) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000000c0)=0xa91a, 0x4) r4 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:54 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:18:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fchdir(r0) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0xf) [ 1024.192146][T17435] overlayfs: conflicting lowerdir path 04:18:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000140)={{0x0, 0x2710}, {r2, r3/1000+10000}}, &(0x7f0000000180)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) mq_getsetattr(r4, &(0x7f0000000040)={0x7ff, 0x1, 0x1, 0x4}, &(0x7f0000000080)) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:18:55 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:18:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fchdir(r0) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0xf) [ 1024.428207][T17447] overlayfs: conflicting lowerdir path 04:18:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0xfffffffa, 0x7, 0x4, 0x2, 0x0, {0x0, 0x7530}, {0x5, 0x0, 0x1, 0x9, 0x0, 0x4, "f5964efa"}, 0x401, 0x1, @offset=0x5, 0x8001, 0x0, 0xffffffffffffffff}) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f00000000c0)={0xd, 0xffff}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x3f, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 1024.543137][ C1] net_ratelimit: 18 callbacks suppressed [ 1024.548957][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1024.555345][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1024.561717][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1024.567922][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1024.623131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1024.628930][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1024.750027][ T27] audit: type=1804 audit(1577333935.517:170): pid=17423 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir610856390/syzkaller.432xvs/350/file0" dev="sda1" ino=16831 res=1 [ 1024.863151][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1024.868958][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1025.743150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.749008][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1029.903204][ C1] net_ratelimit: 22 callbacks suppressed [ 1029.903213][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1029.914631][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1030.143186][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1030.149017][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1030.783182][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1030.789040][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1030.794839][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1030.800590][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1030.863132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1030.868963][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:19:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460060002f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:19:03 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:19:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) read(r1, &(0x7f0000000140)=""/102, 0x66) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200c2, 0x0) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000080)={0xe4, "6487324be79f9658dd422b63567676a29a340ca4168137aa61a6ad5ee56f1b88", 0x0, 0x1}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:19:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 04:19:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1032.297109][T17468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1032.321422][T17468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1032.332775][T17468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 04:19:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) [ 1032.356135][T17472] overlayfs: conflicting lowerdir path 04:19:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x20d00, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x84c2550b44304c09, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000180)={0x7, 0x79, 0x1}, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) ioctl$FICLONE(r1, 0x40049409, r3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x3f, 0x0, 0x0, 0x0, 0x17, "000000000000020000f800"}) r4 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:19:03 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:19:03 executing program 3: socket$inet6(0xa, 0x400000000001, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r0, &(0x7f00000002c0)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) timer_create(0x0, 0x0, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000080)=[{0x0}], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r1, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x6, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x8}}, 0x0, 0x0, r2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) r4 = open(0x0, 0x0, 0x0) write$P9_RWALK(r4, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) dup2(r4, 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) bind$inet(r5, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @window={0x3, 0x8, 0x101}, @mss, @timestamp, @sack_perm], 0x5) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r5, 0x1) getsockopt$inet_tcp_int(r5, 0x6, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r7, 0xaea3) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000007, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e21, 0x8, @local, 0x4}}, 0x0, 0x6}, 0xffffffffffffff90) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) r8 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x82) dup3(r6, r8, 0x0) 04:19:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x44, 0x0, "000003009e0086e20300000000000000001000"}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) syz_open_pts(r2, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 1034.943133][ C1] net_ratelimit: 18 callbacks suppressed [ 1034.948826][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.954585][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1034.960359][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.966130][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1035.023182][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1035.028966][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1035.263125][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1035.268937][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1036.143188][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1036.149030][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:19:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:19:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600e0002f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:19:10 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) 04:19:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 04:19:10 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x0) read(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000000c0)={0xa, @output={0x800, 0x0, {0x401, 0x86}, 0x80000000, 0x3ff}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000480)={0x5, 0x10000, 0x1, 0xfffffff8, 0x8, [{0x400, 0x8, 0x2a7, [], 0x80}, {0xfff, 0x8, 0x0, [], 0x4c20fd201f024b87}, {0x4, 0x6, 0x400000000, [], 0x200}, {0x0, 0x24ef, 0x3, [], 0x108}, {0x10000, 0x81, 0x585, [], 0x80}, {0x3f16, 0xce9, 0xbc48, [], 0x200}, {0x3, 0x800, 0x5217, [], 0x8}, {0x800, 0x101, 0x9, [], 0x8}]}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000300)=@usbdevfs_disconnect={0xfff}) preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{r3}, 0x1, 0x10000, 0x3}) times(&(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read(r1, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) tkill(r0, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) close(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00) write(r6, &(0x7f0000000280)="ca8989e0e723e84e117f0baaa0d3d0ed71e78dbc413843364e98c2e3691e5d5de364a7ac97e27727e7c623a17014debf49f089f3b4000a3fc57e4a453ed83051da07af5d745533868749d9873a0575d4bf4e9404774ee117c58fd5", 0x5b) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, &(0x7f00000001c0)) 04:19:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:19:10 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x1ff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000240)) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000180)=""/50) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x8040, 0x0) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000040)={0x2, [0xfc, 0x0, 0x4, 0x5, 0x4, 0x4, 0x8, 0x5, 0x12, 0x7, 0x2, 0x6, 0x0, 0x7, 0xa216, 0x7fff, 0x1, 0x2, 0xf000, 0x4, 0x1000, 0x9, 0x4, 0x6e1, 0x7, 0x5, 0xba, 0xebee, 0x0, 0x6, 0x4, 0x8, 0x9, 0x2, 0x6c, 0x6c21, 0x3, 0x0, 0x8000, 0x6, 0x0, 0x3, 0xfff, 0x8, 0xd7, 0x8, 0x5, 0x5], 0x4}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:19:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:19:10 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:10 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$VT_RELDISP(r0, 0x5605) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x26) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "f56ba04a2e6c773f", "0cc58d1b6404ded6a023bbd0287b4892610de953c6824323a9be8ff214c04be9", "f74361da", "052c2e7c8a3836b4"}, 0x38) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x24}, 0x2}}, 0x71, 0x8}, 0x90) socket$inet6(0xa, 0x0, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x82) getpeername$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000580)='./file0\x00') ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 04:19:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000040)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 1039.993038][T17546] overlayfs: conflicting lowerdir path [ 1040.303248][ C1] net_ratelimit: 22 callbacks suppressed [ 1040.303254][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1040.314698][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1040.543162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1040.548953][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1041.183151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1041.188928][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1041.194710][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1041.200480][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1041.263152][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1041.269067][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1045.343154][ C1] net_ratelimit: 18 callbacks suppressed [ 1045.343164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1045.354575][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1045.360317][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1045.366131][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1045.423162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1045.429113][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1045.663149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1045.668949][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1046.543169][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1046.548949][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:19:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000032f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:19:19 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:19:19 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x1a400, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000080)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:19:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000880)={{{@in=@multicast1, @in6=@local}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000980)=0xe8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000080)) getuid() r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) syz_mount_image$f2fs(&(0x7f0000000400)='f2fs\x00', &(0x7f0000000440)='./bus\x00', 0x0, 0x8, &(0x7f00000007c0)=[{&(0x7f0000000480)="7bd33ebe4fbbccbc4f81e3ecf3260492c8bbf7578c9b00e379ea0b5ba1c8629f18723aa6ee1cfcc1c6d47c1bac824bb278f63e539005298f9954788ba965885c", 0x2e9, 0x49bd}, {&(0x7f0000000a00)="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", 0x1000, 0x4}, {&(0x7f0000001a00)="9004c52485d803fc810997554104bbc2c404b6e2b461ca825133f1a0d8fa3be8f5d1d2a6eb41522df876e25c709ade7341eea9c8ce54d6e6a5b845fe82d68b8e3f9ad91c40e2fa200300000000000000d0681377d01ec1c9ce04810673400640f28d9b8721eca1039017764bb452522bbfdf7d40fd080a28e27b7960fa7913338dcf8d978994def4de6eeded9a5ee6c5adca357b6b7319893c344df9f9b0dd52feaa7db9eaaf4d65475d99a78010f8025c1f53509485263fa9259ed6e0d7e1cc37b6111c21d645ef7cc23875750df13f79988dacf3c95f307c8d291fcac9f1b31d8d122efef8206e521d9dd0cca3f0e6980247966c80d671e8ecdd1705c59919ef38bc27f6365c8a60bd617a90d332195936cd96db8ad2a9e6eb070cd694769e14137288ac00447a8a23d1d7c74fb0ae090afb97fb0b6c7d483673a38614ffdf085ac363a8e45af133de2167650b028cb38d59ad2084c339562c57998bf4735e15e6a7bb86790cde0a9888d49b6fa3da9c089c6fe558494bcf6b4936891e3c2617a7bb53a137f6cb7e98a6f06dbc4e5538e9d655f6a4bf0bbcf1b8320b8234c7b531", 0xfffffffffffffffe, 0x1}, {&(0x7f00000004c0)="48094ffd92aa201f09d23145b7fd6f1a2592aeea", 0x14, 0xffffffffffffffff}, {&(0x7f0000000500)="aa736516f5dfe2cb876c7e0ab7debcbbf3dfe3dd4409715ad2295823859cf6ed5882226b05b0d0fdbd154ea6b8862144f5d8206b", 0x34, 0x20}, {&(0x7f0000000640)="f4ae84d5095917d72e857979251772606b697cb41a32ec3a0883f4d16d4e861b4879af5215c364ba26df769bd4e92a5d57ff971c408e97b8f198f4ca83b2908ea7bb3d2e1b8b3ead5fee3d3ac220bd0ea810199097c7ddb2535bc8404a1d", 0x5e, 0xd5}, {&(0x7f00000006c0)="1476ad0f56741679370295c1b78b785eb2fb", 0x12, 0xffffffffffffff55}, {&(0x7f0000000700)="5bca22c444f6262c7ac689533c25c06a7b382a0db486a6efc83ee5ed3af63e6752f5938a4be79fe73b31ab965b945ad4240bc6818e768779ff046b0e16e577389a73d435156168fbc7c6326c5f1a865b0330bdea7fc25e271ff4e7e0de41370df7bd0430d99685155391523e6a2acb0efa9416f38c75a0d6a4980932abc56c2f1acc5d55ef006a73d0c7635b5c76647f0e68807127d8ced3512a2f4d75439277b800698d3abb419cb72fd6da9429e9e8aa8aa4c842d58678051cf629ff87", 0xbe, 0x9}], 0x300880, &(0x7f0000001c40)=ANY=[@ANYBLOB='norecovery,usrjquota=net/mcfilter6\x00,euid>', @ANYRES32=r4, @ANYBLOB=',smackfsdef=,dont_hash,euid>', @ANYRES64=r3, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c646f0f74f3d9472a5168d47832f181d767222c6d6561737572652c342a90da7f1ea400c823bab787eb5c428664c187e5833d1ac752c95de65fe6fbc232c060766b0d65fc489292a134db1714908966d664a4018e6b01b1e10a988bdb3e1bc8ca36722af1aac1c33acb1695e0c913500a52e08ed53a99b1323211c4f2f9b93c0ad2e4809b1ed8d16003afa1401bc383a19a34f140ee924a3f20ff72"]) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f00000003c0)=0xe000000) preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x7}, 0xc) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80000000000a6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r9, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$USBDEVFS_SETINTERFACE(r9, 0x80085504, &(0x7f0000000380)={0x7fffffff, 0x4}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r10, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r10, 0x2) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r7, &(0x7f0000000280)="49b6837aac3c6020c3889d963c52f4ec6f0174e105aef46a0ac833", 0x1b, 0xffffffffffffffff}]) 04:19:19 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 04:19:19 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1049.016677][T17573] overlayfs: conflicting lowerdir path 04:19:19 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:19:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x40000000, 0x0, 0x0, "000003009e0000001000000000000000000600"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:19:20 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1049.232174][T17588] overlayfs: conflicting lowerdir path 04:19:20 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000200)=""/241) r2 = syz_open_pts(r0, 0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x159, 0x6c00) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0xfffffffd, 0x0, 0x1, 0xd1, 0x1, "000003009e0086e20300000000000000001000", 0x1}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 1049.542596][T17602] overlayfs: conflicting lowerdir path [ 1049.697049][ T27] audit: type=1804 audit(1577333960.467:171): pid=17580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir610856390/syzkaller.432xvs/355/file0/file0" dev="loop3" ino=237 res=1 [ 1050.703229][ C1] net_ratelimit: 22 callbacks suppressed [ 1050.703250][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.714705][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.943173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.948977][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1051.593164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1051.598992][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1051.604767][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1051.610524][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1051.663169][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1051.668970][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1055.743159][ C1] net_ratelimit: 18 callbacks suppressed [ 1055.743166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1055.754658][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1055.760401][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1055.766158][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1055.823136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1055.828911][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.063125][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.068902][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.943197][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.949005][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:19:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000072f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:19:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:19:28 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:19:28 executing program 3: r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0) setgid(0x0) setgid(0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000000)={0x3, {0x10001, 0x7, 0xffff, 0xfffffffa}}) sendfile(r2, r3, 0x0, 0x8000fffffffe) 04:19:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:19:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1057.348577][ T27] audit: type=1804 audit(1577333968.117:172): pid=17626 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir610856390/syzkaller.432xvs/356/bus" dev="sda1" ino=16801 res=1 [ 1057.361395][T17629] overlayfs: conflicting lowerdir path 04:19:28 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x203fb, 0x0, &(0x7f0000ffa000/0x4000)=nil}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCCONS(r3, 0x541d) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40041}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x7, 0x7f, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10040000}, 0x85) preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) [ 1057.439213][ T27] audit: type=1804 audit(1577333968.177:173): pid=17626 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir610856390/syzkaller.432xvs/356/bus" dev="sda1" ino=16801 res=1 04:19:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:19:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1057.655489][T17642] overlayfs: conflicting lowerdir path 04:19:28 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1057.871477][T17655] overlayfs: failed to resolve './file1': -2 [ 1061.103180][ C1] net_ratelimit: 22 callbacks suppressed [ 1061.103190][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1061.114621][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1061.343177][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1061.349317][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1061.983135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1061.988924][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1061.994688][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1062.000613][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1062.063139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1062.068937][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:19:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000092f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:19:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:19:34 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0x0, 0xff, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000140)={0x20, 0x0, 0x9, 0x0, 0x8}) 04:19:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x2) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x53, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) ioctl$sock_bt_hci(r0, 0x1800cd942, &(0x7f0000000200)="0397d7e6032f6e2d8f191c47e2bbe4af774ac7c005ecb3caf02a2879aaa88e03f674400d3ff8e913c4a1bb4c710cf385d20430421f1239efe9e0eea7eeadbabfe7cda554155614a49c932e09b0c08d7ac3af8b2acc5d1c24ff2a729b50376946e7547907f60807afe51938cf1c894dd517be8524a89cac8a06644191aaf983d3e21a112baa3d88f679364f0b4119cbe1bee291380d89637b2e0fe50c0354e51c3be4991b2fad4ebc308d29eeb138788bfea4517c7f97315037dbff0a05f31fd893500d5a6c6e92974da8c7532e90c7f38c5d5e1c51d2e312cc52fa874bec70439106bdc275a35247ee7fcfc0f6aff477da16f4b17687608edb219f6c408c4697a22c7a7c4bdfb7d28b51e6b503cb854b199144cab0635feabab838e711d46f013c8978c5b9255b05e88efbf51c9b8f26053d0aad8e156ad100a2b8c0120b26e3bd8f2b27797b9c99ac4a5a7f7a20c714f5b46480dfe700fa90a4a0059d275fa28e3638382b11d8a648d1013aeb01e67351e2eb7412638650e559bdbee31b68562fdb212dd34abede502b99da2105bf497e36bd85a199bd6d516a692d2ca97ed6e34a951e91baa9e83e676611639ddfda8f99f980c2ea33c7c90f97c27785d3e82ed8405919ee7d899a83aa6a533b7d3e14b967b515c00fc98e192760f91efe8342e29547f2a7c887d2d70eec407ef7f37759bcefc6db8b0a3bd0e619ff5093e86aaad6df0921b10abf0582d1e52b7d4bd4ee8c8567856fa23758e79c72fcb9f879fad5ef5677f6c9d0c67d9d79a1f603061450ceb2b9b5412d2874b2e7375551ca222f6bcd73caec9b8c0b643a72f742401804c6efcf44b50aec4034c44da1cbabcc9b68af4e148f14acec83c182d6d7ec55f63d25dedcc8d1714aace27904dce792f02a6dfb774bf1a0a52ecbd7a03b5a601e41400c3aa7bf3ed28887dbc4a617238bd2dcb53e590080731aeeba2442866f75617caedfa912b102b748cde4c62e09a0f089ca9a19e101dfb34cc55beba6b4fce8f6c67984eddb145564d70f605825e511f39eb789ffdd24697ac500bc66d31aa2d05623f697b7e31240259a33d81174eb9c1598bc9765bf985178db918cbb2656773a71e9e6be0f87c50403109ce249f8f3fa1dbc4bffab152d39f04655d81626c23a8ac21bcb4ec98ae9e5870ac3d7c5720401a3c0fde96a61dcae3067bed4a6f32d02a50d3bf94cf180099a6fba9450a5a6a2cf07f0a143ff4999bb5cf0974bcb0f38cf474c94fd5730831361651baf6280e4c457cd66674771a00919f23f7e3fd7cd77edaa61b73af2ba5dca858797bcdda5e6f11abd4da94fefba5b7ca36bb9dcb0cefea18511414d5db278bea7a0725455287a13eceeb82e4035a91a7eb354101b80729ec0c3cfb41b8ac7c7e2cf33b4a4c9af87b5355a24218d9615aa86abb00b08f4690b5112f89ce307fbf1ac5d7a3e615efec847b01f002accd19237d6cfdc61cc2f27361e25600a69cc154045f4c30b6c902962c3424317c903985fb803c4acd6735fa5342bbd3229eb1f08ce8ac25d9a2ab78e4782dd5de0c6b39da1fd0e3c74a716e9bbf5c418da3e9eddc7a438c2ab8f0cde776eccde89fb3ffcd61449d927ee8d1340b94112b531e0eec3c2d80995c5ea0d9f4d348a28b134cd6918c211eccb7f4e9e9dc36a2c485e0cf20ac36904f90f9b293134fa75cf4b76670093afd3314e819b4b1a9b87f6e453b9ce6cc47bea25469318254a086efccc7e4e1d2799c5c0ce67bc0a28c79a45ebafcc5b0d2118cc8b9a6ff075eae50822db6d5c630882103d111fcb38b022e8873ce90a0c896783fa0c363a22537c5d6e5a3d24511360b5111594e62f346cc21c0271e9be63abe273fc791106be66b50b06be78b1e780e58e3ad2a29b3caf158bfe6f8cc48afbdcda6a34e82305448df05ff1815a147e3cf7b4e2b5b56f55b24fb239baa6a1333f6861968650d401941518398d1f81ba17d1e37a7f68c0d2f333f6f3d194d8d204ba4d300097ebcc58a2284e85f4d4e38e74f784d53e4dff76a6d16abc830ed636e12a4dcd2b2800ef513af5b0d1a4fd45001c32cba3b50a1ff11d09d09aa074754ecb3406778c1e42b062f19db4110fe77c77172b86af231e5e4d621374f4ff2d074007c6241b061885c37d4349b782cf077e54cdbbfb727dc5ff80544d7ec5d0b98d01da26b5548da164ecb808ad0e79c5486ae9b2e1fa1dcfc3b0659f65ff4e6d3f56c98f49b220172d1df15b5c236fb1281703d8cea035e8c0aa8828389db640b25b5f39b1e735c13c0978812d954cefd20618f01ef7f0eb6b9e53df58ddc5ec17b40c8187018c891f8f9b87d5c96a5e8ec1a1f01de941d909db44faafaa1dda142692486c5932ac37baa0a707387838e60a632a820ad5262cebab1f1e8b72d5f7d4e1b505009d17a4e0a7312a25bff1d6ef65a869c6deb6f672b75b61b1dbbc6fe811559ef406f50666e3f7892d88b6080c47bca96c0d05723bfa3379fb1c86caaba15337e4f188770f74ff40744ecba40472f26d7a130b8f87e64842c61df938b24f438a47e9e4c69330277fcc476b04a89d621c99a74670d0b033f3d2550ddd6db4f221ddc69c1ee0d7fe6425ceb62a497e90298e9dcfe3892a127329ae0921188ceebed6c311551c0e90ab49dac7607d94105c996f71aa461501e8b19059260c296b6d7c654b288fef66400eeeda80fde341ee491e8efa084dfe33b83c66d79fc76056d2f44797828d2b7a953857acb7c2cef782e5301bc47f2aa3e412e36dcf2e686e10fb3418ae45bf9d5a8327b7ac8a510ab75050505f8749646a8e20885d4039a9fddcf6ef849138167883bf37ee51d1279228fde9d7fabcca8de8d5e609a43289010e3553f72fcf170770140b9fe9ef53ae8ac3f2349283d676557819722f9af35ccc4d0040588b4587c7392c0456044da93806ee962dd19bf41b139f0b1f29815e4a09370d84c142db4fcc2408f36416403c13ff3155cbfe912c0fbef06e9a974214604c27d2e29443302c5eeed488603b9cc392a9698c567b0268c93ba34964e93bd35e624fc3106276d8c30fbf0a668a4c29fc8e2e54668f7c2d304a8c2df30e604bacec64aa21a26a647ddb7895008cbab4f21faac5c831d6ebb30cf074b62d43213a9445acc0f0d3e5e985c04d605ffb66d36b8d9e9d63479adbc42e1153974170e0ebe65d12cfc81de2294e5d22ebd7e6d2347e41e2335397e5ca37be2b5a3e60b8897f02f542c5cfe04a33273c5e283b21fe174d5a89dd67e9ed55eef0f1c52fa39a65bda996672c687f1a9861d112c2c0b79bb93d214436223d59f5f9539e3e6cd18eb7fe23aa231fe7c8c8958e64bc443240febd5f621a78c65c2b4807c8b323743196404c5dd11330e3db14ab4da3e7336f15a9b23c69dfae325ecf49206356c2d0e9599ee70710669dc0e30b2faca40f954395666f53457702e1e72c276a09d38d92793445a777afdbb6bc90de43d5d7ffd8d3cfac8b7d0ac9366cc49d10d101b0550fa3f93768471d4c0e259fee684f962e5d5049f9f213f12dc9c6aa24f5c2d1cdad8b3ec897bf051c5b71263b792eea19154e35a0bda989a43017326e685f5ff9d71b8b004ea8982f40108b5a2437b422e70825329f0eb2a138389340ea67beb5a8deb19513733e60a64142168e2be3ca2837b6f08aa8b9c3963ec8024752efb132c0e07c25740f818822518816678e5844e7f9912dc41951caa4c4b7b4740157052d736dba61b5b0d9d3cabbe8b5f7080c96c5764342cbd637e1f94ee440bfb49d70ec686e36b27f08074f0efa84936cdd75b18713308f1e1e2d1567b929d1d81ee533945c39dc18212340269c5f9f8b24a6430397e64a72f8d0f12b6ba8b9931c03fc0a7a51932a7109872fb93a8d06d1120cc2720c9081364af9fe50b812a790d3280d09b11d57b815efa7b22316385c2ab96f1224edf92bbcbdd228ddd80bbb7fb3b37b353f8a31eacc258e1225282aae063e0d3f1c4f5c8332c5ef69e37412bbed0fb85f5b1200339e66ab77055b18ef788d59418491f8e7b122027588f599f1559819d806dcae6d249a36c594d2e58557c6465c323adcc6820911956a839b0ab7d9db60ec56b0f3e0e5b6cbc15ce1e2955c5a0f50a6a29f036e554e73a09e74c22ef55edb2ca74aa3b9057ffafcd6e2a70fa6c82bacd3a746bce0883b928f8899d16edcf925ac82e95a9afa278e3780ffab5ab864241fead7639acef5dfd8827757337ac15f1e4674d95edabd6346586ddcb8adb06274926cddf28a24e7a4b81a1c280fcc738d66f69e0de6fba80d00276e850c930584df7ff97a3fb6906ca2d1311feddaa98a090092a927b6acdb670b30be456bac4ecffb9d263f6834cc24e56f852a8c2a75fc719b15859841c55cb5df23aa8c24d8ab5893287d45b3e657b7104c5f5ee0021e232a50ec8f9d44cf911242a37d36f3e1dc8cfa96bf6cee7186a66edf8b724b6721a640c5b8518bc13c56e88e01248e4333ca4c74806a3a9277a8cf9970f7e7e4b5929938189bd855644cd6ae21716b704cea0cf5312cbcb75ecc83b549b3ce242f5c236fe17f7a8919c695872ec3c9703a9dce9c522dbcaaeeb90d10693ef8eaa5c01992d602759ef8bb99ff50f940179458191d8e5bd432c1db136b2cb96ac4a1666186f6015c55402d4db82deaa0a2ceafc7debf198d419483a76124b429c5061c5819cbdb36b0a568176960d27a7b346b3b63bbd2afd8728682516fddb5d5feb5d8b4453946d8e6587b16abc2746efac253272d2815ee69be9141024539c8520ab73fb5a1dda0c6ca343a588a9cc0f04b0729f74a1df7830c47822dae21bf066b9f1fbfea1bf5af93e58b2ee8f67e2d1110243acb0c78d1f5b543a102582ca9df4152d09959b31fd1ea542a68de9806b707212eb28c2dee7e25dd8ad0de8f0a83b0a1c817b2147da529b6f0267a502d41f28df27d893162f52681dedeb7aa56f16990f83410510749c95eb60bddfb58fb0e8c33757738ccee19742cf843e3d099d81319653d7c4168a33f17ff61b08082ef9c18868af526ae0a46deda6d8afd68aaef6df69a8dedee3c0c86449f0128a1ea4ef9a35dae07d9e3d9c87e18ee559345f9c6012b1db52b3333b3e46f21b3f13ffc9beaf260f50f67488939296a0c08a94fd03b293c5ceeca24468625b9c1cd496ecf2243aed1e5b70fe3e2949c539a73bed5d2b229274152b22e7c7d1c5d2daa08538b0e016435bd72b5a4e567194297a866ff28c258f4a0426879adb0c0d25d8605b7f111c36c3149342d8702c257a496bf72821e3f3121a2137eb2bb1c04196f0db68838baec85b4293b8d9cf66e06abdf7e3ec6884a8328a66c21ea74a266eafa33c787fad7e23a559ef0928df13427280bcadc85a39d3be6976990cedd8f0a40d61c9c48c51dedf3e523900da3f1d01c930fa3bbbc36380aa74ba828cb04fd1c29a08946faffa64a7e2e44c14234c1506f425669a1d834d20895ad476fb1d4549b34edf8c89660ed1ea81088157736fef83f338e42c895322adcf71ad4e668695e7cbdbf0450efd96f4c2cd619e7154906d2e917e94f17e25e5ec9078efd2e9185ab25b0aa92c18fe3527cd135e1ef419a64f459e04b69342a12df2a6d69c4d17bee9181ea35a288a24100bb78111328e357b7dcf8a689d3d0ed784eca819ce1dd69052b87b34f50353eb926bb24d95929ab38cba077b39d1fbabbad07934177ecf60fbc3d8e242afe99cbcab6f5368454e6e659e52b0da33436f74a951362dab439b95aaa80280cc5") write$evdev(r0, &(0x7f0000000040), 0x373) 04:19:34 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:34 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:19:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:19:34 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1063.627279][T17671] overlayfs: failed to resolve './file1': -2 04:19:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:19:34 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x0, 0x2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4d304, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r3, @ANYBLOB="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"], 0x8d0}}, 0x0) 04:19:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f00000000c0)=0x80, 0x40000) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000140)={'ip_vti0\x00', 0x3}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x4000) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r3 = getpgrp(0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000180)) [ 1063.836695][T17682] overlayfs: failed to resolve './file1': -2 04:19:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) [ 1066.143155][ C1] net_ratelimit: 18 callbacks suppressed [ 1066.143161][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1066.154604][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1066.160348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1066.166107][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1066.223134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1066.228906][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1066.463159][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1066.468938][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1067.343225][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1067.349032][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:19:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000a2f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:19:41 executing program 1: mkdir(0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) dup2(r0, r1) 04:19:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x61c300, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r2}, &(0x7f0000000080)) r3 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r3}, &(0x7f0000000080)) r4 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r4}, &(0x7f0000000080)) r5 = clone3(&(0x7f0000000340)={0x1000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x20}, &(0x7f0000000200)=""/90, 0x5a, &(0x7f0000000280)=""/161, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x50) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000004c0)={{0x1, 0x1, 0x8, 0x5, '\x00', 0x2}, 0x4, 0x20000000, 0x6, r5, 0x4, 0x9, 'syz1\x00', &(0x7f00000003c0)=['bdev{\x00', '/dev/ptmx\x00', '\x95)self\x00', '[keyring@$,#\x00'], 0x24, [], [0xfe01, 0x9, 0x2, 0x7ff]}) r6 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:19:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:19:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:19:41 executing program 1: mkdir(0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1070.907512][T17710] overlayfs: failed to resolve './file1': -2 04:19:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:19:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:19:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1071.137665][T17724] overlayfs: failed to resolve './file1': -2 04:19:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:19:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TCSBRK(r1, 0x5409, 0x1f) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 1071.503217][ C1] net_ratelimit: 22 callbacks suppressed [ 1071.503226][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1071.514658][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1071.743169][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1071.749144][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1072.383199][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1072.389111][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1072.395560][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1072.401342][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1072.463203][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1072.469482][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:19:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600b80b2f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:19:45 executing program 1: mkdir(0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:45 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000340)="000000000000000000000025fbef9dadf630f56dbb064996ec5ba351e314d34e673931b56709541e2fb3481d9b6e7b584c08baeb921d6609c7684d183caa7ac1f33ec421143daa23343787442490f15541dd69e00ea7d175b102f118a1f6d4f086da0f5bda4c621c81ea5e6f0c59406717a2a8bc44a89c2b094b456d0488b4fba9", 0x6311) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000000c0)=0x400) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r2, @ANYRES16=0x0, @ANYRESOCT, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYPTR64, @ANYRES16=r1, @ANYRESHEX, @ANYPTR, @ANYPTR, @ANYRESHEX=r0, @ANYPTR, @ANYPTR64, @ANYRESDEC], @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRES16, @ANYPTR, @ANYRESOCT=r0]], @ANYPTR, @ANYBLOB="05df0f9b7a34b00c7df3f13faf1a5f218500ea322e022dbf531d12ca0df68c4877f2c7873eafbebc6a27c386a42d077b1fa9afd4930b2f9d421fe15745f0ebb9ec3f4fe934a5551853e1baa176f5d21a1826a16a8cb77572b20cb2ac63328657759ee33f8d2d690ddf47728ab64b6e70578038b41a80b30f419d81678e5d4ac1cbb43ef6f4daebad9a0d3d84b9511514dd1f40bd3667cc8c5f2f4feeb6d7a19376499d22de219ed5a17f3af6819e9eda5e19b444501874efa9780d21390a9b51b2c34c245739bb6d3d93645c4e"], @ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX]], 0x8) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000240)="5335d45adca090aaee979fa76dc239913cb5a5ffd14e9e79a7bdc96973544da1947c6f2b859dca36832e0c990f0ea6dbfed7a745bf0537a616ceccf2511d7274fd8e", 0x42}], 0x1, 0xa) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x400, 0x0) 04:19:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x2, 0x2, 0x4, 0x10000, 0x62, {}, {0x4, 0x1, 0x8, 0x2, 0xe, 0xdd, "59c9492a"}, 0x4, 0x4, @fd, 0x0, 0x0, r1}) write$P9_RLINK(r2, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r3 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000180)={0x5, 0x2, 0x8, 0x81, '\x00', 0x200}) 04:19:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) 04:19:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:19:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fchdir(r0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) [ 1075.134333][T17756] overlayfs: failed to resolve './file1': -2 04:19:45 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffff801, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000240)="78e55c1dc76b0e2e9dda59016ba2745b91bab2fefeb8c05118c489bed06ba23e0c741e68af5f725e5bc03a8e087a3dd65482b57c29a65fba4e71a23e464bb59879721159f7deae92c00347585813f65d54866d23f5a5fe24a14b6382ac999ded9426a43d62601cf72600796b2f5add655ebfeaf99bbe55868bdf6247aa9e1306bcb045716ac36fc20f1eed4a253c011c67dbebf8c7f69a78f6a209c419ad8c7bb15deec053aac6ad9ae90e8f0d2c437559e9cb529ebce79660eb328d99f572152766299cf1d32d96f6cff44a9ee1a0a2535aca822e8f70d95b862109e17902dd2465033c33373f5f2dec1d7e", 0xec, 0x1f}, {&(0x7f0000000340)="1b34cb5d70ea815b3d0b639164fabd90c5db117722317cb44a7e94f157f5f897fb1c1bab91cb99b1850196e091a5e42c00e680a535d754cbc6f7eab6fe3ca5a75f1e2ec98283c1323681b8f5fd328a1035d6fdfd6d52fa8336376f84b9c2fb8d9d34c7e6a1bde9cf4ee5", 0x6a, 0x2}], 0x414ce, &(0x7f0000000540)={[{@grpquota='grpquota'}, {@nointegrity='nointegrity'}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@discard_size={'discard', 0x3d, 0xbafe}}, {@resize_size={'resize', 0x3d, 0x1}}, {@resize='resize'}, {@nodiscard='nodiscard'}, {@discard='discard'}, {@nodiscard='nodiscard'}, {@integrity='integrity'}], [{@smackfsroot={'smackfsroot'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@vmnet0$#'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@uid_lt={'uid<', r1}}, {@uid_lt={'uid<', r2}}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e21, 0x4, @mcast1, 0x6d3}, 0x1c) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0xcb6d01, 0x0) 04:19:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000040)={0x1, 0x6, 0x7, 0x3, 0x40}) 04:19:46 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:19:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x2, 0x5, 0x4, 0x0, 0x401, {r2, r3/1000+10000}, {0x5, 0x2, 0x2, 0x7f, 0x40, 0x0, "a62acc20"}, 0x1f, 0x1, @offset=0xc7eb, 0x400, 0x0, r4}) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000140)={0xc023, 0x7}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 1075.372768][T17777] overlayfs: conflicting lowerdir path [ 1076.553137][ C1] net_ratelimit: 18 callbacks suppressed [ 1076.553143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1076.564733][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1076.570516][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1076.576260][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1076.633173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1076.639000][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1076.873139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1076.878931][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1077.743164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1077.748944][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.913176][ C1] net_ratelimit: 22 callbacks suppressed [ 1081.913185][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.924654][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1082.143143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1082.148935][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:19:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000e2f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:19:53 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x4, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6174000000000000003800000000000000000000000000000000000000000002000000000000000085748945000000000000000000000000000000000000000000000000000000f9ea3177d80396393bdb2af88ccda3bce2533e7337ef292f3697cba9790cf671358bdd4059a0b781546d561c31a59ece7ec119"], 0x48) 04:19:53 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:19:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x27, 0x20000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x40000) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1d85) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:19:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1082.390525][T17799] IPVS: ftp: loaded support on port[0] = 21 04:19:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1082.447154][T17807] overlayfs: conflicting lowerdir path 04:19:53 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:53 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) [ 1082.621385][T17814] overlayfs: conflicting lowerdir path 04:19:53 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:19:53 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) [ 1082.779625][T17799] IPVS: ftp: loaded support on port[0] = 21 [ 1082.785633][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1082.785661][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1082.785693][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1082.785715][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:19:53 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0xf) [ 1082.863101][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1082.868909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1082.897504][T17822] overlayfs: conflicting lowerdir path [ 1083.233134][ T9929] tipc: TX() has been purged, node left! [ 1084.653148][ T9929] tipc: TX() has been purged, node left! [ 1086.943164][ C1] net_ratelimit: 18 callbacks suppressed [ 1086.943171][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1086.954582][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1086.960330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1086.966143][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1087.023148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1087.028912][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1087.263160][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1087.268958][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1088.143181][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1088.149053][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:20:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000112f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:20:01 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:20:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:20:01 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x4, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6174000000000000003800000000000000000000000000000000000000000002000000000000000085748945000000000000000000000000000000000000000000000000000000f9ea3177d80396393bdb2af88ccda3bce2533e7337ef292f3697cba9790cf671358bdd4059a0b781546d561c31a59ece7ec119"], 0x48) 04:20:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0xc0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) modify_ldt$write(0x1, &(0x7f00000000c0)={0xff, 0x1000, 0x400, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x40800, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x18c, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8ea3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f0f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc92c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER={0x98, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xe716, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x87}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7099}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc030}, 0x840) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @empty}, {0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, 0x0, 0xa49, 0x0, 0x80000001, 0x79db, 0x84e}) 04:20:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:20:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:20:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:20:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x8000, 0x20, 0x10000, 0x1ff, 0x0, 0x5, 0xffff, 0x7, 0x3ff, 0xffffffff, 0xffffffffffff0001, 0x0, 0x1, 0x9, 0x6, 0x6cd18403], 0x2, 0x100}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) [ 1090.823884][T17847] IPVS: ftp: loaded support on port[0] = 21 [ 1090.845818][T17848] overlayfs: conflicting lowerdir path 04:20:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:20:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:20:01 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1091.195491][T17872] overlayfs: conflicting lowerdir path [ 1091.633216][ T720] tipc: TX() has been purged, node left! [ 1092.313151][ C1] net_ratelimit: 22 callbacks suppressed [ 1092.313162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1092.324798][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1092.543168][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1092.548956][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1093.183141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1093.188960][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1093.194802][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1093.200537][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1093.263158][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1093.269089][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1097.343140][ C1] net_ratelimit: 18 callbacks suppressed [ 1097.343151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1097.354810][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1097.360639][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1097.366389][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1097.433148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1097.438959][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1097.663161][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1097.668983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1098.553146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1098.558961][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:20:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xa661, 0x4) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:20:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:20:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(0x0, r3, 0x0, 0xffffffffffffffff, 0xf) 04:20:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000202f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:20:09 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:20:09 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x4, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6174000000000000003800000000000000000000000000000000000000000002000000000000000085748945000000000000000000000000000000000000000000000000000000f9ea3177d80396393bdb2af88ccda3bce2533e7337ef292f3697cba9790cf671358bdd4059a0b781546d561c31a59ece7ec119"], 0x48) 04:20:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(0x0, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1099.194718][T17891] IPVS: ftp: loaded support on port[0] = 21 [ 1099.213456][T17892] overlayfs: conflicting lowerdir path 04:20:10 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:20:10 executing program 2: ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000000c0)=0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32=r0], 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040)=0x4, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) syz_open_pts(r2, 0x64000) fsopen(&(0x7f0000000080)='vxfs\x00', 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:20:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(0x0, r3, 0x0, 0xffffffffffffffff, 0xf) 04:20:10 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1099.505090][T17908] overlayfs: conflicting lowerdir path 04:20:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:20:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000040)=0x5, 0x4) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 1099.718150][T17921] overlayfs: conflicting lowerdir path [ 1100.103206][ T8121] tipc: TX() has been purged, node left! 04:20:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:20:12 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1102.703165][ C1] net_ratelimit: 22 callbacks suppressed [ 1102.703176][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1102.714637][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1102.943133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1102.948974][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1103.583152][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1103.588940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1103.594715][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1103.600492][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1103.663149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1103.668987][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:20:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000382f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:20:18 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:20:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x2, 0x4, 0x800, 0x71, 0x2, "2713a2de74bc34932eb100d3fa0b434bf8271c"}) 04:20:18 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x12, &(0x7f0000000040)="f9", 0x1) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x3bf, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r4}]]}}}]}, 0x68}}, 0x0) bind(r1, &(0x7f0000000080)=@sco={0x1f, {0x5, 0x77, 0x20, 0x9, 0x46, 0x1}}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r5, @dev, @multicast2}, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7f, @bcast, @netrom={'nr', 0x0}, 0x8, [@bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) 04:20:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:20:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:20:18 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1107.494620][T17946] batman_adv: Cannot find parent device [ 1107.517104][T17945] overlayfs: conflicting lowerdir path 04:20:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) 04:20:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000180)={0xa3, &(0x7f00000004c0)}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000000c0)=0x8000, 0x28c) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:20:18 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x006rJ!o-\x12\xb7?t\xd7\xee\x87\x18{l\xc8J\xe8\xcf\xcf\xbb|\xb8ERtv?t\x81\xcc\x9e\x03g\xe3\xd5\"\b\xd1\xb7', &(0x7f0000000680), 0x24, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000140)='system.posix_acl_access\x006rJ!o-\x12\xb7?t\xd7\xee\x87\x18{l\xc8J\xe8\xcf\xcf\xbb|\xb8ERtv?t\x81\xcc\x9e\x03g\xe3\xd5\"\b\xd1\xb7', &(0x7f0000000680), 0x24, 0x0) [ 1107.720709][T17958] overlayfs: conflicting lowerdir path [ 1107.743109][ C1] net_ratelimit: 18 callbacks suppressed [ 1107.743119][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1107.754562][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1107.760311][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1107.766160][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:20:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) 04:20:18 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1107.823107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1107.828912][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1107.960637][T17974] overlayfs: conflicting lowerdir path [ 1108.063104][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1108.068931][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1108.943155][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1108.949065][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1113.103183][ C1] net_ratelimit: 22 callbacks suppressed [ 1113.103193][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1113.114664][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1113.343155][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1113.348963][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1113.983127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1113.988920][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1113.994699][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1114.000435][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1114.063132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1114.068950][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:20:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000602f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:20:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000340)={'IDLETIMER\x00'}, &(0x7f0000000380)=0x1e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x7fffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x6, 0x3}, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x10, 0x4, 0x7}, &(0x7f0000000140)=0x3f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x3bf, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r5}]]}}}]}, 0x68}}, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f00000003c0)=""/46, 0x2e, 0x2000, &(0x7f0000000400)={0x11, 0x8, r5, 0x1, 0x1, 0x6, @remote}, 0x14) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) setrlimit(0xa, &(0x7f0000000440)={0x5fe1, 0xff}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:20:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) 04:20:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 04:20:26 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:20:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:20:26 executing program 3: getrlimit(0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@ipv4={[], [], @empty}, 0x0}, &(0x7f0000000140)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, 0x2, r0, 0x2c}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x85}, 0x40820) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240), 0x0) sendfile(r2, r3, 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff024}]}, 0x8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:20:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) [ 1115.847603][T17993] batman_adv: Cannot find parent device 04:20:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) write(r2, &(0x7f0000000040)="8aa238a21349eadba22092015fa58c703b473417a741a772f498c02401eec826da69d795eaf994bfc3d48f5fea26fd67bdecded0cadc06e2541096e60d4a7cb9f42a6a5b77a5485eb045ca15e2ac27c22f0a609405fc81636832211a1087cece310197453f4b38cdd1b4dd643fd3f03f0f8308ae85d565e753dd138f5e0cea50e374b51ca5974db8d9a4762e16b28ede5b", 0x91) 04:20:26 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:20:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') socket$packet(0x11, 0x3, 0x300) preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000040)) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:20:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) [ 1118.143122][ C1] net_ratelimit: 18 callbacks suppressed [ 1118.143132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1118.154568][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1118.160319][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1118.166070][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1118.223118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1118.228922][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1118.463143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1118.468932][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1119.343212][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1119.349008][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1123.503155][ C1] net_ratelimit: 22 callbacks suppressed [ 1123.508893][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1123.514664][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1123.743133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1123.748961][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1124.383153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1124.388976][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1124.394780][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1124.400522][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1124.463121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1124.468936][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:20:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c46000bb82f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:20:35 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) connect(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) stat(0x0, &(0x7f0000000580)) socket(0x11, 0x2, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lchown(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x3a7188a5757e0467, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000002c0)="f6", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r3, 0xfffffffffffffffb) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[]) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]) close(0xffffffffffffffff) creat(0x0, 0x0) 04:20:35 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:20:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) 04:20:35 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000200)={0x1, 0x3f, 0x5, 0x1, [], [], [], 0x9, 0x8, 0x4, 0x3, "79d4d23eb303d9fffade4204b8142f89"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x8) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x800) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) pipe2$9p(&(0x7f0000000040), 0x80800) 04:20:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:20:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3}, 0x4}, 0xe) 04:20:36 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:20:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) dup3(r1, r0, 0x0) 04:20:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000080)={0x2, "83b1"}, 0x3) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/49, 0x31}], 0x1) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000140)={0x5b2b043f0d4fb88b, 0x0, {0x6, 0x8, 0x201f, 0x0, 0x9, 0x97d77ef713bed0ec, 0x1, 0x6}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x3bf, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r5}]]}}}]}, 0x68}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x9909, 0xf627, 0x5}) sysfs$2(0x2, 0x5, &(0x7f0000000280)=""/225) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@deltclass={0x38, 0x29, 0x0, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0x1c}, {0xe, 0x5}, {0xfff7, 0xb}}, [@TCA_RATE={0x8, 0x5, {0x1f, 0x3d}}, @tclass_kind_options=@c_netem={0xc, 0x1, 'netem\x00'}]}, 0x38}}, 0x405c) 04:20:36 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) 04:20:36 executing program 5: [ 1125.455876][T18051] overlayfs: conflicting lowerdir path [ 1125.492209][T18053] batman_adv: Cannot find parent device [ 1128.543146][ C1] net_ratelimit: 18 callbacks suppressed [ 1128.543158][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1128.554561][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1128.560328][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1128.566073][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1128.623225][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1128.628995][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1128.863149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1128.868929][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1129.743172][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1129.748940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1133.903151][ C1] net_ratelimit: 22 callbacks suppressed [ 1133.903162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.914623][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1134.143145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1134.148965][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1134.783140][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1134.788986][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1134.794790][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1134.800520][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1134.863123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1134.868898][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:20:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000e02f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:20:46 executing program 3: 04:20:46 executing program 5: 04:20:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCSSERIAL(r0, 0x541e, &(0x7f0000000040)={0x1, 0x4, 0x1, 0x5, 0xfff, 0xdb, 0x3, 0x6, 0x2c80, 0x1, 0xb4, 0x9, 0x8, 0x2, &(0x7f0000000200)=""/217, 0x40, 0xa3, 0x3}) 04:20:46 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:20:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:20:46 executing program 3: 04:20:46 executing program 5: [ 1135.709462][T18076] overlayfs: conflicting lowerdir path 04:20:46 executing program 5: 04:20:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='ipddp0\x00') readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f00000000c0)) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000040)) 04:20:46 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:20:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) flistxattr(r0, 0x0, 0x0) [ 1136.038889][T18097] overlayfs: conflicting lowerdir path [ 1138.943151][ C1] net_ratelimit: 18 callbacks suppressed [ 1138.948844][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1138.954647][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1138.960446][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1138.966226][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1139.023144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1139.028955][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1139.263153][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1139.268972][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1140.143169][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1140.149187][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:20:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000006006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:20:52 executing program 5: getrlimit(0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={[], [], @empty}, 0x0}, &(0x7f0000000140)=0x14) sendmsg$xdp(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, 0x2, r1, 0x2c}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="3d267ef7d049e3f09bfafffaa8312dcd07aa78d5f6eaca4e3ecd547ca14bc68d019b40afbbe6ed472b722bf9be7d8ca458fb180696000d4386a336fdc7202c9d523b58081363bed5cb462e6afcde3047e3971964451b6aa5f619f9a7edaa3c2fa4bba17a85a4b80758c1a26e7efe358e484637ffd34b4b622aa04cff67977999033f9e04f294022a69d3f46b640de62645d740fef97edc66b7361e08f2e8292574789744a0e4059adbca31aa56286c16fe52595c4724aecb4bdee75151c8baaa31e8d4fdbcf04ccd8854a48b1fd0ef6c749a66c792cb1226fd6c0c6e563684e459937e1b2c38d377c2d752103989f2237d", 0xf1}], 0x1, 0x0, 0x0, 0x85}, 0x40820) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240), 0x0) sendfile(r3, r4, 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 04:20:52 executing program 3: close(0xffffffffffffffff) read(0xffffffffffffffff, 0x0, 0x0) 04:20:52 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:20:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0xc83b18b5161060c1) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) preadv(r2, &(0x7f00000002c0), 0xc2, 0x6c00) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0xff7fffff, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000", 0x0, 0x4}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:20:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:20:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:20:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x869, 0x9, 0xfffffdfb, 0x2, 0x2}) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:20:52 executing program 3: getrlimit(0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@ipv4={[], [], @empty}}, &(0x7f0000000140)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240), 0x0) sendfile(r1, r2, 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff024}, {}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 1142.036114][T18117] overlayfs: conflicting lowerdir path 04:20:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:20:52 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:20:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) [ 1144.303176][ C1] net_ratelimit: 22 callbacks suppressed [ 1144.303186][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1144.314732][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1144.543141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1144.548967][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1145.183174][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.188975][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1145.194860][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.200590][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1145.263160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.268959][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1149.343127][ C1] net_ratelimit: 18 callbacks suppressed [ 1149.343153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1149.355391][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1149.361284][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1149.367273][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1149.423111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1149.428888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1149.663149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1149.669076][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1150.543146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1150.548966][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:21:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000011006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:21:02 executing program 5: getrlimit(0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={[], [], @empty}, 0x0}, &(0x7f0000000140)=0x14) sendmsg$xdp(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, 0x2, r1, 0x2c}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="3d267ef7d049e3f09bfafffaa8312dcd07aa78d5f6eaca4e3ecd547ca14bc68d019b40afbbe6ed472b722bf9be7d8ca458fb180696000d4386a336fdc7202c9d523b58081363bed5cb462e6afcde3047e3971964451b6aa5f619f9a7edaa3c2fa4bba17a85a4b80758c1a26e7efe358e484637ffd34b4b622aa04cff67977999033f9e04f294022a69d3f46b640de62645d740fef97edc66b7361e08f2e8292574789744a0e4059adbca31aa56286c16fe52595c4724aecb4bdee75151c8baaa31e8d4fdbcf04ccd8854a48b1fd0ef6c749a66c792cb1226fd6c0c6e563684e459937e1b2c38d377c2d752103989f2237d", 0xf1}], 0x1, 0x0, 0x0, 0x85}, 0x40820) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240), 0x0) sendfile(r3, r4, 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 04:21:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 04:21:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000100), 0x18d, 0x6c00) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES64, @ANYRES32=r4, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES16=r5, @ANYPTR, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES64=r6, @ANYRES64=r2, @ANYRESOCT, @ANYRESOCT=r7, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES64=r8, @ANYRESDEC, @ANYRESOCT, @ANYRES64]]], 0x215) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:21:02 executing program 3: perf_event_open(&(0x7f0000001600)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000002400)) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1, 0x2) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = io_uring_setup(0xd, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) 04:21:02 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:21:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 04:21:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1151.327208][T18168] overlayfs: conflicting lowerdir path 04:21:02 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:21:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x2, 0x4, 0x800, 0x71, 0x2, "2713a2de74bc34932eb100d3fa0b434bf8271c"}) 04:21:02 executing program 3 (fault-call:6 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:21:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) r2 = syz_open_pts(r1, 0x40102) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 1151.567244][T18186] overlayfs: conflicting lowerdir path [ 1151.580969][T18189] FAULT_INJECTION: forcing a failure. [ 1151.580969][T18189] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.645503][T18189] CPU: 0 PID: 18189 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1151.654378][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1151.664522][T18189] Call Trace: [ 1151.667823][T18189] dump_stack+0x11d/0x181 [ 1151.672197][T18189] should_fail.cold+0xa/0x1a [ 1151.676963][T18189] __should_failslab+0xee/0x130 [ 1151.681824][T18189] should_failslab+0x9/0x14 [ 1151.686434][T18189] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1151.691755][T18189] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1151.698038][T18189] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1151.703957][T18189] perf_event_alloc.part.0+0x6c/0x1bd0 [ 1151.709686][T18189] ? __alloc_fd+0x2ef/0x3b0 [ 1151.714219][T18189] __do_sys_perf_event_open+0x68a/0x1e40 [ 1151.719899][T18189] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1151.725868][T18189] ? ksys_write+0x145/0x1b0 [ 1151.730601][T18189] __x64_sys_perf_event_open+0x70/0x90 [ 1151.736186][T18189] do_syscall_64+0xcc/0x3a0 [ 1151.740817][T18189] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1151.746719][T18189] RIP: 0033:0x45a919 [ 1151.750613][T18189] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1151.770209][T18189] RSP: 002b:00007fcbbee08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1151.778941][T18189] RAX: ffffffffffffffda RBX: 00007fcbbee08c90 RCX: 000000000045a919 [ 1151.786908][T18189] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000020000000 [ 1151.795002][T18189] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 1151.802965][T18189] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fcbbee096d4 [ 1151.814988][T18189] R13: 00000000004c8816 R14: 00000000004dfe48 R15: 0000000000000008 [ 1154.703177][ C1] net_ratelimit: 22 callbacks suppressed [ 1154.703186][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1154.714607][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1154.943145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1154.948943][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1155.583195][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1155.589030][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1155.594820][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1155.600647][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1155.663146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1155.669098][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:21:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000021006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:21:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:21:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ftruncate(r1, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:21:08 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x6607c0, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000080)) ftruncate(r2, 0x200004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:21:08 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:21:08 executing program 3 (fault-call:6 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1157.582122][T18204] overlayfs: conflicting lowerdir path [ 1157.596312][T18209] FAULT_INJECTION: forcing a failure. [ 1157.596312][T18209] name failslab, interval 1, probability 0, space 0, times 0 04:21:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:21:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2], 0x17) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x800) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000080)=0x3) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 1157.680359][T18209] CPU: 1 PID: 18209 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1157.689096][T18209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.699257][T18209] Call Trace: [ 1157.702558][T18209] dump_stack+0x11d/0x181 [ 1157.706980][T18209] should_fail.cold+0xa/0x1a [ 1157.711677][T18209] __should_failslab+0xee/0x130 [ 1157.716549][T18209] should_failslab+0x9/0x14 [ 1157.721075][T18209] kmem_cache_alloc+0x29/0x5d0 [ 1157.725914][T18209] ? __read_once_size.constprop.0+0x12/0x20 [ 1157.731834][T18209] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1157.738114][T18209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1157.744401][T18209] __d_alloc+0x52/0x4b0 [ 1157.748574][T18209] d_alloc_pseudo+0x27/0x70 [ 1157.753278][T18209] alloc_file_pseudo+0x96/0x1b0 [ 1157.758159][T18209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1157.764417][T18209] anon_inode_getfile+0x103/0x1d0 [ 1157.769498][T18209] __do_sys_perf_event_open+0xd92/0x1e40 [ 1157.775223][T18209] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1157.781145][T18209] ? ksys_write+0x145/0x1b0 [ 1157.785747][T18209] __x64_sys_perf_event_open+0x70/0x90 [ 1157.791342][T18209] do_syscall_64+0xcc/0x3a0 [ 1157.795885][T18209] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1157.801786][T18209] RIP: 0033:0x45a919 [ 1157.805699][T18209] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:21:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:21:08 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1157.825311][T18209] RSP: 002b:00007fcbbee08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1157.833768][T18209] RAX: ffffffffffffffda RBX: 00007fcbbee08c90 RCX: 000000000045a919 [ 1157.841851][T18209] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000020000000 [ 1157.849840][T18209] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 1157.857935][T18209] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fcbbee096d4 [ 1157.865924][T18209] R13: 00000000004c8816 R14: 00000000004dfe48 R15: 0000000000000008 04:21:08 executing program 3 (fault-call:6 fault-nth:2): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:21:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$sock_netdev_private(r1, 0x89f7, &(0x7f0000000200)="cd183953bb1c0729f71275674e44e8867e452faa85a51ea991adb0cc0dfd29a6cda86ea68d279daf8f43579acab73bc91691c18528b9fc05305c90c31d65f99195f0e212b58c12df503489b5ab3736af7baa0c4b8500ca410515cbe0f745a2b9ff5d0b012236c769336f061bed2ba6b5114481095b0bff8706357244a8d7dfecab34303e42ca99e6") ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 1158.006556][T18225] overlayfs: conflicting lowerdir path [ 1158.142563][T18230] QAT: Invalid ioctl [ 1158.164097][T18231] FAULT_INJECTION: forcing a failure. [ 1158.164097][T18231] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.219432][T18230] QAT: Invalid ioctl [ 1158.263155][T18231] CPU: 0 PID: 18231 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1158.271890][T18231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.281951][T18231] Call Trace: [ 1158.285283][T18231] dump_stack+0x11d/0x181 [ 1158.289692][T18231] should_fail.cold+0xa/0x1a [ 1158.294290][T18231] __should_failslab+0xee/0x130 [ 1158.299274][T18231] should_failslab+0x9/0x14 [ 1158.303980][T18231] kmem_cache_alloc+0x29/0x5d0 [ 1158.308913][T18231] ? memcg_kmem_put_cache+0x7c/0xc0 [ 1158.314138][T18231] ? kmem_cache_alloc+0x1f3/0x5d0 [ 1158.319181][T18231] __alloc_file+0x4d/0x210 [ 1158.323621][T18231] alloc_empty_file+0x8f/0x180 [ 1158.328474][T18231] alloc_file+0x4e/0x2b0 [ 1158.332740][T18231] ? _raw_spin_unlock+0x4b/0x60 [ 1158.337611][T18231] alloc_file_pseudo+0x11c/0x1b0 [ 1158.342680][T18231] anon_inode_getfile+0x103/0x1d0 [ 1158.347781][T18231] __do_sys_perf_event_open+0xd92/0x1e40 [ 1158.353436][T18231] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1158.359568][T18231] ? ksys_write+0x145/0x1b0 [ 1158.364100][T18231] __x64_sys_perf_event_open+0x70/0x90 [ 1158.369594][T18231] do_syscall_64+0xcc/0x3a0 [ 1158.374319][T18231] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1158.380221][T18231] RIP: 0033:0x45a919 [ 1158.384159][T18231] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1158.403778][T18231] RSP: 002b:00007fcbbee08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1158.412318][T18231] RAX: ffffffffffffffda RBX: 00007fcbbee08c90 RCX: 000000000045a919 [ 1158.420343][T18231] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000020000000 [ 1158.428345][T18231] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 1158.436324][T18231] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fcbbee096d4 [ 1158.444280][T18231] R13: 00000000004c8816 R14: 00000000004dfe48 R15: 0000000000000008 [ 1159.743143][ C1] net_ratelimit: 18 callbacks suppressed [ 1159.743151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1159.754569][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1159.760331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1159.766186][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1159.903134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1159.909205][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1160.143145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1160.148913][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1160.943156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1160.948955][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1165.103133][ C1] net_ratelimit: 22 callbacks suppressed [ 1165.103143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1165.114611][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1165.343139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1165.348914][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:21:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000022f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:21:16 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:21:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:21:16 executing program 5: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) 04:21:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 04:21:16 executing program 3 (fault-call:6 fault-nth:3): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1165.898955][T18249] FAULT_INJECTION: forcing a failure. [ 1165.898955][T18249] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.917762][T18252] ptrace attach of "/root/syz-executor.4"[18251] was attempted by "/root/syz-executor.4"[18252] [ 1165.925573][ T27] audit: type=1326 audit(1577334076.687:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d75a code=0x0 [ 1165.938916][T18249] CPU: 1 PID: 18249 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1165.958744][T18249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.968794][T18249] Call Trace: [ 1165.972212][T18249] dump_stack+0x11d/0x181 [ 1165.976589][T18249] should_fail.cold+0xa/0x1a [ 1165.981247][T18249] __should_failslab+0xee/0x130 [ 1165.986102][T18249] should_failslab+0x9/0x14 [ 1165.990692][T18249] kmem_cache_alloc+0x29/0x5d0 [ 1165.995462][T18249] ? kmem_cache_alloc+0x1f3/0x5d0 [ 1166.000492][T18249] ? memcg_kmem_put_cache+0x7c/0xc0 [ 1166.005787][T18249] security_file_alloc+0x48/0x110 [ 1166.010820][T18249] __alloc_file+0xa3/0x210 [ 1166.015266][T18249] alloc_empty_file+0x8f/0x180 [ 1166.020030][T18249] alloc_file+0x4e/0x2b0 [ 1166.024291][T18249] ? _raw_spin_unlock+0x4b/0x60 [ 1166.029149][T18249] alloc_file_pseudo+0x11c/0x1b0 [ 1166.034133][T18249] anon_inode_getfile+0x103/0x1d0 [ 1166.039176][T18249] __do_sys_perf_event_open+0xd92/0x1e40 [ 1166.044815][T18249] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1166.050728][T18249] ? ksys_write+0x145/0x1b0 [ 1166.055266][T18249] __x64_sys_perf_event_open+0x70/0x90 [ 1166.060740][T18249] do_syscall_64+0xcc/0x3a0 [ 1166.065349][T18249] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1166.071240][T18249] RIP: 0033:0x45a919 [ 1166.075224][T18249] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1166.094834][T18249] RSP: 002b:00007fcbbee08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1166.103244][T18249] RAX: ffffffffffffffda RBX: 00007fcbbee08c90 RCX: 000000000045a919 [ 1166.111215][T18249] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000020000000 [ 1166.119257][T18249] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 1166.127236][T18249] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fcbbee096d4 [ 1166.135283][T18249] R13: 00000000004c8816 R14: 00000000004dfe48 R15: 0000000000000008 [ 1166.143404][ C1] protocol 88fb is buggy, dev hsr_slave_0 04:21:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:21:17 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1166.149173][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1166.154966][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1166.160692][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1166.166483][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1166.172239][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:21:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1166.251119][T18259] ptrace attach of "/root/syz-executor.4"[18258] was attempted by "/root/syz-executor.4"[18259] 04:21:17 executing program 3 (fault-call:6 fault-nth:4): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1166.400835][T18262] overlayfs: conflicting lowerdir path 04:21:17 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:21:17 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) r0 = syz_open_dev$mouse(&(0x7f0000001880)='/dev/input/mouse#\x00', 0x1, 0x20000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x16, 0x10, 0xbd, &(0x7f0000000340)="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"}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0xfffffd1a) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0xffffffffffffffff, &(0x7f0000000040)) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)='+', 0xc62e, 0x11, 0x0, 0xfffffffffffffeb0) [ 1166.667781][T18281] overlayfs: conflicting lowerdir path [ 1166.699120][ T27] audit: type=1326 audit(1577334077.467:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d75a code=0x0 [ 1170.303157][ C1] net_ratelimit: 18 callbacks suppressed [ 1170.303165][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1170.314565][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1170.320421][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1170.326317][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1170.332214][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1170.337980][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1170.543146][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1170.548994][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1171.353153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1171.358927][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:21:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000032f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:21:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:21:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:21:26 executing program 5: write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000140)={0x13, 0x7, 0x0, {0xa, 'syzkaller\x00'}}, 0x13) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = dup3(r0, 0xffffffffffffffff, 0x1a3cc1a159ac5e14) bind$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) setxattr(&(0x7f00000000c0)='\x00', &(0x7f0000000180)=@known='security.apparmor\x00', &(0x7f00000001c0)='em0\x00', 0x4, 0x3) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x1800000000000060, 0xe80, 0xf0ffff, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff}, 0x28) 04:21:26 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:21:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x24, 0x0, 0xffffffff, 0xffffffff, 0x1}) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:21:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000040)=0x4) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0xfffffffc, 0x0, 0x0, 0x1ff, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:21:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8df, 0x101}) 04:21:26 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:21:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:21:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1175.503108][ C1] net_ratelimit: 22 callbacks suppressed [ 1175.503118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1175.514571][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:21:26 executing program 5: [ 1175.743124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1175.749050][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1176.543145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1176.548917][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1176.554695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1176.560433][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1176.566215][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1176.571925][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.703180][ C1] net_ratelimit: 18 callbacks suppressed [ 1180.703186][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.714739][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.720486][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.726232][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.731980][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.737747][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.943149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.948929][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1181.743154][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1181.749059][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:21:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) waitid$P_PIDFD(0x3, r1, &(0x7f0000000040), 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000000c0)=0xe8) getresgid(&(0x7f0000000180)=0x0, &(0x7f0000000300), &(0x7f0000000340)) write$FUSE_ATTR(r3, &(0x7f0000000380)={0x78, 0x0, 0x5, {0x1c0000000, 0x81, 0x0, {0x6, 0x5, 0x7, 0x1ff, 0x5, 0x1a200000000, 0x6, 0xfffffbff, 0x7, 0x8cc9, 0x3b, r4, r5, 0x0, 0x8000}}}, 0x78) 04:21:35 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:21:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000042f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:21:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:21:35 executing program 5: 04:21:35 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:21:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:21:35 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:21:35 executing program 5: 04:21:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0xe0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'nat\x00', 0x0, 0x3, 0x8f, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=""/143}, &(0x7f00000002c0)=0x78) 04:21:35 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x700, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:21:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x266}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x1}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:21:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:21:35 executing program 5: [ 1185.903130][ C1] net_ratelimit: 22 callbacks suppressed [ 1185.903137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.914581][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1186.153124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1186.158939][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1186.953115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1186.959012][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1186.964886][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1186.970665][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1186.976453][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1186.982194][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1191.113132][ C1] net_ratelimit: 18 callbacks suppressed [ 1191.113144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1191.124622][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1191.130388][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1191.136161][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1191.141911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1191.147665][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1191.353108][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1191.358889][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:21:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000072f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:21:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:21:42 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:21:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000028c0)=ANY=[@ANYRES32], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x20000}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') read(r1, &(0x7f0000000200)=""/211, 0x21f) preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000040)=0x7f) getsockname$ax25(r1, &(0x7f0000000080)={{0x3, @bcast}, [@default, @remote, @null, @remote, @null, @netrom, @remote, @bcast]}, &(0x7f0000000140)=0x48) r2 = syz_open_pts(r0, 0x800) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000003009e0086e20300000000000000001000"}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 04:21:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000875300000d000040050000a900000000000000000000004000000000010000000000000025000000fff0ff8504040000000000010a00000006ed"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000860100000020006c9ca13758e7"]) 04:21:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:21:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x20000070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:21:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$inet6(r3, &(0x7f00000028c0)={&(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x4e}}, r4}}}], 0x28}, 0x0) 04:21:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x218) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0xe00) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x24}, 0x10) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fallocate(r2, 0x11, 0x0, 0x10000) shutdown(r0, 0x1) sendfile(r2, r3, 0x0, 0x12000) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000480)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5ccf26728f83f7c3, 0x0, &(0x7f0000000900)=ANY=[], 0x0, 0xfffffffe, 0xfffffc75, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xa, 0xfff, 0xfffffffe}, 0x10}, 0x78) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x0, [], [{0x0, 0x0, 0x40000000001}]}) getdents64(r7, &(0x7f0000001400)=""/223, 0xdf) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x4, &(0x7f0000000500)=@raw=[@alu={0x4, 0x0, 0x7, 0xa, 0xa}, @func, @map={0x18, 0xf, 0x1, 0x0, r5}], &(0x7f0000000240)='syzkaller\x00', 0x1200000, 0x98, &(0x7f0000000280)=""/152, 0x40f00, 0xc, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x4}, 0xffffffffffffff6a, 0x10, &(0x7f0000000380)={0xffffffff, 0x3, 0x6, 0xffffffff}, 0x10, 0x0, r6}, 0x78) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c80, 0x0) dup2(r4, r8) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x7) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r10, 0x1, 0x2a, 0x0, &(0x7f0000000080)) splice(r7, &(0x7f0000000200)=0x4, r10, &(0x7f0000000580)=0x1f, 0x7ff, 0xae820a552a9d1276) 04:21:42 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1192.153098][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1192.158931][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:21:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1192.314175][ T27] audit: type=1804 audit(1577334103.087:176): pid=18424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir405953833/syzkaller.oty1M4/408/file0" dev="sda1" ino=16930 res=1 04:21:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1192.387101][ T27] audit: type=1804 audit(1577334103.117:177): pid=18415 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir405953833/syzkaller.oty1M4/408/file0" dev="sda1" ino=16930 res=1 [ 1196.303128][ C1] net_ratelimit: 22 callbacks suppressed [ 1196.303134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1196.314609][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1196.543129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1196.548930][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1197.343145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1197.348946][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1197.354841][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1197.360597][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1197.366533][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1197.372263][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:21:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000092f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:21:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x0) r2 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x8b}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffe2c}, {0x0}, {&(0x7f0000000000)=""/65}], 0x1c8, 0x0, 0x539, 0x0) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 04:21:48 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) 04:21:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:21:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x218) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0xe00) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x24}, 0x10) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fallocate(r2, 0x11, 0x0, 0x10000) shutdown(r0, 0x1) sendfile(r2, r3, 0x0, 0x12000) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000480)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5ccf26728f83f7c3, 0x0, &(0x7f0000000900)=ANY=[], 0x0, 0xfffffffe, 0xfffffc75, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xa, 0xfff, 0xfffffffe}, 0x10}, 0x78) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x0, [], [{0x0, 0x0, 0x40000000001}]}) getdents64(r7, &(0x7f0000001400)=""/223, 0xdf) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x4, &(0x7f0000000500)=@raw=[@alu={0x4, 0x0, 0x7, 0xa, 0xa}, @func, @map={0x18, 0xf, 0x1, 0x0, r5}], &(0x7f0000000240)='syzkaller\x00', 0x1200000, 0x98, &(0x7f0000000280)=""/152, 0x40f00, 0xc, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x4}, 0xffffffffffffff6a, 0x10, &(0x7f0000000380)={0xffffffff, 0x3, 0x6, 0xffffffff}, 0x10, 0x0, r6}, 0x78) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c80, 0x0) dup2(r4, r8) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x7) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r10, 0x1, 0x2a, 0x0, &(0x7f0000000080)) splice(r7, &(0x7f0000000200)=0x4, r10, &(0x7f0000000580)=0x1f, 0x7ff, 0xae820a552a9d1276) 04:21:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:21:49 executing program 5: setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000001140)=[{&(0x7f0000000f00)=""/240, 0xf0}], 0x1) dup2(r0, r1) [ 1198.265786][T18451] overlayfs: missing 'lowerdir' 04:21:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1198.300773][ T27] audit: type=1804 audit(1577334109.067:178): pid=18461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir405953833/syzkaller.oty1M4/409/file0" dev="sda1" ino=16565 res=1 04:21:49 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) [ 1198.386094][ T27] audit: type=1804 audit(1577334109.077:179): pid=18453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir405953833/syzkaller.oty1M4/409/file0" dev="sda1" ino=16565 res=1 04:21:49 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x0, 0xffffffff}) creat(0x0, 0x0) 04:21:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:21:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x218) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e9e688d35a978813c38add66548d7575727ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f", 0xe00) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x24}, 0x10) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fallocate(r2, 0x11, 0x0, 0x10000) shutdown(r0, 0x1) sendfile(r2, r3, 0x0, 0x12000) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000480)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5ccf26728f83f7c3, 0x0, &(0x7f0000000900)=ANY=[], 0x0, 0xfffffffe, 0xfffffc75, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xa, 0xfff, 0xfffffffe}, 0x10}, 0x78) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x0, [], [{0x0, 0x0, 0x40000000001}]}) getdents64(r7, &(0x7f0000001400)=""/223, 0xdf) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x4, &(0x7f0000000500)=@raw=[@alu={0x4, 0x0, 0x7, 0xa, 0xa}, @func, @map={0x18, 0xf, 0x1, 0x0, r5}], &(0x7f0000000240)='syzkaller\x00', 0x1200000, 0x98, &(0x7f0000000280)=""/152, 0x40f00, 0xc, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x4}, 0xffffffffffffff6a, 0x10, &(0x7f0000000380)={0xffffffff, 0x3, 0x6, 0xffffffff}, 0x10, 0x0, r6}, 0x78) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c80, 0x0) dup2(r4, r8) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x7) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r10, 0x1, 0x2a, 0x0, &(0x7f0000000080)) splice(r7, &(0x7f0000000200)=0x4, r10, &(0x7f0000000580)=0x1f, 0x7ff, 0xae820a552a9d1276) [ 1198.561264][T18472] overlayfs: missing 'lowerdir' [ 1198.780749][ T27] audit: type=1804 audit(1577334109.547:181): pid=18485 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir405953833/syzkaller.oty1M4/410/file0" dev="sda1" ino=16706 res=1 [ 1198.842779][ T27] audit: type=1800 audit(1577334109.547:180): pid=18482 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16706 res=0 [ 1201.503160][ C1] net_ratelimit: 18 callbacks suppressed [ 1201.503170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.514624][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1201.520347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.526241][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1201.532018][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.537808][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1201.743148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.748977][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1202.543134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1202.548923][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:21:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000a2f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:21:56 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) 04:21:56 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:21:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000000)=""/20, 0x14}, {0x0}, {0x0}], 0x3}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2ec, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x530e, 0x2, 0x0, 0x800e0053d) shutdown(r2, 0x0) 04:21:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x218) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0xe00) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x24}, 0x10) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fallocate(r2, 0x11, 0x0, 0x10000) shutdown(r0, 0x1) sendfile(r2, r3, 0x0, 0x12000) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000480)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5ccf26728f83f7c3, 0x0, &(0x7f0000000900)=ANY=[], 0x0, 0xfffffffe, 0xfffffc75, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xa, 0xfff, 0xfffffffe}, 0x10}, 0x78) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x0, [], [{0x0, 0x0, 0x40000000001}]}) getdents64(r7, &(0x7f0000001400)=""/223, 0xdf) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x4, &(0x7f0000000500)=@raw=[@alu={0x4, 0x0, 0x7, 0xa, 0xa}, @func, @map={0x18, 0xf, 0x1, 0x0, r5}], &(0x7f0000000240)='syzkaller\x00', 0x1200000, 0x98, &(0x7f0000000280)=""/152, 0x40f00, 0xc, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x4}, 0xffffffffffffff6a, 0x10, &(0x7f0000000380)={0xffffffff, 0x3, 0x6, 0xffffffff}, 0x10, 0x0, r6}, 0x78) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c80, 0x0) dup2(r4, r8) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x7) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r10, 0x1, 0x2a, 0x0, &(0x7f0000000080)) splice(r7, &(0x7f0000000200)=0x4, r10, &(0x7f0000000580)=0x1f, 0x7ff, 0xae820a552a9d1276) 04:21:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1205.583960][T18503] overlayfs: missing 'lowerdir' 04:21:56 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1205.635726][ T27] audit: type=1800 audit(1577334116.407:182): pid=18506 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17092 res=0 04:21:56 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [], 0xf603000000000000}) [ 1205.666107][ T27] audit: type=1804 audit(1577334116.427:183): pid=18506 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir405953833/syzkaller.oty1M4/411/file0" dev="sda1" ino=17092 res=1 04:21:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffffff8, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b1fbc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040ca3f28c349af135026fbc20777c83fbf7fc74a6c27e45126aeb7dcf53540e2e53ae5dc9d9dfe1537c25a4e5843e4dd75b882bd2c6", 0xb1}], 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 04:21:56 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1205.868188][T18517] overlayfs: missing 'workdir' 04:21:56 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [], 0xf603000000000000}) 04:21:56 executing program 5: r0 = socket$isdn(0x22, 0x3, 0x26) signalfd4(r0, &(0x7f0000000000)={0x2}, 0x8, 0x140c00) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22") [ 1206.107463][T18531] overlayfs: missing 'workdir' [ 1206.703148][ C1] net_ratelimit: 22 callbacks suppressed [ 1206.703158][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.714646][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.943148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.948940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1207.743126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1207.748902][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1207.754691][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1207.760423][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1207.766215][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1207.771940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1211.903144][ C1] net_ratelimit: 18 callbacks suppressed [ 1211.903151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.914737][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1211.920474][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.926346][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1211.932114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.937883][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1212.143134][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.148905][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:22:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000e2f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:22:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xb3, 0x80) setsockopt$packet_buf(r2, 0x107, 0x6543bc5f322037ec, &(0x7f0000000040)="ee6afca154914d0e4f7971d818f328ab7165feaf3e0a9b2ef78a699610bdd508c0bbdcc9ec13f483d68f5bd2dfc558b2aefb317439057fc5718d98e56247c54b7ea2c1103febc5a1001cf6e3b7c764a209d65cf6279ce91de7ad36f878c5fa73b38849547c7f1eb22d72052dc1060d5937032426e5c392924e87b0aa3b1b5c1d39feb1bd01bf089700d4a37b69e8a33d98709784643d11d03525c81a8a029461a7fd1bcf05fb9fdcdada59d593fe36d3cf7e", 0xb2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x81}, {0x6, 0x0, 0x0, 0x50000}]}) 04:22:03 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [], 0xf603000000000000}) 04:22:03 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x101}}, 0x30) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000300)=0x5000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x400) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, r3, 0x3cd04000) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) 04:22:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:22:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000140)={0x4800000000000000, 0xf000, 0x7, 0x0, 0x10}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000300)=0x2, 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xffffffffffffffc7, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0087000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002c00c2bef050000000000000000000000000000000020000000000000001a1001dfccc630000000000000000"], 0x58}}, 0x0) 04:22:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1212.929399][T18550] overlayfs: missing 'workdir' [ 1212.943109][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.948894][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:22:03 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:22:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1213.129044][T18563] device veth9 entered promiscuous mode [ 1213.169909][T18566] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1213.248440][T18568] overlayfs: missing 'lowerdir' 04:22:04 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:04 executing program 2: mkdir(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002382db6b75eab67c28ffab0922b42600"], 0x14}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000300)={&(0x7f0000041000/0x3000)=nil, 0xf1, 0x3, 0x352f6b48c5ed912a, &(0x7f0000044000/0x1000)=nil, 0x7}) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0)) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) getsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, &(0x7f0000000140)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) getsockopt$inet6_udp_int(r5, 0x11, 0x67, 0x0, &(0x7f0000000140)) sendmsg$nl_xfrm(r4, 0x0, 0x10000) r6 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) [ 1213.713981][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.721099][T18583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.103142][ C1] net_ratelimit: 22 callbacks suppressed [ 1217.103151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1217.114650][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1217.343175][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1217.348989][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1218.143173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1218.149082][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1218.154885][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1218.160642][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1218.166435][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1218.172160][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:22:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000112f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:22:11 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:22:11 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:11 executing program 5: add_key(&(0x7f00000002c0)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) msgget$private(0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00\xf3\xad\xe75\xf9\x03\x00AU\xa0\xe1\x94N\xd8\xdfLA\x1e0\x89dm\x10\xb4e\xa6\x91\v\x13', &(0x7f0000000200)=@secondary='builtin_and_secondary_trusted\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00\x81\x15\xeba\xc9*\xdb\xd0\xefg\xcb\xcf\f\xb1\x9c?=\x14\xe1\xdc\x85\xf15k\xb8?\xfb\xb3>\xc8\x8b\xc0XE\xce\xda\xf9\x01hE\xa7\xa8\a\xc3\xaa\xd0\xed\x9ao\xb5\xe0\x1a\xd6\xb8\x15[-K\xe79J\xfc?\xbd\xab\xe1\xca,G\x87\xd1\x02L\t]Kn\xbe\x11\xa5\xe8x3_8', &(0x7f0000000180)=@chain={'key_or_keyring:', r4, ':chain\x00'}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={r4, 0xa3, 0xfffffc4a}, &(0x7f0000000500)=ANY=[@ANYBLOB='enc=oae\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v;'], &(0x7f00000003c0)="b2817300a3567838bdc096ac163e71ae748fd31063df601295927ca768144cc6e9e189ee91bb4eece639fe301f7d5ec31f77722103926e85a976c7eb66d4a2c0ef6b200964efecd6eb69d35f2f1aedfe28278c975d03278a9bcdcd8f5dcfff2afa328647246056c612eb1cf0458022759e08d5d31126d1467f6aee6e61fcf22db7a8da82e5e20c973d528d5dc90ecccc27540f3e3c90f126dbd06f4e7b0398e8c1baef", &(0x7f0000000340)=""/94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = inotify_init() r7 = inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x1) inotify_rm_watch(r6, r7) inotify_rm_watch(r0, r7) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000000), 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3800f0ff24000705000000", @ANYRES32=r10, @ANYBLOB="00ff8b0e44ec"], 0x3}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) 04:22:11 executing program 2: mkdir(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002382db6b75eab67c28ffab0922b42600"], 0x14}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000300)={&(0x7f0000041000/0x3000)=nil, 0xf1, 0x3, 0x352f6b48c5ed912a, &(0x7f0000044000/0x1000)=nil, 0x7}) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0)) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) getsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, &(0x7f0000000140)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) getsockopt$inet6_udp_int(r5, 0x11, 0x67, 0x0, &(0x7f0000000140)) sendmsg$nl_xfrm(r4, 0x0, 0x10000) r6 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) 04:22:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:22:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1221.340271][T18602] overlayfs: missing 'lowerdir' 04:22:12 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1221.550177][T18610] overlayfs: missing 'lowerdir' 04:22:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:12 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:22:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:12 executing program 5: add_key(&(0x7f00000002c0)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) msgget$private(0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00\xf3\xad\xe75\xf9\x03\x00AU\xa0\xe1\x94N\xd8\xdfLA\x1e0\x89dm\x10\xb4e\xa6\x91\v\x13', &(0x7f0000000200)=@secondary='builtin_and_secondary_trusted\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00\x81\x15\xeba\xc9*\xdb\xd0\xefg\xcb\xcf\f\xb1\x9c?=\x14\xe1\xdc\x85\xf15k\xb8?\xfb\xb3>\xc8\x8b\xc0XE\xce\xda\xf9\x01hE\xa7\xa8\a\xc3\xaa\xd0\xed\x9ao\xb5\xe0\x1a\xd6\xb8\x15[-K\xe79J\xfc?\xbd\xab\xe1\xca,G\x87\xd1\x02L\t]Kn\xbe\x11\xa5\xe8x3_8', &(0x7f0000000180)=@chain={'key_or_keyring:', r4, ':chain\x00'}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={r4, 0xa3, 0xfffffc4a}, &(0x7f0000000500)=ANY=[@ANYBLOB='enc=oae\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v;'], &(0x7f00000003c0)="b2817300a3567838bdc096ac163e71ae748fd31063df601295927ca768144cc6e9e189ee91bb4eece639fe301f7d5ec31f77722103926e85a976c7eb66d4a2c0ef6b200964efecd6eb69d35f2f1aedfe28278c975d03278a9bcdcd8f5dcfff2afa328647246056c612eb1cf0458022759e08d5d31126d1467f6aee6e61fcf22db7a8da82e5e20c973d528d5dc90ecccc27540f3e3c90f126dbd06f4e7b0398e8c1baef", &(0x7f0000000340)=""/94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = inotify_init() r7 = inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x1) inotify_rm_watch(r6, r7) inotify_rm_watch(r0, r7) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000000), 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3800f0ff24000705000000", @ANYRES32=r10, @ANYBLOB="00ff8b0e44ec"], 0x3}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) [ 1221.768117][T18627] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 1221.779573][T18627] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1222.303131][ C1] net_ratelimit: 18 callbacks suppressed [ 1222.303139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.314672][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1222.320434][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.326163][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1222.331895][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.337646][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1222.543124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.549056][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1223.343145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1223.348955][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.503178][ C1] net_ratelimit: 22 callbacks suppressed [ 1227.503196][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.514625][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.743149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.748924][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1228.543153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.548940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1228.554734][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.560486][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1228.566267][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.572028][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:22:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000382f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:22:20 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:20 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:22:20 executing program 5: add_key(&(0x7f00000002c0)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) msgget$private(0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00\xf3\xad\xe75\xf9\x03\x00AU\xa0\xe1\x94N\xd8\xdfLA\x1e0\x89dm\x10\xb4e\xa6\x91\v\x13', &(0x7f0000000200)=@secondary='builtin_and_secondary_trusted\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00\x81\x15\xeba\xc9*\xdb\xd0\xefg\xcb\xcf\f\xb1\x9c?=\x14\xe1\xdc\x85\xf15k\xb8?\xfb\xb3>\xc8\x8b\xc0XE\xce\xda\xf9\x01hE\xa7\xa8\a\xc3\xaa\xd0\xed\x9ao\xb5\xe0\x1a\xd6\xb8\x15[-K\xe79J\xfc?\xbd\xab\xe1\xca,G\x87\xd1\x02L\t]Kn\xbe\x11\xa5\xe8x3_8', &(0x7f0000000180)=@chain={'key_or_keyring:', r4, ':chain\x00'}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={r4, 0xa3, 0xfffffc4a}, &(0x7f0000000500)=ANY=[@ANYBLOB='enc=oae\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v;'], &(0x7f00000003c0)="b2817300a3567838bdc096ac163e71ae748fd31063df601295927ca768144cc6e9e189ee91bb4eece639fe301f7d5ec31f77722103926e85a976c7eb66d4a2c0ef6b200964efecd6eb69d35f2f1aedfe28278c975d03278a9bcdcd8f5dcfff2afa328647246056c612eb1cf0458022759e08d5d31126d1467f6aee6e61fcf22db7a8da82e5e20c973d528d5dc90ecccc27540f3e3c90f126dbd06f4e7b0398e8c1baef", &(0x7f0000000340)=""/94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = inotify_init() r7 = inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x1) inotify_rm_watch(r6, r7) inotify_rm_watch(r0, r7) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000000), 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3800f0ff24000705000000", @ANYRES32=r10, @ANYBLOB="00ff8b0e44ec"], 0x3}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) 04:22:20 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$BLKPG(r0, 0x1269, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x1f, 0xf7, 0x4, 0x80, 0x0, 0x6, 0x28000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xff4a, 0x6}, 0xf58a34e1cee12d39, 0x20, 0x3, 0x3, 0x0, 0x1ff, 0x100}, 0xffffffffffffffff, 0x9, r0, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f00000001c0)={0x7, &(0x7f0000000240)="861daec0355400faaa91480e7b9dc5790b73431da878956fff357406b2a69934b2bd081ff3a66ef6eb498c6bda2898d66d3d93a7ed3805c63478e5edf56f8aeec5427afaad5a6434eb44ff1e34ffc9e8fe0c00f3a518fef2eeefea97a175ab3591d2a0369a3cc7e32bb0bd90adbf549ebafdb40d2fcf59ce0ee4ec82831351d4f5686e675ddee2afe1a04c847298f0dfe6c82b6184db26b52b4fe122c98382404a55976548aeeccf6d60ca23aabec12ded948d78280f5bdff74dd20f559e8b3e64aea709c45c919d319f9760b583e8945078abee3b1268b464d69156f0da791ed225eb4444acc76ae4d56bb2124d7d1e8c695f93ebac5d2714"}) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000480)="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", 0xfd}, {&(0x7f0000000100)}, {&(0x7f0000000900)="345c2d8464d48dbe1db4ec986cf95cb03f41a44dfbabe12014ed2e94adaefd4ac9ce7a66fa2ca9a0ec6aa8d43a4664839a6d491b7eb05c4fcc319d152e6c4a15faff7e62a8e70dc01dfd2cad7c4076640298660cac28e6120ee3be5d6a4bc89a84bf1f4fe1648ebb65117c71a567950eebb384cdad5a0c659f1a73c36b9cd4ec918859b1a1c3f58b8d72591bf8ca7b353101d8c0f9fb5dfde7a88c3da8f2640a035d27600aefcac52dbddc6e9ec705e6f4ea30fb154104518c7064872fbfcc5eeafb78e09c980cdafd6d6233df114d5c8d9004fb51", 0xd5}], 0x3, 0xd) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) r3 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x100010, r3, 0xb82f9000) setpriority(0x0, r2, 0xffff) socket$isdn(0x22, 0x3, 0x25) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x100) r4 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) r5 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$TIOCCBRK(r4, 0x5428) listen(r5, 0x400000001ffffffd) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, 0x1c) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) r6 = pidfd_open(0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x445721aeb12a2de0, "da842e4bb0a795c5"}) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) 04:22:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1229.747655][T18649] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 1229.757940][T18649] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 04:22:20 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:20 executing program 2: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00', 0x50}) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r1, r0) 04:22:20 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:22:20 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8, 0x101}) 04:22:20 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x21081a, 0x0) [ 1230.076844][T18678] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 1230.110867][T18678] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1232.703113][ C1] net_ratelimit: 18 callbacks suppressed [ 1232.703124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.714675][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1232.720432][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.726185][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1232.732065][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.737941][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1232.943144][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.948950][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1233.743146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.748956][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:22:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000602f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:22:27 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c0}}, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000001000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 04:22:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 04:22:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:27 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="14d20000", @ANYBLOB="01"], 0x2}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000001c00070cab0925000900f00007ab08000800000003000000210001c000000000000000000c00000000039815fa2c1ec28656aaa79bb94b46fe0000000a0002", 0x43) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a61c) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 04:22:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:22:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RCREATE(r2, &(0x7f0000000080)={0xffffffffffffffb2}, 0x18) [ 1237.097021][T18711] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. 04:22:28 executing program 1: 04:22:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:28 executing program 5: 04:22:28 executing program 1: [ 1237.903162][ C1] net_ratelimit: 22 callbacks suppressed [ 1237.903172][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.914847][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1238.153166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.159162][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1238.943162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.949277][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1238.955216][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.961281][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1238.967529][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.973298][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1243.103183][ C1] net_ratelimit: 18 callbacks suppressed [ 1243.103193][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.115305][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1243.121350][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.127268][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1243.133024][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.139011][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1243.343156][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.349283][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1244.143188][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1244.149286][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:22:36 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:36 executing program 5: 04:22:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000e02f006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:22:36 executing program 1: 04:22:36 executing program 2: 04:22:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:22:36 executing program 2: 04:22:36 executing program 1: 04:22:36 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:36 executing program 5: 04:22:36 executing program 2: 04:22:36 executing program 1: 04:22:36 executing program 5: 04:22:36 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1248.303153][ C1] net_ratelimit: 22 callbacks suppressed [ 1248.303163][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1248.314712][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1248.543196][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1248.549115][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1249.343137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.348952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1249.354774][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.360536][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1249.366287][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.372144][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:22:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000032006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:22:43 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x95, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RCREATE(r0, &(0x7f0000000080)={0xffffffffffffffb2}, 0x18) 04:22:43 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="700100002400070500"/20, @ANYRES32, @ANYBLOB="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"], 0x170}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 04:22:43 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) r1 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') 04:22:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:22:43 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28, 0x10, &(0x7f0000000000), 0xfeb6}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="0c96fadfe67d576a000000e4ff00", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:22:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:43 executing program 1: semop(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="2e00b34e9097523e289c0000000000df07000000000019", @ANYRES32=r1, @ANYBLOB="10000000006c696379000000000000000000b52829f0a4987224fb769166f9"], 0x3a) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000001a00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000001c40)=""/93, 0x5d}, 0x5}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000032c0)=""/41, 0x29}], 0x1, &(0x7f0000003380)=""/184, 0xb8}, 0x1}], 0x3, 0x40000002, &(0x7f0000004a00)={0x0, 0x1c9c380}) recvmmsg(r3, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/56, 0x32}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000680)=""/152, 0x98}, {&(0x7f00000011c0)=""/107, 0x6b}], 0x4, &(0x7f00000002c0)=""/62, 0x3e}, 0x40}, {{&(0x7f00000007c0)=@un=@abs, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000840)=""/40, 0x28}, {&(0x7f0000000880)=""/195, 0xc3}, {&(0x7f0000000980)=""/176, 0xb0}, {&(0x7f0000000a40)=""/91, 0x5b}], 0x5, &(0x7f0000000b40)=""/150, 0x96}, 0x300000}, {{&(0x7f0000000c00)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c80)=""/121, 0x79}, {&(0x7f0000000d00)=""/85, 0x55}, {&(0x7f0000000d80)=""/203, 0xcb}, {&(0x7f0000000e80)=""/215, 0xd7}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/47, 0x2f}], 0x6, &(0x7f00000010c0)}, 0xfffffffb}], 0x3, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="f5"], 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) sysinfo(&(0x7f0000000440)=""/242) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3ff) prctl$PR_SVE_SET_VL(0x32, 0x188c2) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 04:22:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:43 executing program 2 (fault-call:7 fault-nth:0): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1252.904904][T18807] devpts: called with bogus options [ 1253.012464][T18816] FAULT_INJECTION: forcing a failure. [ 1253.012464][T18816] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.037401][T18816] CPU: 1 PID: 18816 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1253.046132][T18816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1253.056489][T18816] Call Trace: 04:22:43 executing program 5: r0 = socket(0x10, 0x1, 0x0) pwrite64(r0, &(0x7f0000000680)="1adb3d0b63d3c108c47d82e00a5378391ebb0a7f72df0ae076223fbb7973b213dd6ec10041de79b70826b2134a918770bfcf0d22219343c428c933c01e3c250154228fcf52f78942e67385813874915b46fdee6098e13f6c6d0c19ef6fc80c3951aba49e521ffb2c5c70557b71d1477bcaf5f0092b2df5b6c4fe41a8729834915f2dbd524d87816b9f49b9360b5c428700000000000000000000003e9bcb70bfa1e20ca1d03ce7e990206b48d15582794a99d843de14f5a9462d0568971e1ca900"/207, 0xfffffec8, 0x4) pipe(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000140)={0x2, 0x101, 0xeb1, @local, 'veth1\x00'}) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xa, &(0x7f0000000200)=0xae, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000100)=@buf={0x39, &(0x7f0000000280)="9331fede1cbf308865f86eb41922f9aac9113e0823cadc287ccb6a56a903f9d16793b2e3f4c18577c318b62b4bc9f8b6d63dafe145710cb757"}) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300), 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x2}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000580)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/5, 0x5, 0x80fc0000}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r4, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000900)=ANY=[@ANYRES32=r6, @ANYBLOB="8000000083bcf0d6a4f46ca7487f7c32376758dfa5be4e89004b1933552a8bb2f5ff9620a1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aa051d877fe06b6c1fcc7b9c0956189f61a665193d9f0750d401ca541518287af41524500"/143], 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000009c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r7, 0x1000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r7, @in={{0x2, 0x4e24, @remote}}, 0x5, 0x1504, 0xd1ed, 0x6, 0x18, 0x2, 0x1}, &(0x7f0000000600)=0x9c) r9 = accept4(r1, 0x0, &(0x7f0000000640), 0x180800) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f00000000c0)={r8, 0x1c, "2a603ea43138a784a1472277eb18c16115e506329c3b359cc9db0b50"}, &(0x7f0000000340)=0x24) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={r10, @in={{0x2, 0x4e23, @empty}}, 0x3, 0x7fff, 0x3, 0x0, 0x8, 0x1, 0x6}, 0x9c) [ 1253.059806][T18816] dump_stack+0x11d/0x181 [ 1253.064189][T18816] should_fail.cold+0xa/0x1a [ 1253.068804][T18816] __should_failslab+0xee/0x130 [ 1253.073728][T18816] should_failslab+0x9/0x14 [ 1253.078254][T18816] __kmalloc_track_caller+0x4f/0x690 [ 1253.083589][T18816] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1253.089501][T18816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1253.095867][T18816] ? __this_cpu_preempt_check+0x45/0x140 [ 1253.101550][T18816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1253.107808][T18816] ? strndup_user+0x85/0xc0 [ 1253.112345][T18816] memdup_user+0x2f/0xc0 [ 1253.116610][T18816] strndup_user+0x85/0xc0 [ 1253.120954][T18816] ksys_mount+0x45/0x160 [ 1253.125207][T18816] __x64_sys_mount+0x70/0x90 [ 1253.129839][T18816] do_syscall_64+0xcc/0x3a0 [ 1253.134428][T18816] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1253.140333][T18816] RIP: 0033:0x45a919 [ 1253.144245][T18816] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1253.164809][T18816] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1253.173320][T18816] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1253.181298][T18816] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1253.189304][T18816] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1253.197266][T18816] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1253.205299][T18816] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 [ 1253.503115][ C1] net_ratelimit: 18 callbacks suppressed [ 1253.503124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.514562][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1253.520313][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.526071][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1253.531803][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.537557][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1253.743130][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.748984][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1254.543126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.548977][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1258.703152][ C1] net_ratelimit: 22 callbacks suppressed [ 1258.703162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1258.714583][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1258.943139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1258.949000][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1259.743127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1259.749129][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1259.754900][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1259.760641][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1259.766391][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1259.772137][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:22:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000033006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:22:50 executing program 5: socket$nl_route(0x10, 0x3, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x400, 0x0) r0 = eventfd(0x943) write$eventfd(r0, &(0x7f0000000380)=0xfffffffffffffffe, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$inet6(0xa, 0x80000, 0x3f) setsockopt$inet6_udp_int(r4, 0x11, 0x0, &(0x7f0000000140)=0x7, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000440)) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000001580)=[{&(0x7f0000000300)=""/67, 0xfffffffffffffec5}, {&(0x7f00000003c0)=""/43, 0x3c3}, {&(0x7f0000000400)=""/31, 0x1f}, {&(0x7f0000001600)=""/4104, 0x74d}, {&(0x7f0000001440)=""/233, 0xfffffffffffffedc}, {&(0x7f0000001540)=""/23, 0x17}], 0x100000000000002e, 0x6bfd) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000280)={0x5e6023355c7d1dc8, 0x1, 0x9, r6, 0x0, &(0x7f0000000240)={0x990a7d, 0x8001, [], @value64=0x5}}) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f00000001c0)={0x7, "c37939b10fff1c84b0bdabf7b3331961852c6c90808143c100ef77d764fd6722", 0x3, 0x1000, 0x5, 0x101, 0x8, 0x7, 0x0, 0x7}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r7, &(0x7f0000000100), 0x18d, 0x6c00) prctl$PR_MCE_KILL(0x21, 0x0, 0x7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000000)=0x401, 0x4) read$eventfd(r0, &(0x7f0000000180), 0x8) 04:22:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:50 executing program 2 (fault-call:7 fault-nth:1): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:22:50 executing program 1: semop(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="2e00b34e9097523e289c0000000000df07000000000019", @ANYRES32=r1, @ANYBLOB="10000000006c696379000000000000000000b52829f0a4987224fb769166f9"], 0x3a) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000001a00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000001c40)=""/93, 0x5d}, 0x5}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000032c0)=""/41, 0x29}], 0x1, &(0x7f0000003380)=""/184, 0xb8}, 0x1}], 0x3, 0x40000002, &(0x7f0000004a00)={0x0, 0x1c9c380}) recvmmsg(r3, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/56, 0x32}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000680)=""/152, 0x98}, {&(0x7f00000011c0)=""/107, 0x6b}], 0x4, &(0x7f00000002c0)=""/62, 0x3e}, 0x40}, {{&(0x7f00000007c0)=@un=@abs, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000840)=""/40, 0x28}, {&(0x7f0000000880)=""/195, 0xc3}, {&(0x7f0000000980)=""/176, 0xb0}, {&(0x7f0000000a40)=""/91, 0x5b}], 0x5, &(0x7f0000000b40)=""/150, 0x96}, 0x300000}, {{&(0x7f0000000c00)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c80)=""/121, 0x79}, {&(0x7f0000000d00)=""/85, 0x55}, {&(0x7f0000000d80)=""/203, 0xcb}, {&(0x7f0000000e80)=""/215, 0xd7}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/47, 0x2f}], 0x6, &(0x7f00000010c0)}, 0xfffffffb}], 0x3, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="f5"], 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) sysinfo(&(0x7f0000000440)=""/242) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3ff) prctl$PR_SVE_SET_VL(0x32, 0x188c2) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 04:22:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:22:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1259.978677][T18839] FAULT_INJECTION: forcing a failure. [ 1259.978677][T18839] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.992417][T18840] devpts: called with bogus options [ 1260.003223][T18839] CPU: 0 PID: 18839 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1260.011954][T18839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.022027][T18839] Call Trace: [ 1260.025339][T18839] dump_stack+0x11d/0x181 [ 1260.029758][T18839] should_fail.cold+0xa/0x1a [ 1260.034367][T18839] __should_failslab+0xee/0x130 [ 1260.039295][T18839] should_failslab+0x9/0x14 [ 1260.043867][T18839] __kmalloc_track_caller+0x4f/0x690 [ 1260.049167][T18839] ? constant_test_bit.constprop.0+0xd/0x20 [ 1260.055070][T18839] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1260.060807][T18839] ? __check_object_size+0x5f/0x346 [ 1260.066027][T18839] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1260.072306][T18839] ? _copy_from_user+0x98/0xf0 04:22:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1260.077090][T18839] ? strndup_user+0x85/0xc0 [ 1260.081604][T18839] memdup_user+0x2f/0xc0 [ 1260.085862][T18839] strndup_user+0x85/0xc0 [ 1260.090286][T18839] ksys_mount+0x84/0x160 [ 1260.094546][T18839] __x64_sys_mount+0x70/0x90 [ 1260.099155][T18839] do_syscall_64+0xcc/0x3a0 [ 1260.103745][T18839] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1260.109683][T18839] RIP: 0033:0x45a919 [ 1260.113683][T18839] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1260.133299][T18839] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1260.141725][T18839] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1260.149743][T18839] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1260.157742][T18839] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1260.165802][T18839] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 04:22:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1260.173787][T18839] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 04:22:51 executing program 2 (fault-call:7 fault-nth:2): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1260.351026][T18868] FAULT_INJECTION: forcing a failure. [ 1260.351026][T18868] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.383167][T18868] CPU: 0 PID: 18868 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 04:22:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5d7, 0x0, @perf_config_ext, 0x1f190, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2b7069647320412c5ec7b5d90762f8ba9fe8ee7e083311af7cb115b708409b4e9206cb06735d6d1ff4f4b97587bf6a4a706aee300fb8e7572bcd829a59c0045c564cf25a1f609e5ead08002125000000c8818253da71fa1bff7fd383cd04ca276a000000007c9bda4107b37664c98904cb9639bf4b91d78f4ce4035762ba803bb0aa07717d543e909d253ce36652d352ed9e0518d43a170ea8f70daf282682ea5e5a295e9d66f169f0dcd24a3d11c633af74dd3ac2ac46fd62ad075e989e5ab6f14a1d6e8f0d35ea51e18be5672af0b7f39f748ebddb0694fc063c33ad9848bde504b51b6ffbe28bc739b903263f6e020000aae0f4261ac0c2a9308f6f79c9a3d41a849aa6505fdfe3ff62519eec162f6e5124975a08d1100bac7cd1e2e539a168ddb0cff0be478ec28588168512fead72b7fecc4608a3044c0a85b87b036ed97a61ecbfca322eff3caeaa262dcfeaddff0ee65060479a962f2e2833ef64f1968e9b763593dbb917d231a51fc021a33b94912168d626482826211152ab2b77a6575584e032d94af82d7e6cf4ac7dbb40eaa78bab965aa712ff84ce44911fd6321ba5bd9ad52cb91402435eca433a8385eec1b40f0dad7110639e000000000000000000000000000007de38729ebc178329381c782d3a7f95dda9a0c0fb1eedbc6c5e0ff53eda8026e5c8ed85e7996e86a8b4ec48ad5adc860234a9c71b3d956a342ce0de5f6f6bdb7d80afe54ce088c7a6f4a3ba32f994b05ecec28af2c69c01a4f609dd751450d1d275ca79766a509b63592c3581ee1bf364382ab6133e118af7bbaee98fad9d4cadb245ad96acad8b5424e81a4b5e8d9ba89ea7cdfb00c74bb6f9c1ea7de4d2c7373c00b5e73237149e33b8bf2f9149cb5c60718979c381596c769125a9c159d8e9e85fb3f09b9a95cabc867da472d06d00f457197e6cd1e54d73a5f587d7a2f7f8ca70588fa07cf7ad247ee538e6bdab725f9d9eb4e484ee9a6a020e160c86d833830e41e72ade3b94258d546a2889f21680b05e7cc7d97501101ddd279ebf94d92ee66538d051bebe26fe2045d99555945374318615ef8f042056f3d8f61ea84b97ab5c60871cdb94167db715389ed5e4f7b1d2294c0524cd3e211ac69b272a08737aa36b6272b60b3f37e387a45cde2a73e7144eb03450b679ed341beac86721b0ebdd121aa7e37ee3a9f7649d81b96f9cd0f6d7902689d25d06524564f2b498e3380e3f96be2a15fe9dc1876b1ce9c695aa5cd5"], 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) write$cgroup_subtree(r1, &(0x7f0000000780)=ANY=[], 0xffffffffffffffe8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000fc0)={{{@in=@empty, @in6=@ipv4={[], [], @remote}}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f00000010c0)=0x23b) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000840)={{{@in6, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000940)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@local, @in6=@mcast1}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000a80)=0xe8) getuid() r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000ac0)={{{@in6=@mcast2, @in=@remote}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000bc0)=0xe8) r7 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0xee00, r8) newfstatat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x0) getgid() openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0xb4000, 0x0) lstat(0x0, &(0x7f0000000580)) socket$inet_udp(0x2, 0x2, 0x0) [ 1260.391899][T18868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.401981][T18868] Call Trace: [ 1260.405346][T18868] dump_stack+0x11d/0x181 [ 1260.409751][T18868] should_fail.cold+0xa/0x1a [ 1260.414365][T18868] __should_failslab+0xee/0x130 [ 1260.419239][T18868] should_failslab+0x9/0x14 [ 1260.424326][T18868] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1260.429691][T18868] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1260.435426][T18868] ? __check_object_size+0x5f/0x346 [ 1260.440652][T18868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1260.446917][T18868] ? _copy_from_user+0x98/0xf0 [ 1260.451767][T18868] copy_mount_options+0x52/0x2a0 [ 1260.456723][T18868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1260.463028][T18868] ksys_mount+0xb0/0x160 [ 1260.467281][T18868] __x64_sys_mount+0x70/0x90 [ 1260.471889][T18868] do_syscall_64+0xcc/0x3a0 [ 1260.476451][T18868] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1260.482351][T18868] RIP: 0033:0x45a919 [ 1260.486263][T18868] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1260.506056][T18868] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1260.514485][T18868] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1260.523007][T18868] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1260.531080][T18868] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1260.539171][T18868] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1260.547155][T18868] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 [ 1263.903158][ C1] net_ratelimit: 18 callbacks suppressed [ 1263.903165][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1263.914611][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1263.920455][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1263.926192][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1263.931954][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1263.937711][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1264.143132][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.148902][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1264.953149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.959325][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:22:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000003a006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:22:57 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x40000) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x20800) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x20000002, 0x10001, {r4, r5/1000+10000}, {0x3, 0x1, 0x29, 0x0, 0x1b, 0x4, "ed9d94d9"}, 0x0, 0x3, @userptr=0x7, 0x3ff, 0x0, 0xffffffffffffffff}) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000200)={0x0, 0xaaaaaaaaaaaabef, [{r1, 0x0, 0x4000, 0xfffff000}, {r2, 0x0, 0x8000, 0x4000}, {r3, 0x0, 0x0, 0x4000}, {r6, 0x0, 0xfffeffff80001800, 0x100000000}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000300), &(0x7f0000000340)=0xc) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x3bf, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r11}]]}}}]}, 0x68}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newaddr={0x4c, 0x14, 0x2, 0x70bd2c, 0x25dfdbff, {0x2, 0x3f, 0x8, 0xfe, r11}, [@IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x21}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LABEL={0x14, 0x3, 'rose0\x00'}]}, 0x4c}}, 0x0) 04:22:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:57 executing program 2 (fault-call:7 fault-nth:3): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:22:57 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:22:57 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:22:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1267.271403][T18892] batman_adv: Cannot find parent device [ 1267.326064][T18891] FAULT_INJECTION: forcing a failure. [ 1267.326064][T18891] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.351827][T18891] CPU: 1 PID: 18891 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1267.360553][T18891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1267.370649][T18891] Call Trace: 04:22:58 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f00000001c0)={0x5, 0x1, @raw_data=[0x8001, 0x4, 0x8, 0x2, 0x1, 0x1000, 0x8, 0x2, 0x1, 0x9, 0x2, 0x3ff, 0x5, 0x80000000, 0x20, 0x4]}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) read$dsp(r0, &(0x7f0000000080)=""/250, 0xfa) [ 1267.374030][T18891] dump_stack+0x11d/0x181 [ 1267.378576][T18891] should_fail.cold+0xa/0x1a [ 1267.383195][T18891] __should_failslab+0xee/0x130 [ 1267.388070][T18891] should_failslab+0x9/0x14 [ 1267.392584][T18891] kmem_cache_alloc+0x29/0x5d0 [ 1267.397544][T18891] ? __write_once_size.constprop.0+0x12/0x20 [ 1267.403606][T18891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1267.409875][T18891] ? should_fail+0xd4/0x45d [ 1267.414473][T18891] getname_flags+0x91/0x380 [ 1267.419019][T18891] user_path_at_empty+0x38/0x70 [ 1267.423930][T18891] do_mount+0xc8/0x14f0 [ 1267.428102][T18891] ? copy_mount_options+0x200/0x2a0 [ 1267.433312][T18891] ksys_mount+0xe8/0x160 [ 1267.437565][T18891] __x64_sys_mount+0x70/0x90 [ 1267.442177][T18891] do_syscall_64+0xcc/0x3a0 [ 1267.446712][T18891] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1267.452610][T18891] RIP: 0033:0x45a919 [ 1267.456517][T18891] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:22:58 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x1, 0x8, 0x4, 0xb121e44f3070e28, 0x1b2, {r0, r1/1000+10000}, {0x2, 0x0, 0x1, 0x7, 0x20, 0x1, "b12c6e4f"}, 0x7, 0x1, @offset=0x9, 0x101, 0x0, r2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r5, 0x805}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x700, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x6, 0x1, 0x100, 0x9}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x60004000}, 0xc819e8d7454aad2b) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x80000000, 0xa, 0x4, 0x80020, 0xffffff00, {0x77359400}, {0x3, 0x1, 0x5, 0x1, 0x6, 0x8, "e2b5d3c0"}, 0xae6, 0x3, @fd=r6, 0x5de, 0x0, r7}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r8, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/35]}) 04:22:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1267.476215][T18891] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1267.484635][T18891] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1267.492729][T18891] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1267.500713][T18891] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1267.508757][T18891] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1267.516932][T18891] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 04:22:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x31}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r2}]]}}}]}, 0x40}}, 0x0) 04:22:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1267.639204][T18914] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 1267.649787][T18914] IPv6: sit1: Disabled Multicast RS [ 1267.664914][T18915] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 1269.103120][ C1] net_ratelimit: 22 callbacks suppressed [ 1269.103128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.114597][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1269.343122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.348929][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1270.143135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1270.148954][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1270.154868][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1270.160666][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1270.166435][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1270.172275][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:23:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000006c006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:23:03 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus/file0\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYPTR], 0x8) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x1, 0x0) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x4, "5e147822"}, &(0x7f0000000200)=0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="269d909c256e56dc50b2e863cc313293bebc3e4b1bc10535cc10af2c82b8f19857e04c6711b59bd8ab8aa706e4e09bf081933f6de90ebc4fd8261a7c17c390c70e8116b932194d2131402385a7fcfd81b56667ee1dad9e6c1b21f336a4e1504fb9454bcf41c1036b7049de36e2b81a182fa9e2a3853bae4add89b17fa851d25caa3240a676d2bad01652feb5bdc45907673f2220b94ee93082ed3e1a932e1c77d0a0f74fe33af42bf454843569f1cad83e9bb91546be085569dc1020a3da15c2e353273dd3bff3fb6b5c5e630737428fe245", 0xd2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r4, @in={{0x2, 0x4e23, @local}}, 0x8, 0xfff9, 0x0, 0x80000001, 0x48, 0x555f, 0x3f}, &(0x7f0000000300)=0x9c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r6, 0x80, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af41524513"}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000440)={r6, 0x1f}, &(0x7f0000000480)=0x8) 04:23:03 executing program 2 (fault-call:7 fault-nth:4): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:23:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:03 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) r1 = dup2(r0, r0) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20}, 0xffffff43) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$eventfd(r1, &(0x7f0000000080), 0x8) tkill(r2, 0x16) read$FUSE(r1, &(0x7f00000003c0), 0x1000) 04:23:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc33760036", 0xd}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:23:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1272.365567][T18936] FAULT_INJECTION: forcing a failure. [ 1272.365567][T18936] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.393209][T18936] CPU: 1 PID: 18936 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1272.401926][T18936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.412002][T18936] Call Trace: 04:23:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1272.415368][T18936] dump_stack+0x11d/0x181 [ 1272.419729][T18936] should_fail.cold+0xa/0x1a [ 1272.424340][T18936] __should_failslab+0xee/0x130 [ 1272.429304][T18936] should_failslab+0x9/0x14 [ 1272.433823][T18936] __kmalloc+0x53/0x690 [ 1272.438043][T18936] ? __follow_mount_rcu.isra.0+0x220/0x310 [ 1272.443896][T18936] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1272.449821][T18936] ? tomoyo_encode2.part.0+0xd9/0x260 [ 1272.455201][T18936] tomoyo_encode2.part.0+0xd9/0x260 [ 1272.460432][T18936] tomoyo_encode+0x34/0x50 04:23:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=@fragment, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) [ 1272.464865][T18936] tomoyo_mount_acl+0x7b/0x590 [ 1272.469630][T18936] ? dput+0xab/0x750 [ 1272.473532][T18936] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1272.479779][T18936] ? ___cache_free+0x2e/0x320 [ 1272.484545][T18936] ? terminate_walk+0x1d0/0x250 [ 1272.489421][T18936] ? complete_walk+0xd9/0x170 [ 1272.494148][T18936] tomoyo_mount_permission+0xef/0x350 [ 1272.499544][T18936] tomoyo_sb_mount+0x3e/0x60 [ 1272.504232][T18936] security_sb_mount+0x81/0xc0 [ 1272.509095][T18936] do_mount+0x129/0x14f0 [ 1272.513417][T18936] ksys_mount+0xe8/0x160 [ 1272.517730][T18936] __x64_sys_mount+0x70/0x90 [ 1272.522390][T18936] do_syscall_64+0xcc/0x3a0 [ 1272.526953][T18936] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1272.532849][T18936] RIP: 0033:0x45a919 [ 1272.536820][T18936] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1272.556456][T18936] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 04:23:03 executing program 2 (fault-call:7 fault-nth:5): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1272.565066][T18936] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1272.573047][T18936] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1272.581130][T18936] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1272.589118][T18936] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1272.597234][T18936] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 04:23:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4080a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11cc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1272.773413][T18957] FAULT_INJECTION: forcing a failure. [ 1272.773413][T18957] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.817059][T18957] CPU: 0 PID: 18957 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1272.826652][T18957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.836796][T18957] Call Trace: [ 1272.840109][T18957] dump_stack+0x11d/0x181 [ 1272.844494][T18957] should_fail.cold+0xa/0x1a [ 1272.849224][T18957] __should_failslab+0xee/0x130 [ 1272.854102][T18957] should_failslab+0x9/0x14 [ 1272.858636][T18957] __kmalloc+0x53/0x690 [ 1272.862824][T18957] ? __kmalloc+0x239/0x690 [ 1272.867329][T18957] ? __follow_mount_rcu.isra.0+0x220/0x310 [ 1272.873162][T18957] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1272.879085][T18957] ? tomoyo_realpath_from_path+0x83/0x4c0 [ 1272.884828][T18957] tomoyo_realpath_from_path+0x83/0x4c0 [ 1272.890393][T18957] tomoyo_mount_acl+0xdd/0x590 [ 1272.895228][T18957] ? dput+0xab/0x750 [ 1272.899149][T18957] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1272.905412][T18957] ? ___cache_free+0x2e/0x320 [ 1272.910101][T18957] ? terminate_walk+0x1d0/0x250 [ 1272.914965][T18957] ? complete_walk+0xd9/0x170 [ 1272.919690][T18957] tomoyo_mount_permission+0xef/0x350 [ 1272.925184][T18957] tomoyo_sb_mount+0x3e/0x60 [ 1272.929860][T18957] security_sb_mount+0x81/0xc0 [ 1272.934689][T18957] do_mount+0x129/0x14f0 [ 1272.938963][T18957] ksys_mount+0xe8/0x160 [ 1272.943236][T18957] __x64_sys_mount+0x70/0x90 [ 1272.947883][T18957] do_syscall_64+0xcc/0x3a0 [ 1272.952488][T18957] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1272.958418][T18957] RIP: 0033:0x45a919 [ 1272.962326][T18957] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1272.981943][T18957] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1272.990412][T18957] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1272.998540][T18957] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1273.006509][T18957] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1273.014481][T18957] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1273.022463][T18957] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 [ 1273.031411][T18957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1274.303118][ C1] net_ratelimit: 18 callbacks suppressed [ 1274.303128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.314756][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.320523][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.326285][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.332073][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.337830][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.543135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.549036][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1275.343100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1275.350134][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:23:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000006006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:23:09 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000200)=""/128, 0x80}], 0x1, 0x6c00) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000140)={0x7, {{0x2, 0x4e20, @multicast2}}}, 0x88) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000480)='net/wireless\x00') getsockopt$inet_dccp_int(r6, 0x21, 0x10, &(0x7f0000000680), &(0x7f00000006c0)=0x4) preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, 0xfffffffffffffe91) preadv(r5, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/206, 0xce}, {&(0x7f0000000640)=""/56, 0xffffffffffffff84}, {&(0x7f0000000940)=""/104, 0x68}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/214, 0xd6}], 0x0, 0x6c00) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000002c0)={0xed2a7f3, 0x6, 0x2, {0x6, @sliced={0x0, [0xaed2, 0x3f, 0xfc00, 0x8, 0x4, 0x6, 0x9, 0xcb7a, 0x8, 0x3f, 0x4, 0x4, 0x0, 0x0, 0x101, 0x200, 0x1ff, 0x3d2, 0x114, 0xb9cd, 0xad0, 0x2, 0xffff, 0x3, 0xfbff, 0x0, 0x7, 0x1000, 0x0, 0x6, 0x0, 0x800, 0x1000, 0x3a5, 0x3, 0x401, 0x5, 0x4c7, 0xffff, 0x5, 0xb56d, 0x2, 0x8000, 0x0, 0x81, 0x7c, 0x5, 0x8], 0x2}}, 0x3}) ioctl$SCSI_IOCTL_START_UNIT(r5, 0x5) r10 = dup2(r4, r4) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r11, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r11, 0x800448d3, &(0x7f00000003c0)={{0xf7, 0x8, 0x1, 0x7f, 0x1, 0x2a}, 0x5, 0x224a, 0x7fff, 0x3, 0x6aa, "ecd3fe5c3d7f1c7ab29f49fd51c4eabdfd772f923b827d3b296e0799aacf9d2e981c4179b1af7fd0731038856cd900e4e5a0b3fbe95dcd529da2f238c64aaa1219c5373969cbb418fea7f9377876b01521d9ab2050e9382dddc65277b57824b129ae32450ab44332b463a2298396a8b9d07ecff07f2066d1adacd9d5fd50f1e4"}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r10, 0xc0305615, &(0x7f00000000c0)={0x0, {0x80000001, 0x6}}) ioctl$sock_SIOCGIFBR(r12, 0x8940, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00'}) 04:23:09 executing program 2 (fault-call:7 fault-nth:6): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:23:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc33760036", 0xd}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:23:09 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x33}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0xf1dae7fe3580699f}, 0x800) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) close(r0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00) openat(r5, &(0x7f0000000040)='./file0\x00', 0x400, 0x0) r6 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x54cadbdfc8a3178d) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 04:23:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x7, 0xbb5dfa745aac574a}, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) getcwd(&(0x7f0000000000)=""/214, 0xd6) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0xfdffffff00000000}, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x6, 0x6, 0xfe5, 0x3, 0x8001, 0x7f, 0x6, 0x6, 0x100000001, 0x544, 0x200, 0x100000001, 0xfffffffffffffff8, 0x1, 0x7fff, 0x9931, 0xd6, 0x52c1, 0x7, 0xffff, 0x10001, 0x100, 0x8, 0x0, 0x6, 0x8}) [ 1278.725284][T18989] FAULT_INJECTION: forcing a failure. [ 1278.725284][T18989] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.743599][T18989] CPU: 1 PID: 18989 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1278.752314][T18989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1278.762375][T18989] Call Trace: [ 1278.765688][T18989] dump_stack+0x11d/0x181 [ 1278.770108][T18989] should_fail.cold+0xa/0x1a [ 1278.774809][T18989] __should_failslab+0xee/0x130 [ 1278.779677][T18989] should_failslab+0x9/0x14 [ 1278.784209][T18989] __kmalloc+0x53/0x690 [ 1278.788607][T18989] ? tomoyo_encode2.part.0+0x6d/0x260 [ 1278.794073][T18989] ? tomoyo_encode2.part.0+0xd9/0x260 [ 1278.799465][T18989] tomoyo_encode2.part.0+0xd9/0x260 [ 1278.804677][T18989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1278.810936][T18989] tomoyo_encode+0x34/0x50 [ 1278.815365][T18989] tomoyo_realpath_from_path+0x14a/0x4c0 [ 1278.822414][T18989] tomoyo_mount_acl+0xdd/0x590 [ 1278.827179][T18989] ? dput+0xab/0x750 [ 1278.831235][T18989] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1278.837488][T18989] ? ___cache_free+0x2e/0x320 [ 1278.842173][T18989] ? terminate_walk+0x1d0/0x250 [ 1278.847033][T18989] ? complete_walk+0xd9/0x170 [ 1278.851775][T18989] tomoyo_mount_permission+0xef/0x350 [ 1278.857160][T18989] tomoyo_sb_mount+0x3e/0x60 [ 1278.861877][T18989] security_sb_mount+0x81/0xc0 [ 1278.866733][T18989] do_mount+0x129/0x14f0 [ 1278.871000][T18989] ? copy_mount_options+0x169/0x2a0 [ 1278.876299][T18989] ksys_mount+0xe8/0x160 [ 1278.880597][T18989] __x64_sys_mount+0x70/0x90 [ 1278.885200][T18989] do_syscall_64+0xcc/0x3a0 [ 1278.889720][T18989] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1278.895610][T18989] RIP: 0033:0x45a919 [ 1278.899570][T18989] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1278.919356][T18989] RSP: 002b:00007fb8aa44ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1278.927772][T18989] RAX: ffffffffffffffda RBX: 00007fb8aa44ec90 RCX: 000000000045a919 [ 1278.935790][T18989] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1278.943799][T18989] RBP: 000000000075bfc8 R08: 0000000020000100 R09: 0000000000000000 [ 1278.951770][T18989] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa44f6d4 [ 1278.959858][T18989] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 [ 1278.978876][T18989] ERROR: Out of memory at tomoyo_realpath_from_path. 04:23:09 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:09 executing program 2 (fault-call:7 fault-nth:7): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:23:09 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, 0x0, 0x0) fsetxattr$smack_xattr_label(r0, &(0x7f00000000c0)='security.SMACK64EXEC\x00', &(0x7f0000000140)={'nfs\x00'}, 0x5, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0b21e200000080000000007a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12edc4d1c98b5d2ffe921f2c1413a3ce08f4f69ac175826de7c7221d003e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3430c9cf886284c9f851c"], 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000b80)=""/218, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 04:23:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x80010, r1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null, @netrom={'nr', 0x0}, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x198, &(0x7f0000000f80)}, 0x20000000) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x60fba71e74ca3d67) mq_notify(r2, &(0x7f0000000380)={0x0, 0x2, 0x0, @thr={&(0x7f00000002c0)="28e82db139faa64eb1df5f6fbaa04f092a6ed17aebe7c2a5eee617745313f706ec1fd3d92ff5da033344551d92fe66303b1884f5cf9f8d259329614623b51b39b94702ac147881", &(0x7f00000000c0)="a18d4f89e0c4bc31e568666381ff7ea45ec72a747df4a0ad9b07f729f6b745b2b0b1be458dbac6fff599fa0ad1bf182640df255c4986503890f866fae892acd8291b3c8c22cd747a0c73591b801117a6a5b69893e18bc8051a7b762b8005fd796e6559b7c9d29876"}}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000010c0)={{{@in6=@mcast1, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f00000011c0)=0xe8) accept4$packet(r2, &(0x7f0000003d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003dc0)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004140)={'bond_slave_0\x00', 0x0}) sendmmsg$inet6(r5, &(0x7f00000041c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x8, @ipv4={[], [], @multicast2}, 0x2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000480)="ec1c5d274d6af9277cf6642a148f3d8bd1ea48b7dfe6056ff22535fc53b269150facce4912220c48fae2a51ebb59b963fb4ec2001b2438734ccefdea9b8342bec01c1a85f6b5b1ba6c8ae2abd7ad46a8bc3d932c033301f3475d6eb27d4a", 0x5e}, {&(0x7f0000000500)="10770575d3f0900e2eae79fa94e24d5c1ae248adac6ed3722b674ba52ac571526191d5ee8edfb1a78b54693fa61e33b36d91e6e2632f4086f761e43b16d7a4c8b7023307fb46026eb5f744021f475829be455c3284780ea13b9e180e493c5a30", 0x60}, {&(0x7f0000000580)="f465876a43bd6d5e4307096471db418de4346b618f72bf", 0x17}, {&(0x7f00000005c0)="578d70e01f524cf61906cea8a0ffd4a41c9eddc26079f81cdfa4c35ab0d4720ab0036a8afcc81d4d116751be1c61e3e2e969a2913f576a0c0b63afab894e567f8ded8b7df61878c808e2249b8b300baf87ff618eb996243df73cfbb9125cff3b5d571945b931609d7751deda6c3052", 0x6f}, {&(0x7f0000000640)="5455aabc5da9a141583e88f9a8f3266a8a108faebf908e12492c9a8e92f8ca79546ba8a960a111b6ef0b9812b6b68dc3e5c14aaf4cebdeff2068d205509305c5906f03484358eb9377b3cd25ace48eb4abbd0b88e98c1fe59c02897772b2215c59b0", 0x62}, {&(0x7f00000006c0)="79049ceabfa17feb320d84037bfdb5af0d7f871d0fe084115792af3749ea664a382befba03036bfeb090e6c6", 0x2c}, {&(0x7f0000000700)="3b84d6a781a4acba8d313ab36cc9665bb6b89b2146d6ca2f225367a736458d3e31356412107241f98f90ee741a3807a666ac719c29d1086353d801a269835738811e0f7fa3f465af12c39e97efe9d9cb195f89ed856bec2bd6494cc0565371222a75003b66129b25b64a1e89e1b528259f119d54e777ac0b92e41f7c7fb17cf72657d01d37bc689d89e57ef754d3c76e95c40080387e28ed40fc0ed92622b4bacb6ce90c989529546b70198811", 0xad}, {&(0x7f00000007c0)="d3855e2ace1e526d889252c6e2abf4f9fef412581e595fa4d3f28d4af23fe90ebbeb8067430ab507c21e9e816cd1b646441d0912cb99389b14cd806a9ee6c3ab621ee0f2b3855b85aed6c9e410c91ed8f429ead37a0f6c42111de3445357b3e7116bc55d9fe3", 0x66}, {&(0x7f0000000840)="64d6026a6ffc6d56fcbb09d73d1bcc4f69ab91667ba1c0c2a944054eae8a5043cbea1e45b550fc0bed17b45997304b6a5c3c737daa103b6dec7f9ff26212e01e69510e770e3c26c133655896256ac0cff2e82a82b6cd6a3e0a19c49517e60e2f674e8913de7e4572b078ef1303d990ed7c4ec20ebf08e60431ba7fc9c10bbf1d16d30a754beb3f379da6241cc3af339cc8fb7067e0b8d8f7c3a9e5c5abf1298fc9c732cecbd922044bd63d053a4ea52e18f5a61b8c6752a29f356b96a7530798fa5d185a81eda99f49fdc993dd9948008d", 0xd1}, {&(0x7f0000000940)="147b16e856d4f81d64abef52a190662be9961096401e005a858aab19b49c595414116130e0bd6186483518269fd18e025fdf9d733150625f285afb9af3c12fb23be029e65b99a5c978bd07ff5cedaf0c633151cd413162142e329ca8d57b22682f1c9b3437ddd1b85c022ffcfb43034082584cc0449400439f1da011581dbdd7dd69f2df5d54ac2f61558c1437991e7010f4fe9fa21c2a37d710769e1ddb68c21a84e4f2e44ca2c01c672d68ef1eb74565f8890414b15d732e711d83bbadc3f44f16059fc18b2c8f09ef857de98852c3d802e34ef8fe0ff761d0a874ae52a9e8f6f07833a1a0beb5b146e18a", 0xec}], 0xa, &(0x7f0000000b00)=[@dstopts_2292={{0xa8, 0x29, 0x4, {0x0, 0x11, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x99, 0x2, [0x4000]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x24}}, @calipso={0x7, 0x48, {0x10000, 0x10, 0x36, 0x0, [0x200, 0x4, 0x1, 0x7, 0x2, 0x8, 0x400, 0x7]}}, @jumbo={0xc2, 0x4, 0x3f}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @local}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}], 0xc0}}, {{&(0x7f0000000bc0)={0xa, 0x4e21, 0xff, @mcast1, 0x7}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000c00)="975af36969b785a133e3cc87ef05e85b872cd44bc0ef9a672be94a2da4f6bfc9ff9a12d1b7a8e4a76bd9c2275442893c211e121690d10999a639f168d289a562", 0x40}, {&(0x7f0000000c40)="a0657684b3a3c0860e8f87d4c925d23176d83805192252facabf7865140b08914240ed67bd9326de6fff0fc2376687663c6329ac91b4c18e42345dd811a333607d88bf63f3872e33be62f2c02167fdd662272014c4e7", 0x56}, {&(0x7f0000000cc0)="67a2407fce9ece79c70a2cb628187f7048e0279ef86de70f53b56c3370276e52222c3312950b6d9bb0af8baecf830ded850369cb4445bb950ee586be2b71055c30aab22c61417c7f6a7c1be88bc9ebf0667365e5f2752ce1a6d48eae8e69721bcd950fcb0ea0fde739f1827f92a0163dc5b41e6e43f63a90dd9a08e7005c3ec822e2c6180ec30dfd321c884030a4a6512d01e46fd663cb639ef8d946bc9a0c5ed029bdaba4513aad4bc8aedb51033c2164cdcda8a21ebaa360a90a85f742de2720e8a491a1033b2355358db14883a787def71284841cfd8fe2e30a92f46a37540e1deb2bfa810c4b2e48754e52d0", 0xee}, {&(0x7f0000000dc0)="237c8f57082bea829c70c066b59f50421d9f8316b614dc02e8ac4153f0e97d6b512b9242a7a0b2c7c0083bae89e928e4f733d087ee5e6042f5552ae9226e4fdc70c1a86a2d8ffb45236df8d6cfc8e9db9cf51bb767353f03adafbc06e63ce0a13f1171420210c3023bdf8876d281024fd29d07f3dfc596769c3f7bce3b5c865938108ed157ad0d3d7c2a5e3a788d1f49799ee23c2f65d519d2329c54158c5ce25b57f319764533442289ed", 0xab}, {&(0x7f0000000e80)="7826adc87105a6725fd44c2cbd2e2c4eedd142e44a972b5a4b726ad306bc76a2516e430e64039688245be54a3e69c4c9cd2c09432cbe764efc12ef9cb99a93b14c7d9dc0111e96edb537c68b766bb6928b96975a0d490c989d1d38e11c884338fb45518618f2ada89161074f1481edc42fd816e7c555472cec140702ce934ebaa8f6d165379ad3eae19f2f7d9c628cf9e938a72f9a58ee2bc289ee8609ec7764a2adb58164dccbab18bba816f427098e2bdb9bbe5c198ec95c", 0xb9}], 0x5}}, {{&(0x7f0000000fc0)={0xa, 0x4e20, 0x1, @mcast2, 0x2}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000001000)="709575dbee194ce3cfb0a23c8e7eb28d4aa6993ef35dbdc92bfae248651222b345e228f8c573bba0905e0e5a72bd079488b83595f6afaf5f0a14b76a2220eb8c92bae73187183362fbba26a1471b83e10ef3eb9413933cf4ea65a7d2b467058cb1515b3e2666bf63cd4b9aa88cebaff32152efcb7480", 0x76}], 0x1, &(0x7f0000001200)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, [], 0xa}, r6}}}], 0x40}}, {{&(0x7f0000001240)={0xa, 0x4e20, 0xff, @remote, 0x4}, 0x1c, &(0x7f0000002800)=[{&(0x7f0000001280)="9f0856ea539863ccc4aac1720699e1070623d2291c6539590aff3dd8da153310c62a45d96c08b62db52c697da9c75ad0487b1fd4122e6acb450c58c687a07c41f6ae730187b0c34397d66aa1918a1f28c21647f784d33b310fa10db9d2108c6bef7335b5d3293a38812ac202c9aa3141ae17cffd4a5d37c8216a5c97444b3a13fd1806cbbb4659f8eb8fe881e7386d71f28894869aacc8fe", 0x98}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="3d8f188975316b4b768014eff8d54b352d7bf934e0dd13571bf0b20d5f93813068c99e89e67bbfa6aa4a38cfa2683cc8627385540e89d526c4837ed284b2b3828dc411857115e23e89be252874aea49c1b16c9d011c9ff4c1584ebc070fd29001b02d4a1d5f77a9d7140ef681f0420ef67ee9120ee429b460942765b865d4612a8e1602b79c1badf9ce86cc740c0af6efe2079996a64a70382b9c7c907ea7751f3bd0b07edef658c9f5908e2aed3edaa8c68c3b61867a52c64c9bff891c5216f5cae18322c7801afd0390499b973adb2da57a3584bc75ad8ff62bcfd521937c115", 0xe1}, {&(0x7f0000002440)="a34d7b464541bc9e8dbfdd9edfa02eb25790ae16d03c4248a19f9d7f1277727569e0dede5ada382de31c18f1e699818e1a3d7d8a637e40041c7fdca336dd099a1d25173fcfc2ce1592bc9f79fa1eca5d16de44b68bf6b30d3bfc6ae5868a843a46050a6758ecd82e094bd9de8d1d1554", 0x70}, {&(0x7f00000024c0)="cee1785413f647d9ec2abc253ff0d8a3d771376ea1b3a29a59e71b4a4455c670b8f20949c3f090ae62f3a54c8a04baaa862f34396eee2c4e46918e4f4a3110e5993f7198afa74cb95080a6bcc803290d2c2192a1523f4059d84c993f0f6d8231d01176a37d42abedbbd3ad5083cecda9d1fbc55f8e6ce3b532840615521b3034a591603883afa15f94eab4dc92d86bd074f05caab24077d2ed58292aca6b682f554e4eb5", 0xa4}, {&(0x7f0000002580)="b9ddf95543160f4b1b4a0eff8db97d722d59e4401479b39633b4ad9092ac7b898e3544ebc7b724b7c39f9165e942703ba4da0753215e03286474084403df1778704426d018a8f2e5f2c641a581a66aa3883b94444a15cf49147030c8b916ba762c17", 0x62}, {&(0x7f0000002600)="8b86bf371a4ff5674de9417d076724f1051d0430bfc72444ce3535d2032385a431bf156c1a032bd8eb2c2c5911d578f95a13d9e16f0aae06bd20a1afdb0ba313c060144e6e57659a0c5e4be9d4664977ce91037522b00c521150684175db203b1407e820a31100dfc381639b54a965ce3ec56913b2137120e6ecb2f55d14e4328f14d50fd08dfd2779435e0f5eb5634e47f7806f532db725b19db7c8c6aa633017bad1f4cfae", 0xa6}, {&(0x7f00000026c0)="be990d4545bc0c5b7eb5788014cdf71f7f9ee28a08fc7240f2b54503edb12a4b1f293c688de843127e7e90c3024e633b5ca8fcbad2bec3c5ab7e6fa9b5c4e3909ef4174fe555836f38a1fcc20283ee224508229bb206bab4f5ae276f4a68f59d32d26713", 0x64}, {&(0x7f0000002740)="c1c804499b9990fa84cdc5e5b4e570be0e2b3443ff819639d78bd5aecd22ede3bb0f04cbf811b63814e89711df9c5ab3405f1e", 0x33}, {&(0x7f0000002780)="e2dd0f09fa803df820f867ad04e22fe6ac799154383814918b8968a735dae65a1fad06b4ebc22891256591db77a013ac5ac4cf5430c58efaf6f0d2f970f043e74ddf0e123af987ec632f63a0fa6e4f4125adcec5fcaf8f04712c5170", 0x5c}], 0xa, &(0x7f00000028c0)=[@rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x0, 0x6, 0x0, [@empty]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @dstopts={{0x20, 0x29, 0x37, {0x0, 0x0, [], [@ra]}}}, @hopopts={{0x70, 0x29, 0x36, {0x19, 0xa, [], [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x3f}, @ra={0x5, 0x2, 0x3ff}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x3, 0x29, "6b93bb54ec0ac28f3c6b95736107dbc67f6d4a2862d400dd147127c008acfe77a658798ba3db0183d2"}, @padn]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}], 0xe8}}, {{&(0x7f00000029c0)={0xa, 0x4e23, 0x2, @mcast1, 0x6}, 0x1c, &(0x7f0000002c80)=[{&(0x7f0000002a00)="a2b771d2a524e66f8289748f700216f998863612ede29fac7e26e41f31254efa62d3d13f9f388291a66cd7f5a20a9fede23b87efe6ae355725a64792a33e8546f1fcad429a07f45003abdbe0faf2ee0a00b0c115042aff248f78ee68c6", 0x5d}, {&(0x7f0000002a80)="0b1aafd115d97c40be55e5265d9c37e05bcd336c6b359bfe7a86ba8fb306261656d6ab00fe46c2d405433cd999e565594817", 0x32}, {&(0x7f0000002ac0)="4ac2ad636380f6e7d48b9f7838fcdd738a6ab0719deda32038455e9d5b7bf53fb91415430022aa821429d06d29009e18cdb184e94833d400d8baaebc0a77fd6a034e0771238f2c4f862a28349a63299594428a25d7094fa62964bf2e12bd2b73aacacb7b41a6385f1028151445674aff2a21aace779dc5cd908cb5a3abda0c85acde9a6530b1e3dad8f8b42c6aed49c2dd16607482707fb8c120d2c727b8862410f691bcdab0d77738437678b7e95411d391f16629713fa359769a2f880d8cdef5ba34b022ec153dddcffd14fb30fe0e252266d1945a1e4f722e6d874352c363a162e4e7f3", 0xe5}, {&(0x7f0000002bc0)="7d4a3e9446905bfd919b2dd9f227ce3c0ecbf56b879b3afbf43694ce763480c0e7c5746c82107f7e4879264d5dd2d0380d815a6575e78be2e5b6bc20754a7e88ee43aa5094ec9055292cb2af2fa228f1d5e89ce0197ee191ae0d8bad10cea71a74341eb1f0dcdd8e8853dc78987d669075bb0414b3588945fe0e5f0975ca8a6e", 0x80}, {&(0x7f0000002c40)="725da7120f7033", 0x7}], 0x5}}, {{&(0x7f0000002d00)={0xa, 0x4e23, 0x6feb, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}, 0x9}, 0x1c, &(0x7f0000003d40)=[{&(0x7f0000002d40)="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", 0x1000}], 0x1, &(0x7f0000003e00)=[@rthdr_2292={{0xb8, 0x29, 0x39, {0x84, 0x14, 0x2, 0x4, 0x0, [@empty, @empty, @mcast2, @loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, @rand_addr="c8e04ed0adaada0f2a6f49323e59cc17", @local, @dev={0xfe, 0x80, [], 0xe}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, [], 0x1d}, r7}}}], 0xe0}}, {{&(0x7f0000003f00)={0xa, 0x4e23, 0x6, @loopback, 0xfffffff9}, 0x1c, &(0x7f0000004100)=[{&(0x7f0000003f40)="021431c120d7963719cd5124738d848cdad1061d4cce50f1bacf5511baf98cbee1a88e0f43a931b817b08d38e0715cd981aa591b47e828fce5456508c031ca85d9335cf7f239b815881988eb9e49d1f35ab5920b79cf77903fb2df53b3cfb1eaff6067dba25fea79127b39766e8ca484bbc26f43be0351b9eb4e2b9bf63f0950306d2b669dd2b7a71bbbd589a200d9e59f754413be849fca9ce82efb0e5a992cced16ce8f1fa46161348fbde38dc6a24b60c9b2ec7107171ee7aeba274af102ce23a724e6e8d5d27b5b459144c308c9e10db68e8dc56975e098585f02634956a674951e283a8732fabea5ef02e2a98af", 0xf0}, {&(0x7f0000004040)="ee7fa8646fc23f4461311769efec983c550abdf6d119684d609c5b1ce93a8cf73e5fba42d8457752c085da014c55a4b08cca75ca48a0f72a357a1709f28bb82db6f4c7edca60e8225ffdcaffe3800b745a65d8fc003ba6f9e07e6fc57ff95f499fb795ca494a1e65c1cda86c447aa030f34b360c73324d8b62e696cec3d2b5f42adbeab8ddd992d904ca9f51ed10506c60203e", 0x93}], 0x2, &(0x7f0000004180)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @empty}, r8}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}], 0x40}}], 0x7, 0x40) 04:23:09 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1279.342539][T19011] FAULT_INJECTION: forcing a failure. [ 1279.342539][T19011] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.364349][T19011] CPU: 0 PID: 19011 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1279.373103][T19011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1279.383178][T19011] Call Trace: [ 1279.386485][T19011] dump_stack+0x11d/0x181 [ 1279.390943][T19011] should_fail.cold+0xa/0x1a [ 1279.395556][T19011] __should_failslab+0xee/0x130 [ 1279.400496][T19011] should_failslab+0x9/0x14 [ 1279.405039][T19011] __kmalloc+0x53/0x690 [ 1279.409331][T19011] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1279.415128][T19011] ? strncmp+0x66/0x80 [ 1279.419319][T19011] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1279.425572][T19011] ? tomoyo_encode2.part.0+0x22a/0x260 [ 1279.431058][T19011] tomoyo_encode2.part.0+0x22a/0x260 [ 1279.436358][T19011] ? __get_fs_type+0x85/0xa0 [ 1279.440974][T19011] tomoyo_encode+0x34/0x50 [ 1279.445519][T19011] tomoyo_mount_acl+0x299/0x590 [ 1279.450512][T19011] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1279.456770][T19011] ? ___cache_free+0x2e/0x320 [ 1279.461459][T19011] ? terminate_walk+0x1d0/0x250 [ 1279.466498][T19011] tomoyo_mount_permission+0xef/0x350 [ 1279.471890][T19011] tomoyo_sb_mount+0x3e/0x60 [ 1279.476492][T19011] security_sb_mount+0x81/0xc0 [ 1279.481266][T19011] do_mount+0x129/0x14f0 [ 1279.485527][T19011] ksys_mount+0xe8/0x160 [ 1279.489794][T19011] __x64_sys_mount+0x70/0x90 [ 1279.494405][T19011] do_syscall_64+0xcc/0x3a0 [ 1279.498936][T19011] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1279.504885][T19011] RIP: 0033:0x45a919 [ 1279.508794][T19011] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1279.528399][T19011] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1279.536839][T19011] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1279.544826][T19011] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1279.552859][T19011] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1279.560989][T19011] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1279.569184][T19011] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 [ 1279.583139][ C1] net_ratelimit: 22 callbacks suppressed [ 1279.583153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.594593][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1279.753105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.758904][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1280.543122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1280.548906][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1280.554946][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1280.560688][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1280.566551][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1280.572280][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.703103][ C1] net_ratelimit: 18 callbacks suppressed [ 1284.703110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.714548][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.720296][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.726036][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.731792][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.737577][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:23:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000011006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:23:15 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8}, 0x10}, 0x78) 04:23:15 executing program 2 (fault-call:7 fault-nth:8): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:23:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0xec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3f}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) vmsplice(r6, &(0x7f0000000400)=[{&(0x7f0000000100)="482a83bfc78b570c37df1ff6653b15b575ec2075f3c28cb53836fe8514ad34992240550612bcc7feadb1458dad89e4f038d910c6c9e3943cdc1cefdb4159cf293be5b50f2f863bed18ee2312ebbef7b7723d2003099cac575d0be16d01e943caa176e06bdb1b1577d2f5bb297cf3e4dec9d6ab372845ca75c27933586bc6eb4989dd7bd032410edcc3d7135b5a48c9c7c64b9d7b9e2eb00c55bcc9bcea0e5a7a3626de2ac91e593543fcf3ca6115963bd8c0e733e6f405e735c219b975cfe0617f07e4aa0bf68fabdbc9921a681a24d89ea1c1485a9d23dd0245b37bd0ba8dfeb6897da9bfd2a2ba9c27ab", 0xeb}, {&(0x7f0000000200)}, {&(0x7f0000000240)="f15e8f7de05beefa8a43dcf7648d2f16f8cd3fb5c09e55968ff43dcbdd0ea7c3252e7af36301afc2235fd5b02c6a3342ff696886b99c7794b4d70ceadfac25", 0x3f}], 0x3, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r7, &(0x7f0000000100), 0x18d, 0x6c00) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r8, 0x80, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af41524513"}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000440)={r8, @in6={{0xa, 0x4e20, 0x9, @remote}}, 0x200, 0x7fff, 0x3, 0x0, 0x14, 0x1, 0x1c}, &(0x7f0000000200)=0x9c) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000500)={r9, 0x40, 0xfffffff9, 0xab}, &(0x7f0000000540)=0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:23:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc33760036", 0xd}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1284.943161][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.948968][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.970965][T19029] FAULT_INJECTION: forcing a failure. [ 1284.970965][T19029] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.984940][T19029] CPU: 1 PID: 19029 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1284.993693][T19029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1285.003741][T19029] Call Trace: [ 1285.007116][T19029] dump_stack+0x11d/0x181 [ 1285.011477][T19029] should_fail.cold+0xa/0x1a [ 1285.016137][T19029] __should_failslab+0xee/0x130 [ 1285.021254][T19029] should_failslab+0x9/0x14 [ 1285.025763][T19029] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1285.031048][T19029] ? apparmor_capable+0x260/0x470 [ 1285.036065][T19029] ? strncmp+0x66/0x80 [ 1285.040146][T19029] alloc_fs_context+0x58/0x3d0 [ 1285.044951][T19029] ? _raw_read_unlock+0x34/0x50 [ 1285.049868][T19029] fs_context_for_mount+0x2e/0x40 [ 1285.054991][T19029] do_mount+0xe52/0x14f0 [ 1285.059230][T19029] ksys_mount+0xe8/0x160 [ 1285.063475][T19029] __x64_sys_mount+0x70/0x90 [ 1285.068122][T19029] do_syscall_64+0xcc/0x3a0 [ 1285.072674][T19029] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1285.078555][T19029] RIP: 0033:0x45a919 [ 1285.082439][T19029] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1285.102032][T19029] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1285.110435][T19029] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1285.118411][T19029] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1285.126379][T19029] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1285.134376][T19029] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1285.142333][T19029] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 04:23:16 executing program 5: socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x0, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5) perf_event_open(&(0x7f0000000040)={0x0, 0xfffffe11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x6, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0) r2 = add_key$user(&(0x7f0000000940)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000002000)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5b0100000000000000ae89ba29", 0x1a, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r2, r3, r4) socket$inet6(0xa, 0x80001, 0x1ff) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480)) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) listen(r6, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce) process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/241, 0xf1}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002100)=ANY=[]], 0x8}}, 0xffffffffffff77f8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d0722593ea1d6351261da17942df2a1d02912417624a04154d4800558035b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0) 04:23:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed1", 0x13}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:23:16 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:16 executing program 2 (fault-call:7 fault-nth:9): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:23:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$sock_bt_hci(r2, 0x1800cd97d, &(0x7f0000000140)="8046657797d11639f7f3f6534d2d31686c4a74bf58700506096345f1c4bd8e50b55feb2aad2c69e3ccf8aa70e0c3315171c32086554fc35f19cb27ba526b4bcf0833fa688e8a22ab110f9b5df1995c65b398c9") r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x8, @ipv4={[], [], @multicast2}, 0x5}}}, 0x108) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) sendmsg$rds(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/27, 0x1b}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000500)=""/20, 0x14}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000580)=""/40, 0x28}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000640)=""/239, 0xef}, {&(0x7f0000000740)=""/200, 0xc8}], 0x9, &(0x7f0000000c00)=[@cswp={0x58, 0x114, 0x7, {{0x9, 0x3fd}, &(0x7f0000000900)=0xae, &(0x7f0000000940)=0x7, 0xaac7, 0x200, 0x2, 0x831, 0x40, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0xa20f, 0x2}, &(0x7f0000000980)=0x2, &(0x7f00000009c0)=0x7, 0x4, 0x0, 0x3, 0xbd, 0x4, 0x3ff}}, @mask_fadd={0x58, 0x114, 0x8, {{0x200}, &(0x7f0000000a00)=0xffffffff, &(0x7f0000000a40)=0x1, 0x101, 0x497, 0x100, 0xb3, 0xa}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000001c0)=""/224, 0xe0}, &(0x7f00000002c0), 0x10}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x7}, @cswp={0x58, 0x114, 0x7, {{0x20, 0x4}, &(0x7f0000000b80)=0x8, &(0x7f0000000bc0), 0x0, 0x8, 0x9, 0xeffd, 0x0, 0x40}}], 0x1a8, 0x80}, 0x20000802) getsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000937fed)=""/16, &(0x7f0000000000)=0x3) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000000c0)={r6}) [ 1285.403497][T19053] bridge0: port 3(gretap0) entered blocking state [ 1285.410120][T19053] bridge0: port 3(gretap0) entered disabled state 04:23:16 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1285.487353][T19053] device gretap0 entered promiscuous mode [ 1285.498838][T19053] bridge0: port 3(gretap0) entered blocking state [ 1285.505440][T19053] bridge0: port 3(gretap0) entered forwarding state [ 1285.529578][T19065] FAULT_INJECTION: forcing a failure. [ 1285.529578][T19065] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.536020][T19064] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1285.551766][T19065] CPU: 1 PID: 19065 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1285.560516][T19065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1285.570577][T19065] Call Trace: [ 1285.573881][T19065] dump_stack+0x11d/0x181 [ 1285.578249][T19065] should_fail.cold+0xa/0x1a [ 1285.582859][T19065] __should_failslab+0xee/0x130 [ 1285.587784][T19065] should_failslab+0x9/0x14 [ 1285.592301][T19065] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1285.597698][T19065] ? kmem_cache_alloc_trace+0x1e9/0x5d0 [ 1285.603260][T19065] ? apparmor_capable+0x260/0x470 [ 1285.608339][T19065] legacy_init_fs_context+0x3a/0x80 [ 1285.613564][T19065] ? generic_parse_monolithic+0x160/0x160 [ 1285.619368][T19065] alloc_fs_context+0x2c5/0x3d0 [ 1285.624367][T19065] fs_context_for_mount+0x2e/0x40 [ 1285.629411][T19065] do_mount+0xe52/0x14f0 [ 1285.633705][T19065] ksys_mount+0xe8/0x160 [ 1285.637962][T19065] __x64_sys_mount+0x70/0x90 [ 1285.642574][T19065] do_syscall_64+0xcc/0x3a0 [ 1285.647174][T19065] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1285.653089][T19065] RIP: 0033:0x45a919 [ 1285.656995][T19065] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1285.676696][T19065] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1285.685130][T19065] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1285.693127][T19065] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1285.701099][T19065] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1285.709072][T19065] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1285.717197][T19065] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 [ 1285.823121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1285.828952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1289.983196][ C1] net_ratelimit: 22 callbacks suppressed [ 1289.983206][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.994629][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1290.143139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.149099][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1290.943137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.949127][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1290.954936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.960672][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1290.966436][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.972162][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:23:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000021006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:23:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:24 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = accept(r0, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000040)=0x80) write$binfmt_aout(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x108) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000000c0)=@generic={0x3, 0x9, 0xffffffffffff7765}) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x10b042, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00) fadvise64(r6, 0x10000, 0x897, 0x3) r7 = request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='\x00', 0xfffffffffffffffa) keyctl$set_timeout(0xf, r7, 0x7fffffff) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000000)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 04:23:24 executing program 5: socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x0, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5) perf_event_open(&(0x7f0000000040)={0x0, 0xfffffe11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x6, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0) r2 = add_key$user(&(0x7f0000000940)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000002000)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5b0100000000000000ae89ba29", 0x1a, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r2, r3, r4) socket$inet6(0xa, 0x80001, 0x1ff) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480)) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) listen(r6, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce) process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/241, 0xf1}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002100)=ANY=[]], 0x8}}, 0xffffffffffff77f8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d0722593ea1d6351261da17942df2a1d02912417624a04154d4800558035b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0) 04:23:24 executing program 2 (fault-call:7 fault-nth:10): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:23:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed1", 0x13}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1293.365717][T19084] FAULT_INJECTION: forcing a failure. [ 1293.365717][T19084] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.430835][T19084] CPU: 0 PID: 19084 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1293.439568][T19084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1293.449665][T19084] Call Trace: [ 1293.452973][T19084] dump_stack+0x11d/0x181 [ 1293.457358][T19084] should_fail.cold+0xa/0x1a [ 1293.461965][T19084] __should_failslab+0xee/0x130 [ 1293.466878][T19084] should_failslab+0x9/0x14 [ 1293.471404][T19084] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1293.476723][T19084] ? __write_once_size.constprop.0+0x12/0x20 [ 1293.482731][T19084] alloc_super+0x59/0x570 [ 1293.487074][T19084] sget+0xe1/0x3e0 [ 1293.490799][T19084] ? get_anon_bdev+0x90/0x90 [ 1293.495439][T19084] ? apparmor_capable+0x260/0x470 [ 1293.500472][T19084] ? ovl_show_options+0x3e0/0x3e0 [ 1293.505504][T19084] mount_nodev+0x3a/0xf0 [ 1293.509847][T19084] ovl_mount+0x36/0x50 [ 1293.513949][T19084] ? ovl_own_xattr_set+0x20/0x20 [ 1293.518916][T19084] legacy_get_tree+0x7e/0xf0 [ 1293.523521][T19084] vfs_get_tree+0x56/0x1a0 [ 1293.527954][T19084] do_mount+0x1004/0x14f0 [ 1293.532358][T19084] ksys_mount+0xe8/0x160 [ 1293.536610][T19084] __x64_sys_mount+0x70/0x90 [ 1293.541206][T19084] do_syscall_64+0xcc/0x3a0 [ 1293.545809][T19084] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1293.551766][T19084] RIP: 0033:0x45a919 [ 1293.555745][T19084] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1293.575360][T19084] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1293.583782][T19084] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1293.591890][T19084] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1293.599877][T19084] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1293.608120][T19084] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1293.616106][T19084] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 04:23:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1293.629951][T19091] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 04:23:24 executing program 5: socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x0, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5) perf_event_open(&(0x7f0000000040)={0x0, 0xfffffe11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x6, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0) r2 = add_key$user(&(0x7f0000000940)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000002000)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5b0100000000000000ae89ba29", 0x1a, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r2, r3, r4) socket$inet6(0xa, 0x80001, 0x1ff) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480)) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) listen(r6, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce) process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/241, 0xf1}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002100)=ANY=[]], 0x8}}, 0xffffffffffff77f8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d0722593ea1d6351261da17942df2a1d02912417624a04154d4800558035b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0) 04:23:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1293.727317][ T27] audit: type=1800 audit(1577334204.497:184): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17139 res=0 04:23:24 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @dev}, 0xfffffffffffffffd) 04:23:24 executing program 2 (fault-call:7 fault-nth:11): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1293.912315][T19103] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 04:23:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1294.009011][T19113] FAULT_INJECTION: forcing a failure. [ 1294.009011][T19113] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.040726][T19113] CPU: 0 PID: 19113 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1294.049445][T19113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1294.059706][T19113] Call Trace: [ 1294.063005][T19113] dump_stack+0x11d/0x181 [ 1294.067354][T19113] should_fail.cold+0xa/0x1a [ 1294.072020][T19113] __should_failslab+0xee/0x130 [ 1294.076870][T19113] should_failslab+0x9/0x14 [ 1294.081455][T19113] __kmalloc+0x53/0x690 [ 1294.085617][T19113] ? prealloc_shrinker+0x6b/0x240 [ 1294.090670][T19113] prealloc_shrinker+0x6b/0x240 [ 1294.095520][T19113] alloc_super+0x4b7/0x570 [ 1294.099935][T19113] sget+0xe1/0x3e0 [ 1294.103646][T19113] ? get_anon_bdev+0x90/0x90 [ 1294.108235][T19113] ? apparmor_capable+0x260/0x470 [ 1294.113348][T19113] ? ovl_show_options+0x3e0/0x3e0 [ 1294.118367][T19113] mount_nodev+0x3a/0xf0 [ 1294.122653][T19113] ovl_mount+0x36/0x50 [ 1294.126718][T19113] ? ovl_own_xattr_set+0x20/0x20 [ 1294.131651][T19113] legacy_get_tree+0x7e/0xf0 [ 1294.136251][T19113] vfs_get_tree+0x56/0x1a0 [ 1294.140733][T19113] do_mount+0x1004/0x14f0 [ 1294.145122][T19113] ksys_mount+0xe8/0x160 [ 1294.149447][T19113] __x64_sys_mount+0x70/0x90 [ 1294.154035][T19113] do_syscall_64+0xcc/0x3a0 [ 1294.158565][T19113] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1294.164446][T19113] RIP: 0033:0x45a919 [ 1294.168343][T19113] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1294.187937][T19113] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1294.196459][T19113] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1294.204431][T19113] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1294.212401][T19113] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1294.220378][T19113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1294.228392][T19113] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 [ 1295.103126][ C1] net_ratelimit: 18 callbacks suppressed [ 1295.108816][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.114587][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.120351][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.126103][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.131881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.137633][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.343129][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.349042][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1296.303158][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1296.309091][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:23:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000032006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:23:30 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000200)=""/137, 0x40) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) 04:23:30 executing program 5: socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x0, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5) perf_event_open(&(0x7f0000000040)={0x0, 0xfffffe11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x6, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0) r2 = add_key$user(&(0x7f0000000940)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000002000)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5b0100000000000000ae89ba29", 0x1a, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r2, r3, r4) socket$inet6(0xa, 0x80001, 0x1ff) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480)) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) listen(r6, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce) process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/241, 0xf1}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002100)=ANY=[]], 0x8}}, 0xffffffffffff77f8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d0722593ea1d6351261da17942df2a1d02912417624a04154d4800558035b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0) 04:23:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:30 executing program 2 (fault-call:7 fault-nth:12): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:23:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed1", 0x13}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:23:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1299.728545][T19137] FAULT_INJECTION: forcing a failure. [ 1299.728545][T19137] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.764502][T19137] CPU: 1 PID: 19137 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1299.773223][T19137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1299.783285][T19137] Call Trace: [ 1299.786607][T19137] dump_stack+0x11d/0x181 [ 1299.791095][T19137] should_fail.cold+0xa/0x1a [ 1299.795838][T19137] __should_failslab+0xee/0x130 [ 1299.800757][T19137] should_failslab+0x9/0x14 [ 1299.805286][T19137] __kmalloc+0x53/0x690 [ 1299.806014][T19134] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1299.809461][T19137] ? down_read+0xf1/0x110 [ 1299.809484][T19137] ? __list_lru_init+0x8b/0x440 [ 1299.809551][T19137] __list_lru_init+0x8b/0x440 [ 1299.832720][T19137] alloc_super+0x51d/0x570 [ 1299.837218][T19137] sget+0xe1/0x3e0 [ 1299.841033][T19137] ? get_anon_bdev+0x90/0x90 [ 1299.845656][T19137] ? apparmor_capable+0x260/0x470 [ 1299.850736][T19137] ? ovl_show_options+0x3e0/0x3e0 [ 1299.855837][T19137] mount_nodev+0x3a/0xf0 [ 1299.860108][T19137] ovl_mount+0x36/0x50 [ 1299.864188][T19137] ? ovl_own_xattr_set+0x20/0x20 [ 1299.869847][T19137] legacy_get_tree+0x7e/0xf0 [ 1299.874480][T19137] vfs_get_tree+0x56/0x1a0 04:23:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semctl$GETVAL(r0, 0x0, 0xc, 0x0) [ 1299.878909][T19137] do_mount+0x1004/0x14f0 [ 1299.883268][T19137] ksys_mount+0xe8/0x160 [ 1299.887569][T19137] __x64_sys_mount+0x70/0x90 [ 1299.892197][T19137] do_syscall_64+0xcc/0x3a0 [ 1299.896742][T19137] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1299.902676][T19137] RIP: 0033:0x45a919 [ 1299.906657][T19137] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:23:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000875300000d000040050000a900000000000000000000004000000000010000000000000025000000fff0ff8504040000000000010a00000006ed"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000860100000020006c9c"]) [ 1299.926369][T19137] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1299.934846][T19137] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1299.943855][T19137] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1299.951828][T19137] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1299.959848][T19137] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1299.967916][T19137] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 04:23:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:30 executing program 2 (fault-call:7 fault-nth:13): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1300.262664][T19165] FAULT_INJECTION: forcing a failure. [ 1300.262664][T19165] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.276008][T19165] CPU: 1 PID: 19165 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1300.284689][T19165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1300.294974][T19165] Call Trace: [ 1300.299213][T19165] dump_stack+0x11d/0x181 [ 1300.303571][T19165] should_fail.cold+0xa/0x1a [ 1300.308172][T19165] __should_failslab+0xee/0x130 [ 1300.313066][T19165] should_failslab+0x9/0x14 [ 1300.317569][T19165] kmem_cache_alloc_node_trace+0x3b/0x670 [ 1300.323286][T19165] ? memcg_kmem_put_cache+0x7c/0xc0 [ 1300.328579][T19165] ? debug_smp_processor_id+0x43/0x137 [ 1300.334238][T19165] __kmalloc_node+0x38/0x50 [ 1300.338800][T19165] kvmalloc_node+0x71/0x100 [ 1300.343345][T19165] __list_lru_init+0x350/0x440 [ 1300.348098][T19165] alloc_super+0x51d/0x570 [ 1300.352499][T19165] sget+0xe1/0x3e0 [ 1300.356202][T19165] ? get_anon_bdev+0x90/0x90 [ 1300.360788][T19165] ? apparmor_capable+0x260/0x470 [ 1300.365822][T19165] ? ovl_show_options+0x3e0/0x3e0 [ 1300.370843][T19165] mount_nodev+0x3a/0xf0 [ 1300.375097][T19165] ovl_mount+0x36/0x50 [ 1300.379151][T19165] ? ovl_own_xattr_set+0x20/0x20 [ 1300.384071][T19165] legacy_get_tree+0x7e/0xf0 [ 1300.388790][T19165] vfs_get_tree+0x56/0x1a0 [ 1300.393189][T19165] do_mount+0x1004/0x14f0 [ 1300.397520][T19165] ksys_mount+0xe8/0x160 [ 1300.401746][T19165] __x64_sys_mount+0x70/0x90 [ 1300.406321][T19165] do_syscall_64+0xcc/0x3a0 [ 1300.410815][T19165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1300.416698][T19165] RIP: 0033:0x45a919 [ 1300.420635][T19165] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1300.440221][T19165] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1300.448657][T19165] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1300.456611][T19165] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1300.464611][T19165] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1300.472572][T19165] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1300.480749][T19165] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 [ 1300.489477][ C1] net_ratelimit: 22 callbacks suppressed [ 1300.489485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.500963][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1300.543160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.548945][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1301.343131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.349010][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1301.354796][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.360542][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1301.366398][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.372197][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.503153][ C1] net_ratelimit: 18 callbacks suppressed [ 1305.508870][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.514645][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.520387][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.526100][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.531832][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.537552][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.743139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.748932][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.713163][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.718970][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:23:39 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x38) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f00000000c0)=0x3f365342, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 04:23:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c4600000033006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:23:39 executing program 2 (fault-call:7 fault-nth:14): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:23:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2b, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000b80)=ANY=[], 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') r2 = socket$kcm(0x11, 0x0, 0x300) pipe(&(0x7f0000000680)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000005540)={0x0, 0x0, 0x4, 0x0, [], [{0xc6, 0x400, 0x100, 0x4, 0x0, 0x1d3}, {0x80000000, 0xfffff750, 0x22, 0x40, 0x0, 0xe44}], [[], [], [], []]}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x5452, &(0x7f0000000040)) write(r1, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r1, &(0x7f0000006280)=[{{&(0x7f0000000300)=@x25, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/64, 0x40}], 0x1}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000840)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/246, 0xf6}, {&(0x7f0000000ec0)=""/171, 0xab}, {&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000f80)=""/200, 0xc8}, {0x0}, {&(0x7f0000001180)=""/169, 0xa9}, {&(0x7f00000005c0)}], 0x8, &(0x7f0000001300)=""/215, 0xd7}, 0x80000000}, {{&(0x7f0000001400)=@caif=@dbg, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001480)=""/69, 0x45}, {&(0x7f0000001500)=""/214, 0xd6}, {&(0x7f0000001600)=""/176, 0xb0}, {&(0x7f00000016c0)=""/86, 0x56}, {&(0x7f0000001740)=""/234, 0xea}, {&(0x7f0000001840)=""/169, 0xa9}, {&(0x7f0000001900)=""/136, 0x88}, {&(0x7f0000000940)=""/39, 0x27}, {&(0x7f00000019c0)=""/186, 0xba}, {0x0}], 0xa, &(0x7f0000001b80)=""/128, 0x80}, 0x7f}, {{&(0x7f0000001c00)=@ipx, 0x80, &(0x7f0000004140)=[{&(0x7f0000001c80)=""/128, 0x80}, {&(0x7f0000001d00)=""/159, 0x9f}, {&(0x7f0000001dc0)=""/170, 0xaa}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/188, 0xbc}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/188, 0xbc}, {&(0x7f0000004000)=""/92, 0x5c}, {&(0x7f0000004080)=""/163, 0xa3}], 0x9, &(0x7f0000004200)=""/104, 0x68}, 0x800}, {{&(0x7f0000004280)=@un=@abs, 0x80, &(0x7f0000004480)=[{&(0x7f0000004300)=""/137, 0x89}, {&(0x7f0000004400)=""/34, 0x22}, {&(0x7f0000004440)=""/20, 0x14}], 0x3, &(0x7f00000044c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000054c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000005a00)=""/80, 0x50}, 0x2}, {{&(0x7f0000005a80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005b00)=""/223, 0xdf}], 0x1, &(0x7f0000005c40)=""/123, 0x7b}, 0x87}, {{0x0, 0x0, 0x0}, 0x5}], 0x8, 0x12, &(0x7f00000001c0)={0x77359400}) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000000)={0x4, 0x108, 0x400, 0x51, 0x4, 0x4}) keyctl$clear(0x7, 0xfffffffffffffffb) pipe(&(0x7f00000002c0)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) pipe(0x0) 04:23:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000", 0x16}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:23:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6661000000053c07bc3376003639405cb4aed12f0100000000", 0xef}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x111}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) [ 1309.007276][T19176] FAULT_INJECTION: forcing a failure. [ 1309.007276][T19176] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.060791][T19176] CPU: 0 PID: 19176 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1309.069565][T19176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.079622][T19176] Call Trace: [ 1309.082931][T19176] dump_stack+0x11d/0x181 [ 1309.087282][T19176] should_fail.cold+0xa/0x1a [ 1309.091948][T19176] __should_failslab+0xee/0x130 [ 1309.096856][T19176] should_failslab+0x9/0x14 [ 1309.101500][T19176] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1309.106808][T19176] ? memcg_kmem_put_cache+0x7c/0xc0 [ 1309.112024][T19176] ? debug_smp_processor_id+0x43/0x137 [ 1309.117605][T19176] __memcg_init_list_lru_node+0x84/0x180 [ 1309.123689][T19176] __list_lru_init+0x36a/0x440 [ 1309.128466][T19176] alloc_super+0x51d/0x570 [ 1309.132896][T19176] sget+0xe1/0x3e0 [ 1309.136657][T19176] ? get_anon_bdev+0x90/0x90 [ 1309.141288][T19176] ? apparmor_capable+0x260/0x470 [ 1309.146332][T19176] ? ovl_show_options+0x3e0/0x3e0 [ 1309.151410][T19176] mount_nodev+0x3a/0xf0 [ 1309.155675][T19176] ovl_mount+0x36/0x50 [ 1309.159813][T19176] ? ovl_own_xattr_set+0x20/0x20 [ 1309.164760][T19176] legacy_get_tree+0x7e/0xf0 [ 1309.169491][T19176] vfs_get_tree+0x56/0x1a0 [ 1309.173976][T19176] do_mount+0x1004/0x14f0 [ 1309.178320][T19176] ksys_mount+0xe8/0x160 [ 1309.182596][T19176] __x64_sys_mount+0x70/0x90 [ 1309.187362][T19176] do_syscall_64+0xcc/0x3a0 [ 1309.191894][T19176] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1309.197799][T19176] RIP: 0033:0x45a919 04:23:39 executing program 5: 04:23:39 executing program 5: 04:23:40 executing program 5: [ 1309.201735][T19176] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1309.221356][T19176] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1309.229854][T19176] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1309.237844][T19176] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1309.245830][T19176] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1309.253833][T19176] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 04:23:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1309.261888][T19176] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 04:23:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:40 executing program 1: 04:23:40 executing program 5: [ 1310.863160][ C1] net_ratelimit: 22 callbacks suppressed [ 1310.863169][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1310.874716][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1310.943134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1310.948953][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1311.743119][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.748917][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1311.754699][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.760431][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1311.766223][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.771969][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1315.903118][ C1] net_ratelimit: 18 callbacks suppressed [ 1315.903127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1315.914655][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1315.920430][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1315.926191][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1315.931936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1315.937714][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1316.143133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1316.148917][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1317.103142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1317.109038][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:23:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000003a006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:23:49 executing program 2 (fault-call:7 fault-nth:15): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:23:49 executing program 1: 04:23:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:49 executing program 5: 04:23:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000", 0x16}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:23:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1318.380933][T19225] FAULT_INJECTION: forcing a failure. [ 1318.380933][T19225] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.414712][T19225] CPU: 1 PID: 19225 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1318.423522][T19225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.433754][T19225] Call Trace: [ 1318.437066][T19225] dump_stack+0x11d/0x181 [ 1318.441401][T19225] should_fail.cold+0xa/0x1a [ 1318.446003][T19225] __should_failslab+0xee/0x130 [ 1318.450879][T19225] should_failslab+0x9/0x14 [ 1318.455454][T19225] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1318.460759][T19225] ? memcg_kmem_put_cache+0x7c/0xc0 [ 1318.465978][T19225] ? debug_smp_processor_id+0x43/0x137 [ 1318.471481][T19225] __memcg_init_list_lru_node+0x84/0x180 [ 1318.477134][T19225] __list_lru_init+0x36a/0x440 [ 1318.481980][T19225] alloc_super+0x51d/0x570 [ 1318.486422][T19225] sget+0xe1/0x3e0 [ 1318.490158][T19225] ? get_anon_bdev+0x90/0x90 [ 1318.494760][T19225] ? ovl_show_options+0x3e0/0x3e0 [ 1318.499793][T19225] mount_nodev+0x3a/0xf0 [ 1318.504053][T19225] ovl_mount+0x36/0x50 [ 1318.508172][T19225] ? ovl_own_xattr_set+0x20/0x20 [ 1318.513118][T19225] legacy_get_tree+0x7e/0xf0 [ 1318.517775][T19225] vfs_get_tree+0x56/0x1a0 [ 1318.522205][T19225] do_mount+0x1004/0x14f0 [ 1318.526564][T19225] ksys_mount+0xe8/0x160 04:23:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1318.530818][T19225] __x64_sys_mount+0x70/0x90 [ 1318.535453][T19225] do_syscall_64+0xcc/0x3a0 [ 1318.539977][T19225] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1318.545875][T19225] RIP: 0033:0x45a919 [ 1318.549895][T19225] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1318.569533][T19225] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 04:23:49 executing program 5: 04:23:49 executing program 1: 04:23:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1318.577979][T19225] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1318.585959][T19225] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1318.594008][T19225] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1318.601989][T19225] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1318.610014][T19225] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 04:23:49 executing program 2 (fault-call:7 fault-nth:16): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1318.910048][T19251] FAULT_INJECTION: forcing a failure. [ 1318.910048][T19251] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.922782][T19251] CPU: 1 PID: 19251 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1318.931442][T19251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.941482][T19251] Call Trace: [ 1318.944774][T19251] dump_stack+0x11d/0x181 [ 1318.949109][T19251] should_fail.cold+0xa/0x1a [ 1318.953797][T19251] __should_failslab+0xee/0x130 [ 1318.958637][T19251] should_failslab+0x9/0x14 [ 1318.963150][T19251] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1318.968434][T19251] ? memcg_kmem_put_cache+0x7c/0xc0 [ 1318.973695][T19251] ? debug_smp_processor_id+0x43/0x137 [ 1318.979157][T19251] __memcg_init_list_lru_node+0x84/0x180 [ 1318.984792][T19251] __list_lru_init+0x36a/0x440 [ 1318.989586][T19251] alloc_super+0x51d/0x570 [ 1318.993992][T19251] sget+0xe1/0x3e0 [ 1318.997705][T19251] ? get_anon_bdev+0x90/0x90 [ 1319.002370][T19251] ? apparmor_capable+0x260/0x470 [ 1319.007470][T19251] ? ovl_show_options+0x3e0/0x3e0 [ 1319.012480][T19251] mount_nodev+0x3a/0xf0 [ 1319.016797][T19251] ovl_mount+0x36/0x50 [ 1319.020868][T19251] ? ovl_own_xattr_set+0x20/0x20 [ 1319.025800][T19251] legacy_get_tree+0x7e/0xf0 [ 1319.030391][T19251] vfs_get_tree+0x56/0x1a0 [ 1319.034794][T19251] do_mount+0x1004/0x14f0 [ 1319.039112][T19251] ksys_mount+0xe8/0x160 [ 1319.043350][T19251] __x64_sys_mount+0x70/0x90 [ 1319.047943][T19251] do_syscall_64+0xcc/0x3a0 [ 1319.052449][T19251] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1319.058323][T19251] RIP: 0033:0x45a919 [ 1319.062203][T19251] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1319.081805][T19251] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1319.090199][T19251] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1319.098185][T19251] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1319.106147][T19251] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1319.114110][T19251] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1319.122066][T19251] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 [ 1321.273137][ C1] net_ratelimit: 22 callbacks suppressed [ 1321.273144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1321.284742][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1321.343128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1321.348947][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1322.143160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1322.148998][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1322.154766][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1322.160530][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1322.166322][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1322.172146][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:23:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000006c006c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:23:56 executing program 1: 04:23:56 executing program 5: 04:23:56 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:23:56 executing program 2 (fault-call:7 fault-nth:17): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:23:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000", 0x16}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:23:56 executing program 1: 04:23:56 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) [ 1325.567978][T19263] FAULT_INJECTION: forcing a failure. [ 1325.567978][T19263] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.616945][T19263] CPU: 1 PID: 19263 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1325.625666][T19263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1325.635730][T19263] Call Trace: [ 1325.639035][T19263] dump_stack+0x11d/0x181 [ 1325.643386][T19263] should_fail.cold+0xa/0x1a [ 1325.648057][T19263] __should_failslab+0xee/0x130 [ 1325.653019][T19263] should_failslab+0x9/0x14 [ 1325.657540][T19263] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1325.662961][T19263] ? memcg_kmem_put_cache+0x7c/0xc0 [ 1325.668329][T19263] ? debug_smp_processor_id+0x43/0x137 [ 1325.673793][T19263] __memcg_init_list_lru_node+0x84/0x180 [ 1325.679428][T19263] __list_lru_init+0x36a/0x440 [ 1325.684192][T19263] alloc_super+0x51d/0x570 [ 1325.688671][T19263] sget+0xe1/0x3e0 [ 1325.692402][T19263] ? get_anon_bdev+0x90/0x90 [ 1325.696995][T19263] ? ovl_show_options+0x3e0/0x3e0 [ 1325.702064][T19263] mount_nodev+0x3a/0xf0 [ 1325.706327][T19263] ovl_mount+0x36/0x50 [ 1325.710426][T19263] ? ovl_own_xattr_set+0x20/0x20 [ 1325.715413][T19263] legacy_get_tree+0x7e/0xf0 [ 1325.720021][T19263] vfs_get_tree+0x56/0x1a0 [ 1325.724499][T19263] do_mount+0x1004/0x14f0 [ 1325.728831][T19263] ksys_mount+0xe8/0x160 [ 1325.733078][T19263] __x64_sys_mount+0x70/0x90 [ 1325.737741][T19263] do_syscall_64+0xcc/0x3a0 [ 1325.742248][T19263] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1325.748200][T19263] RIP: 0033:0x45a919 [ 1325.752100][T19263] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1325.771786][T19263] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1325.780248][T19263] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1325.788215][T19263] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1325.796180][T19263] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1325.804205][T19263] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 04:23:56 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1325.812214][T19263] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 04:23:56 executing program 1: 04:23:56 executing program 2 (fault-call:7 fault-nth:18): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:23:56 executing program 5: [ 1326.177672][T19285] FAULT_INJECTION: forcing a failure. [ 1326.177672][T19285] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.191021][T19285] CPU: 1 PID: 19285 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1326.199702][T19285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1326.209765][T19285] Call Trace: [ 1326.213055][T19285] dump_stack+0x11d/0x181 [ 1326.217540][T19285] should_fail.cold+0xa/0x1a [ 1326.222181][T19285] __should_failslab+0xee/0x130 [ 1326.227392][T19285] should_failslab+0x9/0x14 [ 1326.231898][T19285] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1326.237173][T19285] ? memcg_kmem_put_cache+0x7c/0xc0 [ 1326.242371][T19285] ? debug_smp_processor_id+0x43/0x137 [ 1326.247822][T19285] __memcg_init_list_lru_node+0x84/0x180 [ 1326.253486][T19285] __list_lru_init+0x36a/0x440 [ 1326.258254][T19285] alloc_super+0x51d/0x570 [ 1326.262665][T19285] sget+0xe1/0x3e0 [ 1326.266394][T19285] ? get_anon_bdev+0x90/0x90 [ 1326.271149][T19285] ? apparmor_capable+0x260/0x470 [ 1326.276181][T19285] ? ovl_show_options+0x3e0/0x3e0 [ 1326.281204][T19285] mount_nodev+0x3a/0xf0 [ 1326.285458][T19285] ovl_mount+0x36/0x50 [ 1326.289688][T19285] ? ovl_own_xattr_set+0x20/0x20 [ 1326.294638][T19285] legacy_get_tree+0x7e/0xf0 [ 1326.299303][T19285] vfs_get_tree+0x56/0x1a0 [ 1326.303779][T19285] do_mount+0x1004/0x14f0 [ 1326.308167][T19285] ksys_mount+0xe8/0x160 [ 1326.312410][T19285] __x64_sys_mount+0x70/0x90 [ 1326.317058][T19285] do_syscall_64+0xcc/0x3a0 [ 1326.321554][T19285] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1326.327536][T19285] RIP: 0033:0x45a919 [ 1326.331421][T19285] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1326.351110][T19285] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1326.359528][T19285] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1326.367530][T19285] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1326.375496][T19285] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1326.383472][T19285] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1326.391481][T19285] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 [ 1326.399583][ C1] net_ratelimit: 18 callbacks suppressed [ 1326.399600][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1326.411026][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1326.416874][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1326.422622][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1326.428405][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1326.434204][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1326.543131][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1326.548915][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1327.503193][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1327.508986][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1331.663156][ C1] net_ratelimit: 22 callbacks suppressed [ 1331.663165][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.674618][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1331.743187][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.749039][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1332.623145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1332.629023][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1332.634914][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1332.640698][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1332.646473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1332.652205][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:24:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000002f026c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:24:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:24:05 executing program 1: 04:24:05 executing program 5: 04:24:05 executing program 2 (fault-call:7 fault-nth:19): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:24:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f00000000", 0x18}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1334.911124][T19296] FAULT_INJECTION: forcing a failure. [ 1334.911124][T19296] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.932825][T19296] CPU: 1 PID: 19296 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1334.941539][T19296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.951615][T19296] Call Trace: [ 1334.955004][T19296] dump_stack+0x11d/0x181 04:24:05 executing program 1: 04:24:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1334.959389][T19296] should_fail.cold+0xa/0x1a [ 1334.964129][T19296] __should_failslab+0xee/0x130 [ 1334.968999][T19296] should_failslab+0x9/0x14 [ 1334.973527][T19296] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1334.978856][T19296] ? memcg_kmem_put_cache+0x7c/0xc0 [ 1334.984078][T19296] ? debug_smp_processor_id+0x43/0x137 [ 1334.989564][T19296] __memcg_init_list_lru_node+0x84/0x180 [ 1334.995272][T19296] __list_lru_init+0x36a/0x440 [ 1335.000062][T19296] alloc_super+0x51d/0x570 [ 1335.004492][T19296] sget+0xe1/0x3e0 [ 1335.008221][T19296] ? get_anon_bdev+0x90/0x90 [ 1335.012893][T19296] ? apparmor_capable+0x260/0x470 [ 1335.017940][T19296] ? ovl_show_options+0x3e0/0x3e0 [ 1335.023018][T19296] mount_nodev+0x3a/0xf0 [ 1335.027326][T19296] ovl_mount+0x36/0x50 [ 1335.031413][T19296] ? ovl_own_xattr_set+0x20/0x20 [ 1335.036366][T19296] legacy_get_tree+0x7e/0xf0 [ 1335.040976][T19296] vfs_get_tree+0x56/0x1a0 [ 1335.045409][T19296] do_mount+0x1004/0x14f0 [ 1335.049781][T19296] ksys_mount+0xe8/0x160 [ 1335.054118][T19296] __x64_sys_mount+0x70/0x90 04:24:05 executing program 1: [ 1335.058730][T19296] do_syscall_64+0xcc/0x3a0 [ 1335.063301][T19296] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1335.069199][T19296] RIP: 0033:0x45a919 [ 1335.073119][T19296] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1335.093040][T19296] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1335.101473][T19296] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 04:24:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:24:05 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000300)={0x0, 0x3ff, &(0x7f00000005c0)="e3eee87896a23727b28b3df56390fe01e48135f3a58545b6be910fa8a64e0e4375379dda0511f2c3dc6cb0a872d1a2ec489a45c4a905ed682ade7d19412eade50a51bddefbd67584d7bf9f20f77f8074839f53f9a90c95c8461e65c467934c9a732ea3feb849c1404055ed7b48a3e9fb768506ee20400901a953a40ef8149b6806d6ca5aa7d204ea46ea8eb34746f84ee0425fcf48ad152b83ef194c9c97538633661b8d6947fc98a64c3fd2f9269286a00e2e25ce244c8e752460dfc33b8f9740b6bfb38d48e75e53ae55aaa57a7d5f94b53fcb9da696f86780466ad09f4b0ef512f0e6d4bb8884210794c312b38a42b1e83da25d39cc54c9c61f894ac82c2c689be737d01aa14fe8d5257a00e3d87c38a14d32886b5dacff4dc2acc870c63fbd5bb3ddff1aef22269082de2313a049e63b813ea4e76384ce194096d2d76984b083973f0e3a420ee09da30e3cdc5b3aad4f0cd7b2aa522117825bf7cf806c1cbcad72008d70b6945e76bdcbdb28ed641faf38854b572ecf3b8a3925ed2993d8418abcc4cd134e2a480a3356510bbe3b4bf9df6a92dbd7bb6b435ccc943b47dc814fd332df51f0d95fba4f24d43819a3a0099bf9ba669c3d03298dfe6fc8e18a19ba70310eea2ceba3ebb7bfb575a0177b39e486a028490c96f4411af2d5c332a58adb413084fd2733b47f2e3bcb13176f5144940b6b3fd8c3ddadfb9f8d19816f48635a255f186df8f438afeebd791fe6cc30212ca143290525c5cc84c1898ea8785a6c2505b91c7db89f225861058a05fc674276134843eb772b471d53ae89b673cd7a5ea8f47d7d1f485969668a70d6eb13351f83ae08e9fed5be028e423f2995c8a379ead105ac5577bf87cd81509ef2a01885d22674256e1e6319e96b639bbd8a3d963e1a0a3beb32acf69015dc73864e66cabb7b7809c6247485fff1c88d08d7db41085fae7a0a63544c15b0cb7bd4497d3f741937f7c57eb6b821d28cd1440753427ba7dc93f1a4d5a258c3580f20a8917217ecd63f47faafd350dea6ee45938c58a4138ff625a78861eb24a374045a23ef45b080174c011bc68e52477e8adfaedb0703e62402afa7213114ba909d6e327f72ed8e9258d3fceb7e54bad6a680be6a14ff96d75bcf6a4601201d44e743f812bcfe209cc3226fc2a470fb9cf5e23bfefe98694b7f3b3dfaa8965f72f4152ab42bfcbd449da892219692f30cbe22e44fc0d296de0e78d5a2db0b7be076c8500ed796d0536f01402f4e0d3fac51cfa03275f44d05a84d4176ba32529e1dfb2e24fac3e9247b8104845f14c65f0ac55ca00cca5b15add46051e1399e189adf8a8693297731d60232d5b9326c78edd5d6edf50878adb4905adfa685f23c09c952ab704ae266cd1692fe353104e2cce476a4c04135e1729e4cba918c2aa0ceb0266730607ed253f23cc4a8c7"}) r2 = socket$inet6(0xa, 0x2, 0xfd9) r3 = socket(0x0, 0x0, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='C\xcdz\x8e\x8b') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYPTR=&(0x7f0000001840)=ANY=[@ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESHEX=r2, @ANYRESOCT]], @ANYRES64=0x0, @ANYRESHEX, @ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRES64, @ANYPTR64], @ANYRES64=r2, @ANYRES32=r0, @ANYRES16=r1, @ANYRES16=r2], 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x99a1, 0x20000000000036, 0x829, 0x0, 0x0, {0x3, 0x1000000, 0x1000000}, [@nested={0x2c7, 0x0, [@typed={0x9989, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x9cc8}, 0x1, 0xffffff7f0e000000}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f00000000c0)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 1335.109460][T19296] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1335.117455][T19296] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1335.125434][T19296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1335.133410][T19296] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 04:24:06 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0x11) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x744) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) [ 1336.783128][ C1] net_ratelimit: 18 callbacks suppressed [ 1336.783134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.794564][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1336.800356][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.806119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1336.811872][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.817729][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1336.943142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.948940][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1337.913097][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1337.918891][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1342.063173][ C1] net_ratelimit: 22 callbacks suppressed [ 1342.063183][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1342.074759][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1342.143180][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1342.148961][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1343.023144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1343.028969][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1343.034770][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1343.040511][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1343.046262][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1343.052028][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:24:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000002f036c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:24:13 executing program 2 (fault-call:7 fault-nth:20): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:24:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:24:13 executing program 5: setregid(0xee01, 0x0) r0 = getgid() setresgid(0x0, r0, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') exit(0x0) preadv(r1, &(0x7f0000002680)=[{&(0x7f0000000000)=""/176, 0xb0}], 0x1, 0x0) 04:24:13 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f00000020c0)=""/45, 0x2d) 04:24:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f00000000", 0x18}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1343.238526][T19339] FAULT_INJECTION: forcing a failure. [ 1343.238526][T19339] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.252696][T19339] CPU: 0 PID: 19339 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1343.261375][T19339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.271466][T19339] Call Trace: [ 1343.274791][T19339] dump_stack+0x11d/0x181 [ 1343.279129][T19339] should_fail.cold+0xa/0x1a [ 1343.283720][T19339] __should_failslab+0xee/0x130 [ 1343.288632][T19339] should_failslab+0x9/0x14 [ 1343.293286][T19339] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1343.298585][T19339] ? memcg_kmem_put_cache+0x7c/0xc0 [ 1343.303785][T19339] ? debug_smp_processor_id+0x43/0x137 [ 1343.309310][T19339] __memcg_init_list_lru_node+0x84/0x180 [ 1343.314970][T19339] __list_lru_init+0x36a/0x440 [ 1343.319783][T19339] alloc_super+0x51d/0x570 [ 1343.324239][T19339] sget+0xe1/0x3e0 [ 1343.327964][T19339] ? get_anon_bdev+0x90/0x90 [ 1343.332605][T19339] ? apparmor_capable+0x260/0x470 [ 1343.337649][T19339] ? ovl_show_options+0x3e0/0x3e0 [ 1343.342692][T19339] mount_nodev+0x3a/0xf0 [ 1343.347001][T19339] ovl_mount+0x36/0x50 [ 1343.351090][T19339] ? ovl_own_xattr_set+0x20/0x20 [ 1343.356053][T19339] legacy_get_tree+0x7e/0xf0 [ 1343.360647][T19339] vfs_get_tree+0x56/0x1a0 [ 1343.365075][T19339] do_mount+0x1004/0x14f0 [ 1343.369489][T19339] ksys_mount+0xe8/0x160 [ 1343.373830][T19339] __x64_sys_mount+0x70/0x90 [ 1343.378455][T19339] do_syscall_64+0xcc/0x3a0 [ 1343.383051][T19339] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1343.388942][T19339] RIP: 0033:0x45a919 [ 1343.392902][T19339] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1343.412498][T19339] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1343.421129][T19339] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1343.429128][T19339] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a 04:24:14 executing program 5: setregid(0xee01, 0x0) r0 = getgid() setresgid(0x0, r0, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') exit(0x0) preadv(r1, &(0x7f0000002680)=[{&(0x7f0000000000)=""/176, 0xb0}], 0x1, 0x0) [ 1343.437139][T19339] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1343.445184][T19339] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1343.453162][T19339] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 04:24:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:24:14 executing program 5: setregid(0xee01, 0x0) r0 = getgid() setresgid(0x0, r0, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') exit(0x0) preadv(r1, &(0x7f0000002680)=[{&(0x7f0000000000)=""/176, 0xb0}], 0x1, 0x0) 04:24:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:24:14 executing program 2 (fault-call:7 fault-nth:21): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:24:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1343.759814][T19370] FAULT_INJECTION: forcing a failure. [ 1343.759814][T19370] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.784867][T19370] CPU: 0 PID: 19370 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1343.793644][T19370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.803807][T19370] Call Trace: [ 1343.807116][T19370] dump_stack+0x11d/0x181 [ 1343.811466][T19370] should_fail.cold+0xa/0x1a [ 1343.816138][T19370] __should_failslab+0xee/0x130 [ 1343.821034][T19370] should_failslab+0x9/0x14 [ 1343.825544][T19370] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1343.830825][T19370] ? memcg_kmem_put_cache+0x7c/0xc0 [ 1343.836019][T19370] ? debug_smp_processor_id+0x43/0x137 [ 1343.841480][T19370] __memcg_init_list_lru_node+0x84/0x180 [ 1343.847118][T19370] __list_lru_init+0x36a/0x440 [ 1343.851881][T19370] alloc_super+0x51d/0x570 [ 1343.856294][T19370] sget+0xe1/0x3e0 [ 1343.860016][T19370] ? get_anon_bdev+0x90/0x90 [ 1343.864659][T19370] ? apparmor_capable+0x260/0x470 [ 1343.869687][T19370] ? ovl_show_options+0x3e0/0x3e0 [ 1343.874779][T19370] mount_nodev+0x3a/0xf0 [ 1343.879019][T19370] ovl_mount+0x36/0x50 [ 1343.883106][T19370] ? ovl_own_xattr_set+0x20/0x20 [ 1343.888038][T19370] legacy_get_tree+0x7e/0xf0 [ 1343.892624][T19370] vfs_get_tree+0x56/0x1a0 [ 1343.897092][T19370] do_mount+0x1004/0x14f0 [ 1343.901473][T19370] ksys_mount+0xe8/0x160 [ 1343.905717][T19370] __x64_sys_mount+0x70/0x90 [ 1343.910369][T19370] do_syscall_64+0xcc/0x3a0 [ 1343.914890][T19370] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1343.920784][T19370] RIP: 0033:0x45a919 [ 1343.924808][T19370] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1343.944404][T19370] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1343.952836][T19370] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 [ 1343.960845][T19370] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1343.968810][T19370] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1343.976776][T19370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1343.984799][T19370] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 [ 1347.183139][ C1] net_ratelimit: 18 callbacks suppressed [ 1347.183149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1347.194603][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1347.200495][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1347.206247][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1347.212010][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1347.217770][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1347.343164][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1347.348969][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1348.303149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1348.309012][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:24:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip6_vti0\x00 \x00\x00\x00\x00\xf4\xff', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4ef27f454c460000002f046c0000000000ffffff861405030000000000000000e0428d93687cef0057cf1e0b995d1f97ffffd23d59b446aa"], 0x38) 04:24:21 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:24:21 executing program 2 (fault-call:7 fault-nth:22): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 04:24:21 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)={0x7, [0xa57c, 0x4, 0xbc7, 0x1, 0x6, 0x9, 0x40]}, &(0x7f0000000140)=0x12) sendfile(r2, r0, 0x0, 0xffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00) ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, &(0x7f0000000180)={0x2, 0x6}) 04:24:21 executing program 5: setregid(0xee01, 0x0) r0 = getgid() setresgid(0x0, r0, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') exit(0x0) preadv(r1, &(0x7f0000002680)=[{&(0x7f0000000000)=""/176, 0xb0}], 0x1, 0x0) 04:24:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f00000000", 0x18}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 04:24:21 executing program 5: setregid(0xee01, 0x0) r0 = getgid() setresgid(0x0, r0, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') preadv(r1, &(0x7f0000002680)=[{&(0x7f0000000000)=""/176, 0xb0}], 0x1, 0x0) [ 1350.484122][ T27] audit: type=1800 audit(1577334261.257:185): pid=19391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16658 res=0 [ 1350.536384][ T27] audit: type=1804 audit(1577334261.287:186): pid=19391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir466351936/syzkaller.2se6fN/362/file0" dev="sda1" ino=16658 res=1 [ 1350.536782][T19393] FAULT_INJECTION: forcing a failure. [ 1350.536782][T19393] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.619289][T19393] CPU: 1 PID: 19393 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1350.628031][T19393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.638088][T19393] Call Trace: [ 1350.640446][ T27] audit: type=1804 audit(1577334261.337:187): pid=19398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir466351936/syzkaller.2se6fN/362/file0" dev="sda1" ino=16658 res=1 04:24:21 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) [ 1350.641394][T19393] dump_stack+0x11d/0x181 [ 1350.669896][T19393] should_fail.cold+0xa/0x1a [ 1350.674534][T19393] __should_failslab+0xee/0x130 [ 1350.679472][T19393] should_failslab+0x9/0x14 [ 1350.684088][T19393] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1350.689425][T19393] ? memcg_kmem_put_cache+0x7c/0xc0 [ 1350.694639][T19393] ? debug_smp_processor_id+0x43/0x137 [ 1350.700123][T19393] __memcg_init_list_lru_node+0x84/0x180 [ 1350.705821][T19393] __list_lru_init+0x36a/0x440 [ 1350.710636][T19393] alloc_super+0x51d/0x570 [ 1350.715073][T19393] sget+0xe1/0x3e0 [ 1350.718809][T19393] ? get_anon_bdev+0x90/0x90 [ 1350.723412][T19393] ? apparmor_capable+0x260/0x470 [ 1350.728584][T19393] ? ovl_show_options+0x3e0/0x3e0 [ 1350.733774][T19393] mount_nodev+0x3a/0xf0 [ 1350.738034][T19393] ovl_mount+0x36/0x50 [ 1350.742150][T19393] ? ovl_own_xattr_set+0x20/0x20 [ 1350.747103][T19393] legacy_get_tree+0x7e/0xf0 [ 1350.751735][T19393] vfs_get_tree+0x56/0x1a0 [ 1350.756168][T19393] do_mount+0x1004/0x14f0 [ 1350.760517][T19393] ksys_mount+0xe8/0x160 [ 1350.764796][T19393] __x64_sys_mount+0x70/0x90 04:24:21 executing program 5: setregid(0xee01, 0x0) r0 = getgid() setresgid(0x0, r0, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') preadv(r1, &(0x7f0000002680)=[{&(0x7f0000000000)=""/176, 0xb0}], 0x1, 0x0) [ 1350.769398][T19393] do_syscall_64+0xcc/0x3a0 [ 1350.774005][T19393] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1350.779907][T19393] RIP: 0033:0x45a919 [ 1350.783827][T19393] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1350.803465][T19393] RSP: 002b:00007fb8aa46fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1350.811888][T19393] RAX: ffffffffffffffda RBX: 00007fb8aa46fc90 RCX: 000000000045a919 04:24:21 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0xf) 04:24:21 executing program 5: setregid(0xee01, 0x0) r0 = getgid() setresgid(0x0, r0, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') preadv(r1, &(0x7f0000002680)=[{&(0x7f0000000000)=""/176, 0xb0}], 0x1, 0x0) [ 1350.819883][T19393] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000a [ 1350.827866][T19393] RBP: 000000000075bf20 R08: 0000000020000100 R09: 0000000000000000 [ 1350.835871][T19393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8aa4706d4 [ 1350.843864][T19393] R13: 00000000004c7d1d R14: 00000000004ded50 R15: 0000000000000005 04:24:21 executing program 5: setregid(0xee01, 0x0) r0 = getgid() setresgid(0x0, r0, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) preadv(0xffffffffffffffff, &(0x7f0000002680)=[{&(0x7f0000000000)=""/176, 0xb0}], 0x1, 0x0) [ 1351.236869][T19391] ================================================================== [ 1351.244998][T19391] BUG: KCSAN: data-race in wbc_detach_inode / wbc_detach_inode [ 1351.252518][T19391] [ 1351.254859][T19391] read to 0xffff888128ceb6ee of 2 bytes by task 19398 on cpu 1: [ 1351.262497][T19391] wbc_detach_inode+0x77/0x520 [ 1351.267249][T19391] __filemap_fdatawrite_range+0x1d4/0x230 [ 1351.272967][T19391] file_write_and_wait_range+0xfd/0x160 [ 1351.278515][T19391] ext4_sync_file+0x266/0xaf0 [ 1351.283206][T19391] vfs_fsync_range+0x82/0x150 [ 1351.287892][T19391] ext4_buffered_write_iter+0x222/0x290 [ 1351.293442][T19391] ext4_file_write_iter+0xf4/0xd40 [ 1351.298565][T19391] do_iter_readv_writev+0x487/0x5b0 [ 1351.303762][T19391] do_iter_write+0x13b/0x3c0 [ 1351.308347][T19391] vfs_iter_write+0x5c/0x80 [ 1351.312849][T19391] iter_file_splice_write+0x530/0x840 [ 1351.318217][T19391] direct_splice_actor+0xa0/0xc0 [ 1351.323151][T19391] splice_direct_to_actor+0x22b/0x540 [ 1351.328527][T19391] do_splice_direct+0x161/0x1e0 [ 1351.333380][T19391] do_sendfile+0x384/0x7f0 [ 1351.337796][T19391] __x64_sys_sendfile64+0x12a/0x140 [ 1351.342998][T19391] do_syscall_64+0xcc/0x3a0 [ 1351.347497][T19391] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1351.353371][T19391] [ 1351.355685][T19391] write to 0xffff888128ceb6ee of 2 bytes by task 19391 on cpu 0: [ 1351.363385][T19391] wbc_detach_inode+0x27c/0x520 [ 1351.368347][T19391] __filemap_fdatawrite_range+0x1d4/0x230 [ 1351.374058][T19391] filemap_write_and_wait_range+0xb1/0x150 [ 1351.379935][T19391] iomap_dio_rw+0x3a2/0x9a0 [ 1351.384425][T19391] ext4_file_write_iter+0xc38/0xd40 [ 1351.389615][T19391] do_iter_readv_writev+0x487/0x5b0 [ 1351.394807][T19391] do_iter_write+0x13b/0x3c0 [ 1351.399376][T19391] vfs_iter_write+0x5c/0x80 [ 1351.403863][T19391] iter_file_splice_write+0x530/0x840 [ 1351.409218][T19391] direct_splice_actor+0xa0/0xc0 [ 1351.414139][T19391] splice_direct_to_actor+0x22b/0x540 [ 1351.419509][T19391] do_splice_direct+0x161/0x1e0 [ 1351.424396][T19391] do_sendfile+0x384/0x7f0 [ 1351.428836][T19391] __x64_sys_sendfile64+0x12a/0x140 [ 1351.434021][T19391] do_syscall_64+0xcc/0x3a0 [ 1351.438523][T19391] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1351.444399][T19391] [ 1351.446709][T19391] Reported by Kernel Concurrency Sanitizer on: [ 1351.452850][T19391] CPU: 0 PID: 19391 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 1351.461501][T19391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.471553][T19391] ================================================================== [ 1351.479650][T19391] Kernel panic - not syncing: panic_on_warn set ... [ 1351.486229][T19391] CPU: 0 PID: 19391 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 1351.495082][T19391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.505131][T19391] Call Trace: [ 1351.508416][T19391] dump_stack+0x11d/0x181 [ 1351.512747][T19391] panic+0x210/0x640 [ 1351.516627][T19391] ? vprintk_func+0x8d/0x140 [ 1351.521201][T19391] kcsan_report.cold+0xc/0xd [ 1351.525777][T19391] kcsan_setup_watchpoint+0x3fe/0x460 [ 1351.531139][T19391] __tsan_unaligned_write2+0xc7/0x110 [ 1351.536495][T19391] wbc_detach_inode+0x27c/0x520 [ 1351.541348][T19391] __filemap_fdatawrite_range+0x1d4/0x230 [ 1351.547084][T19391] filemap_write_and_wait_range+0xb1/0x150 [ 1351.552874][T19391] iomap_dio_rw+0x3a2/0x9a0 [ 1351.557371][T19391] ? ext4_journal_check_start+0x103/0x150 [ 1351.563085][T19391] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1351.569326][T19391] ext4_file_write_iter+0xc38/0xd40 [ 1351.574516][T19391] ? ext4_file_write_iter+0xc38/0xd40 [ 1351.579880][T19391] do_iter_readv_writev+0x487/0x5b0 [ 1351.585077][T19391] do_iter_write+0x13b/0x3c0 [ 1351.589655][T19391] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1351.595552][T19391] vfs_iter_write+0x5c/0x80 [ 1351.600043][T19391] iter_file_splice_write+0x530/0x840 [ 1351.605417][T19391] ? page_cache_pipe_buf_release+0x100/0x100 [ 1351.611384][T19391] direct_splice_actor+0xa0/0xc0 [ 1351.616309][T19391] splice_direct_to_actor+0x22b/0x540 [ 1351.621662][T19391] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1351.627194][T19391] do_splice_direct+0x161/0x1e0 [ 1351.632044][T19391] do_sendfile+0x384/0x7f0 [ 1351.636457][T19391] __x64_sys_sendfile64+0x12a/0x140 [ 1351.641653][T19391] do_syscall_64+0xcc/0x3a0 [ 1351.646144][T19391] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1351.652018][T19391] RIP: 0033:0x45a919 [ 1351.655908][T19391] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1351.675525][T19391] RSP: 002b:00007faf9d033c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1351.684046][T19391] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a919 [ 1351.692015][T19391] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1351.699980][T19391] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1351.707940][T19391] R10: 000000007fffffff R11: 0000000000000246 R12: 00007faf9d0346d4 [ 1351.715895][T19391] R13: 00000000004c925e R14: 00000000004e0f88 R15: 00000000ffffffff [ 1351.725360][T19391] Kernel Offset: disabled [ 1351.729694][T19391] Rebooting in 86400 seconds..